# 4.16.0-rc.5
Created: 2024-06-14 20:51:49 +0000 UTC
Image Digest: `sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d`
Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-06-14-130320
## Changes from 4.14.30
### Components
* Kubectl 1.29.1
* Kubernetes upgraded from 1.27.14 to 1.29.5
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202406111017-0 to 416.94.202406140350-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| AdmissionWebhookMatchConditions
(0 tests)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(New)| Unconditional
(New)| Unconditional
(Changed)| Unconditional
(Changed) |
| RetroactiveDefaultStorageClass
(0 tests)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(New)| Unconditional
(New)| Unconditional
(Changed)| Unconditional
(Changed) |
| AdminNetworkPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| ExternalCloudProvider
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| ExternalCloudProviderGCP
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| VSphereStaticIPs
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| BareMetalLoadBalancer
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallNutanix
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallOpenStack
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallVSphere
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| DisableKubeletCloudCredentialProviders
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| HardwareSpeed
(1 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| KMSv1
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MetricsServer
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NetworkDiagnosticsConfig
(6 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NetworkLiveMigration
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereControlPlaneMachineSet
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereDriverConfiguration
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GatewayAPI
(0 tests)| Disabled| Disabled| Enabled
(New)| Enabled
(New)| Disabled
(Changed)| Disabled
(Changed) |
| ValidatingAdmissionPolicy
(4 tests)| Disabled| Disabled| Enabled
(New)| Enabled
(New)| Enabled
(Changed)| Enabled
(Changed) |
| ExternalOIDC
(0 tests)| Enabled
(New)| | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ChunkSizeMiB
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstall
(0 tests)| | | | | | |
| ClusterAPIInstallAzure
(0 tests)| | | | | | |
| ClusterAPIInstallGCP
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallIBMCloud
(0 tests)| | | | | | |
| ClusterAPIInstallPowerVS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| DNSNameResolver
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| EtcdBackendQuota
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| Example
(1 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ExternalRouteCertificate
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPClusterHostedDNS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ImagePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| InsightsConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| InsightsOnDemandDataGather
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| InstallAlternateInfrastructureAWS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MachineConfigNodes
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ManagedBootImages
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MetricsCollectionProfiles
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MixedCPUsAllocation
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NewOLM
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NodeDisruptionPolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| OnClusterBuild
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PinnedImages
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PlatformOperators
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenNodeBinding
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenNodeBindingValidation
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenPodNodeInfo
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| SignatureStores
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| TranslateStreamCloseWebsocketRequests
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| UpgradeStatus
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenters
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VolumeGroupSnapshot
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [da90fb7c](https://github.com/openshift/aws-encryption-provider/commit/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0) `sha256:5668f00f71bfceb7bb7966d7a9f432f2193436bbfa1ebcefaadfe2f48a2be55b`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [bc92347b](https://github.com/openshift/azure-kubernetes-kms/commit/bc92347bcd3863db05ce6c79f0b71145a3185e12) `sha256:e29c1cf827ee8834c8d87d5661b70b7331a5d78456440478e4a31314ae96433a`
* [cluster-config-api](https://github.com/openshift/api) git [636e2c17](https://github.com/openshift/api/commit/636e2c17106f5a0d9c266535f262267384fede1f) `sha256:efca7bd9e5538986c516ff2b3d4ce412a3e86dbee59321920bfba41c3c114351`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [f5039976](https://github.com/openshift/containernetworking-plugins/commit/f503997690a236f322ae062ab2ebcf720b0457bf) `sha256:f1776c5c20353bd9ed42b8c118271d4652cd8e2e84b80aeb1896a763ea24c2fe`
* [installer-altinfra](https://github.com/openshift/installer) git [363f5bec](https://github.com/openshift/installer/commit/363f5bec8a60f287d6edbe9d9234c9594f0dd17f) `sha256:1461a2bccc82482919fc73758ea9e750293bff5317bd265a35ba3308bac270ce`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [7938f253](https://github.com/openshift/kubernetes-metrics-server/commit/7938f253e74f2259951cc882f2879a9860a38481) `sha256:8c1f690970ce6e1457238c76bcee59f83c50c02a9b07b2ee9baca4fcee819fb0`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:454fcc7d474271d13b864fda2e7ae7b7b5235799f1423ba79cb3f2b52c05ba57`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [be72b754](https://github.com/openshift/cluster-api-provider-openstack/commit/be72b7545228d631178c49677b01905e92846441) `sha256:6e33b672f1e77e9287c986355f81dc278736974239f5624d5cdb252db7ec9d34`
### Removed images
* alibaba-cloud-csi-driver
* alibaba-disk-csi-driver-operator
* cluster-platform-operators-manager
* ibm-vpc-node-label-updater
* kuryr-cni
* kuryr-controller
* machine-os-content
### Rebuilt images without code change
* rhel-coreos `sha256:1fa47d95afc9170901bedb92d43a28caf805e102d67a6f5426e4fac5bd7fa9a2`
* rhel-coreos-extensions `sha256:18029728f15124da250a8ba249643decfd8197dcd5202e207710913ee6bede61`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
* [OCPBUGS-31727](https://issues.redhat.com/browse/OCPBUGS-31727): Invalid Pull-Secret when using password which contains a colon character (#6362) [#6362](https://github.com/openshift/assisted-service/pull/6362)
* [MGMT-17850](https://issues.redhat.com/browse/MGMT-17850): Bump k8s.io modules to v0.29 (#6345) (#6372) [#6345](https://github.com/openshift/assisted-service/pull/6345)
* [OCPBUGS-34278](https://issues.redhat.com/browse/OCPBUGS-34278): Don't use the statically linked installer if FIPS is enabled (#6357) [#6357](https://github.com/openshift/assisted-service/pull/6357)
* Use openshift-install binary for releases >= 4.16 (#6304) [#6304](https://github.com/openshift/assisted-service/pull/6304)
* [MGMT-17775](https://issues.redhat.com/browse/MGMT-17775): Ensure that patch manifest filenames are consistent and correct (#6289) [#6289](https://github.com/openshift/assisted-service/pull/6289)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure that we improve error messages for mirror registry tagged images (#6266) [#6266](https://github.com/openshift/assisted-service/pull/6266)
* [MGMT-17764](https://issues.redhat.com/browse/MGMT-17764): Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) [#6276](https://github.com/openshift/assisted-service/pull/6276)
* NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) [#6255](https://github.com/openshift/assisted-service/pull/6255)
* Revert "MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)" (#6268) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure releaseImage is not tag based when mirror registry enabled. (#6260) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17523](https://issues.redhat.com/browse/MGMT-17523): Fail when OS images CPU architecture is missing instead of giving it default value (#6256) [#6256](https://github.com/openshift/assisted-service/pull/6256)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) [#6259](https://github.com/openshift/assisted-service/pull/6259)
* [OCPBUGS-31733](https://issues.redhat.com/browse/OCPBUGS-31733): Remove CPMS manifest for vsphere platform (#6239) [#6239](https://github.com/openshift/assisted-service/pull/6239)
* NO-ISSUE: Bump OCP versions: 4.16 (#6254) [#6254](https://github.com/openshift/assisted-service/pull/6254)
* [MGMT-17697](https://issues.redhat.com/browse/MGMT-17697): Change L3 connectivity to use connected addresses instead of majority groups (#6252) [#6252](https://github.com/openshift/assisted-service/pull/6252)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) [#6250](https://github.com/openshift/assisted-service/pull/6250)
* NO-ISSUE: Fix hypershift destroy in CI test script (#6246) [#6246](https://github.com/openshift/assisted-service/pull/6246)
* Move to rhel9, decouple from cli image (#5792) [#5792](https://github.com/openshift/assisted-service/pull/5792)
* [MGMT-17413](https://issues.redhat.com/browse/MGMT-17413): Change pull secret validation on register/update cluster/infraenv to run only against the required images (#6158) [#6158](https://github.com/openshift/assisted-service/pull/6158)
* NO-ISSUE: Update OKD images to 4.16 (#6231) [#6231](https://github.com/openshift/assisted-service/pull/6231)
* Update RHTAP references (#6181) [#6181](https://github.com/openshift/assisted-service/pull/6181)
* [MGMT-17620](https://issues.redhat.com/browse/MGMT-17620): Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) [#6227](https://github.com/openshift/assisted-service/pull/6227)
* OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) [#6212](https://github.com/openshift/assisted-service/pull/6212)
* NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) [#6209](https://github.com/openshift/assisted-service/pull/6209)
* [MGMT-17558](https://issues.redhat.com/browse/MGMT-17558): Allow installation on iSCSI volume (#6218) [#6218](https://github.com/openshift/assisted-service/pull/6218)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* [MGMT-17503](https://issues.redhat.com/browse/MGMT-17503): Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) [#6184](https://github.com/openshift/assisted-service/pull/6184)
* [MGMT-17365](https://issues.redhat.com/browse/MGMT-17365): Add support for setting agent labels in BMH as annotations (#6124) [#6124](https://github.com/openshift/assisted-service/pull/6124)
* [MGMT-17313](https://issues.redhat.com/browse/MGMT-17313): Create day 2 BMH and Machine for control plane nodes (#6142) [#6142](https://github.com/openshift/assisted-service/pull/6142)
* [MGMT-17513](https://issues.redhat.com/browse/MGMT-17513): Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) [#6185](https://github.com/openshift/assisted-service/pull/6185)
* [MGMT-17468](https://issues.redhat.com/browse/MGMT-17468): Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) [#6190](https://github.com/openshift/assisted-service/pull/6190)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) [#6176](https://github.com/openshift/assisted-service/pull/6176)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) [#6199](https://github.com/openshift/assisted-service/pull/6199)
* [MGMT-17414](https://issues.redhat.com/browse/MGMT-17414): Adding new requirements for LVM on 4.16 (#6165) [#6165](https://github.com/openshift/assisted-service/pull/6165)
* [MGMT-17181](https://issues.redhat.com/browse/MGMT-17181): Add a LocalClusterImportController (#6079) [#6079](https://github.com/openshift/assisted-service/pull/6079)
* NO-ISSUE: Prevent false positive host connectivity (#6162) [#6162](https://github.com/openshift/assisted-service/pull/6162)
* [MGMT-17489](https://issues.redhat.com/browse/MGMT-17489): Fix disconnected capi tests (#6163) [#6163](https://github.com/openshift/assisted-service/pull/6163)
* Update RHTAP references (#6148) [#6148](https://github.com/openshift/assisted-service/pull/6148)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) [#6157](https://github.com/openshift/assisted-service/pull/6157)
* [MGMT-17438](https://issues.redhat.com/browse/MGMT-17438): bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) [#6150](https://github.com/openshift/assisted-service/pull/6150)
* NO-ISSUE: replace minio quay.io image repository (#6151) [#6151](https://github.com/openshift/assisted-service/pull/6151)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) [#6149](https://github.com/openshift/assisted-service/pull/6149)
* NO-ISSUE: Add doc for iPXE HTTP (#6146) [#6146](https://github.com/openshift/assisted-service/pull/6146)
* Revert "MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)" (#6139) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* [MGMT-17369](https://issues.redhat.com/browse/MGMT-17369): Add multi-arch release images to as well when setting only_latest=true in .../openshift-versions (#6119) [#6119](https://github.com/openshift/assisted-service/pull/6119)
* [MGMT-17361](https://issues.redhat.com/browse/MGMT-17361): Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) [#6115](https://github.com/openshift/assisted-service/pull/6115)
* [MGMT-17367](https://issues.redhat.com/browse/MGMT-17367): Use ICSP in install-config for older OCP releases (#6125) [#6125](https://github.com/openshift/assisted-service/pull/6125)
* Update RHTAP references (#6117) [#6117](https://github.com/openshift/assisted-service/pull/6117)
* NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) [#6118](https://github.com/openshift/assisted-service/pull/6118)
* [MGMT-17354](https://issues.redhat.com/browse/MGMT-17354): Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) [#6113](https://github.com/openshift/assisted-service/pull/6113)
* NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) [#6116](https://github.com/openshift/assisted-service/pull/6116)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) [#6114](https://github.com/openshift/assisted-service/pull/6114)
* NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) [#6111](https://github.com/openshift/assisted-service/pull/6111)
* [MGMT-17328](https://issues.redhat.com/browse/MGMT-17328): OCI should be tech preview for OCP 4.14 (#6104) [#6104](https://github.com/openshift/assisted-service/pull/6104)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 (#6054) [#6054](https://github.com/openshift/assisted-service/pull/6054)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) [#6109](https://github.com/openshift/assisted-service/pull/6109)
* NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) [#6110](https://github.com/openshift/assisted-service/pull/6110)
* [MGMT-16263](https://issues.redhat.com/browse/MGMT-16263): Enable usage of custom OCP release images when we create cluster (#6025) [#6025](https://github.com/openshift/assisted-service/pull/6025)
* [MGMT-17241](https://issues.redhat.com/browse/MGMT-17241): [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) [#6092](https://github.com/openshift/assisted-service/pull/6092)
* Update RHTAP references (#6103) [#6103](https://github.com/openshift/assisted-service/pull/6103)
* [MGMT-16002](https://issues.redhat.com/browse/MGMT-16002): Accept *yml.patch* and *yaml.patch* extensions (#6070) [#6070](https://github.com/openshift/assisted-service/pull/6070)
* [MGMT-17080](https://issues.redhat.com/browse/MGMT-17080): enable infrastructure operator when MCE and storage operators are selected (#6037) [#6037](https://github.com/openshift/assisted-service/pull/6037)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#6099) [#6099](https://github.com/openshift/assisted-service/pull/6099)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) [#6098](https://github.com/openshift/assisted-service/pull/6098)
* Update RHTAP references (#6086) [#6086](https://github.com/openshift/assisted-service/pull/6086)
* Allow in-progress clusters to be deleted in more cases (#6061) [#6061](https://github.com/openshift/assisted-service/pull/6061)
* [MGMT-17266](https://issues.redhat.com/browse/MGMT-17266): Add OCP 4.16 images (#6091) [#6091](https://github.com/openshift/assisted-service/pull/6091)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) [#6090](https://github.com/openshift/assisted-service/pull/6090)
* [MGMT-17196](https://issues.redhat.com/browse/MGMT-17196): Fix none existens of static MAC adr. in case of (#6087) [#6087](https://github.com/openshift/assisted-service/pull/6087)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Update configure command to handle multiple HostConfigs (#6062) [#6062](https://github.com/openshift/assisted-service/pull/6062)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) [#6085](https://github.com/openshift/assisted-service/pull/6085)
* [MGMT-16813](https://issues.redhat.com/browse/MGMT-16813): Prioritize finding release image with exact CPU architecture (#6066) [#6066](https://github.com/openshift/assisted-service/pull/6066)
* NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) [#6083](https://github.com/openshift/assisted-service/pull/6083)
* Update RHTAP references (#6020) [#6020](https://github.com/openshift/assisted-service/pull/6020)
* Use `client_id` instead of `clientId` (#6076) [#6076](https://github.com/openshift/assisted-service/pull/6076)
* Protect must gather versions cache with mutex (#6078) [#6078](https://github.com/openshift/assisted-service/pull/6078)
* NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) [#6060](https://github.com/openshift/assisted-service/pull/6060)
* [MGMT-16759](https://issues.redhat.com/browse/MGMT-16759): Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) [#6051](https://github.com/openshift/assisted-service/pull/6051)
* use multi payload with ABI (#6000) [#6000](https://github.com/openshift/assisted-service/pull/6000)
* [MGMT-14380](https://issues.redhat.com/browse/MGMT-14380): ODF explicit type of disk error (#6072) [#6072](https://github.com/openshift/assisted-service/pull/6072)
* NO-ISSUE: Bump OCP versions: 4.14 (#6069) [#6069](https://github.com/openshift/assisted-service/pull/6069)
* NO-ISSUE: Bump OCP versions: 4.13 (#6063) [#6063](https://github.com/openshift/assisted-service/pull/6063)
* [MGMT-17106](https://issues.redhat.com/browse/MGMT-17106): Disable ironic vlan creation when static networking config is present (#6055) [#6055](https://github.com/openshift/assisted-service/pull/6055)
* NO-ISSUE: Bump OCP versions: 4.12 (#6056) [#6056](https://github.com/openshift/assisted-service/pull/6056)
* Use all cluster networks to determine IP family for ironic (#6048) [#6048](https://github.com/openshift/assisted-service/pull/6048)
* NO-ISSUE: Bump OCP versions: 4.14 (#6050) [#6050](https://github.com/openshift/assisted-service/pull/6050)
* NO-ISSUE: Bump OCP versions: 4.15 (#6043) [#6043](https://github.com/openshift/assisted-service/pull/6043)
* [MGMT-17095](https://issues.redhat.com/browse/MGMT-17095): Disable local cluster import (#6040) [#6040](https://github.com/openshift/assisted-service/pull/6040)
* [MGMT-16620](https://issues.redhat.com/browse/MGMT-16620): Update OCP 4.15 release images to GA (#6035) [#6035](https://github.com/openshift/assisted-service/pull/6035)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13 (#6038) [#6038](https://github.com/openshift/assisted-service/pull/6038)
* [MGMT-17008](https://issues.redhat.com/browse/MGMT-17008): fix lvm host requirement (#6021) [#6021](https://github.com/openshift/assisted-service/pull/6021)
* NO-ISSUE: Bump OCP versions: 4.14 (#6032) [#6032](https://github.com/openshift/assisted-service/pull/6032)
* [MGMT-16882](https://issues.redhat.com/browse/MGMT-16882): Update operator bundle channel to 2.11 (#6023) [#6023](https://github.com/openshift/assisted-service/pull/6023)
* NO-ISSUE: Halt OpenShift release syncer in SaaS until actual usage of this release images will be merged (#6027) [#6027](https://github.com/openshift/assisted-service/pull/6027)
* [MGMT-16262](https://issues.redhat.com/browse/MGMT-16262): Create a utility that fetches current OCP releases from OpenShift API and updates DB (#5916) [#5916](https://github.com/openshift/assisted-service/pull/5916)
* NO-ISSUE: Bump OCP versions: 4.15 (#6019) [#6019](https://github.com/openshift/assisted-service/pull/6019)
* [OCPBUGS-29772](https://issues.redhat.com/browse/OCPBUGS-29772): All nodes fail to become managed when installConfigOverrides defined (#6010) [#6010](https://github.com/openshift/assisted-service/pull/6010)
* NO-ISSUE: fixing lvm requirement message (#6009) [#6009](https://github.com/openshift/assisted-service/pull/6009)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* Update RHTAP references (#6014) [#6014](https://github.com/openshift/assisted-service/pull/6014)
* Update RHTAP references (#6012) [#6012](https://github.com/openshift/assisted-service/pull/6012)
* NO-ISSUE: Add environment variable ENABLE_SKIP_MCO_REBOOT to openshift/template.yaml (#6013) [#6013](https://github.com/openshift/assisted-service/pull/6013)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Add command to import cluster for agent-based-installer (#6004) [#6004](https://github.com/openshift/assisted-service/pull/6004)
* Update RHTAP references (#5999) [#5999](https://github.com/openshift/assisted-service/pull/5999)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14 (#6006) [#6006](https://github.com/openshift/assisted-service/pull/6006)
* [MGMT-16926](https://issues.redhat.com/browse/MGMT-16926): fix validation bug + allow CNV and LVM multi node (#5998) [#5998](https://github.com/openshift/assisted-service/pull/5998)
* [MGMT-4458](https://issues.redhat.com/browse/MGMT-4458): Remove status change from old CompleteInstallation API (#5981) [#5981](https://github.com/openshift/assisted-service/pull/5981)
* [MGMT-16716](https://issues.redhat.com/browse/MGMT-16716): (Also MGMT-16737), Operators CNV, MCE should be disabled when platform Nutanix is selected, operator CNV should be disabled when platform VSphere is selected (#5991) [#5991](https://github.com/openshift/assisted-service/pull/5991)
* NO-ISSUE: Bump OCP versions: 4.15 (#5995) [#5995](https://github.com/openshift/assisted-service/pull/5995)
* Update RHTAP references (#5993) [#5993](https://github.com/openshift/assisted-service/pull/5993)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13 (#5990) [#5990](https://github.com/openshift/assisted-service/pull/5990)
* NO-ISSUE: Fix subsystem test for invalid nmstate config error message (#5988) [#5988](https://github.com/openshift/assisted-service/pull/5988)
* Update RHTAP references (#5980) [#5980](https://github.com/openshift/assisted-service/pull/5980)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix validation for LVM multinode (#5898) [#5898](https://github.com/openshift/assisted-service/pull/5898)
* [MGMT-16690](https://issues.redhat.com/browse/MGMT-16690): Add API to AgentServiceConfig CRD to allow pass of headers and query params to image service (#5933) [#5933](https://github.com/openshift/assisted-service/pull/5933)
* [MGMT-16588](https://issues.redhat.com/browse/MGMT-16588): Adding host with incompatible platform to day2 cluster should fail (#5946) [#5946](https://github.com/openshift/assisted-service/pull/5946)
* [MGMT-16625](https://issues.redhat.com/browse/MGMT-16625): Make host connection timeout soft (#5911) [#5911](https://github.com/openshift/assisted-service/pull/5911)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Use new ignition endpoint HTTP headers when requesting Ignition (#5934) [#5934](https://github.com/openshift/assisted-service/pull/5934)
* NO-ISSUE: Bump OCP versions: 4.12, 4.11 (#5971) [#5971](https://github.com/openshift/assisted-service/pull/5971)
* [MGMT-16523](https://issues.redhat.com/browse/MGMT-16523): Set ABI deployment type for on-prem data collection (#5967) [#5967](https://github.com/openshift/assisted-service/pull/5967)
* NO-ISSUE: Change bare metal host CRD name to a non-uuid format as it is forbidden (#5972) [#5972](https://github.com/openshift/assisted-service/pull/5972)
* [MGMT-16704](https://issues.redhat.com/browse/MGMT-16704): Add organization capability to control soft timeouts (#5935) [#5935](https://github.com/openshift/assisted-service/pull/5935)
* [MGMT-16684](https://issues.redhat.com/browse/MGMT-16684): Make OLM finalizing stages behave as soft timeouts even if soft timeouts are not enabled (#5928) [#5928](https://github.com/openshift/assisted-service/pull/5928)
* [MGMT-16791](https://issues.redhat.com/browse/MGMT-16791): disable VipAUtoAllocation for 4.15 and above (#5959) [#5959](https://github.com/openshift/assisted-service/pull/5959)
* Update RHTAP references (#5965) [#5965](https://github.com/openshift/assisted-service/pull/5965)
* NO-ISSUE: fix for subsystem HTTP registry (#5964) [#5964](https://github.com/openshift/assisted-service/pull/5964)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5963) [#5963](https://github.com/openshift/assisted-service/pull/5963)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#5951) [#5951](https://github.com/openshift/assisted-service/pull/5951)
* [MGMT-16721](https://issues.redhat.com/browse/MGMT-16721): Handle luks == nil and luks.Clevis == nil (#5940) [#5940](https://github.com/openshift/assisted-service/pull/5940)
* Update RHTAP references (#5956) [#5956](https://github.com/openshift/assisted-service/pull/5956)
* Update RHTAP references (#5950) [#5950](https://github.com/openshift/assisted-service/pull/5950)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Add Ignition Endpoint Headers to Host and Agent APIs (#5931) [#5931](https://github.com/openshift/assisted-service/pull/5931)
* NO-ISSUE: Bump gorm.io/gorm from 1.25.5 to 1.25.7 (#5954) [#5954](https://github.com/openshift/assisted-service/pull/5954)
* Update RHTAP references (#5949) [#5949](https://github.com/openshift/assisted-service/pull/5949)
* NO-ISSUE: Bump OCP versions: 4.15 (#5947) [#5947](https://github.com/openshift/assisted-service/pull/5947)
* [MGMT-16757](https://issues.redhat.com/browse/MGMT-16757): CNV should be disabled when select platform vSphere (#5945) [#5945](https://github.com/openshift/assisted-service/pull/5945)
* NO-ISSUE: Fix CI gather script for baremetal operator (#5932) [#5932](https://github.com/openshift/assisted-service/pull/5932)
* NO-ISSUE: Bump OCP versions: 4.13 (#5944) [#5944](https://github.com/openshift/assisted-service/pull/5944)
* [MGMT-16739](https://issues.redhat.com/browse/MGMT-16739): CNV and MCE should be disabled when select platform Nutanix (#5941) [#5941](https://github.com/openshift/assisted-service/pull/5941)
* Update RHTAP references (#5943) [#5943](https://github.com/openshift/assisted-service/pull/5943)
* NO-ISSUE: Bump OCP versions: 4.12 (#5939) [#5939](https://github.com/openshift/assisted-service/pull/5939)
* [MGMT-16603](https://issues.redhat.com/browse/MGMT-16603): Allow setting agent cluster reference via BHM (#5893) [#5893](https://github.com/openshift/assisted-service/pull/5893)
* [MGMT-16612](https://issues.redhat.com/browse/MGMT-16612): notify when host updates status (#5930) [#5930](https://github.com/openshift/assisted-service/pull/5930)
* [MGMT-16521](https://issues.redhat.com/browse/MGMT-16521): Identify Operator-based Deployment Data (#5906) [#5906](https://github.com/openshift/assisted-service/pull/5906)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var for On-Prem Data Deployment Type (#5874) [#5874](https://github.com/openshift/assisted-service/pull/5874)
* [MGMT-16508](https://issues.redhat.com/browse/MGMT-16508): Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. (#5884) [#5884](https://github.com/openshift/assisted-service/pull/5884)
* NO-ISSUE: Bump OCP versions: 4.15 (#5929) [#5929](https://github.com/openshift/assisted-service/pull/5929)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#5913) [#5913](https://github.com/openshift/assisted-service/pull/5913)
* NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) [#5919](https://github.com/openshift/assisted-service/pull/5919)
* [MGMT-16660](https://issues.redhat.com/browse/MGMT-16660): OCI is tech-preview from OCP 4.15 (#5920) [#5920](https://github.com/openshift/assisted-service/pull/5920)
* [OCPBUGS-27376](https://issues.redhat.com/browse/OCPBUGS-27376): Allow domain names starting with a number (#5914) [#5914](https://github.com/openshift/assisted-service/pull/5914)
* NO-ISSUE: Bump OCP versions: 4.14 (#5915) [#5915](https://github.com/openshift/assisted-service/pull/5915)
* Update RHTAP references (#5899) [#5899](https://github.com/openshift/assisted-service/pull/5899)
* NO-ISSUE: migrate rhtap init step to v0.2 (#5908) [#5908](https://github.com/openshift/assisted-service/pull/5908)
* [MGMT-16208](https://issues.redhat.com/browse/MGMT-16208): Add controller stages to assisted service (#5880) [#5880](https://github.com/openshift/assisted-service/pull/5880)
* NO-ISSUE: Bump OCP versions: 4.15 (#5907) [#5907](https://github.com/openshift/assisted-service/pull/5907)
* NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) [#5903](https://github.com/openshift/assisted-service/pull/5903)
* NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) [#5902](https://github.com/openshift/assisted-service/pull/5902)
* NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) [#5904](https://github.com/openshift/assisted-service/pull/5904)
* NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) [#5901](https://github.com/openshift/assisted-service/pull/5901)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) [#5897](https://github.com/openshift/assisted-service/pull/5897)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides (#5868) [#5868](https://github.com/openshift/assisted-service/pull/5868)
* NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) [#5896](https://github.com/openshift/assisted-service/pull/5896)
* NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) [#5895](https://github.com/openshift/assisted-service/pull/5895)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Add request headers to api_vip_connectivity check request (#5870) [#5870](https://github.com/openshift/assisted-service/pull/5870)
* NO-ISSUE: Use latest hypershift image in CI gather (#5886) [#5886](https://github.com/openshift/assisted-service/pull/5886)
* NO-ISSUE remove filanov from approves (#5888) [#5888](https://github.com/openshift/assisted-service/pull/5888)
* NO-ISSUE: Bump OCP versions: 4.15 (#5887) [#5887](https://github.com/openshift/assisted-service/pull/5887)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): allow lvms on multi node (#5871) [#5871](https://github.com/openshift/assisted-service/pull/5871)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) [#5875](https://github.com/openshift/assisted-service/pull/5875)
* NO-ISSUE: testing go1.20 in all packages (#5850) [#5850](https://github.com/openshift/assisted-service/pull/5850)
* [MGMT-16371](https://issues.redhat.com/browse/MGMT-16371): Fix additionial kargs in case of DHCP (#5818) [#5818](https://github.com/openshift/assisted-service/pull/5818)
* Removes unused assistedservice CRD (#5830) [#5830](https://github.com/openshift/assisted-service/pull/5830)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5861) [#5861](https://github.com/openshift/assisted-service/pull/5861)
* [MGMT-16505](https://issues.redhat.com/browse/MGMT-16505): Huge amount of "Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>" in cluster events (#5872) [#5872](https://github.com/openshift/assisted-service/pull/5872)
* [MGMT-16330](https://issues.redhat.com/browse/MGMT-16330): disable SDN for 4.15 and above (#5833) [#5833](https://github.com/openshift/assisted-service/pull/5833)
* NO-ISSUE: Bump OCP versions: 4.15, 4.12, 4.13 (#5867) [#5867](https://github.com/openshift/assisted-service/pull/5867)
* NO-ISSUE: Bump OCP versions: 4.14 (#5863) [#5863](https://github.com/openshift/assisted-service/pull/5863)
* [MGMT-16241](https://issues.redhat.com/browse/MGMT-16241): Ensure that LastInstallationPreparationStatus is reset on cluster install. (#5811) [#5811](https://github.com/openshift/assisted-service/pull/5811)
* wqNO-ISSUE: Fix for subsystem test that fails locally. (#5859) [#5859](https://github.com/openshift/assisted-service/pull/5859)
* [MGMT-16452](https://issues.redhat.com/browse/MGMT-16452): Change MCE subscription to use the default channel (#5843) [#5843](https://github.com/openshift/assisted-service/pull/5843)
* [OCPBUGS-25434](https://issues.redhat.com/browse/OCPBUGS-25434): handle NMStateConfig deletion (#5844) [#5844](https://github.com/openshift/assisted-service/pull/5844)
* [MGMT-16404](https://issues.redhat.com/browse/MGMT-16404): Add soft timeouts capability to host stage timeouts (#5817) [#5817](https://github.com/openshift/assisted-service/pull/5817)
* [MGMT-16216](https://issues.redhat.com/browse/MGMT-16216): Bump requests package (#5836) [#5836](https://github.com/openshift/assisted-service/pull/5836)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix images used for disconnected CAPI test (#5832) [#5832](https://github.com/openshift/assisted-service/pull/5832)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix issue validating pre-release versions were failing (#5837) [#5837](https://github.com/openshift/assisted-service/pull/5837)
* [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5822) [#5822](https://github.com/openshift/assisted-service/pull/5822)
* [MGMT-16373](https://issues.redhat.com/browse/MGMT-16373): KubeAPI - Ensure that ISO type is full-iso when cpuarchitecture is S390x (#5825) [#5825](https://github.com/openshift/assisted-service/pull/5825)
* chore(deps): update rhtap references (#5782) [#5782](https://github.com/openshift/assisted-service/pull/5782)
* [MGMT-16428](https://issues.redhat.com/browse/MGMT-16428): create migration from oci to external platform type (#5829) [#5829](https://github.com/openshift/assisted-service/pull/5829)
* NO-ISSUE: enable lateset lso for 4.15 ztp (#5805) [#5805](https://github.com/openshift/assisted-service/pull/5805)
* NO-ISSUE: Bump OCP versions: 4.15 (#5824) [#5824](https://github.com/openshift/assisted-service/pull/5824)
* Compare normalized infraenv and preprov image architectures (#5816) [#5816](https://github.com/openshift/assisted-service/pull/5816)
* [MGMT-15886](https://issues.redhat.com/browse/MGMT-15886): Fix domain validation (#5801) [#5801](https://github.com/openshift/assisted-service/pull/5801)
* [MGMT-15691](https://issues.redhat.com/browse/MGMT-15691): Remove platform type oci (#5787) [#5787](https://github.com/openshift/assisted-service/pull/5787)
* [MGMT-14633](https://issues.redhat.com/browse/MGMT-14633): Include manifest information in the log download (#5777) [#5777](https://github.com/openshift/assisted-service/pull/5777)
* [MGMT-16355](https://issues.redhat.com/browse/MGMT-16355): API changes for soft timeouts (#5780) [#5780](https://github.com/openshift/assisted-service/pull/5780)
* NO-ISSUE: Bump OCP versions: 4.11 (#5813) [#5813](https://github.com/openshift/assisted-service/pull/5813)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5808) [#5808](https://github.com/openshift/assisted-service/pull/5808)
* [MGMT-14159](https://issues.redhat.com/browse/MGMT-14159): Use imageDigestSources in install-config instead of imageContentSources (#5799) [#5799](https://github.com/openshift/assisted-service/pull/5799)
* MGMT-16157 move db transactions to new format (#5806) [#5806](https://github.com/openshift/assisted-service/pull/5806)
* MGMT-16157 Remove recover usage from DB transactions (#5795) [#5795](https://github.com/openshift/assisted-service/pull/5795)
* NO-ISSUE: Bump OCP versions: 4.15 (#5796) [#5796](https://github.com/openshift/assisted-service/pull/5796)
* NO-ISSUE: fix golangci-lint failing to be pulled (#5790) [#5790](https://github.com/openshift/assisted-service/pull/5790)
* NO-ISSUE: Bump OCP versions: 4.12 (#5783) [#5783](https://github.com/openshift/assisted-service/pull/5783)
* [MGMT-16289](https://issues.redhat.com/browse/MGMT-16289): Add configuration variable and cluster attribute defining if soft timeouts feature is enabled (#5740) [#5740](https://github.com/openshift/assisted-service/pull/5740)
* NO-ISSUE: Bump OCP versions: 4.14, 4.11, 4.13, 4.15 (#5779) [#5779](https://github.com/openshift/assisted-service/pull/5779)
* fix: allow LVMS for MultiNode >=4.15.0 (#5757) [#5757](https://github.com/openshift/assisted-service/pull/5757)
* Update RHTAP references (#5776) [#5776](https://github.com/openshift/assisted-service/pull/5776)
* NO-ISSUE: add build tags option to enable FIPS build (#5768) [#5768](https://github.com/openshift/assisted-service/pull/5768)
* Update RHTAP references (#5774) [#5774](https://github.com/openshift/assisted-service/pull/5774)
* NO-ISSUE: update OS_IMAGES filter to 4.11 (#5773) [#5773](https://github.com/openshift/assisted-service/pull/5773)
* [MGMT-16303](https://issues.redhat.com/browse/MGMT-16303): Disable skip MCO reboot for architecture s390x (#5765) [#5765](https://github.com/openshift/assisted-service/pull/5765)
* Propagate OS_IMAGES var in deploy operator (#5762) [#5762](https://github.com/openshift/assisted-service/pull/5762)
* Update RHTAP references (#5767) [#5767](https://github.com/openshift/assisted-service/pull/5767)
* [MGMT-15425](https://issues.redhat.com/browse/MGMT-15425): Change chosen mce release to match openshift version (#5716) [#5716](https://github.com/openshift/assisted-service/pull/5716)
* [MGMT-14605](https://issues.redhat.com/browse/MGMT-14605): Gather more data for hypershift tests (#5344) [#5344](https://github.com/openshift/assisted-service/pull/5344)
* [MGMT-16320](https://issues.redhat.com/browse/MGMT-16320): Agent should connect to iBFT iSCSI targets (#5753) [#5753](https://github.com/openshift/assisted-service/pull/5753)
* MGMT-16312 fix update host ignition for unbound host (#5751) [#5751](https://github.com/openshift/assisted-service/pull/5751)
* NO-ISSUE: Inventory code cleanup - unused params (#5755) [#5755](https://github.com/openshift/assisted-service/pull/5755)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect ICSP for CAPI CI (#5747) [#5747](https://github.com/openshift/assisted-service/pull/5747)
* [MGMT-15690](https://issues.redhat.com/browse/MGMT-15690): Add support for external platform (#5738) [#5738](https://github.com/openshift/assisted-service/pull/5738)
* [MGMT-16235](https://issues.redhat.com/browse/MGMT-16235): Ensure that agent controller will watch for changes to ignition endpoint token. (#5736) [#5736](https://github.com/openshift/assisted-service/pull/5736)
* [MGMT-13461](https://issues.redhat.com/browse/MGMT-13461): Fix Tang validation when day2 host join an imported cluster (#5700) [#5700](https://github.com/openshift/assisted-service/pull/5700)
* [MGMT-15972](https://issues.redhat.com/browse/MGMT-15972): Remove Swagger definition for api_vip and ingress_vip (#5734) [#5734](https://github.com/openshift/assisted-service/pull/5734)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect check for CAPI image in ci (#5741) [#5741](https://github.com/openshift/assisted-service/pull/5741)
* Update RHTAP references (#5733) [#5733](https://github.com/openshift/assisted-service/pull/5733)
* [MGMT-16273](https://issues.redhat.com/browse/MGMT-16273): Allow installing on iSCSI disks on OCI (#5728) [#5728](https://github.com/openshift/assisted-service/pull/5728)
* [MGMT-16291](https://issues.redhat.com/browse/MGMT-16291): revert default faulty OCP images (#5737) [#5737](https://github.com/openshift/assisted-service/pull/5737)
* [MGMT-14810](https://issues.redhat.com/browse/MGMT-14810): Remove API and Ingress VIP (#5501) [#5501](https://github.com/openshift/assisted-service/pull/5501)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Missed service-cidr for capi ipv6 CI test (#5721) [#5721](https://github.com/openshift/assisted-service/pull/5721)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) [#5726](https://github.com/openshift/assisted-service/pull/5726)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) [#5722](https://github.com/openshift/assisted-service/pull/5722)
* Update baremetal operator (#5698) [#5698](https://github.com/openshift/assisted-service/pull/5698)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim agent daemonset name (#5699) [#5699](https://github.com/openshift/assisted-service/pull/5699)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Minor fixes for disconnected CAPI CI (#5713) [#5713](https://github.com/openshift/assisted-service/pull/5713)
* [AGENT-740](https://issues.redhat.com/browse/AGENT-740): Include baremetal host BMC fields in install-config override (#5675) [#5675](https://github.com/openshift/assisted-service/pull/5675)
* NO-ISSUE: adding me to owners (#5709) [#5709](https://github.com/openshift/assisted-service/pull/5709)
* NO-ISSUE: Cluster code cleanups (#5715) [#5715](https://github.com/openshift/assisted-service/pull/5715)
* NO-ISSUE: Bump OCP versions: 4.12 (#5714) [#5714](https://github.com/openshift/assisted-service/pull/5714)
* [MGMT-16236](https://issues.redhat.com/browse/MGMT-16236): remove elastic APM (#5702) [#5702](https://github.com/openshift/assisted-service/pull/5702)
* NO-ISSUE: Upgrade debug image to latest delve (#5711) [#5711](https://github.com/openshift/assisted-service/pull/5711)
* Update RHTAP references (#5688) [#5688](https://github.com/openshift/assisted-service/pull/5688)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Setup CI for disconnected ipv6 CAPI (#5536) [#5536](https://github.com/openshift/assisted-service/pull/5536)
* NO-ISSUE: Inventory code cleanups (#5695) [#5695](https://github.com/openshift/assisted-service/pull/5695)
* NO-ISSUE: dependabot optimize (#5697) [#5697](https://github.com/openshift/assisted-service/pull/5697)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) [#5701](https://github.com/openshift/assisted-service/pull/5701)
* NO-ISSUE: Remove unused functions (#5696) [#5696](https://github.com/openshift/assisted-service/pull/5696)
* NO-ISSUE: BMH and Agent controllers code cleanup (#5693) [#5693](https://github.com/openshift/assisted-service/pull/5693)
* NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) [#5694](https://github.com/openshift/assisted-service/pull/5694)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) [#5604](https://github.com/openshift/assisted-service/pull/5604)
* NO-ISSUE: ClusterDeployments controller code cleanup (#5689) [#5689](https://github.com/openshift/assisted-service/pull/5689)
* NO-ISSUE: InfraEnv controller code cleanup (#5690) [#5690](https://github.com/openshift/assisted-service/pull/5690)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Append kargs to installer for s390x (#5665) [#5665](https://github.com/openshift/assisted-service/pull/5665)
* Add missing scheme to `ServiceMonitor` (#5672) [#5672](https://github.com/openshift/assisted-service/pull/5672)
* Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) [#5495](https://github.com/openshift/assisted-service/pull/5495)
* [MGMT-15971](https://issues.redhat.com/browse/MGMT-15971): Create ManagedCluster CR so that the hub will show up as "Ready" in MCE (#5575) [#5575](https://github.com/openshift/assisted-service/pull/5575)
* Update RHTAP references (#5682) [#5682](https://github.com/openshift/assisted-service/pull/5682)
* NO-JIRA: Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) [#5680](https://github.com/openshift/assisted-service/pull/5680)
* NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) [#5681](https://github.com/openshift/assisted-service/pull/5681)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS OPTIONS for s3 presigned url (#5674) [#5674](https://github.com/openshift/assisted-service/pull/5674)
* Update RHTAP references (#5654) [#5654](https://github.com/openshift/assisted-service/pull/5654)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) [#5671](https://github.com/openshift/assisted-service/pull/5671)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) [#5658](https://github.com/openshift/assisted-service/pull/5658)
* [MGMT-16077](https://issues.redhat.com/browse/MGMT-16077): Add 4.15 release and OS images (#5673) [#5673](https://github.com/openshift/assisted-service/pull/5673)
* [AGENT-723](https://issues.redhat.com/browse/AGENT-723): Use json.Marshal to correctly process vSphere credentials (#5592) [#5592](https://github.com/openshift/assisted-service/pull/5592)
* NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) [#5670](https://github.com/openshift/assisted-service/pull/5670)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger reboots for node event when day2 node moves to done (#5648) [#5648](https://github.com/openshift/assisted-service/pull/5648)
* NO-JIRA: Allow the command in wait_for_cmd_amount to receive arguments (#5668) [#5668](https://github.com/openshift/assisted-service/pull/5668)
* [MGMT-16164](https://issues.redhat.com/browse/MGMT-16164): Install 4.14 redhat-operators catalog for LSO (#5669) [#5669](https://github.com/openshift/assisted-service/pull/5669)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Ensure that hosts emit event showing why preparation failed. (#5521) [#5521](https://github.com/openshift/assisted-service/pull/5521)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Add a condition to show the last preparation failure (#5524) [#5524](https://github.com/openshift/assisted-service/pull/5524)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): change default envoy sidecar timeout value (#5667) [#5667](https://github.com/openshift/assisted-service/pull/5667)
* [MGMT-16114](https://issues.redhat.com/browse/MGMT-16114): Update 4.14 release image to use GA version (#5651) [#5651](https://github.com/openshift/assisted-service/pull/5651)
* [MGMT-16052](https://issues.redhat.com/browse/MGMT-16052): Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) [#5659](https://github.com/openshift/assisted-service/pull/5659)
* Bump OCP versions: 4.14, 4.12 (#5661) [#5661](https://github.com/openshift/assisted-service/pull/5661)
* [MGMT-15405](https://issues.redhat.com/browse/MGMT-15405): Add a URL to infraenv to show download link from static network config (#5638) [#5638](https://github.com/openshift/assisted-service/pull/5638)
* [OCPBUGS-19823](https://issues.redhat.com/browse/OCPBUGS-19823): Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) [#5565](https://github.com/openshift/assisted-service/pull/5565)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Add the boot command line to the host inventory (#5649) [#5649](https://github.com/openshift/assisted-service/pull/5649)
* [MGMT-15680](https://issues.redhat.com/browse/MGMT-15680): Adds InfraEnv ctrl watch for pull secret changes (#5589) [#5589](https://github.com/openshift/assisted-service/pull/5589)
* NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) [#5653](https://github.com/openshift/assisted-service/pull/5653)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) [#5613](https://github.com/openshift/assisted-service/pull/5613)
* NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) [#5647](https://github.com/openshift/assisted-service/pull/5647)
* Update RHTAP references (#5637) [#5637](https://github.com/openshift/assisted-service/pull/5637)
* Bump OCP versions: 4.13 (#5645) [#5645](https://github.com/openshift/assisted-service/pull/5645)
* NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) [#5644](https://github.com/openshift/assisted-service/pull/5644)
* [MGMT-15683](https://issues.redhat.com/browse/MGMT-15683): Ensure that manifest filename has valid name part (#5635) [#5635](https://github.com/openshift/assisted-service/pull/5635)
* NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) [#5641](https://github.com/openshift/assisted-service/pull/5641)
* NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) [#5619](https://github.com/openshift/assisted-service/pull/5619)
* Update RHTAP references (#5624) [#5624](https://github.com/openshift/assisted-service/pull/5624)
* [MGMT-15684](https://issues.redhat.com/browse/MGMT-15684): Return appropriate HTTP error code for invalid manifest file path (#5634) [#5634](https://github.com/openshift/assisted-service/pull/5634)
* Bump OCP versions: 4.14 (#5633) [#5633](https://github.com/openshift/assisted-service/pull/5633)
* NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) [#5632](https://github.com/openshift/assisted-service/pull/5632)
* [MGMT-16037](https://issues.redhat.com/browse/MGMT-16037): fix messaging errors on big clusters (#5628) [#5628](https://github.com/openshift/assisted-service/pull/5628)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#5616) [#5616](https://github.com/openshift/assisted-service/pull/5616)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) [#5622](https://github.com/openshift/assisted-service/pull/5622)
* Revert "NO-ISSUE: use kubectl 1.28.2 (#5572)" (#5618) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Bump OCP versions: 4.12 (#5615) [#5615](https://github.com/openshift/assisted-service/pull/5615)
* [MGMT-16045](https://issues.redhat.com/browse/MGMT-16045): mitigate CVE-2023-44487 (#5614) [#5614](https://github.com/openshift/assisted-service/pull/5614)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Add event that shows the number of reboots for a node before completing installation (#5591) [#5591](https://github.com/openshift/assisted-service/pull/5591)
* Add skopeo to OCP build (#5558) [#5558](https://github.com/openshift/assisted-service/pull/5558)
* NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) [#5601](https://github.com/openshift/assisted-service/pull/5601)
* NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) [#5600](https://github.com/openshift/assisted-service/pull/5600)
* NO-ISSUE: vendor current master (#5594) [#5594](https://github.com/openshift/assisted-service/pull/5594)
* NO-ISSUE: fixing dependabot issues (#5595) [#5595](https://github.com/openshift/assisted-service/pull/5595)
* Bump OCP versions: 4.13, 4.14 (#5593) [#5593](https://github.com/openshift/assisted-service/pull/5593)
* Update RHTAP references (#5590) [#5590](https://github.com/openshift/assisted-service/pull/5590)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim daemonset name (#5579) [#5579](https://github.com/openshift/assisted-service/pull/5579)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5586) [#5586](https://github.com/openshift/assisted-service/pull/5586)
* [MGMT-13198](https://issues.redhat.com/browse/MGMT-13198): Add API endpoint to create assisted installer event (#5578) [#5578](https://github.com/openshift/assisted-service/pull/5578)
* [MGMT-15980](https://issues.redhat.com/browse/MGMT-15980): added missing Create op to infraenvs Webhook (#5569) [#5569](https://github.com/openshift/assisted-service/pull/5569)
* Update RHTAP references (#5573) [#5573](https://github.com/openshift/assisted-service/pull/5573)
* NO-ISSUE: use kubectl 1.28.2 (#5572) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Update RHTAP references (#5570) [#5570](https://github.com/openshift/assisted-service/pull/5570)
* [MGMT-15949](https://issues.redhat.com/browse/MGMT-15949): fix missing ImageSetRef validation (#5552) [#5552](https://github.com/openshift/assisted-service/pull/5552)
* Revert "NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)" (#5566) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) [#5549](https://github.com/openshift/assisted-service/pull/5549)
* NO-ISSUE: Fix console output in ZTP jobs (#5562) [#5562](https://github.com/openshift/assisted-service/pull/5562)
* NO-ISSUE: add console output for ztp (#5550) [#5550](https://github.com/openshift/assisted-service/pull/5550)
* Bump OCP versions: 4.14 (#5559) [#5559](https://github.com/openshift/assisted-service/pull/5559)
* [MGMT-15796](https://issues.redhat.com/browse/MGMT-15796): set CloudControllerManager to External for OCI (#5548) [#5548](https://github.com/openshift/assisted-service/pull/5548)
* NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* Bump OCP versions: 4.12, 4.14, 4.13 (#5546) [#5546](https://github.com/openshift/assisted-service/pull/5546)
* Update RHTAP references (#5539) [#5539](https://github.com/openshift/assisted-service/pull/5539)
* [MGMT-15950](https://issues.redhat.com/browse/MGMT-15950): Fix DNS wilcard domain validation (#5544) [#5544](https://github.com/openshift/assisted-service/pull/5544)
* WIP: Add assisted images service short URL routes (#5543) [#5543](https://github.com/openshift/assisted-service/pull/5543)
* Update RHTAP references (#5538) [#5538](https://github.com/openshift/assisted-service/pull/5538)
* [MGMT-15738](https://issues.redhat.com/browse/MGMT-15738): Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) [#5477](https://github.com/openshift/assisted-service/pull/5477)
* Bump OCP versions: 4.13, 4.11 (#5537) [#5537](https://github.com/openshift/assisted-service/pull/5537)
* [MGMT-14409](https://issues.redhat.com/browse/MGMT-14409): generate short image URL (#5523) [#5523](https://github.com/openshift/assisted-service/pull/5523)
* [MGMT-15762](https://issues.redhat.com/browse/MGMT-15762): fix odf validation failing where is one small disk (#5529) [#5529](https://github.com/openshift/assisted-service/pull/5529)
* Update RHTAP references (#5520) [#5520](https://github.com/openshift/assisted-service/pull/5520)
* Bump OCP versions: 4.12, 4.14 (#5528) [#5528](https://github.com/openshift/assisted-service/pull/5528)
* NO-ISSUE: fail upload if response is not 2XX (#5522) [#5522](https://github.com/openshift/assisted-service/pull/5522)
* Bump OCP versions: 4.14 (#5525) [#5525](https://github.com/openshift/assisted-service/pull/5525)
* NO-ISSUE: fix docker-ce-cli package missing (#5499) [#5499](https://github.com/openshift/assisted-service/pull/5499)
* NO-ISSUE: Add versions file to onprem event upload (#5514) [#5514](https://github.com/openshift/assisted-service/pull/5514)
* [MGMT-15699](https://issues.redhat.com/browse/MGMT-15699): Service changes for avoiding MCO reboot (#5453) [#5453](https://github.com/openshift/assisted-service/pull/5453)
* Update RHTAP references (#5517) [#5517](https://github.com/openshift/assisted-service/pull/5517)
* [MGMT-15598](https://issues.redhat.com/browse/MGMT-15598): Add a parameter to manifest list to disable filter (#5498) [#5498](https://github.com/openshift/assisted-service/pull/5498)
* Bump OCP versions: 4.12 (#5515) [#5515](https://github.com/openshift/assisted-service/pull/5515)
* Update RHTAP references (#5513) [#5513](https://github.com/openshift/assisted-service/pull/5513)
* Bump OCP versions: 4.14 (#5512) [#5512](https://github.com/openshift/assisted-service/pull/5512)
* NO-ISSUE: Fix email domain for event uploader (#5511) [#5511](https://github.com/openshift/assisted-service/pull/5511)
* Update RHTAP references (#5510) [#5510](https://github.com/openshift/assisted-service/pull/5510)
* Update RHTAP references (#5508) [#5508](https://github.com/openshift/assisted-service/pull/5508)
* Bump OCP versions: 4.12, 4.13 (#5506) [#5506](https://github.com/openshift/assisted-service/pull/5506)
* [MGMT-15808](https://issues.redhat.com/browse/MGMT-15808): change base image to stream9 (#5497) [#5497](https://github.com/openshift/assisted-service/pull/5497)
* [MGMT-15559](https://issues.redhat.com/browse/MGMT-15559): Change detached annotation condition in non-converged flow (#5445) [#5445](https://github.com/openshift/assisted-service/pull/5445)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Fix unbound variable (#5493) [#5493](https://github.com/openshift/assisted-service/pull/5493)
* Update RHTAP references (#5492) [#5492](https://github.com/openshift/assisted-service/pull/5492)
* Bump OCP versions: 4.14, 4.11 (#5496) [#5496](https://github.com/openshift/assisted-service/pull/5496)
* Update RHTAP references (#5470) [#5470](https://github.com/openshift/assisted-service/pull/5470)
* [MGMT-15715](https://issues.redhat.com/browse/MGMT-15715): Allow handling multi-document YAML custom manifests (#5480) [#5480](https://github.com/openshift/assisted-service/pull/5480)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Add extra flag var for hypershift install (#5469) [#5469](https://github.com/openshift/assisted-service/pull/5469)
* [XMGMT-15704](https://issues.redhat.com/browse/XMGMT-15704): Bugfix for local cluster import (#5484) [#5484](https://github.com/openshift/assisted-service/pull/5484)
* NO-ISSUE: update RHTAP deprecated image check (#5488) [#5488](https://github.com/openshift/assisted-service/pull/5488)
* Bump OCP versions: 4.12, 4.13 (#5483) [#5483](https://github.com/openshift/assisted-service/pull/5483)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Fix DNS regex validation (#5482) [#5482](https://github.com/openshift/assisted-service/pull/5482)
* [MGMT-15716](https://issues.redhat.com/browse/MGMT-15716): notify events when updating cluster status (#5476) [#5476](https://github.com/openshift/assisted-service/pull/5476)
* [MGMT-15503](https://issues.redhat.com/browse/MGMT-15503): Update operator bundle channel (#5474) [#5474](https://github.com/openshift/assisted-service/pull/5474)
* Bump OCP versions: 4.14 (#5472) [#5472](https://github.com/openshift/assisted-service/pull/5472)
* [MGMT-15306](https://issues.redhat.com/browse/MGMT-15306): Fix UpdateCluster for requests that include VIPS and UMA (#5462) [#5462](https://github.com/openshift/assisted-service/pull/5462)
* [Full changelog](https://github.com/openshift/assisted-service/compare/60d5e86b6b7b9fbf8e7e4d1ca12e5b59a32d18c4...6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/373c87ad8f0d88816031b5c39764c80d900228d9)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#850) [#850](https://github.com/openshift/assisted-installer/pull/850)
* [OCPBUGS-32105](https://issues.redhat.com/browse/OCPBUGS-32105): Fix race to mark node Joined (#823) [#823](https://github.com/openshift/assisted-installer/pull/823)
* NO-ISSUE: Bump github.com/onsi/gomega (#841) [#841](https://github.com/openshift/assisted-installer/pull/841)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Moving disk operations to new repo (#840) [#840](https://github.com/openshift/assisted-installer/pull/840)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) [#818](https://github.com/openshift/assisted-installer/pull/818)
* Move to rhel9, decouple from cli image (#760) [#760](https://github.com/openshift/assisted-installer/pull/760)
* NO-ISSUE: Decouple inventoryClient from ops (#811) [#811](https://github.com/openshift/assisted-installer/pull/811)
* NO-ISSUE: Decouple inventoryClient from ops (#810) [#810](https://github.com/openshift/assisted-installer/pull/810)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) [#809](https://github.com/openshift/assisted-installer/pull/809)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#806) [#806](https://github.com/openshift/assisted-installer/pull/806)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Wipe installation disk on IBI (#808) [#808](https://github.com/openshift/assisted-installer/pull/808)
* [MGMT-17384](https://issues.redhat.com/browse/MGMT-17384): Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) [#807](https://github.com/openshift/assisted-installer/pull/807)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#803) [#803](https://github.com/openshift/assisted-installer/pull/803)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#802) [#802](https://github.com/openshift/assisted-installer/pull/802)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) [#801](https://github.com/openshift/assisted-installer/pull/801)
* [OCPBUGS-30056](https://issues.redhat.com/browse/OCPBUGS-30056): RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) [#800](https://github.com/openshift/assisted-installer/pull/800)
* [MGMT-16993](https://issues.redhat.com/browse/MGMT-16993): [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) [#798](https://github.com/openshift/assisted-installer/pull/798)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) [#799](https://github.com/openshift/assisted-installer/pull/799)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) [#797](https://github.com/openshift/assisted-installer/pull/797)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#788) [#788](https://github.com/openshift/assisted-installer/pull/788)
* [MGMT-16966](https://issues.redhat.com/browse/MGMT-16966): Problem creating extra partition on main disk in 4.15+ (#787) [#787](https://github.com/openshift/assisted-installer/pull/787)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) [#786](https://github.com/openshift/assisted-installer/pull/786)
* [MGMT-16211](https://issues.redhat.com/browse/MGMT-16211): Remove all timeouts from controller (#779) [#779](https://github.com/openshift/assisted-installer/pull/779)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere credentials are provided. (#778) [#778](https://github.com/openshift/assisted-installer/pull/778)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) [#781](https://github.com/openshift/assisted-installer/pull/781)
* NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) [#780](https://github.com/openshift/assisted-installer/pull/780)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#776) [#776](https://github.com/openshift/assisted-installer/pull/776)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) [#772](https://github.com/openshift/assisted-installer/pull/772)
* NO-ISSUE remove filanov from approves (#773) [#773](https://github.com/openshift/assisted-installer/pull/773)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#770) [#770](https://github.com/openshift/assisted-installer/pull/770)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) [#769](https://github.com/openshift/assisted-installer/pull/769)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#768) [#768](https://github.com/openshift/assisted-installer/pull/768)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) [#766](https://github.com/openshift/assisted-installer/pull/766)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) [#762](https://github.com/openshift/assisted-installer/pull/762)
* [MGMT-16266](https://issues.redhat.com/browse/MGMT-16266): Indication event showing how often host has been rebooted missing on some nodes (#757) [#757](https://github.com/openshift/assisted-installer/pull/757)
* NO-ISSUE: fix golangci-lint failing to be pulled (#758) [#758](https://github.com/openshift/assisted-installer/pull/758)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) [#756](https://github.com/openshift/assisted-installer/pull/756)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) [#755](https://github.com/openshift/assisted-installer/pull/755)
* [OCPBUGS-20049](https://issues.redhat.com/browse/OCPBUGS-20049): Remove uninitialized taint for agent-based installs (#739) [#739](https://github.com/openshift/assisted-installer/pull/739)
* [MGMT-16258](https://issues.redhat.com/browse/MGMT-16258): Partitions naming convetion is different for various disk types (#752) [#752](https://github.com/openshift/assisted-installer/pull/752)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) [#751](https://github.com/openshift/assisted-installer/pull/751)
* Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) [#719](https://github.com/openshift/assisted-installer/pull/719)
* [MGMT-15926](https://issues.redhat.com/browse/MGMT-15926): Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) [#748](https://github.com/openshift/assisted-installer/pull/748)
* NO-ISSUE: Add my github account as an OWNER for this repository (#749) [#749](https://github.com/openshift/assisted-installer/pull/749)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) [#747](https://github.com/openshift/assisted-installer/pull/747)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger event that notifies the number of reboots once the node installation is completed (#744) [#744](https://github.com/openshift/assisted-installer/pull/744)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#745) [#745](https://github.com/openshift/assisted-installer/pull/745)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) [#743](https://github.com/openshift/assisted-installer/pull/743)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) [#742](https://github.com/openshift/assisted-installer/pull/742)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#741) [#741](https://github.com/openshift/assisted-installer/pull/741)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) [#738](https://github.com/openshift/assisted-installer/pull/738)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): Update dependencies to remove goproxy dependency (#701) [#701](https://github.com/openshift/assisted-installer/pull/701)
* [MGMT-15984](https://issues.redhat.com/browse/MGMT-15984): Assisted installer doesn't freeze and unmount file systems used for overwriting os image (#737) [#737](https://github.com/openshift/assisted-installer/pull/737)
* NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) [#731](https://github.com/openshift/assisted-installer/pull/731)
* Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) [#718](https://github.com/openshift/assisted-installer/pull/718)
* [MGMT-15710](https://issues.redhat.com/browse/MGMT-15710): Assisted installer changes for avoiding MCO reboot (#713) [#713](https://github.com/openshift/assisted-installer/pull/713)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): fix image missing nsenter executable (#729) [#729](https://github.com/openshift/assisted-installer/pull/729)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): change base image to stream9 (#725) [#725](https://github.com/openshift/assisted-installer/pull/725)
* NO-ISSUE: fix dependabot ingored packages (#724) [#724](https://github.com/openshift/assisted-installer/pull/724)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5d64ad00cc9a2f045895dfccc43fe8d81027e745...373c87ad8f0d88816031b5c39764c80d900228d9)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9ca7b58d937c413f670a26c02435829b1fb3a196)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#717) [#717](https://github.com/openshift/assisted-installer-agent/pull/717)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) [#637](https://github.com/openshift/assisted-installer-agent/pull/637)
* NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) [#710](https://github.com/openshift/assisted-installer-agent/pull/710)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) [#690](https://github.com/openshift/assisted-installer-agent/pull/690)
* [OCPBUGS-31423](https://issues.redhat.com/browse/OCPBUGS-31423): Try to pull installer image before installing (#679) [#679](https://github.com/openshift/assisted-installer-agent/pull/679)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) [#683](https://github.com/openshift/assisted-installer-agent/pull/683)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#676) [#676](https://github.com/openshift/assisted-installer-agent/pull/676)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) [#678](https://github.com/openshift/assisted-installer-agent/pull/678)
* NO-ISSUE: subsystem test failing due image format version (#677) [#677](https://github.com/openshift/assisted-installer-agent/pull/677)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) [#672](https://github.com/openshift/assisted-installer-agent/pull/672)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#673) [#673](https://github.com/openshift/assisted-installer-agent/pull/673)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) [#670](https://github.com/openshift/assisted-installer-agent/pull/670)
* [MGMT-16459](https://issues.redhat.com/browse/MGMT-16459): [STG] Cluster 4.15.0-rc.0 with HTTP Proxy failed on timeout due the failed to StartContainer for etcd with CrashLoopBackOff (#664) [#664](https://github.com/openshift/assisted-installer-agent/pull/664)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#656) [#656](https://github.com/openshift/assisted-installer-agent/pull/656)
* [CVE-2023](https://issues.redhat.com/browse/CVE-2023): 49568 and CVE-2023-49569 both detail vulnerabilities in versions of https://github.com/go-git/go-git less than version v5.11 Presently assisted-installer depends on this library due to the following dependency chain. (#655) [#655](https://github.com/openshift/assisted-installer-agent/pull/655)
* [MULTIARCH-4089](https://issues.redhat.com/browse/MULTIARCH-4089): Fix LPAR handling (#649) [#649](https://github.com/openshift/assisted-installer-agent/pull/649)
* NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) [#653](https://github.com/openshift/assisted-installer-agent/pull/653)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#652) [#652](https://github.com/openshift/assisted-installer-agent/pull/652)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Use updated api_vip connectivity check API (#648) [#648](https://github.com/openshift/assisted-installer-agent/pull/648)
* NO-ISSUE remove filanov from approves (#647) [#647](https://github.com/openshift/assisted-installer-agent/pull/647)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#644) [#644](https://github.com/openshift/assisted-installer-agent/pull/644)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#643) [#643](https://github.com/openshift/assisted-installer-agent/pull/643)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#642) [#642](https://github.com/openshift/assisted-installer-agent/pull/642)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#638) [#638](https://github.com/openshift/assisted-installer-agent/pull/638)
* NO-ISSUE: fix golangci-lint failing to be pulled (#636) [#636](https://github.com/openshift/assisted-installer-agent/pull/636)
* [MGMT-16335](https://issues.redhat.com/browse/MGMT-16335): set HasUUID on appliance mock disk (#634) [#634](https://github.com/openshift/assisted-installer-agent/pull/634)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#635) [#635](https://github.com/openshift/assisted-installer-agent/pull/635)
* NO-ISSUE: Add Eran Ifrach account and mine as owners (#633) [#633](https://github.com/openshift/assisted-installer-agent/pull/633)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#630) [#630](https://github.com/openshift/assisted-installer-agent/pull/630)
* [MGMT-15860](https://issues.redhat.com/browse/MGMT-15860): add strictfipsruntime to build (#629) [#629](https://github.com/openshift/assisted-installer-agent/pull/629)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#626) [#626](https://github.com/openshift/assisted-installer-agent/pull/626)
* [OCPBUGS-16483](https://issues.redhat.com/browse/OCPBUGS-16483): Update apimachinery dependency to remove goproxy dep (#590) [#590](https://github.com/openshift/assisted-installer-agent/pull/590)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Get cmdline and set IBM in vendor (#624) [#624](https://github.com/openshift/assisted-installer-agent/pull/624)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) [#623](https://github.com/openshift/assisted-installer-agent/pull/623)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) [#621](https://github.com/openshift/assisted-installer-agent/pull/621)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#619) [#619](https://github.com/openshift/assisted-installer-agent/pull/619)
* [MGMT-16011](https://issues.redhat.com/browse/MGMT-16011): Reduce agent image size (#617) [#617](https://github.com/openshift/assisted-installer-agent/pull/617)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#618) [#618](https://github.com/openshift/assisted-installer-agent/pull/618)
* [MGMT-15900](https://issues.redhat.com/browse/MGMT-15900): Add enable-skip-mco-reboot flag to assisted installer install command (#614) [#614](https://github.com/openshift/assisted-installer-agent/pull/614)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) [#612](https://github.com/openshift/assisted-installer-agent/pull/612)
* NO-ISSUE: add adriengentil as approver (#611) [#611](https://github.com/openshift/assisted-installer-agent/pull/611)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) [#608](https://github.com/openshift/assisted-installer-agent/pull/608)
* [MGMT-15809](https://issues.redhat.com/browse/MGMT-15809): change base image to stream9 (#604) [#604](https://github.com/openshift/assisted-installer-agent/pull/604)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#603) [#603](https://github.com/openshift/assisted-installer-agent/pull/603)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to v1.53.1 (#591) [#591](https://github.com/openshift/assisted-installer-agent/pull/591)
* NO-ISSUE: fix lint target and code (#605) [#605](https://github.com/openshift/assisted-installer-agent/pull/605)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Update domain validation from assisted-service changes (#599) [#599](https://github.com/openshift/assisted-installer-agent/pull/599)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/7020f88445f88bdddd4901f2ae33bd684127c3a5...9ca7b58d937c413f670a26c02435829b1fb3a196)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/6e6bb40d95bd966eb6b152e66c5b91794806c4bc)
* [OCPBUGS-24960](https://issues.redhat.com/browse/OCPBUGS-24960): Updating ose-agent-installer-utils-container image to be consistent with ART [#32](https://github.com/openshift/agent-installer-utils/pull/32)
* NO-ISSUE: Tidy up Dockerfiles [#33](https://github.com/openshift/agent-installer-utils/pull/33)
* [OCPBUGS-21874](https://issues.redhat.com/browse/OCPBUGS-21874): Update 4.15 ose-agent-installer-utils-container image to be consistent with ART [#31](https://github.com/openshift/agent-installer-utils/pull/31)
* Bump golang builder to rhel9 [#30](https://github.com/openshift/agent-installer-utils/pull/30)
* [OCPBUGS-19219](https://issues.redhat.com/browse/OCPBUGS-19219): Updating ose-agent-installer-utils images to be consistent with ART [#29](https://github.com/openshift/agent-installer-utils/pull/29)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ad8537697818870b53b6262041f0dfa78a3b41c2...6e6bb40d95bd966eb6b152e66c5b91794806c4bc)
### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/97e8335e2f0bc9ee48fe04f2c19820b557035d37)
* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39)
* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8ba0b37a45510404a842d6dbd84d40a18008e81d...97e8335e2f0bc9ee48fe04f2c19820b557035d37)
### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/064d4624c74d417dd31cf1c173c00c3fa98ffade)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#50](https://github.com/openshift/cluster-api-provider-alibaba/pull/50)
* [OCPBUGS-25571](https://issues.redhat.com/browse/OCPBUGS-25571): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#49](https://github.com/openshift/cluster-api-provider-alibaba/pull/49)
* [OCPBUGS-24945](https://issues.redhat.com/browse/OCPBUGS-24945): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#48](https://github.com/openshift/cluster-api-provider-alibaba/pull/48)
* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#46](https://github.com/openshift/cluster-api-provider-alibaba/pull/46)
* NO-JIRA: Update OWNERS [#45](https://github.com/openshift/cluster-api-provider-alibaba/pull/45)
* [OCPBUGS-19201](https://issues.redhat.com/browse/OCPBUGS-19201): Updating ose-alibaba-machine-controllers images to be consistent with ART [#44](https://github.com/openshift/cluster-api-provider-alibaba/pull/44)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/27f105d3b722e19f76b72588d36eeae9dac0a444...064d4624c74d417dd31cf1c173c00c3fa98ffade)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/9a6028c48ae73bd8227f014635ce744452e70348)
* [OCPBUGS-31716](https://issues.redhat.com/browse/OCPBUGS-31716): Bump golang.org/x/net to v0.23.0 [#50](https://github.com/openshift/apiserver-network-proxy/pull/50)
* [OCPBUGS-27932](https://issues.redhat.com/browse/OCPBUGS-27932): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 [#47](https://github.com/openshift/apiserver-network-proxy/pull/47)
* [OCPBUGS-25004](https://issues.redhat.com/browse/OCPBUGS-25004): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#46](https://github.com/openshift/apiserver-network-proxy/pull/46)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/a3c0e6b7016017e26603f9990bce2891374f3ca1...9a6028c48ae73bd8227f014635ce744452e70348)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/a53e9def2e60eecd390575b59c85d54c5412ecd3)
* [OCPBUGS-31968](https://issues.redhat.com/browse/OCPBUGS-31968): update for CVE-2023-45288 [release-4.16] [#82](https://github.com/openshift/cloud-provider-aws/pull/82)
* [OCPBUGS-34046](https://issues.redhat.com/browse/OCPBUGS-34046): Ensure that addresses are added in network device index order [#88](https://github.com/openshift/cloud-provider-aws/pull/88)
* [OCPBUGS-8213](https://issues.redhat.com/browse/OCPBUGS-8213): Ensure removal of security group rules on deleting load balancers [#57](https://github.com/openshift/cloud-provider-aws/pull/57)
* [OCPBUGS-30466](https://issues.redhat.com/browse/OCPBUGS-30466): Update google.golang.org/protobuf to v1.33.0 [#79](https://github.com/openshift/cloud-provider-aws/pull/79)
* [OCPBUGS-27879](https://issues.redhat.com/browse/OCPBUGS-27879): Add snyk exclusion file [#78](https://github.com/openshift/cloud-provider-aws/pull/78)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): Updates build-rpm.sh to set release to build time [#75](https://github.com/openshift/cloud-provider-aws/pull/75)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#74](https://github.com/openshift/cloud-provider-aws/pull/74)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): UPSTREAM: <carry>: Removes escaping from `pwd` in rpm build script [#69](https://github.com/openshift/cloud-provider-aws/pull/69)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Updates rpm build script [#68](https://github.com/openshift/cloud-provider-aws/pull/68)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): ecr-credential-provider RPM CI builds [#65](https://github.com/openshift/cloud-provider-aws/pull/65)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Installs ecr-credential-provider to /usr/libexec [#66](https://github.com/openshift/cloud-provider-aws/pull/66)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Adds ecr-credential-provider specfile [#63](https://github.com/openshift/cloud-provider-aws/pull/63)
* [OCPBUGS-22542](https://issues.redhat.com/browse/OCPBUGS-22542), [OCPBUGS-26061](https://issues.redhat.com/browse/OCPBUGS-26061), [OCPCLOUD-2423](https://issues.redhat.com/browse/OCPCLOUD-2423): Merge https://github.com/kubernetes/cloud-provider-aws:master (65e4f1a) into master [#53](https://github.com/openshift/cloud-provider-aws/pull/53)
* [OCPBUGS-24959](https://issues.redhat.com/browse/OCPBUGS-24959): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-aws/pull/59)
* [OCPBUGS-24135](https://issues.redhat.com/browse/OCPBUGS-24135): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-aws/pull/58)
* [OCPBUGS-21839](https://issues.redhat.com/browse/OCPBUGS-21839): Upgrade x/net to v0.17.0 [#51](https://github.com/openshift/cloud-provider-aws/pull/51)
* Update OWNERS [#52](https://github.com/openshift/cloud-provider-aws/pull/52)
* [OCPCLOUD-2187](https://issues.redhat.com/browse/OCPCLOUD-2187): Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master [#47](https://github.com/openshift/cloud-provider-aws/pull/47)
* [OCPBUGS-19218](https://issues.redhat.com/browse/OCPBUGS-19218): Updating ose-aws-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-aws/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/607e2dde6cde137b5c14d5f7687847f6df4cae94...a53e9def2e60eecd390575b59c85d54c5412ecd3)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#510](https://github.com/openshift/cluster-api-provider-aws/pull/510)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master [#507](https://github.com/openshift/cluster-api-provider-aws/pull/507)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master [#502](https://github.com/openshift/cluster-api-provider-aws/pull/502)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#503](https://github.com/openshift/cluster-api-provider-aws/pull/503)
* [OCPBUGS-25565](https://issues.redhat.com/browse/OCPBUGS-25565), [OCPCLOUD-2441](https://issues.redhat.com/browse/OCPCLOUD-2441): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master [#499](https://github.com/openshift/cluster-api-provider-aws/pull/499)
* [OCPBUGS-27871](https://issues.redhat.com/browse/OCPBUGS-27871): Update snyk exclusion file [#498](https://github.com/openshift/cluster-api-provider-aws/pull/498)
* [OCPBUGS-26181](https://issues.redhat.com/browse/OCPBUGS-26181): Add Snyk file to exclude vendor directory on scan [#495](https://github.com/openshift/cluster-api-provider-aws/pull/495)
* [OCPBUGS-24928](https://issues.redhat.com/browse/OCPBUGS-24928): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#488](https://github.com/openshift/cluster-api-provider-aws/pull/488)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master [#487](https://github.com/openshift/cluster-api-provider-aws/pull/487)
* [OCPBUGS-24113](https://issues.redhat.com/browse/OCPBUGS-24113): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#485](https://github.com/openshift/cluster-api-provider-aws/pull/485)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#486](https://github.com/openshift/cluster-api-provider-aws/pull/486)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#471](https://github.com/openshift/cluster-api-provider-aws/pull/471)
* Update OWNERS [#480](https://github.com/openshift/cluster-api-provider-aws/pull/480)
* [OCPBUGS-21649](https://issues.redhat.com/browse/OCPBUGS-21649): Bump golang.org/x/net to v0.17.0 [#479](https://github.com/openshift/cluster-api-provider-aws/pull/479)
* [OCPBUGS-17279](https://issues.redhat.com/browse/OCPBUGS-17279), [OCPCLOUD-2216](https://issues.redhat.com/browse/OCPCLOUD-2216): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master [#478](https://github.com/openshift/cluster-api-provider-aws/pull/478)
* [OCPBUGS-19185](https://issues.redhat.com/browse/OCPBUGS-19185): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#477](https://github.com/openshift/cluster-api-provider-aws/pull/477)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4efe12cbfebbb27fe78b07da4f7e7f264a9812fb...aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/1d29a74ab7cde7424cac99261b90f23dc7a2fc21)
* [OCPBUGS-31101](https://issues.redhat.com/browse/OCPBUGS-31101): UPSTREAM: 1966: Add missing instances to instance store volumes table [#261](https://github.com/openshift/aws-ebs-csi-driver/pull/261)
* [OCPBUGS-30468](https://issues.redhat.com/browse/OCPBUGS-30468): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#259](https://github.com/openshift/aws-ebs-csi-driver/pull/259)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): UPSTREAM: 1919: Add reserved-volume-attachments [#260](https://github.com/openshift/aws-ebs-csi-driver/pull/260)
* [STOR-1575](https://issues.redhat.com/browse/STOR-1575): Rebase to v1.26.1 for OCP 4.16 [#257](https://github.com/openshift/aws-ebs-csi-driver/pull/257)
* [OCPBUGS-25500](https://issues.redhat.com/browse/OCPBUGS-25500): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#252](https://github.com/openshift/aws-ebs-csi-driver/pull/252)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#248](https://github.com/openshift/aws-ebs-csi-driver/pull/248)
* [OCPBUGS-25549](https://issues.redhat.com/browse/OCPBUGS-25549): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#250](https://github.com/openshift/aws-ebs-csi-driver/pull/250)
* [OCPBUGS-25197](https://issues.redhat.com/browse/OCPBUGS-25197): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#249](https://github.com/openshift/aws-ebs-csi-driver/pull/249)
* [OCPBUGS-25126](https://issues.redhat.com/browse/OCPBUGS-25126): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#247](https://github.com/openshift/aws-ebs-csi-driver/pull/247)
* [OCPBUGS-24867](https://issues.redhat.com/browse/OCPBUGS-24867): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#246](https://github.com/openshift/aws-ebs-csi-driver/pull/246)
* [OCPBUGS-24072](https://issues.redhat.com/browse/OCPBUGS-24072): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#245](https://github.com/openshift/aws-ebs-csi-driver/pull/245)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Rebase to v1.25.0 for OCP 4.15 [#244](https://github.com/openshift/aws-ebs-csi-driver/pull/244)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net@v0.17.0 [#237](https://github.com/openshift/aws-ebs-csi-driver/pull/237)
* [OCPBUGS-19101](https://issues.redhat.com/browse/OCPBUGS-19101): Updating ose-aws-ebs-csi-driver images to be consistent with ART [#235](https://github.com/openshift/aws-ebs-csi-driver/pull/235)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/918bb4e9106bbd7498d0d5b3b44ec6df392789b5...1d29a74ab7cde7424cac99261b90f23dc7a2fc21)
### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/609879c3f1b9a65936e385f798398a2d1673aacd...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/61d60f6ca20443df434456c2f3eeba859634e6a2)
* [OCPBUGS-28325](https://issues.redhat.com/browse/OCPBUGS-28325): add an extra vendor exclude to snyk config [#100](https://github.com/openshift/machine-api-provider-aws/pull/100)
* [OCPCLOUD-2429](https://issues.redhat.com/browse/OCPCLOUD-2429): Rebase k8s to 1.29 and update dependencies [#99](https://github.com/openshift/machine-api-provider-aws/pull/99)
* [OCPBUGS-26187](https://issues.redhat.com/browse/OCPBUGS-26187): Add Snyk file to exclude vendor directory on scan [#98](https://github.com/openshift/machine-api-provider-aws/pull/98)
* [OCPBUGS-24934](https://issues.redhat.com/browse/OCPBUGS-24934): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#94](https://github.com/openshift/machine-api-provider-aws/pull/94)
* [OCPBUGS-24116](https://issues.redhat.com/browse/OCPBUGS-24116): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#93](https://github.com/openshift/machine-api-provider-aws/pull/93)
* [SPLAT-1220](https://issues.redhat.com/browse/SPLAT-1220): Assign Carrier IP to launch EC2 in AWS Wavelength Zones [#78](https://github.com/openshift/machine-api-provider-aws/pull/78)
* [OCPCLOUD-2193](https://issues.redhat.com/browse/OCPCLOUD-2193): Update k8s to 1.28 [#87](https://github.com/openshift/machine-api-provider-aws/pull/87)
* Update OWNERS [#86](https://github.com/openshift/machine-api-provider-aws/pull/86)
* [OCPBUGS-21640](https://issues.redhat.com/browse/OCPBUGS-21640): Update golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/machine-api-provider-aws/pull/85)
* [OCPBUGS-20266](https://issues.redhat.com/browse/OCPBUGS-20266): update bad url endpoint termination handler test [#84](https://github.com/openshift/machine-api-provider-aws/pull/84)
* [OCPBUGS-19190](https://issues.redhat.com/browse/OCPBUGS-19190): Updating ose-machine-api-provider-aws images to be consistent with ART [#82](https://github.com/openshift/machine-api-provider-aws/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...61d60f6ca20443df434456c2f3eeba859634e6a2)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/746491a64a4efc04132ceb641cee52c2ead3facd)
* [OCPBUGS-30711](https://issues.redhat.com/browse/OCPBUGS-30711): Upgrade go-jose module to 4.0.1 [#187](https://github.com/openshift/aws-pod-identity-webhook/pull/187)
* [OCPBUGS-25588](https://issues.redhat.com/browse/OCPBUGS-25588): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#183](https://github.com/openshift/aws-pod-identity-webhook/pull/183)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#181](https://github.com/openshift/aws-pod-identity-webhook/pull/181)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#180](https://github.com/openshift/aws-pod-identity-webhook/pull/180)
* NO-ISSUE: Sync OWNERS with team members [#173](https://github.com/openshift/aws-pod-identity-webhook/pull/173)
* snyk: exclude vendor/ [#170](https://github.com/openshift/aws-pod-identity-webhook/pull/170)
* Bump k8s deps for CVE-2023-39325 [#169](https://github.com/openshift/aws-pod-identity-webhook/pull/169)
* [OCPBUGS-19264](https://issues.redhat.com/browse/OCPBUGS-19264): Updating ose-aws-pod-identity-webhook images to be consistent with ART [#167](https://github.com/openshift/aws-pod-identity-webhook/pull/167)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63...746491a64a4efc04132ceb641cee52c2ead3facd)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0e9553295ecd02d6ef0aff19dfc1dfe680993112)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Improvements to client timeouts to prevent hangs [#116](https://github.com/openshift/cloud-provider-azure/pull/116)
* [OCPBUGS-28244](https://issues.redhat.com/browse/OCPBUGS-28244): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (de765cc) into master [#104](https://github.com/openshift/cloud-provider-azure/pull/104)
* [OCPBUGS-26124](https://issues.redhat.com/browse/OCPBUGS-26124), [OCPBUGS-27861](https://issues.redhat.com/browse/OCPBUGS-27861): update snyk file [#107](https://github.com/openshift/cloud-provider-azure/pull/107)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Remove concurrent-service-syncs limitation [#106](https://github.com/openshift/cloud-provider-azure/pull/106)
* [OCPCLOUD-2460](https://issues.redhat.com/browse/OCPCLOUD-2460): Adds acr-credential-provider spec file and build script [#105](https://github.com/openshift/cloud-provider-azure/pull/105)
* [OCPBUGS-26115](https://issues.redhat.com/browse/OCPBUGS-26115): Add Snyk file to exclude vendor directory on scan [#103](https://github.com/openshift/cloud-provider-azure/pull/103)
* [OCPBUGS-22556](https://issues.redhat.com/browse/OCPBUGS-22556), [OCPCLOUD-2422](https://issues.redhat.com/browse/OCPCLOUD-2422): Update to kubernetes v1.29 [#88](https://github.com/openshift/cloud-provider-azure/pull/88)
* [OCPBUGS-25590](https://issues.redhat.com/browse/OCPBUGS-25590): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#102](https://github.com/openshift/cloud-provider-azure/pull/102)
* [OCPBUGS-25589](https://issues.redhat.com/browse/OCPBUGS-25589): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#101](https://github.com/openshift/cloud-provider-azure/pull/101)
* [OCPBUGS-25005](https://issues.redhat.com/browse/OCPBUGS-25005): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#100](https://github.com/openshift/cloud-provider-azure/pull/100)
* [OCPBUGS-25003](https://issues.redhat.com/browse/OCPBUGS-25003): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#99](https://github.com/openshift/cloud-provider-azure/pull/99)
* [OCPBUGS-24166](https://issues.redhat.com/browse/OCPBUGS-24166): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#98](https://github.com/openshift/cloud-provider-azure/pull/98)
* [OCPBUGS-24164](https://issues.redhat.com/browse/OCPBUGS-24164): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#97](https://github.com/openshift/cloud-provider-azure/pull/97)
* [OCPBUGS-22265](https://issues.redhat.com/browse/OCPBUGS-22265): Bump x/net package to v0.17.0 [#90](https://github.com/openshift/cloud-provider-azure/pull/90)
* Update OWNERS [#87](https://github.com/openshift/cloud-provider-azure/pull/87)
* [OCPBUGS-17282](https://issues.redhat.com/browse/OCPBUGS-17282): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master [#84](https://github.com/openshift/cloud-provider-azure/pull/84)
* [OCPBUGS-19267](https://issues.redhat.com/browse/OCPBUGS-19267): Updating ose-azure-cloud-controller-manager images to be consistent with ART [#86](https://github.com/openshift/cloud-provider-azure/pull/86)
* [OCPBUGS-19265](https://issues.redhat.com/browse/OCPBUGS-19265): Updating ose-azure-cloud-node-manager images to be consistent with ART [#85](https://github.com/openshift/cloud-provider-azure/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea...0e9553295ecd02d6ef0aff19dfc1dfe680993112)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/face7da9972351de9a8d230b2a72af9dfe7facf7)
* [OCPBUGS-33083](https://issues.redhat.com/browse/OCPBUGS-33083): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.5 (1f08b9d) into master [#302](https://github.com/openshift/cluster-api-provider-azure/pull/302)
* [OCPBUGS-27450](https://issues.redhat.com/browse/OCPBUGS-27450): add a snyk configuration file [#299](https://github.com/openshift/cluster-api-provider-azure/pull/299)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.0 (7ee3a6a) into master [#298](https://github.com/openshift/cluster-api-provider-azure/pull/298)
* [OCPCLOUD-2443](https://issues.redhat.com/browse/OCPCLOUD-2443): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.12.1 (f32b78b) into master [#297](https://github.com/openshift/cluster-api-provider-azure/pull/297)
* [OCPBUGS-25626](https://issues.redhat.com/browse/OCPBUGS-25626): Add Snyk file to exclude vendor directory on scan [#295](https://github.com/openshift/cluster-api-provider-azure/pull/295)
* [OCPBUGS-24896](https://issues.redhat.com/browse/OCPBUGS-24896): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#293](https://github.com/openshift/cluster-api-provider-azure/pull/293)
* [OCPBUGS-24091](https://issues.redhat.com/browse/OCPBUGS-24091): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#291](https://github.com/openshift/cluster-api-provider-azure/pull/291)
* Update OWNERS [#287](https://github.com/openshift/cluster-api-provider-azure/pull/287)
* [OCPBUGS-21648](https://issues.redhat.com/browse/OCPBUGS-21648): Bump golang.org/x/net to v0.17.0 [#285](https://github.com/openshift/cluster-api-provider-azure/pull/285)
* [OCPCLOUD-2217](https://issues.redhat.com/browse/OCPCLOUD-2217): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master [#284](https://github.com/openshift/cluster-api-provider-azure/pull/284)
* [OCPBUGS-19147](https://issues.redhat.com/browse/OCPBUGS-19147): Updating ose-azure-cluster-api-controllers images to be consistent with ART [#282](https://github.com/openshift/cluster-api-provider-azure/pull/282)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7ad2773c64f0757ea92a18594f0aad59c6a55cde...face7da9972351de9a8d230b2a72af9dfe7facf7)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6b55f6fb004454f743aa0f2e1d96010396be4c45)
* [OCPBUGS-30475](https://issues.redhat.com/browse/OCPBUGS-30475): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#78](https://github.com/openshift/azure-disk-csi-driver/pull/78)
* [STOR-1579](https://issues.redhat.com/browse/STOR-1579): Rebase v1.29.3 [#75](https://github.com/openshift/azure-disk-csi-driver/pull/75)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#74](https://github.com/openshift/azure-disk-csi-driver/pull/74)
* [OCPBUGS-25503](https://issues.redhat.com/browse/OCPBUGS-25503): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#71](https://github.com/openshift/azure-disk-csi-driver/pull/71)
* [OCPBUGS-18701](https://issues.redhat.com/browse/OCPBUGS-18701): UPSTREAM: 1904, UPSTREAM: 1917, UPSTREAM: 1955: Update disk number table [#49](https://github.com/openshift/azure-disk-csi-driver/pull/49)
* [OCPBUGS-25569](https://issues.redhat.com/browse/OCPBUGS-25569): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#70](https://github.com/openshift/azure-disk-csi-driver/pull/70)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#69](https://github.com/openshift/azure-disk-csi-driver/pull/69)
* [OCPBUGS-22559](https://issues.redhat.com/browse/OCPBUGS-22559): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#66](https://github.com/openshift/azure-disk-csi-driver/pull/66)
* [OCPBUGS-25050](https://issues.redhat.com/browse/OCPBUGS-25050): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#67](https://github.com/openshift/azure-disk-csi-driver/pull/67)
* [OCPBUGS-24938](https://issues.redhat.com/browse/OCPBUGS-24938): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#65](https://github.com/openshift/azure-disk-csi-driver/pull/65)
* [OCPBUGS-24120](https://issues.redhat.com/browse/OCPBUGS-24120): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#64](https://github.com/openshift/azure-disk-csi-driver/pull/64)
* [OCPBUGS-17542](https://issues.redhat.com/browse/OCPBUGS-17542): allow resizing to min required size for performance plus disks [#52](https://github.com/openshift/azure-disk-csi-driver/pull/52)
* [STOR-1394](https://issues.redhat.com/browse/STOR-1394): Rebase v1.29.0 for OCP 4.15 [#51](https://github.com/openshift/azure-disk-csi-driver/pull/51)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/azure-disk-csi-driver/pull/53)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver images to be consistent with ART [#50](https://github.com/openshift/azure-disk-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b19eec11854e89a3e45f27455ce54d19c25f375b...6b55f6fb004454f743aa0f2e1d96010396be4c45)
### [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/918935767350f9f330b9d6a9c3ee03e9869e7828...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/5ceb190a24730e4a3f951fa3e186e3cde9d86889)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): Rebase v1.29.5 for OCP 4.16 [#64](https://github.com/openshift/azure-file-csi-driver/pull/64)
* [OCPBUGS-32046](https://issues.redhat.com/browse/OCPBUGS-32046): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#60](https://github.com/openshift/azure-file-csi-driver/pull/60)
* [OCPBUGS-31869](https://issues.redhat.com/browse/OCPBUGS-31869): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#59](https://github.com/openshift/azure-file-csi-driver/pull/59)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): use azcopy base image to build driver [#56](https://github.com/openshift/azure-file-csi-driver/pull/56)
* [OCPBUGS-30476](https://issues.redhat.com/browse/OCPBUGS-30476): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#57](https://github.com/openshift/azure-file-csi-driver/pull/57)
* [STOR-1586](https://issues.redhat.com/browse/STOR-1586): Rebase v1.29.3 [#54](https://github.com/openshift/azure-file-csi-driver/pull/54)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#52](https://github.com/openshift/azure-file-csi-driver/pull/52)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#47](https://github.com/openshift/azure-file-csi-driver/pull/47)
* [OCPBUGS-25504](https://issues.redhat.com/browse/OCPBUGS-25504): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#49](https://github.com/openshift/azure-file-csi-driver/pull/49)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): UPSTREAM: <drop>: Regenerate go.mod with go 1.21 [#48](https://github.com/openshift/azure-file-csi-driver/pull/48)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#46](https://github.com/openshift/azure-file-csi-driver/pull/46)
* [OCPBUGS-24874](https://issues.redhat.com/browse/OCPBUGS-24874): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#45](https://github.com/openshift/azure-file-csi-driver/pull/45)
* [STOR-1390](https://issues.redhat.com/browse/STOR-1390): Rebase v1.29.2 for OCP 4.15 [#43](https://github.com/openshift/azure-file-csi-driver/pull/43)
* [OCPBUGS-24075](https://issues.redhat.com/browse/OCPBUGS-24075): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#44](https://github.com/openshift/azure-file-csi-driver/pull/44)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/azure-file-csi-driver/pull/36)
* [OCPBUGS-19110](https://issues.redhat.com/browse/OCPBUGS-19110): Updating azure-file-csi-driver images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver/pull/34)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f28a507244d4629404365c89b422f04b9d8d7943...5ceb190a24730e4a3f951fa3e186e3cde9d86889)
### [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/4469d80589595dd5d05f0f0f296505800e3ad527...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Remove startupScript vmextension lookup [#102](https://github.com/openshift/machine-api-provider-azure/pull/102)
* [OCPBUGS-28309](https://issues.redhat.com/browse/OCPBUGS-28309): add an extra vendor exclude to snyk config [#99](https://github.com/openshift/machine-api-provider-azure/pull/99)
* [OCPBUGS-25940](https://issues.redhat.com/browse/OCPBUGS-25940): Don't create availability set when using spot instances [#91](https://github.com/openshift/machine-api-provider-azure/pull/91)
* [OCPCLOUD-2428](https://issues.redhat.com/browse/OCPCLOUD-2428): Rebase k8s to 1.29 and update dependencies [#94](https://github.com/openshift/machine-api-provider-azure/pull/94)
* [OCPBUGS-26122](https://issues.redhat.com/browse/OCPBUGS-26122): Add Snyk file to exclude vendor directory on scan [#92](https://github.com/openshift/machine-api-provider-azure/pull/92)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Improving performance of creating VMs in Azure [#87](https://github.com/openshift/machine-api-provider-azure/pull/87)
* [OCPBUGS-25591](https://issues.redhat.com/browse/OCPBUGS-25591): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#90](https://github.com/openshift/machine-api-provider-azure/pull/90)
* [OCPBUGS-25008](https://issues.redhat.com/browse/OCPBUGS-25008): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#88](https://github.com/openshift/machine-api-provider-azure/pull/88)
* [OCPBUGS-24168](https://issues.redhat.com/browse/OCPBUGS-24168): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#86](https://github.com/openshift/machine-api-provider-azure/pull/86)
* Update OWNERS [#79](https://github.com/openshift/machine-api-provider-azure/pull/79)
* [OCPBUGS-21790](https://issues.redhat.com/browse/OCPBUGS-21790): Bump x/net package to v0.17.0 [#78](https://github.com/openshift/machine-api-provider-azure/pull/78)
* [OCPBUGS-20268](https://issues.redhat.com/browse/OCPBUGS-20268): update bad url endpoint termination handler test [#77](https://github.com/openshift/machine-api-provider-azure/pull/77)
* [OCPCLOUD-2192](https://issues.redhat.com/browse/OCPCLOUD-2192): Bump k8s packages to v1.28 [#76](https://github.com/openshift/machine-api-provider-azure/pull/76)
* [OCPBUGS-19269](https://issues.redhat.com/browse/OCPBUGS-19269): Updating ose-machine-api-provider-azure images to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-azure/pull/75)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/8666a367160c23175f97c5df9db7c1844405865e...d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/4aca092a13f62e48c700a910e8f3f0f228a7d822)
* [OCPBUGS-31283](https://issues.redhat.com/browse/OCPBUGS-31283): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#16](https://github.com/openshift/azure-workload-identity/pull/16)
* [OCPBUGS-30712](https://issues.redhat.com/browse/OCPBUGS-30712): Update to go-jose v4.0.1 [#15](https://github.com/openshift/azure-workload-identity/pull/15)
* [OCPBUGS-26203](https://issues.redhat.com/browse/OCPBUGS-26203): Upgrade golang/x/net for CVE-2023-39325 (main) [#12](https://github.com/openshift/azure-workload-identity/pull/12)
* [OCPBUGS-25777](https://issues.redhat.com/browse/OCPBUGS-25777): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#11](https://github.com/openshift/azure-workload-identity/pull/11)
* [OCPBUGS-25543](https://issues.redhat.com/browse/OCPBUGS-25543): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#10](https://github.com/openshift/azure-workload-identity/pull/10)
* [OCPBUGS-24854](https://issues.redhat.com/browse/OCPBUGS-24854): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#8](https://github.com/openshift/azure-workload-identity/pull/8)
* NO-JIRA: UPSTREAM: <carry> Update OWNERS [#9](https://github.com/openshift/azure-workload-identity/pull/9)
* [OCPBUGS-19244](https://issues.redhat.com/browse/OCPBUGS-19244): Updating ose-azure-workload-identity-webhook images to be consistent with ART [#6](https://github.com/openshift/azure-workload-identity/pull/6)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/bcb88d949151223362ecefc12f4e90566599e0e7...4aca092a13f62e48c700a910e8f3f0f228a7d822)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/363f5bec8a60f287d6edbe9d9234c9594f0dd17f)
* [OCPBUGS-35448](https://issues.redhat.com/browse/OCPBUGS-35448): [release-4.16] capi/aws: bump provider for fixes [#8598](https://github.com/openshift/installer/pull/8598)
* [OCPBUGS-35460](https://issues.redhat.com/browse/OCPBUGS-35460): save etcd data to its own directory [#8600](https://github.com/openshift/installer/pull/8600)
* [OCPBUGS-35384](https://issues.redhat.com/browse/OCPBUGS-35384): Add ELB V2 permission to set security groups on API server load balancer [#8589](https://github.com/openshift/installer/pull/8589)
* [OCPBUGS-35344](https://issues.redhat.com/browse/OCPBUGS-35344): baremetal: check if HardwareDetails is nil [#8579](https://github.com/openshift/installer/pull/8579)
* [OCPBUGS-35392](https://issues.redhat.com/browse/OCPBUGS-35392): aws: delete ignition bucket on bootstrap destroy [#8590](https://github.com/openshift/installer/pull/8590)
* [OCPBUGS-35383](https://issues.redhat.com/browse/OCPBUGS-35383): capi: use polling instead of exponential backoff [#8588](https://github.com/openshift/installer/pull/8588)
* [OCPBUGS-35372](https://issues.redhat.com/browse/OCPBUGS-35372): openstack: Attach a bootstrap FIP to the cluster network port [#8585](https://github.com/openshift/installer/pull/8585)
* [OCPBUGS-35323](https://issues.redhat.com/browse/OCPBUGS-35323): Add S3 permission to allow attaching S3 bucket policy [#8576](https://github.com/openshift/installer/pull/8576)
* [OCPBUGS-35379](https://issues.redhat.com/browse/OCPBUGS-35379): capi/aws: do not set proxy for masters [#8586](https://github.com/openshift/installer/pull/8586)
* [OCPBUGS-35253](https://issues.redhat.com/browse/OCPBUGS-35253): AWS remove extra tags from awsmachines for security groups and subnets [#8569](https://github.com/openshift/installer/pull/8569)
* [OCPBUGS-35235](https://issues.redhat.com/browse/OCPBUGS-35235): baremetal: Don't always enable provisioning-interface.service [#8563](https://github.com/openshift/installer/pull/8563)
* [OCPBUGS-35302](https://issues.redhat.com/browse/OCPBUGS-35302): Prevent multiple invocations on CAPI [#8571](https://github.com/openshift/installer/pull/8571)
* [OCPBUGS-35101](https://issues.redhat.com/browse/OCPBUGS-35101): [release-4.16] Add 4 new regions for PowerVS [#8533](https://github.com/openshift/installer/pull/8533)
* [OCPBUGS-35312](https://issues.redhat.com/browse/OCPBUGS-35312): capi/aws: rename `preserveBootstrapIgnition` [#8574](https://github.com/openshift/installer/pull/8574)
* [OCPBUGS-35192](https://issues.redhat.com/browse/OCPBUGS-35192): write etcd and kube-apiserver logs [#8558](https://github.com/openshift/installer/pull/8558)
* [OCPBUGS-34760](https://issues.redhat.com/browse/OCPBUGS-34760): capi/aws: fix setting custom AMI [#8520](https://github.com/openshift/installer/pull/8520)
* [OCPBUGS-35243](https://issues.redhat.com/browse/OCPBUGS-35243): capi: do not override KUBECONFIG [#8566](https://github.com/openshift/installer/pull/8566)
* [OCPBUGS-35224](https://issues.redhat.com/browse/OCPBUGS-35224): PowerVS: Destroy DHCP in ERROR state [#8561](https://github.com/openshift/installer/pull/8561)
* [OCPBUGS-35151](https://issues.redhat.com/browse/OCPBUGS-35151): wait for ip addresses to be present on machines [#8554](https://github.com/openshift/installer/pull/8554)
* [OCPBUGS-34499](https://issues.redhat.com/browse/OCPBUGS-34499): unique AWS HostedZone Caller Ref [#8476](https://github.com/openshift/installer/pull/8476)
* [OCPBUGS-35103](https://issues.redhat.com/browse/OCPBUGS-35103): OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas [#8553](https://github.com/openshift/installer/pull/8553)
* [OCPBUGS-35098](https://issues.redhat.com/browse/OCPBUGS-35098): capi/aws: add BootstrapDestroyer guard [#8552](https://github.com/openshift/installer/pull/8552)
* [OCPBUGS-35088](https://issues.redhat.com/browse/OCPBUGS-35088): PowerVS: fix AddIPToLoadBalancerPool [#8551](https://github.com/openshift/installer/pull/8551)
* [OCPBUGS-35030](https://issues.redhat.com/browse/OCPBUGS-35030): Increase timeout for bootstrap complete [#8539](https://github.com/openshift/installer/pull/8539)
* [OCPBUGS-35049](https://issues.redhat.com/browse/OCPBUGS-35049): capi/aws: don't use S3 stub for masters [#8548](https://github.com/openshift/installer/pull/8548)
* [OCPBUGS-35044](https://issues.redhat.com/browse/OCPBUGS-35044): aws: don't always require s3:Delete* permissions [#8547](https://github.com/openshift/installer/pull/8547)
* [OCPBUGS-34620](https://issues.redhat.com/browse/OCPBUGS-34620): Use infrastructure API to detect cluster topology [#8499](https://github.com/openshift/installer/pull/8499)
* [OCPBUGS-34822](https://issues.redhat.com/browse/OCPBUGS-34822): [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled [#8524](https://github.com/openshift/installer/pull/8524)
* [OCPBUGS-34976](https://issues.redhat.com/browse/OCPBUGS-34976): [release-4.16] aws: terraform: add spot instance support for masters [#8526](https://github.com/openshift/installer/pull/8526)
* [OCPBUGS-34707](https://issues.redhat.com/browse/OCPBUGS-34707): attach tag to folder,fix folder destroy [#8509](https://github.com/openshift/installer/pull/8509)
* [OCPBUGS-33794](https://issues.redhat.com/browse/OCPBUGS-33794): Make Ingress capability required for standalone OpenShift [#8528](https://github.com/openshift/installer/pull/8528)
* [OCPBUGS-34628](https://issues.redhat.com/browse/OCPBUGS-34628): tfvars: change asset's name [#8501](https://github.com/openshift/installer/pull/8501)
* [OCPBUGS-34388](https://issues.redhat.com/browse/OCPBUGS-34388): Add --dir /tmp to node-joiner-monitor.sh [#8461](https://github.com/openshift/installer/pull/8461)
* [OCPBUGS-34728](https://issues.redhat.com/browse/OCPBUGS-34728): [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix [#8506](https://github.com/openshift/installer/pull/8506)
* [OCPBUGS-34693](https://issues.redhat.com/browse/OCPBUGS-34693): update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 [#8517](https://github.com/openshift/installer/pull/8517)
* [OCPBUGS-34419](https://issues.redhat.com/browse/OCPBUGS-34419): PowerVS: update capi ibmcloud to release 0 8 0 [#8465](https://github.com/openshift/installer/pull/8465)
* [OCPBUGS-34623](https://issues.redhat.com/browse/OCPBUGS-34623), [OCPBUGS-34625](https://issues.redhat.com/browse/OCPBUGS-34625): capv - missing cores/socket,disk type [#8500](https://github.com/openshift/installer/pull/8500)
* [OCPBUGS-34427](https://issues.redhat.com/browse/OCPBUGS-34427): aws/cluster: restrict SSH on private clusters [#8467](https://github.com/openshift/installer/pull/8467)
* [OCPBUGS-34528](https://issues.redhat.com/browse/OCPBUGS-34528): Nutanix IPI install with capi failed to set bootType [#8481](https://github.com/openshift/installer/pull/8481)
* [OCPBUGS-31845](https://issues.redhat.com/browse/OCPBUGS-31845): Detect Release Image Arch in a Disconnected Env [#8490](https://github.com/openshift/installer/pull/8490)
* [OCPBUGS-33962](https://issues.redhat.com/browse/OCPBUGS-33962): [release-4.16] Remove vSphere Terraform [#8431](https://github.com/openshift/installer/pull/8431)
* [OCPBUGS-34506](https://issues.redhat.com/browse/OCPBUGS-34506): [release-4.16] bump golang-protobuf for CVE fix [#8478](https://github.com/openshift/installer/pull/8478)
* [OCPBUGS-34417](https://issues.redhat.com/browse/OCPBUGS-34417): capi/aws: don't modify BYO role's policy [#8463](https://github.com/openshift/installer/pull/8463)
* [OCPBUGS-34220](https://issues.redhat.com/browse/OCPBUGS-34220): Reintroduce CAPI-installer to 4.16 [#8451](https://github.com/openshift/installer/pull/8451)
* [OCPBUGS-33976](https://issues.redhat.com/browse/OCPBUGS-33976): Enable leader election for baremetal operator [#8435](https://github.com/openshift/installer/pull/8435)
* Trt-1674: 4.16 capi revert 1 [#8434](https://github.com/openshift/installer/pull/8434)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): [release-4.16] GA CAPI Installer [#8428](https://github.com/openshift/installer/pull/8428)
* [OCPBUGS-33668](https://issues.redhat.com/browse/OCPBUGS-33668): Changed folder name to match cluster name instead of infra-id. [#8414](https://github.com/openshift/installer/pull/8414)
* [AGENT-903](https://issues.redhat.com/browse/AGENT-903): monitor-add-nodes should only show CSRs matching node [#8376](https://github.com/openshift/installer/pull/8376)
* [CORS-3480](https://issues.redhat.com/browse/CORS-3480): aws/sdk: remove sdk provisioner [#8358](https://github.com/openshift/installer/pull/8358)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): Always collect clusterapi manifests [#8411](https://github.com/openshift/installer/pull/8411)
* [OCPBUGS-33709](https://issues.redhat.com/browse/OCPBUGS-33709): GCP mixup when using the ignition shim vs the signed url [#8342](https://github.com/openshift/installer/pull/8342)
* [CORS-3297](https://issues.redhat.com/browse/CORS-3297): Add GCP firewall rule to access bootstrap node via ssh [#8374](https://github.com/openshift/installer/pull/8374)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi-aws delete bootstrap ssh rule [#8359](https://github.com/openshift/installer/pull/8359)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): baremetal: always write masters file [#8365](https://github.com/openshift/installer/pull/8365)
* [OCPBUGS-33531](https://issues.redhat.com/browse/OCPBUGS-33531): update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 [#8409](https://github.com/openshift/installer/pull/8409)
* no-jira: Vendor api changes for tech preview with capg [#8407](https://github.com/openshift/installer/pull/8407)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure ignite control plane machines [#8126](https://github.com/openshift/installer/pull/8126)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add missing permission for IPv4 pools [#8408](https://github.com/openshift/installer/pull/8408)
* [OCPBUGS-33649](https://issues.redhat.com/browse/OCPBUGS-33649): add quota support to ca-west-1 [#8406](https://github.com/openshift/installer/pull/8406)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): capi: collect generated assets in hidden dir and save into log bundle [#8387](https://github.com/openshift/installer/pull/8387)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: aarch64-related fixes [#8385](https://github.com/openshift/installer/pull/8385)
* [OCPBUGS-33610](https://issues.redhat.com/browse/OCPBUGS-33610): fix API detection, azure bootstrap disk size, and use get to verify endpoint [#8371](https://github.com/openshift/installer/pull/8371)
* no-jira: Removing unused terraform variables [#8360](https://github.com/openshift/installer/pull/8360)
* [OCPBUGS-33502](https://issues.redhat.com/browse/OCPBUGS-33502): capi/aws: fix setting IMDSv2 value [#8399](https://github.com/openshift/installer/pull/8399)
* [CORS-3516](https://issues.redhat.com/browse/CORS-3516): hack: do not execute cross-compiled binaries [#8397](https://github.com/openshift/installer/pull/8397)
* [OCPBUGS-33578](https://issues.redhat.com/browse/OCPBUGS-33578): capi/aws: fix HostedZone ID lookup [#8396](https://github.com/openshift/installer/pull/8396)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): improve bootstrap logic to wait for at least 2 apiserver instances [#8394](https://github.com/openshift/installer/pull/8394)
* [OKD-213](https://issues.redhat.com/browse/OKD-213): Reference stream-coreos instead of centos-stream-coreos-9 [#8356](https://github.com/openshift/installer/pull/8356)
* [OCPBUGS-33470](https://issues.redhat.com/browse/OCPBUGS-33470): use read/write cache on azure masters [#8380](https://github.com/openshift/installer/pull/8380)
* no-jira: AzureMachines: set disk caching to ReadWrite [#8390](https://github.com/openshift/installer/pull/8390)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): Change $@ to "$*" to fix shellcheck [#8402](https://github.com/openshift/installer/pull/8402)
* [OCPBUGS-33481](https://issues.redhat.com/browse/OCPBUGS-33481): set the node tag used by CAPG for CloudProviderConfig [#8386](https://github.com/openshift/installer/pull/8386)
* [OCPBUGS-23022](https://issues.redhat.com/browse/OCPBUGS-23022): Installer should not complain when API and API-INT are resolved. [#7701](https://github.com/openshift/installer/pull/7701)
* no-jira: vendor: capi-installer in tech preview [#8372](https://github.com/openshift/installer/pull/8372)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): capa/machines: fix zone placement for control planes [#8347](https://github.com/openshift/installer/pull/8347)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Changed vsphere CPMS to not include fields controlled by failure domains. [#8354](https://github.com/openshift/installer/pull/8354)
* [AGENT-872](https://issues.redhat.com/browse/AGENT-872): Generate JWT token [#8110](https://github.com/openshift/installer/pull/8110)
* no-jira: vSphere - update owners aliases [#8384](https://github.com/openshift/installer/pull/8384)
* [AGENT-906](https://issues.redhat.com/browse/AGENT-906): Script to run monitor-add-nodes in cluster [#8294](https://github.com/openshift/installer/pull/8294)
* [OCPBUGS-33430](https://issues.redhat.com/browse/OCPBUGS-33430): Fix CAPI installation typo [#8375](https://github.com/openshift/installer/pull/8375)
* [CORS-3471](https://issues.redhat.com/browse/CORS-3471): standalone destroy bootstrap support with capi [#8350](https://github.com/openshift/installer/pull/8350)
* [CORS-3477](https://issues.redhat.com/browse/CORS-3477): hack: build capi + providers by default [#8357](https://github.com/openshift/installer/pull/8357)
* [OCPBUGS-33189](https://issues.redhat.com/browse/OCPBUGS-33189): OCPBUGS-33006: baremetal: correct libvirt defaults [#8366](https://github.com/openshift/installer/pull/8366)
* [OCPBUGS-33157](https://issues.redhat.com/browse/OCPBUGS-33157): baremetal: pause provisioning [#8346](https://github.com/openshift/installer/pull/8346)
* NO-ISSUE: baremetal: disable bmo webhook on bootstrap [#8340](https://github.com/openshift/installer/pull/8340)
* [OCPBUGS-33240](https://issues.redhat.com/browse/OCPBUGS-33240): avoid FAT32 error messages when generating the agent ISO [#8353](https://github.com/openshift/installer/pull/8353)
* no-jira: Private domains in survey for PowerVS [#8303](https://github.com/openshift/installer/pull/8303)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images: use pre-built KAS/etcd binaries [#8343](https://github.com/openshift/installer/pull/8343)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Convert storage policy id to SpbmStoragePolicy. [#8352](https://github.com/openshift/installer/pull/8352)
* no-jira: Power VS: Refactor `InfraReady` to use metadata client [#8337](https://github.com/openshift/installer/pull/8337)
* [CORS-3466](https://issues.redhat.com/browse/CORS-3466): CAPG set instance group name [#8314](https://github.com/openshift/installer/pull/8314)
* [MULTIARCH-4633](https://issues.redhat.com/browse/MULTIARCH-4633): Power VS: Configure load balancers for the private scenario [#8331](https://github.com/openshift/installer/pull/8331)
* [OCPBUGS-26216](https://issues.redhat.com/browse/OCPBUGS-26216): Fix parameter used to disable smt for ppc64 systems [#8178](https://github.com/openshift/installer/pull/8178)
* [COS-2744](https://issues.redhat.com/browse/COS-2744): update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 [#8335](https://github.com/openshift/installer/pull/8335)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): baremetal: write masters.json file [#8336](https://github.com/openshift/installer/pull/8336)
* no-jira: azure: Add securityProfile to control plane machines [#8334](https://github.com/openshift/installer/pull/8334)
* no-jira: CAPI-Install Feature Gates per Platform [#8311](https://github.com/openshift/installer/pull/8311)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Added support for secure boot and storage policies to UPI pwsh. [#8328](https://github.com/openshift/installer/pull/8328)
* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): images: move container images to RHEL 9 [#8196](https://github.com/openshift/installer/pull/8196)
* [AGENT-864](https://issues.redhat.com/browse/AGENT-864): cleanup dnf cache after installing node-joiner reqs [#8329](https://github.com/openshift/installer/pull/8329)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: use ControlPlane.Replicas [#8322](https://github.com/openshift/installer/pull/8322)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): docs fix [#8325](https://github.com/openshift/installer/pull/8325)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: set bootstrap domain arch [#8317](https://github.com/openshift/installer/pull/8317)
* [OCPBUGS-33024](https://issues.redhat.com/browse/OCPBUGS-33024): agent: escape '%' in proxy settings [#8320](https://github.com/openshift/installer/pull/8320)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): fix oc dependency in installer images [#8326](https://github.com/openshift/installer/pull/8326)
* [OCPBUGS-29968](https://issues.redhat.com/browse/OCPBUGS-29968): Generate ZTP manifests with correct Group/Version/Kind metadata [#8068](https://github.com/openshift/installer/pull/8068)
* [CORS-3437](https://issues.redhat.com/browse/CORS-3437): infra/capi: add provisioning timeout [#8307](https://github.com/openshift/installer/pull/8307)
* [SPLAT-1596](https://issues.redhat.com/browse/SPLAT-1596): Created new function to workaround issue with Set-HardDisk. [#8315](https://github.com/openshift/installer/pull/8315)
* [CORS-3214](https://issues.redhat.com/browse/CORS-3214): capi-aws - Wavelength Zones network provisioning [#8174](https://github.com/openshift/installer/pull/8174)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): node-joiner cluster script [#8242](https://github.com/openshift/installer/pull/8242)
* [OSASINFRA-3434](https://issues.redhat.com/browse/OSASINFRA-3434): Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests [#8021](https://github.com/openshift/installer/pull/8021)
* [CORS-2893](https://issues.redhat.com/browse/CORS-2893): capi-aws: implement preserveBootstrapIgnition [#8313](https://github.com/openshift/installer/pull/8313)
* [OCPBUGS-4466](https://issues.redhat.com/browse/OCPBUGS-4466): Add check for compact-cluster install on GCP, AWS & Azure [#8226](https://github.com/openshift/installer/pull/8226)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images/altinfra: add etcd/kas binaries from containers [#8309](https://github.com/openshift/installer/pull/8309)
* [CORS-2899](https://issues.redhat.com/browse/CORS-2899): AWS/CAPI Local Zones network provisioning [#8173](https://github.com/openshift/installer/pull/8173)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: template the number of master nodes [#8316](https://github.com/openshift/installer/pull/8316)
* [OCPBUGS-32519](https://issues.redhat.com/browse/OCPBUGS-32519): Fix appliance CI jobs [#8297](https://github.com/openshift/installer/pull/8297)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): fix ec2:DisassociateAddress requirement [#8296](https://github.com/openshift/installer/pull/8296)
* [OCPBUGS-32292](https://issues.redhat.com/browse/OCPBUGS-32292): Remove deprecated replace directives [#8271](https://github.com/openshift/installer/pull/8271)
* no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 [#8310](https://github.com/openshift/installer/pull/8310)
* [CORS-3076](https://issues.redhat.com/browse/CORS-3076): azure: Add additional tags to AzureCluster [#8301](https://github.com/openshift/installer/pull/8301)
* [CORS-3294](https://issues.redhat.com/browse/CORS-3294): CAPA health check configuration for control plane ELBv2 [#8223](https://github.com/openshift/installer/pull/8223)
* [CORS-3470](https://issues.redhat.com/browse/CORS-3470): capi/aws: add custom endpoint support. [#8306](https://github.com/openshift/installer/pull/8306)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Updating CI image to include qemu-kvm [#8312](https://github.com/openshift/installer/pull/8312)
* [MULTIARCH-4616](https://issues.redhat.com/browse/MULTIARCH-4616): Power VS: Add ServiceEndpoints for endpoint overrides [#8292](https://github.com/openshift/installer/pull/8292)
* no-jira: cluster-api/aws: bump capa to latest version [#8288](https://github.com/openshift/installer/pull/8288)
* [OCPBUGS-32306](https://issues.redhat.com/browse/OCPBUGS-32306): GCP Destroy find regional and global addresses [#8275](https://github.com/openshift/installer/pull/8275)
* [OCPBUGS-32517](https://issues.redhat.com/browse/OCPBUGS-32517): Ensure worker BMH's get unpaused [#8299](https://github.com/openshift/installer/pull/8299)
* [OCPBUGS-32591](https://issues.redhat.com/browse/OCPBUGS-32591): GCP Destroy target pools fix misleading log [#8298](https://github.com/openshift/installer/pull/8298)
* [CORS-3260](https://issues.redhat.com/browse/CORS-3260): CAPI: Create GCP Internal LB [#8151](https://github.com/openshift/installer/pull/8151)
* [OCPBUGS-15845](https://issues.redhat.com/browse/OCPBUGS-15845): Check host for compatibility with target cluster config [#7566](https://github.com/openshift/installer/pull/7566)
* no-jira: bump golangci lint to 1.54.2 [#8291](https://github.com/openshift/installer/pull/8291)
* [OCPBUGS-32425](https://issues.redhat.com/browse/OCPBUGS-32425): Test for the presence of "provisioned" server [#8289](https://github.com/openshift/installer/pull/8289)
* [SPLAT-1585](https://issues.redhat.com/browse/SPLAT-1585): capv - allow no auth to vcenter [#8276](https://github.com/openshift/installer/pull/8276)
* [SPLAT-1208](https://issues.redhat.com/browse/SPLAT-1208): replace UPI terraform with powercli [#7699](https://github.com/openshift/installer/pull/7699)
* [OCPBUGS-29765](https://issues.redhat.com/browse/OCPBUGS-29765): Fills CIS or DNS CRN in Metadata, never both [#8057](https://github.com/openshift/installer/pull/8057)
* [OCPBUGS-32042](https://issues.redhat.com/browse/OCPBUGS-32042): fix usage of addtionalTrustBundle field [#8253](https://github.com/openshift/installer/pull/8253)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): Remove terraform libvirt provider [#8160](https://github.com/openshift/installer/pull/8160)
* [MULTIARCH-4549](https://issues.redhat.com/browse/MULTIARCH-4549): Logic for creating private DNS records for PowerVS CAPI [#8246](https://github.com/openshift/installer/pull/8246)
* [OCPSTRAT-915](https://issues.redhat.com/browse/OCPSTRAT-915): Nutanix capi support [#8211](https://github.com/openshift/installer/pull/8211)
* [OCPBUGS-32133](https://issues.redhat.com/browse/OCPBUGS-32133): GCP: Fixing GCP Bootstraping [#8248](https://github.com/openshift/installer/pull/8248)
* [METAL-939](https://issues.redhat.com/browse/METAL-939): baremetal: monitor bootstrap process [#8181](https://github.com/openshift/installer/pull/8181)
* no-jira: gather: replace deprecated errors package [#8280](https://github.com/openshift/installer/pull/8280)
* no-jira: azure: Update capz version to 1.14.2 [#8268](https://github.com/openshift/installer/pull/8268)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add `ec2:DisassociateAddress` permission [#8247](https://github.com/openshift/installer/pull/8247)
* [OCPBUGS-31563](https://issues.redhat.com/browse/OCPBUGS-31563): sdk/aws: add ssh security group rule for compute [#8229](https://github.com/openshift/installer/pull/8229)
* [MULTIARCH-4550](https://issues.redhat.com/browse/MULTIARCH-4550): Power VS: Use a custom resolver when publish strategy is Internal [#8243](https://github.com/openshift/installer/pull/8243)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678), [OCPBUGS-14478](https://issues.redhat.com/browse/OCPBUGS-14478): Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x [#8205](https://github.com/openshift/installer/pull/8205)
* [CORS-3050](https://issues.redhat.com/browse/CORS-3050): capi/aws: copy AMI to target region, if needed [#8157](https://github.com/openshift/installer/pull/8157)
* [SPLAT-1592](https://issues.redhat.com/browse/SPLAT-1592): bump capv to v1.9.3 [#8267](https://github.com/openshift/installer/pull/8267)
* [OCPBUGS-30774](https://issues.redhat.com/browse/OCPBUGS-30774): always save serial logs if they were gathered [#8263](https://github.com/openshift/installer/pull/8263)
* [CORS-3261](https://issues.redhat.com/browse/CORS-3261): GCP cluster api add disk encryption [#8222](https://github.com/openshift/installer/pull/8222)
* [CORS-3419](https://issues.redhat.com/browse/CORS-3419), [OCPBUGS-30941](https://issues.redhat.com/browse/OCPBUGS-30941): Include baremetal IPI in openshift-installer [#8161](https://github.com/openshift/installer/pull/8161)
* no-jira: PowerVS: Open port 10258 [#8261](https://github.com/openshift/installer/pull/8261)
* [OCPBUGS-31711](https://issues.redhat.com/browse/OCPBUGS-31711): AWS update explain docs [#8258](https://github.com/openshift/installer/pull/8258)
* [OCPBUGS-27965](https://issues.redhat.com/browse/OCPBUGS-27965): escape '%' in proxy settings [#8265](https://github.com/openshift/installer/pull/8265)
* [OCPBUGS-32174](https://issues.redhat.com/browse/OCPBUGS-32174): save correct bootstrap public IP [#8264](https://github.com/openshift/installer/pull/8264)
* [CORS-3420](https://issues.redhat.com/browse/CORS-3420): Remove libvirt platform from openshift-baremetal-install [#8244](https://github.com/openshift/installer/pull/8244)
* no-jira: capi: replace deprecated `--metrics-bind-addr` arg [#8251](https://github.com/openshift/installer/pull/8251)
* [CORS-3436](https://issues.redhat.com/browse/CORS-3436): capi: save log output to file [#8218](https://github.com/openshift/installer/pull/8218)
* no-jira: PowerVS: Add destroy Power Server subnets [#8260](https://github.com/openshift/installer/pull/8260)
* [OCPBUGS-32091](https://issues.redhat.com/browse/OCPBUGS-32091): Add Top-level Context for Create Commands [#8063](https://github.com/openshift/installer/pull/8063)
* [CORS-3063](https://issues.redhat.com/browse/CORS-3063): Support control plane disk encryption [#8124](https://github.com/openshift/installer/pull/8124)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure CAPI Ignite Bootstrap [#8255](https://github.com/openshift/installer/pull/8255)
* no-jira: PowerVS: add AddIPToLoadBalancerPool [#8257](https://github.com/openshift/installer/pull/8257)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump API version to promote vSphereStaticIPs from TechPreview. [#7943](https://github.com/openshift/installer/pull/7943)
* no-jira: capi/aws: bump controller log level to debug [#8252](https://github.com/openshift/installer/pull/8252)
* [CORS-3254](https://issues.redhat.com/browse/CORS-3254): Update google.golang.org/api/cloudresourcemanager library version [#8213](https://github.com/openshift/installer/pull/8213)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Update the CI image with virt-install [#8259](https://github.com/openshift/installer/pull/8259)
* [CORS-3218](https://issues.redhat.com/browse/CORS-3218): GCP Remove the use case of users passing contents for json secret data [#8234](https://github.com/openshift/installer/pull/8234)
* [OCPBUGS-27844](https://issues.redhat.com/browse/OCPBUGS-27844): Fix task for attaching IPv6 subnet to router. [#8087](https://github.com/openshift/installer/pull/8087)
* [CORS-3270](https://issues.redhat.com/browse/CORS-3270): azure: tag installer-created LB resources [#8236](https://github.com/openshift/installer/pull/8236)
* [OCPBUGS-31813](https://issues.redhat.com/browse/OCPBUGS-31813): AWS: bump CCO for permission fix [#8233](https://github.com/openshift/installer/pull/8233)
* [CORS-3289](https://issues.redhat.com/browse/CORS-3289), [CORS-3308](https://issues.redhat.com/browse/CORS-3308), [CORS-3426](https://issues.redhat.com/browse/CORS-3426): Bump CAPA provider for various fixes [#8232](https://github.com/openshift/installer/pull/8232)
* [OCPBUGS-32041](https://issues.redhat.com/browse/OCPBUGS-32041): update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 [#8256](https://github.com/openshift/installer/pull/8256)
* no-jira: docs: Fix typos [#8245](https://github.com/openshift/installer/pull/8245)
* no-jira:PowerVS: Wait for IPs [#8239](https://github.com/openshift/installer/pull/8239)
* [CORS-3075](https://issues.redhat.com/browse/CORS-3075): Allow for installation in existing resource group [#8123](https://github.com/openshift/installer/pull/8123)
* [CORS-3446](https://issues.redhat.com/browse/CORS-3446): Add instructions for obtaining correct binary [#8230](https://github.com/openshift/installer/pull/8230)
* [AGENT-858](https://issues.redhat.com/browse/AGENT-858): Agent day2 ignition services [#8093](https://github.com/openshift/installer/pull/8093)
* [CORS-3418](https://issues.redhat.com/browse/CORS-3418): images: move installer images to static builds [#8215](https://github.com/openshift/installer/pull/8215)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capi/aws: support ignition proxy and CA bundle [#8170](https://github.com/openshift/installer/pull/8170)
* [OSASINFRA-3365](https://issues.redhat.com/browse/OSASINFRA-3365): clusterapi: Add worker asset to PreProvision [#8237](https://github.com/openshift/installer/pull/8237)
* [HIVE-2476](https://issues.redhat.com/browse/HIVE-2476): OpenStack.MachineSets(): Allow nil Replicas [#8227](https://github.com/openshift/installer/pull/8227)
* [CORS-3195](https://issues.redhat.com/browse/CORS-3195): Azure CAPI Supplemental Load Balancers [#8115](https://github.com/openshift/installer/pull/8115)
* no-jira: PowerVS: Set VPC service region [#8217](https://github.com/openshift/installer/pull/8217)
* [OCPBUGS-12890](https://issues.redhat.com/browse/OCPBUGS-12890): Create bucket, signed url and use proxy info for installs [#8056](https://github.com/openshift/installer/pull/8056)
* no-jira: PowerVS: Fix COS region and VPC subnets [#8219](https://github.com/openshift/installer/pull/8219)
* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [OCPBUGS-30641](https://issues.redhat.com/browse/OCPBUGS-30641): Enable deploy by Service ID on PowerVS [#8111](https://github.com/openshift/installer/pull/8111)
* [CORS-3288](https://issues.redhat.com/browse/CORS-3288): bump CAPA for LB scheme fix [#8114](https://github.com/openshift/installer/pull/8114)
* no-jira: machines/aws: fix subnet filter comment [#8120](https://github.com/openshift/installer/pull/8120)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: bootstrap: rename master label [#8107](https://github.com/openshift/installer/pull/8107)
* [OCPBUGS-29388](https://issues.redhat.com/browse/OCPBUGS-29388): upi: aws: fix typo in worker templates [#8112](https://github.com/openshift/installer/pull/8112)
* [OSASINFRA-3362](https://issues.redhat.com/browse/OSASINFRA-3362): Fix CAPI bootstrap deletion [#8104](https://github.com/openshift/installer/pull/8104)
* [OCPBUGS-24415](https://issues.redhat.com/browse/OCPBUGS-24415), [OCPVE-661](https://issues.redhat.com/browse/OCPVE-661): bump openshift/api version [#7546](https://github.com/openshift/installer/pull/7546)
* [MULTIARCH-4095](https://issues.redhat.com/browse/MULTIARCH-4095): Generate PowerVS machine manifests for CAPI [#8020](https://github.com/openshift/installer/pull/8020)
* [CORS-2900](https://issues.redhat.com/browse/CORS-2900): CAPI AWS IAM [#8031](https://github.com/openshift/installer/pull/8031)
* [OCPBUGS-30200](https://issues.redhat.com/browse/OCPBUGS-30200): Authn with platform-services-go-sdk for PowerVS [#8025](https://github.com/openshift/installer/pull/8025)
* [CORS-3281](https://issues.redhat.com/browse/CORS-3281): IBMCloud: initial CAPI infrastructure [#8090](https://github.com/openshift/installer/pull/8090)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): Bump CAPA Dependencies for Secondary Load Balancers [#8088](https://github.com/openshift/installer/pull/8088)
* [SPLAT-1460](https://issues.redhat.com/browse/SPLAT-1460): Make vSphere default ResourcePool formatting not contain double slash. [#8044](https://github.com/openshift/installer/pull/8044)
* [CORS-3212](https://issues.redhat.com/browse/CORS-3212): CAPG Add ignition for CAPG machines [#8027](https://github.com/openshift/installer/pull/8027)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): Remove terraform-provider-ironic [#7649](https://github.com/openshift/installer/pull/7649)
* [SPLAT-1468](https://issues.redhat.com/browse/SPLAT-1468): Added log message for import vsphere ova progress during CAPI install. [#8097](https://github.com/openshift/installer/pull/8097)
* no-jira: capi: aws: report all conflicting user tags at once [#8085](https://github.com/openshift/installer/pull/8085)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out - part 2 [#8070](https://github.com/openshift/installer/pull/8070)
* [SPLAT-1423](https://issues.redhat.com/browse/SPLAT-1423): Added static ip support to CAPI installer. [#8081](https://github.com/openshift/installer/pull/8081)
* [MULTIARCH-4159](https://issues.redhat.com/browse/MULTIARCH-4159): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8098](https://github.com/openshift/installer/pull/8098)
* [OCPBUGS-30058](https://issues.redhat.com/browse/OCPBUGS-30058): GCP: The CAPG bootstrap machine IP should be set according to the publish strategy [#8079](https://github.com/openshift/installer/pull/8079)
* [OCPBUGS-30057](https://issues.redhat.com/browse/OCPBUGS-30057): Don't auto create subnets for CAPG [#8083](https://github.com/openshift/installer/pull/8083)
* [MULTIARCH-4153](https://issues.redhat.com/browse/MULTIARCH-4153): Incorporating Eltorito Boot Loader fix for Agent [#8069](https://github.com/openshift/installer/pull/8069)
* no-jira: Missing permission from vsphere docs [#7789](https://github.com/openshift/installer/pull/7789)
* [OCPBUGS-30135](https://issues.redhat.com/browse/OCPBUGS-30135): fix "OpenShiftSDN deprecated" error message [#8092](https://github.com/openshift/installer/pull/8092)
* [CORS-3274](https://issues.redhat.com/browse/CORS-3274): GCP: add africa-south1 region to the survey as supported region [#8055](https://github.com/openshift/installer/pull/8055)
* [CORS-3251](https://issues.redhat.com/browse/CORS-3251): Create capz machine manifests [#7969](https://github.com/openshift/installer/pull/7969)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP CAPI Infra: auth with service account [#8077](https://github.com/openshift/installer/pull/8077)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Apply user defined tags on created gcp resources [#7279](https://github.com/openshift/installer/pull/7279)
* [AGENT-853](https://issues.redhat.com/browse/AGENT-853): Add ClusterInfo asset [#7997](https://github.com/openshift/installer/pull/7997)
* [SPLAT-1173](https://issues.redhat.com/browse/SPLAT-1173): Enhance vSphere Installer to use IPAddressClaims for static IP [#7501](https://github.com/openshift/installer/pull/7501)
* [CORS-3273](https://issues.redhat.com/browse/CORS-3273): capi system: don't log env vars [#8084](https://github.com/openshift/installer/pull/8084)
* [OCPBUGS-29860](https://issues.redhat.com/browse/OCPBUGS-29860): double looping of failuredomains breaks zonal [#8059](https://github.com/openshift/installer/pull/8059)
* no-jira: Remove v1alpha3 [#8061](https://github.com/openshift/installer/pull/8061)
* [OCPBUGS-30005](https://issues.redhat.com/browse/OCPBUGS-30005): remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 [#8072](https://github.com/openshift/installer/pull/8072)
* [OSASINFRA-3363](https://issues.redhat.com/browse/OSASINFRA-3363): ShiftStack CAPO integration [#7939](https://github.com/openshift/installer/pull/7939)
* [MULTIARCH-4158](https://issues.redhat.com/browse/MULTIARCH-4158): pkg/infrastructure/powervs: add initial CAPI provider [#8060](https://github.com/openshift/installer/pull/8060)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out [#8046](https://github.com/openshift/installer/pull/8046)
* [SPLAT-1459](https://issues.redhat.com/browse/SPLAT-1459): capv machines only full clone [#8042](https://github.com/openshift/installer/pull/8042)
* [OCPBUGS-29895](https://issues.redhat.com/browse/OCPBUGS-29895): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8058](https://github.com/openshift/installer/pull/8058)
* [SPLAT-1434](https://issues.redhat.com/browse/SPLAT-1434): aws: add support of BYO public ipv4 pool [#7983](https://github.com/openshift/installer/pull/7983)
* no-jira: images: libvirt: add oc to libvirt CI image [#8008](https://github.com/openshift/installer/pull/8008)
* [SPLAT-1465](https://issues.redhat.com/browse/SPLAT-1465): capv - add additional extra configs [#8054](https://github.com/openshift/installer/pull/8054)
* [SPLAT-1462](https://issues.redhat.com/browse/SPLAT-1462): capv - Remove unneeded auth env vars [#8053](https://github.com/openshift/installer/pull/8053)
* [OCPBUGS-29429](https://issues.redhat.com/browse/OCPBUGS-29429): feat: add check for SNO bootstrap condition [#8004](https://github.com/openshift/installer/pull/8004)
* Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer [#8028](https://github.com/openshift/installer/pull/8028)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP: Create DNS records and internal load balancer for CAPG Install [#8014](https://github.com/openshift/installer/pull/8014)
* [SPLAT-1198](https://issues.redhat.com/browse/SPLAT-1198): migrate vSphere installation to CAPV [#7962](https://github.com/openshift/installer/pull/7962)
* [OCPBUGS-29587](https://issues.redhat.com/browse/OCPBUGS-29587): Power VS: Fix service instance list [#8033](https://github.com/openshift/installer/pull/8033)
* [OCPBUGS-22410](https://issues.redhat.com/browse/OCPBUGS-22410): vsphere-fix convert if only provided name [#7931](https://github.com/openshift/installer/pull/7931)
* [OCPBUGS-29584](https://issues.redhat.com/browse/OCPBUGS-29584): PowerVS: handle composite_instance [#8029](https://github.com/openshift/installer/pull/8029)
* [OCPBUGS-29482](https://issues.redhat.com/browse/OCPBUGS-29482): Bump terraform-provider-ibm to v1.61.0 [#8023](https://github.com/openshift/installer/pull/8023)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): pkg/infrastructure/aws: add initial CAPI provider [#8012](https://github.com/openshift/installer/pull/8012)
* [CORS-3185](https://issues.redhat.com/browse/CORS-3185): update default release image [#7874](https://github.com/openshift/installer/pull/7874)
* [OCPBUGS-28590](https://issues.redhat.com/browse/OCPBUGS-28590): gcp: better error msg when service accnt missing [#8002](https://github.com/openshift/installer/pull/8002)
* [OCPBUGS-28203](https://issues.redhat.com/browse/OCPBUGS-28203): Power VS: Add sleep to allow workspace to configure PER [#7889](https://github.com/openshift/installer/pull/7889)
* [CORS-3220](https://issues.redhat.com/browse/CORS-3220): Initiate CAPG installation [#8011](https://github.com/openshift/installer/pull/8011)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Create the GCP cluster manifest [#7917](https://github.com/openshift/installer/pull/7917)
* [OCPBUGS-29441](https://issues.redhat.com/browse/OCPBUGS-29441): update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 [#8015](https://github.com/openshift/installer/pull/8015)
* [OCPBUGS-29425](https://issues.redhat.com/browse/OCPBUGS-29425): PowerVS Fix next start search [#8010](https://github.com/openshift/installer/pull/8010)
* Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation [#7998](https://github.com/openshift/installer/pull/7998)
* [SPLAT-1447](https://issues.redhat.com/browse/SPLAT-1447): Move MCO imports to API; update library-go, api [#8000](https://github.com/openshift/installer/pull/8000)
* NO-ISSUE: integrationt tests support for env vars substitution [#7992](https://github.com/openshift/installer/pull/7992)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7985](https://github.com/openshift/installer/pull/7985)
* [OCPBUGS-29068](https://issues.redhat.com/browse/OCPBUGS-29068): GCP: Skip validation of public and private zones for terraform vars [#7986](https://github.com/openshift/installer/pull/7986)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Copy GCP manifests within MCO bootstrap to the correct location [#7991](https://github.com/openshift/installer/pull/7991)
* [OCPBUGS-20085](https://issues.redhat.com/browse/OCPBUGS-20085): IBMCloud: Handle disk delete errors [#7515](https://github.com/openshift/installer/pull/7515)
* [OCPBUGS-28827](https://issues.redhat.com/browse/OCPBUGS-28827): do not rename boot.catalog for arm64 iso [#7972](https://github.com/openshift/installer/pull/7972)
* [OSASINFRA-3371](https://issues.redhat.com/browse/OSASINFRA-3371): Pass rhcosImage and manifests to the PreProvision hook [#7967](https://github.com/openshift/installer/pull/7967)
* [SPLAT-1387](https://issues.redhat.com/browse/SPLAT-1387): enable additional tags to be associated with vsphere machines [#7905](https://github.com/openshift/installer/pull/7905)
* [CORS-3242](https://issues.redhat.com/browse/CORS-3242): PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item [#7861](https://github.com/openshift/installer/pull/7861)
* [OPNET-357](https://issues.redhat.com/browse/OPNET-357): Populate network configuration at install-time [#7604](https://github.com/openshift/installer/pull/7604)
* [CORS-3240](https://issues.redhat.com/browse/CORS-3240): add OWNERS_ALIASES madhu-pillai [#7733](https://github.com/openshift/installer/pull/7733)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): Revert "bootkube.sh: Render kernel boot arguments for SNO" [#7979](https://github.com/openshift/installer/pull/7979)
* [CORS-3188](https://issues.redhat.com/browse/CORS-3188): Bump k8s deps [#7970](https://github.com/openshift/installer/pull/7970)
* [OCPBUGS-2135](https://issues.redhat.com/browse/OCPBUGS-2135): Include CAPG objects in uninstall filter [#7907](https://github.com/openshift/installer/pull/7907)
* [AGENT-848](https://issues.redhat.com/browse/AGENT-848): add node-joiner cli tool main [#7958](https://github.com/openshift/installer/pull/7958)
* [CORS-3207](https://issues.redhat.com/browse/CORS-3207): Generate GCP machine manifests for CAPI [#7944](https://github.com/openshift/installer/pull/7944)
* [OCPBUGS-24575](https://issues.redhat.com/browse/OCPBUGS-24575): ic: gcp: validate instance architecture [#7850](https://github.com/openshift/installer/pull/7850)
* [CORS-3196](https://issues.redhat.com/browse/CORS-3196): capg: add infrastructure components [#7968](https://github.com/openshift/installer/pull/7968)
* [CORS-3208](https://issues.redhat.com/browse/CORS-3208): Create the GCP infrastructure controller [#7940](https://github.com/openshift/installer/pull/7940)
* [OCPBUGS-27156](https://issues.redhat.com/browse/OCPBUGS-27156): GCP Destroy cleanup correct zones/records [#7932](https://github.com/openshift/installer/pull/7932)
* [OCPBUGS-27737](https://issues.redhat.com/browse/OCPBUGS-27737): aws-edge-zones preventing err before discovering [#7945](https://github.com/openshift/installer/pull/7945)
* [OCPBUGS-28708](https://issues.redhat.com/browse/OCPBUGS-28708): update tested Azure Arm64 instance type on 4.15 [#7965](https://github.com/openshift/installer/pull/7965)
* [OCPBUGS-28643](https://issues.redhat.com/browse/OCPBUGS-28643): PowerVS: Add dal12 region [#7956](https://github.com/openshift/installer/pull/7956)
* [OCPBUGS-27263](https://issues.redhat.com/browse/OCPBUGS-27263): Bump golang 1.21 [#7925](https://github.com/openshift/installer/pull/7925)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#7692](https://github.com/openshift/installer/pull/7692)
* [OCPBUGS-28705](https://issues.redhat.com/browse/OCPBUGS-28705): [azure] update tested x86 instance type on 4.15 [#7961](https://github.com/openshift/installer/pull/7961)
* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [OCPBUGS-27192](https://issues.redhat.com/browse/OCPBUGS-27192): remove retired serial NCv2 from azure tested instance type list on x86 [#7911](https://github.com/openshift/installer/pull/7911)
* no-jira: images/altinfra: allow CAPI ARG [#7891](https://github.com/openshift/installer/pull/7891)
* [OCPBUGS-25835](https://issues.redhat.com/browse/OCPBUGS-25835): Validate baremetal capability is set for baremetal platform [#7901](https://github.com/openshift/installer/pull/7901)
* no-jira: Add AWS m6a to tested instance types [#7851](https://github.com/openshift/installer/pull/7851)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Fix typo in CloudCredential validation [#7915](https://github.com/openshift/installer/pull/7915)
* [OCPBUGS-24303](https://issues.redhat.com/browse/OCPBUGS-24303): Check provided sha for agent ISO download [#7893](https://github.com/openshift/installer/pull/7893)
* [CORS-3203](https://issues.redhat.com/browse/CORS-3203): Fix `depreciated` typo [#7834](https://github.com/openshift/installer/pull/7834)
* [OCPBUGS-14257](https://issues.redhat.com/browse/OCPBUGS-14257): normalize ISO files extensions to three chars [#7896](https://github.com/openshift/installer/pull/7896)
* [OCPBUGS-26434](https://issues.redhat.com/browse/OCPBUGS-26434): Redact platform passwords in agent-gather output [#7873](https://github.com/openshift/installer/pull/7873)
* [OCPBUGS-27092](https://issues.redhat.com/browse/OCPBUGS-27092): baremetal: gather all recently refactored services [#7854](https://github.com/openshift/installer/pull/7854)
* [OCPBUGS-25996](https://issues.redhat.com/browse/OCPBUGS-25996): baremetal: correct external_http_url for v6-only BMCs [#7898](https://github.com/openshift/installer/pull/7898)
* [CORS-2950](https://issues.redhat.com/browse/CORS-2950): Remove openshift-sdn as an install-time option [#7720](https://github.com/openshift/installer/pull/7720)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Upgrade o/api to include extended network config [#7869](https://github.com/openshift/installer/pull/7869)
* [METAL-829](https://issues.redhat.com/browse/METAL-829): Set node cpu_arch from bmh [#7814](https://github.com/openshift/installer/pull/7814)
* [OCPBUGS-26399](https://issues.redhat.com/browse/OCPBUGS-26399): Support singular VIP in ACI for BareMetal [#7859](https://github.com/openshift/installer/pull/7859)
* [CORS-3190](https://issues.redhat.com/browse/CORS-3190): GCP: Add load balancer info to cluster infra [#7888](https://github.com/openshift/installer/pull/7888)
* [MULTIARCH-4072](https://issues.redhat.com/browse/MULTIARCH-4072): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7870](https://github.com/openshift/installer/pull/7870)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7884](https://github.com/openshift/installer/pull/7884)
* [OCPBUGS-25841](https://issues.redhat.com/browse/OCPBUGS-25841): preserve category name when trying to find tag category [#7876](https://github.com/openshift/installer/pull/7876)
* [ARO-4744](https://issues.redhat.com/browse/ARO-4744): Do not run platform validation on ARO [#7865](https://github.com/openshift/installer/pull/7865)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7875](https://github.com/openshift/installer/pull/7875)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): OpenStack: clarify root volume size requirements [#7698](https://github.com/openshift/installer/pull/7698)
* [OCPBUGS-26048](https://issues.redhat.com/browse/OCPBUGS-26048): Bump default channel to stable-4.16 [#7867](https://github.com/openshift/installer/pull/7867)
* [OCPBUGS-24862](https://issues.redhat.com/browse/OCPBUGS-24862): Updating ose-installer-altinfra-container image to be … [#7872](https://github.com/openshift/installer/pull/7872)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: allow clean shutdown of resources [#7864](https://github.com/openshift/installer/pull/7864)
* [OCPBUGS-24820](https://issues.redhat.com/browse/OCPBUGS-24820): Updating ose-baremetal-installer-container image to be consistent with ART [#7817](https://github.com/openshift/installer/pull/7817)
* [OCPBUGS-24814](https://issues.redhat.com/browse/OCPBUGS-24814): Updating ose-installer-container image to be consistent with ART [#7816](https://github.com/openshift/installer/pull/7816)
* [OCPBUGS-25600](https://issues.redhat.com/browse/OCPBUGS-25600): aws: validate instance arch [#7835](https://github.com/openshift/installer/pull/7835)
* [OCPBUGS-25440](https://issues.redhat.com/browse/OCPBUGS-25440): ic: aws: add iam:TagInstanceProfile permission requirement [#7843](https://github.com/openshift/installer/pull/7843)
* [OCPBUGS-25132](https://issues.redhat.com/browse/OCPBUGS-25132): Fixes for the OpensStack UPI playbooks. [#7833](https://github.com/openshift/installer/pull/7833)
* [OCPBUGS-24853](https://issues.redhat.com/browse/OCPBUGS-24853): Updating ose-installer-artifacts-container image to be consistent with ART [#7818](https://github.com/openshift/installer/pull/7818)
* [OCPBUGS-19054](https://issues.redhat.com/browse/OCPBUGS-19054): Warn that FeatureSet is not supported [#7825](https://github.com/openshift/installer/pull/7825)
* [CORS-2315](https://issues.redhat.com/browse/CORS-2315): GCP: Skip populating Private/Public Zones within DNS manifest [#7846](https://github.com/openshift/installer/pull/7846)
* no-jira: build: drop vsphereprivate build workaround [#7847](https://github.com/openshift/installer/pull/7847)
* [CORS-2870](https://issues.redhat.com/browse/CORS-2870): build: only rebuild terraform providers if needed [#7688](https://github.com/openshift/installer/pull/7688)
* [OCPBUGS-24473](https://issues.redhat.com/browse/OCPBUGS-24473): IBMCloud: Set IBM TF visibility based on URLs [#7805](https://github.com/openshift/installer/pull/7805)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): GCP: Update DNSType within GCP PlatformStatus based on `UserProvisionedDNS` [#7837](https://github.com/openshift/installer/pull/7837)
* [OCPBUGS-24241](https://issues.redhat.com/browse/OCPBUGS-24241): Pin openstack.cloud version. [#7821](https://github.com/openshift/installer/pull/7821)
* Revert "OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer" [#7651](https://github.com/openshift/installer/pull/7651)
* no-jira: Revert "Merge pull request #7823 from patrickdillon/build-capi-altinfra" [#7828](https://github.com/openshift/installer/pull/7828)
* [OCPBUGS-19303](https://issues.redhat.com/browse/OCPBUGS-19303): Changed OKD/FCOS workaround to also support Agent-based Installer [#7484](https://github.com/openshift/installer/pull/7484)
* [OCPBUGS-25191](https://issues.redhat.com/browse/OCPBUGS-25191): ic: azure: fix retrieving marketplace image [#7826](https://github.com/openshift/installer/pull/7826)
* [OCPBUGS-24995](https://issues.redhat.com/browse/OCPBUGS-24995): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7822](https://github.com/openshift/installer/pull/7822)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): images/altinfra: enable CAPI builds [#7823](https://github.com/openshift/installer/pull/7823)
* [CORS-3003](https://issues.redhat.com/browse/CORS-3003): [ibmcloud] add key-protect plugin in ibmcloud cli [#7811](https://github.com/openshift/installer/pull/7811)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Support installing OpenShift via Cluster API [#7807](https://github.com/openshift/installer/pull/7807)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Modify the terraform variables to support Nutanix Failure Domains [#7806](https://github.com/openshift/installer/pull/7806)
* [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Update MAPI for BYOK [#7812](https://github.com/openshift/installer/pull/7812)
* [METAL-803](https://issues.redhat.com/browse/METAL-803): Update vendoring for baremetal-operator [#7809](https://github.com/openshift/installer/pull/7809)
* no-jira: Fix base image reference [#7810](https://github.com/openshift/installer/pull/7810)
* [CORS-2952](https://issues.redhat.com/browse/CORS-2952): GCP Set "ClusterHostedDNS" in the Infra CR based on the value of userProvisionedDNS [#7796](https://github.com/openshift/installer/pull/7796)
* [CORS-2813](https://issues.redhat.com/browse/CORS-2813): Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap [#7662](https://github.com/openshift/installer/pull/7662)
* [OCPBUGS-23140](https://issues.redhat.com/browse/OCPBUGS-23140), [OCPBUGS-23305](https://issues.redhat.com/browse/OCPBUGS-23305): Soften VIP validations for external load-balancer [#7803](https://github.com/openshift/installer/pull/7803)
* [AGENT-739](https://issues.redhat.com/browse/AGENT-739): Support for install-config baremetal host BMC fields [#7645](https://github.com/openshift/installer/pull/7645)
* [AGENT-729](https://issues.redhat.com/browse/AGENT-729): Support generic platform name for external platform [#7585](https://github.com/openshift/installer/pull/7585)
* [MULTIARCH-4042](https://issues.redhat.com/browse/MULTIARCH-4042): Reuse existing Transit Gateway in target Workspace, or create anew [#7592](https://github.com/openshift/installer/pull/7592)
* [OCPBUGS-23473](https://issues.redhat.com/browse/OCPBUGS-23473): update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 [#7770](https://github.com/openshift/installer/pull/7770)
* [AGENT-615](https://issues.redhat.com/browse/AGENT-615): Split create-cluster-and-infraenv.service [#7364](https://github.com/openshift/installer/pull/7364)
* no-jira: image: infra-providers: use base image instead of builder [#7800](https://github.com/openshift/installer/pull/7800)
* no-jira: hack: drop hardcoded -j8 in make invocations. [#7799](https://github.com/openshift/installer/pull/7799)
* [OCPBUGS-23458](https://issues.redhat.com/browse/OCPBUGS-23458): force destroy bootstrap ign [#7791](https://github.com/openshift/installer/pull/7791)
* [OSASINFRA-3261](https://issues.redhat.com/browse/OSASINFRA-3261): OpenStack: support dualstack in UPI [#7727](https://github.com/openshift/installer/pull/7727)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678): Patch for Agent Based Installer to support s390x as supported architecture. [#7712](https://github.com/openshift/installer/pull/7712)
* [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): AWS BYO VPC support for Wavelength Zones [#7652](https://github.com/openshift/installer/pull/7652)
* [CORS-2525](https://issues.redhat.com/browse/CORS-2525): Azure: remove storage account with bootstrap destroy [#7642](https://github.com/openshift/installer/pull/7642)
* [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Set VIPs directly in api, instead of install-config override [#7574](https://github.com/openshift/installer/pull/7574)
* [OCPVE-648](https://issues.redhat.com/browse/OCPVE-648): gomod: bump api version with CloudCredential cap [#7466](https://github.com/openshift/installer/pull/7466)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: ensure proper cleanup on exit [#7693](https://github.com/openshift/installer/pull/7693)
* [OCPBUGS-9066](https://issues.redhat.com/browse/OCPBUGS-9066): Retry image download on failure [#7106](https://github.com/openshift/installer/pull/7106)
* NO-ISSUE: Remove dead code from 'networking' asset [#7798](https://github.com/openshift/installer/pull/7798)
* PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option [#7795](https://github.com/openshift/installer/pull/7795)
* [OCPBUGS-24191](https://issues.redhat.com/browse/OCPBUGS-24191): set vmType in azure cloud config [#7793](https://github.com/openshift/installer/pull/7793)
* no-jira: pkg/asset: safety nets to keep installer from crashing [#7792](https://github.com/openshift/installer/pull/7792)
* [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Add support for BYOK [#7738](https://github.com/openshift/installer/pull/7738)
* [OCPBUGS-23539](https://issues.redhat.com/browse/OCPBUGS-23539): Keep Machine manifests out of OpenShift Manifests asset [#7753](https://github.com/openshift/installer/pull/7753)
* [CORS-3020](https://issues.redhat.com/browse/CORS-3020): IBMCloud: Bump IBM TF provider [#7784](https://github.com/openshift/installer/pull/7784)
* [MIXEDARCH-310](https://issues.redhat.com/browse/MIXEDARCH-310): Enable the use of the multi payload for agent installer [#7595](https://github.com/openshift/installer/pull/7595)
* [CORS-2775](https://issues.redhat.com/browse/CORS-2775): ic: azure: remove deprecated `errors` package [#7778](https://github.com/openshift/installer/pull/7778)
* [SPLAT-1126](https://issues.redhat.com/browse/SPLAT-1126): aws/clusterNetworkMTU config to change the MTU for overlay network [#7765](https://github.com/openshift/installer/pull/7765)
* [CORS-2785](https://issues.redhat.com/browse/CORS-2785): images: decouple installer and installer-artifacts [#7782](https://github.com/openshift/installer/pull/7782)
* [MULTIARCH-3793](https://issues.redhat.com/browse/MULTIARCH-3793): Power VS: Add mad and wdc assupported region [#7773](https://github.com/openshift/installer/pull/7773)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Generate Cluster API Machine Manifests [#7771](https://github.com/openshift/installer/pull/7771)
* [CORS-2854](https://issues.redhat.com/browse/CORS-2854): azure: Allow users to set visibility to components [#7547](https://github.com/openshift/installer/pull/7547)
* [OCPBUGS-24008](https://issues.redhat.com/browse/OCPBUGS-24008): Remove sno_arm.txt integration test [#7718](https://github.com/openshift/installer/pull/7718)
* [OCPBUGS-23947](https://issues.redhat.com/browse/OCPBUGS-23947): set client options when interacting with azure api [#7768](https://github.com/openshift/installer/pull/7768)
* [CORS-2978](https://issues.redhat.com/browse/CORS-2978): enable AWS SDK Installation through feature gates [#7715](https://github.com/openshift/installer/pull/7715)
* [CORS-2798](https://issues.redhat.com/browse/CORS-2798): GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information [#7631](https://github.com/openshift/installer/pull/7631)
* [CORS-2845](https://issues.redhat.com/browse/CORS-2845): azure: Enable storage account encryption [#7520](https://github.com/openshift/installer/pull/7520)
* [SPLAT-1277](https://issues.redhat.com/browse/SPLAT-1277): unrevert PR 7418; implement vSphere control plane machinesets [#7780](https://github.com/openshift/installer/pull/7780)
* [OSASINFRA-3303](https://issues.redhat.com/browse/OSASINFRA-3303): OpenStack: remove generation of trunks name [#7772](https://github.com/openshift/installer/pull/7772)
* [AGENT-670](https://issues.redhat.com/browse/AGENT-670): Add assisted-db data to agent-gather [#7719](https://github.com/openshift/installer/pull/7719)
* [SPLAT-1160](https://issues.redhat.com/browse/SPLAT-1160): AWS - Support Wavelength Zones with edge pool [#7369](https://github.com/openshift/installer/pull/7369)
* Skip cluster config [#7666](https://github.com/openshift/installer/pull/7666)
* [OCPBUGS-24031](https://issues.redhat.com/browse/OCPBUGS-24031): Bump Fedora CoreOS to latest stable [#7779](https://github.com/openshift/installer/pull/7779)
* no-jira: destroy: azure: store session in the destroy object [#7777](https://github.com/openshift/installer/pull/7777)
* [CORS-2975](https://issues.redhat.com/browse/CORS-2975): Add support for il-central-1 in AWS [#7740](https://github.com/openshift/installer/pull/7740)
* [CORS-2428](https://issues.redhat.com/browse/CORS-2428): terraform: add build information to binaries [#7763](https://github.com/openshift/installer/pull/7763)
* [OCPBUGS-24026](https://issues.redhat.com/browse/OCPBUGS-24026): Add owner for user provided client CA bundle [#7749](https://github.com/openshift/installer/pull/7749)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Support Nutanix Failure Domains [#7730](https://github.com/openshift/installer/pull/7730)
* [CORS-2775](https://issues.redhat.com/browse/CORS-2775): destroy: azure: remove deprecated `errors` package [#7761](https://github.com/openshift/installer/pull/7761)
* no-jira: cmd/openshift-install: Remove "migrate" command [#7601](https://github.com/openshift/installer/pull/7601)
* no-jira: go.mod: remove unused terraform-providers-nutanix import [#7762](https://github.com/openshift/installer/pull/7762)
* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): pkg/infrastructure: remove ARO build tag [#7745](https://github.com/openshift/installer/pull/7745)
* [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): baremetal: populate customDeploy in advance [#7674](https://github.com/openshift/installer/pull/7674)
* [CORS-2933](https://issues.redhat.com/browse/CORS-2933): IBMCloud: Basic service endpoint override [#7632](https://github.com/openshift/installer/pull/7632)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce Cluster API Infrastructure manifest generation [#7672](https://github.com/openshift/installer/pull/7672)
* [OCPBUGS-22840](https://issues.redhat.com/browse/OCPBUGS-22840): ic/azure: validate field Plan when for marketplace images [#7721](https://github.com/openshift/installer/pull/7721)
* [CORS-2604](https://issues.redhat.com/browse/CORS-2604): tag user-provided azure vnet [#7611](https://github.com/openshift/installer/pull/7611)
* [MULTIARCH-3964](https://issues.redhat.com/browse/MULTIARCH-3964): Power VS: Control SMT level with machineconfig [#7704](https://github.com/openshift/installer/pull/7704)
* no-jira: destroy/azure: fix dropped negation from error comparison [#7758](https://github.com/openshift/installer/pull/7758)
* no-jira: destroy/azure: avoid cancelling main context [#7750](https://github.com/openshift/installer/pull/7750)
* [OCPCLOUD-2130](https://issues.redhat.com/browse/OCPCLOUD-2130): Fix Failuredomains check on manifests test [#7617](https://github.com/openshift/installer/pull/7617)
* [OSASINFRA-3295](https://issues.redhat.com/browse/OSASINFRA-3295): OpenStack: fix client used to list flavors [#7723](https://github.com/openshift/installer/pull/7723)
* [OSASINFRA-3294](https://issues.redhat.com/browse/OSASINFRA-3294): OpenStack: fix script to update bootstrap ignition shim [#7743](https://github.com/openshift/installer/pull/7743)
* no-jira: images: rename terraform- > infrastructure-providers [#7716](https://github.com/openshift/installer/pull/7716)
* [OCPBUGS-23376](https://issues.redhat.com/browse/OCPBUGS-23376): vSphere - when using RP network path is incorrect [#7737](https://github.com/openshift/installer/pull/7737)
* no-jira: Stop rendering networks.config CRD [#7732](https://github.com/openshift/installer/pull/7732)
* [OCPBUGS-22453](https://issues.redhat.com/browse/OCPBUGS-22453): Fixed systemd-resolved's split dns config in OKD/FCOS [#7634](https://github.com/openshift/installer/pull/7634)
* [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): upi/AWS: Templates to provision resources in Wavelength [#7722](https://github.com/openshift/installer/pull/7722)
* [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Support both VIP and VIPs in AgentClusterInstall [#7724](https://github.com/openshift/installer/pull/7724)
* [OSASINFRA-3229](https://issues.redhat.com/browse/OSASINFRA-3229): Remove support for Kuryr [#7675](https://github.com/openshift/installer/pull/7675)
* [CORS-2830](https://issues.redhat.com/browse/CORS-2830): Provision AWS Infrastructure with SDK [#7676](https://github.com/openshift/installer/pull/7676)
* [MULTIARCH-4009](https://issues.redhat.com/browse/MULTIARCH-4009): Prepare for varying SysTypes for new datacenters [#7717](https://github.com/openshift/installer/pull/7717)
* [MULTIARCH-3789](https://issues.redhat.com/browse/MULTIARCH-3789): Power VS: Remove cloud connection support [#7696](https://github.com/openshift/installer/pull/7696)
* [CORS-2876](https://issues.redhat.com/browse/CORS-2876): images/installer-altinfra: initial Dockerfile [#7711](https://github.com/openshift/installer/pull/7711)
* Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network [#7694](https://github.com/openshift/installer/pull/7694)
* [MULTIARCH-3965](https://issues.redhat.com/browse/MULTIARCH-3965): Check if PER is enabled in the target PowerVS workspace [#7683](https://github.com/openshift/installer/pull/7683)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): openstack: document etcd on local disk [#7664](https://github.com/openshift/installer/pull/7664)
* [OCPBUGS-23170](https://issues.redhat.com/browse/OCPBUGS-23170): Revert #7418 "SPLAT-1141: implement vSphere control plane machinesets" [#7708](https://github.com/openshift/installer/pull/7708)
* [MULTIARCH-2590](https://issues.redhat.com/browse/MULTIARCH-2590): PowerVS create service instance [#7695](https://github.com/openshift/installer/pull/7695)
* [SPLAT-1141](https://issues.redhat.com/browse/SPLAT-1141): implement vSphere control plane machinesets [#7418](https://github.com/openshift/installer/pull/7418)
* [CORS-2428](https://issues.redhat.com/browse/CORS-2428): images: add Dockerfile for a terraform-providers image [#7687](https://github.com/openshift/installer/pull/7687)
* [OSASINFRA-3237](https://issues.redhat.com/browse/OSASINFRA-3237): move controlPlanePort API to GA [#7570](https://github.com/openshift/installer/pull/7570)
* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): use build tags to produce installer with alternate infrastructure providers [#7656](https://github.com/openshift/installer/pull/7656)
* [CORS-2877](https://issues.redhat.com/browse/CORS-2877): Install Config Feature Gate Validation [#7413](https://github.com/openshift/installer/pull/7413)
* [OCPBUGS-22772](https://issues.redhat.com/browse/OCPBUGS-22772): return Terraform statefile on error [#7671](https://github.com/openshift/installer/pull/7671)
* NO-JIRA: destroy/aws: replaced deprecated sets syntax [#7680](https://github.com/openshift/installer/pull/7680)
* [OCPBUGS-19398](https://issues.redhat.com/browse/OCPBUGS-19398): IBMCloud: Add eu-es region [#7668](https://github.com/openshift/installer/pull/7668)
* [OCPBUGS-22830](https://issues.redhat.com/browse/OCPBUGS-22830): fix google cli verson to 447.0.0 [#7663](https://github.com/openshift/installer/pull/7663)
* [OCPBUGS-22113](https://issues.redhat.com/browse/OCPBUGS-22113): Do not generate azure-cloud-provider in manual mode for aro builds [#7608](https://github.com/openshift/installer/pull/7608)
* [OCPBUGS-22757](https://issues.redhat.com/browse/OCPBUGS-22757): update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 [#7654](https://github.com/openshift/installer/pull/7654)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce pkg/clusterapi, system, and local control plane [#7630](https://github.com/openshift/installer/pull/7630)
* [OCPBUGS-20403](https://issues.redhat.com/browse/OCPBUGS-20403): OpenStack: add SG rules for compact clusters on UPI [#7576](https://github.com/openshift/installer/pull/7576)
* [OCPBUGS-17866](https://issues.redhat.com/browse/OCPBUGS-17866): check GOOGLE_APPLICATION_CREDENTIALS env var [#6863](https://github.com/openshift/installer/pull/6863)
* [OCPBUGS-22773](https://issues.redhat.com/browse/OCPBUGS-22773): PowerVS: fix removeFromLoadBalancers [#7653](https://github.com/openshift/installer/pull/7653)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7650](https://github.com/openshift/installer/pull/7650)
* Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap [#7638](https://github.com/openshift/installer/pull/7638)
* [OCPBUGS-18387](https://issues.redhat.com/browse/OCPBUGS-18387): Add Azure ConfidentialVM capability and DiskEncryptionSet validations [#7469](https://github.com/openshift/installer/pull/7469)
* [OCPBUGS-22489](https://issues.redhat.com/browse/OCPBUGS-22489): destroy: gcp: fix destroying regional disks [#7643](https://github.com/openshift/installer/pull/7643)
* [OCPBUGS-22058](https://issues.redhat.com/browse/OCPBUGS-22058): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7590](https://github.com/openshift/installer/pull/7590)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Skip the deletion of instance profiles marked shared [#7537](https://github.com/openshift/installer/pull/7537)
* hack/go-lint: update golanci-lint to v1.53.1 [#7635](https://github.com/openshift/installer/pull/7635)
* [OCPBUGS-22655](https://issues.redhat.com/browse/OCPBUGS-22655): Bump Fedora CoreOS to latest stable [#7644](https://github.com/openshift/installer/pull/7644)
* bootkube.sh: drop final mention of `machine-os-content` [#7636](https://github.com/openshift/installer/pull/7636)
* update tested x86 instance type on 4.14 [#7639](https://github.com/openshift/installer/pull/7639)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Skip gatewayd units only on OKD agent-installer [#7629](https://github.com/openshift/installer/pull/7629)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Build and package Cluster API and providers [#7620](https://github.com/openshift/installer/pull/7620)
* [AGENT-713](https://issues.redhat.com/browse/AGENT-713): Use BM hosts in install-config if not defined in agent-config [#7531](https://github.com/openshift/installer/pull/7531)
* [MIXEDARCH-353](https://issues.redhat.com/browse/MIXEDARCH-353): Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage's manifest-list image [#7567](https://github.com/openshift/installer/pull/7567)
* openstack: dual stack UPI - create security group rules for IPv6 [#7552](https://github.com/openshift/installer/pull/7552)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): bump openshift/api [#7613](https://github.com/openshift/installer/pull/7613)
* [AGENT-718](https://issues.redhat.com/browse/AGENT-718): Add vSphere credentials to install-config overrides [#7593](https://github.com/openshift/installer/pull/7593)
* Revert #7428 "OCPBUGS-13664: Add KMS encryption keys if provided" [#7625](https://github.com/openshift/installer/pull/7625)
* [OCPBUGS-10906](https://issues.redhat.com/browse/OCPBUGS-10906): check extracted base iso coreos version is in sync [#7030](https://github.com/openshift/installer/pull/7030)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Enable gatewayd units only on RHCOS [#7580](https://github.com/openshift/installer/pull/7580)
* [OCPBUGS-21720](https://issues.redhat.com/browse/OCPBUGS-21720): images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 [#6813](https://github.com/openshift/installer/pull/6813)
* [CORS-2836](https://issues.redhat.com/browse/CORS-2836): Refactor Stages, encapsulate terraform [#7488](https://github.com/openshift/installer/pull/7488)
* [OCPBUGS-20356](https://issues.redhat.com/browse/OCPBUGS-20356): update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 [#7616](https://github.com/openshift/installer/pull/7616)
* [OCPBUGS-20364](https://issues.redhat.com/browse/OCPBUGS-20364): azure: validation: validate defaultMachinePlatform [#7584](https://github.com/openshift/installer/pull/7584)
* [OCPBUGS-20525](https://issues.redhat.com/browse/OCPBUGS-20525): aws: use security groups from defaultMachinePlatform [#7589](https://github.com/openshift/installer/pull/7589)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7428](https://github.com/openshift/installer/pull/7428)
* [OCPBUGS-5471](https://issues.redhat.com/browse/OCPBUGS-5471): Try to select rendezvousIP among non-worker hosts [#7443](https://github.com/openshift/installer/pull/7443)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Rectify GCP label key validation check [#7596](https://github.com/openshift/installer/pull/7596)
* Revert skipping integration test agent sno arm [#7561](https://github.com/openshift/installer/pull/7561)
* [OCPBUGS-20350](https://issues.redhat.com/browse/OCPBUGS-20350): vSphere,segfault on version check [#7575](https://github.com/openshift/installer/pull/7575)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093): skip agent-tui on OCI [#7512](https://github.com/openshift/installer/pull/7512)
* [OCPVE-675](https://issues.redhat.com/browse/OCPVE-675): feat: bump api to add OLM capability [#7495](https://github.com/openshift/installer/pull/7495)
* Enforcing the serial execution of the integration tests [#7591](https://github.com/openshift/installer/pull/7591)
* images: Cleanup CI Dockerfiles [#7507](https://github.com/openshift/installer/pull/7507)
* [OCPBUGS-20440](https://issues.redhat.com/browse/OCPBUGS-20440): Warn about host and target compatibility [#7582](https://github.com/openshift/installer/pull/7582)
* [OCPBUGS-19444](https://issues.redhat.com/browse/OCPBUGS-19444): Use changes to AgentClusterInstall during loading [#7506](https://github.com/openshift/installer/pull/7506)
* OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules [#7577](https://github.com/openshift/installer/pull/7577)
* Remove unused method [#7438](https://github.com/openshift/installer/pull/7438)
* PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality [#7564](https://github.com/openshift/installer/pull/7564)
* [OCPBUGS-19552](https://issues.redhat.com/browse/OCPBUGS-19552): Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved [#7516](https://github.com/openshift/installer/pull/7516)
* docs: Described process of adding vGPU capable nodes. [#6606](https://github.com/openshift/installer/pull/6606)
* [OCPBUGS-19086](https://issues.redhat.com/browse/OCPBUGS-19086): Check if nmstatectl executable exists in the system [#7492](https://github.com/openshift/installer/pull/7492)
* [OCPBUGS-16666](https://issues.redhat.com/browse/OCPBUGS-16666): Change where AdditionalTrustBundle is set [#7485](https://github.com/openshift/installer/pull/7485)
* [OCPBUGS-18455](https://issues.redhat.com/browse/OCPBUGS-18455): Unable to disable external CCM for platform external [#7533](https://github.com/openshift/installer/pull/7533)
* [OCPBUGS-18552](https://issues.redhat.com/browse/OCPBUGS-18552): Truncate vlan names defined in nmstate if > 15 chars [#7486](https://github.com/openshift/installer/pull/7486)
* OpenStack: enable IPv6 primary dual-stack cluster [#7259](https://github.com/openshift/installer/pull/7259)
* [OCPBUGS-20110](https://issues.redhat.com/browse/OCPBUGS-20110): Add an unit test - at least one interface must be defined for each node [#7555](https://github.com/openshift/installer/pull/7555)
* [OSASINFRA-3199](https://issues.redhat.com/browse/OSASINFRA-3199): Configure User-Agent for OpenStack API calls [#7548](https://github.com/openshift/installer/pull/7548)
* [OCPBUGS-17757](https://issues.redhat.com/browse/OCPBUGS-17757): check credentials type to handle different gcp authentication methods [#7422](https://github.com/openshift/installer/pull/7422)
* Docs: Fix openstack command for image update in upi installation [#7556](https://github.com/openshift/installer/pull/7556)
* PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions [#7563](https://github.com/openshift/installer/pull/7563)
* PowerVS: Remove deprecated errors package [#7544](https://github.com/openshift/installer/pull/7544)
* Disable pxe sno arm integration test [#7557](https://github.com/openshift/installer/pull/7557)
* Inefficient wait for all clusteroperators [#7535](https://github.com/openshift/installer/pull/7535)
* [OCPBUGS-15844](https://issues.redhat.com/browse/OCPBUGS-15844): Enable FIPS in agent ISO [#7540](https://github.com/openshift/installer/pull/7540)
* [OCPBUGS-20058](https://issues.redhat.com/browse/OCPBUGS-20058): Use updated ansible-core for Openstack image [#7549](https://github.com/openshift/installer/pull/7549)
* OWNERS: Remove obsolete agent reviewers [#7545](https://github.com/openshift/installer/pull/7545)
* [OCPBUGS-5728](https://issues.redhat.com/browse/OCPBUGS-5728): Log "agent wait-for" commands to .openshift_install.log [#7452](https://github.com/openshift/installer/pull/7452)
* [OCPBUGS-19092](https://issues.redhat.com/browse/OCPBUGS-19092): Enable serial console for external OCI platform [#7511](https://github.com/openshift/installer/pull/7511)
* [OCPBUGS-18690](https://issues.redhat.com/browse/OCPBUGS-18690): ic: azure: validate NVMe-only family types [#7500](https://github.com/openshift/installer/pull/7500)
* [CORS-2479](https://issues.redhat.com/browse/CORS-2479): agent: Ensure registries.conf is world readable [#6745](https://github.com/openshift/installer/pull/6745)
* add jbtrystram to coreOS approvers and reviewers [#7464](https://github.com/openshift/installer/pull/7464)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093), [OCPBUGS-19688](https://issues.redhat.com/browse/OCPBUGS-19688): Allow agent-tui to use serial console [#7526](https://github.com/openshift/installer/pull/7526)
* Tweaks to validateRendezvousIPNotWorker [#7437](https://github.com/openshift/installer/pull/7437)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Tag aws instance profiles. [#7510](https://github.com/openshift/installer/pull/7510)
* [OCPBUGS-19376](https://issues.redhat.com/browse/OCPBUGS-19376): GCP default value for service account [#7519](https://github.com/openshift/installer/pull/7519)
* [MULTIARCH-3701](https://issues.redhat.com/browse/MULTIARCH-3701): Enable ppc64le for agent installer [#7366](https://github.com/openshift/installer/pull/7366)
* pkg/asset/installconfig/powervs: fix dropped error [#7419](https://github.com/openshift/installer/pull/7419)
* [OCPBUGS-19699](https://issues.redhat.com/browse/OCPBUGS-19699): Remove warning about CPUPartitioning [#7527](https://github.com/openshift/installer/pull/7527)
* [OCPBUGS-18187](https://issues.redhat.com/browse/OCPBUGS-18187): Increase bootstrap timeout for vSphere platform by 30 mins [#7518](https://github.com/openshift/installer/pull/7518)
* [OCPBUGS-18830](https://issues.redhat.com/browse/OCPBUGS-18830): AWS terraform bootstrap destroy will not refresh state [#7491](https://github.com/openshift/installer/pull/7491)
* [OCPBUGS-12707](https://issues.redhat.com/browse/OCPBUGS-12707): always write AWS cloud.conf [#7514](https://github.com/openshift/installer/pull/7514)
* [AGENT-710](https://issues.redhat.com/browse/AGENT-710): Use invoker for bootstrap template generation [#7508](https://github.com/openshift/installer/pull/7508)
* [OCPBUGS-18876](https://issues.redhat.com/browse/OCPBUGS-18876): Pass CPUPartitioning via install-config overrides if set [#7513](https://github.com/openshift/installer/pull/7513)
* OpenStack: fix IPv6 docs [#7482](https://github.com/openshift/installer/pull/7482)
* [OCPBUGS-18945](https://issues.redhat.com/browse/OCPBUGS-18945): update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 [#7499](https://github.com/openshift/installer/pull/7499)
* LICENSE: Update [#7502](https://github.com/openshift/installer/pull/7502)
* [OCPBUGS-19286](https://issues.redhat.com/browse/OCPBUGS-19286): Updating ose-installer-artifacts images to be consistent with ART [#7496](https://github.com/openshift/installer/pull/7496)
* [SPLAT-1170](https://issues.redhat.com/browse/SPLAT-1170): enable cloud controller manager type to be defined [#7457](https://github.com/openshift/installer/pull/7457)
* OpenStack: Set external network for cloud-provider [#7411](https://github.com/openshift/installer/pull/7411)
* [OCPBUGS-17724](https://issues.redhat.com/browse/OCPBUGS-17724): Graceful fail for AWS getUser on destroy [#7429](https://github.com/openshift/installer/pull/7429)
* AGENT: publish services diagrams [#7323](https://github.com/openshift/installer/pull/7323)
* [OCPBUGS-19149](https://issues.redhat.com/browse/OCPBUGS-19149): Updating ose-baremetal-installer images to be consistent with ART [#7494](https://github.com/openshift/installer/pull/7494)
* [OCPBUGS-19130](https://issues.redhat.com/browse/OCPBUGS-19130): Updating ose-installer images to be consistent with ART [#7493](https://github.com/openshift/installer/pull/7493)
* [OCPBUGS-17218](https://issues.redhat.com/browse/OCPBUGS-17218): Warn when firewall rull missing. [#7417](https://github.com/openshift/installer/pull/7417)
* [OSASINFRA-3236](https://issues.redhat.com/browse/OSASINFRA-3236): deps: Bump gophercloud to v1.6.0 [#7208](https://github.com/openshift/installer/pull/7208)
* [OCPBUGS-19037](https://issues.redhat.com/browse/OCPBUGS-19037): Handle agent tui failure gracefully [#7490](https://github.com/openshift/installer/pull/7490)
* [OCPBUGS-19017](https://issues.redhat.com/browse/OCPBUGS-19017): Add Net capabilities to dnsmasq container [#7487](https://github.com/openshift/installer/pull/7487)
* [OCPBUGS-18113](https://issues.redhat.com/browse/OCPBUGS-18113): Do not set FailureDomains on CPMS when in a single zone Azure region [#7448](https://github.com/openshift/installer/pull/7448)
* [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7450](https://github.com/openshift/installer/pull/7450)
* [OCPBUGS-18304](https://issues.redhat.com/browse/OCPBUGS-18304): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7451](https://github.com/openshift/installer/pull/7451)
* Implement workaround to allow SNO installations for OKD/FCOS [#7445](https://github.com/openshift/installer/pull/7445)
* [Full changelog](https://github.com/openshift/installer/compare/fe4be6ab96e52d53504f16ba838f08850d12681f...363f5bec8a60f287d6edbe9d9234c9594f0dd17f)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/11ba601fbca58557176fcc67ffe8d7d64b697a4a)
* [OCPBUGS-30477](https://issues.redhat.com/browse/OCPBUGS-30477): Bump golang-protobuf version [#213](https://github.com/openshift/cluster-api-provider-baremetal/pull/213)
* [OCPBUGS-28835](https://issues.redhat.com/browse/OCPBUGS-28835): Extend metal3remediation aggregation role [#209](https://github.com/openshift/cluster-api-provider-baremetal/pull/209)
* [OCPBUGS-25561](https://issues.redhat.com/browse/OCPBUGS-25561): Updating baremetal-machine-controller-container image to be consistent with ART [#208](https://github.com/openshift/cluster-api-provider-baremetal/pull/208)
* [OCPBUGS-25159](https://issues.redhat.com/browse/OCPBUGS-25159): Updating baremetal-machine-controller-container image to be consistent with ART [#207](https://github.com/openshift/cluster-api-provider-baremetal/pull/207)
* [OCPBUGS-24919](https://issues.redhat.com/browse/OCPBUGS-24919): Updating baremetal-machine-controller-container image to be consistent with ART [#206](https://github.com/openshift/cluster-api-provider-baremetal/pull/206)
* [OCPBUGS-24108](https://issues.redhat.com/browse/OCPBUGS-24108): Updating baremetal-machine-controller-container image to be consistent with ART [#205](https://github.com/openshift/cluster-api-provider-baremetal/pull/205)
* NO-ISSUE: Log when applying updates to BareMetalHost [#203](https://github.com/openshift/cluster-api-provider-baremetal/pull/203)
* [OCPBUGS-21794](https://issues.redhat.com/browse/OCPBUGS-21794): Uplift x/net to v0.17.0 [#197](https://github.com/openshift/cluster-api-provider-baremetal/pull/197)
* [OCPBUGS-19178](https://issues.redhat.com/browse/OCPBUGS-19178): Updating baremetal-machine-controller images to be consistent with ART [#196](https://github.com/openshift/cluster-api-provider-baremetal/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb20cdac93ab9647e9c9cabafb45c7811789b477...11ba601fbca58557176fcc67ffe8d7d64b697a4a)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7673d14fc567c3621e8d5fdca69ff03bd99504ef)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Merge upstream [#354](https://github.com/openshift/baremetal-operator/pull/354)
* NO-ISSUE: Revert "downstream-only: Disable webhooks" [#335](https://github.com/openshift/baremetal-operator/pull/335)
* [OCPBUGS-33048](https://issues.redhat.com/browse/OCPBUGS-33048): PreprovisioningImage should not be created on poweroff [#349](https://github.com/openshift/baremetal-operator/pull/349)
* NO-ISSUE: Sync upstream April 29 [#348](https://github.com/openshift/baremetal-operator/pull/348)
* NO-ISSUE: Merge upstream [#347](https://github.com/openshift/baremetal-operator/pull/347)
* NO-ISSUE: Sync with upstream [#344](https://github.com/openshift/baremetal-operator/pull/344)
* NO-ISSUE: Merge upstream [#340](https://github.com/openshift/baremetal-operator/pull/340)
* NO-ISSUE: Update OWNERS [#339](https://github.com/openshift/baremetal-operator/pull/339)
* [METAL-866](https://issues.redhat.com/browse/METAL-866): Merge upstream [#336](https://github.com/openshift/baremetal-operator/pull/336)
* NO-ISSUE: Merge upstream (2024.02.02) [#330](https://github.com/openshift/baremetal-operator/pull/330)
* [OCPBUGS-27825](https://issues.redhat.com/browse/OCPBUGS-27825): Merge upstream [#329](https://github.com/openshift/baremetal-operator/pull/329)
* [OCPBUGS-25567](https://issues.redhat.com/browse/OCPBUGS-25567): Updating ose-baremetal-operator-container image to be consistent with ART [#328](https://github.com/openshift/baremetal-operator/pull/328)
* [OCPBUGS-24935](https://issues.redhat.com/browse/OCPBUGS-24935): Updating ose-baremetal-operator-container image to be consistent with ART [#327](https://github.com/openshift/baremetal-operator/pull/327)
* [OCPBUGS-24117](https://issues.redhat.com/browse/OCPBUGS-24117): Updating ose-baremetal-operator-container image to be consistent with ART [#323](https://github.com/openshift/baremetal-operator/pull/323)
* [METAL-376](https://issues.redhat.com/browse/METAL-376): Merge upstream [#322](https://github.com/openshift/baremetal-operator/pull/322)
* [METAL-376](https://issues.redhat.com/browse/METAL-376): Re-enable RAID interfaces [#319](https://github.com/openshift/baremetal-operator/pull/319)
* [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): Do not update instance_info and deploy_interface for active nodes [#316](https://github.com/openshift/baremetal-operator/pull/316)
* [OCPBUGS-8764](https://issues.redhat.com/browse/OCPBUGS-8764): Merge upstream [#315](https://github.com/openshift/baremetal-operator/pull/315)
* Merge upstream [#314](https://github.com/openshift/baremetal-operator/pull/314)
* [OCPBUGS-21736](https://issues.redhat.com/browse/OCPBUGS-21736): Uplift x/net to v0.17.0 [#313](https://github.com/openshift/baremetal-operator/pull/313)
* Merge upstream [#303](https://github.com/openshift/baremetal-operator/pull/303)
* [OCPBUGS-19191](https://issues.redhat.com/browse/OCPBUGS-19191): Updating ose-baremetal-operator images to be consistent with ART [#302](https://github.com/openshift/baremetal-operator/pull/302)
* Merge upstream [#301](https://github.com/openshift/baremetal-operator/pull/301)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/887153049f16c81c85735998b78d23b56fbe0222...7673d14fc567c3621e8d5fdca69ff03bd99504ef)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/91e3cb724f9d14cf40f66d059cdac1578193cac0)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix generation of DNSUpstreams on cloud platforms [#308](https://github.com/openshift/baremetal-runtimecfg/pull/308)
* NO-ISSUE: Fix wrong golang version, bump to 1.21 [#311](https://github.com/openshift/baremetal-runtimecfg/pull/311)
* Revert "OCPBUGS-32348: Make log level configurable" [#310](https://github.com/openshift/baremetal-runtimecfg/pull/310)
* [OCPBUGS-32348](https://issues.redhat.com/browse/OCPBUGS-32348): Make log level configurable [#305](https://github.com/openshift/baremetal-runtimecfg/pull/305)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Do not add VRRP config to Node on Cloud Platforms [#303](https://github.com/openshift/baremetal-runtimecfg/pull/303)
* [OCPBUGS-29931](https://issues.redhat.com/browse/OCPBUGS-29931): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 [#300](https://github.com/openshift/baremetal-runtimecfg/pull/300)
* [OCPBUGS-29919](https://issues.redhat.com/browse/OCPBUGS-29919): Decrease log level when detecting node IP [#301](https://github.com/openshift/baremetal-runtimecfg/pull/301)
* [OCPBUGS-29095](https://issues.redhat.com/browse/OCPBUGS-29095): Ignore egress IP when selecting Node IP [#298](https://github.com/openshift/baremetal-runtimecfg/pull/298)
* [OCPBUGS-24865](https://issues.redhat.com/browse/OCPBUGS-24865): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#291](https://github.com/openshift/baremetal-runtimecfg/pull/291)
* NO-ISSUE: Upgrade k8s api and client-go deps [#297](https://github.com/openshift/baremetal-runtimecfg/pull/297)
* [OCPBUGS-26765](https://issues.redhat.com/browse/OCPBUGS-26765): Add .snyk file to ignore vendor and test files [#292](https://github.com/openshift/baremetal-runtimecfg/pull/292)
* [CORS-2818](https://issues.redhat.com/browse/CORS-2818): Adding ability to render Cloud LB IPs [#286](https://github.com/openshift/baremetal-runtimecfg/pull/286)
* [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#287](https://github.com/openshift/baremetal-runtimecfg/pull/287)
* [OCPBUGS-22204](https://issues.redhat.com/browse/OCPBUGS-22204): deps: upgrade x/sys [#280](https://github.com/openshift/baremetal-runtimecfg/pull/280)
* [OCPBUGS-19492](https://issues.redhat.com/browse/OCPBUGS-19492): Increase timeout for bootstrap kubeapi [#276](https://github.com/openshift/baremetal-runtimecfg/pull/276)
* [OCPBUGS-19098](https://issues.redhat.com/browse/OCPBUGS-19098): Updating baremetal-runtimecfg images to be consistent with ART [#274](https://github.com/openshift/baremetal-runtimecfg/pull/274)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/393a268d0ae6e8cacc75d0b60b91bf6105fb9360...91e3cb724f9d14cf40f66d059cdac1578193cac0)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
* [OCPBUGS-34886](https://issues.redhat.com/browse/OCPBUGS-34886): Hardcode resource groups/kinds for now [#1796](https://github.com/openshift/oc/pull/1796)
* [OCPBUGS-33917](https://issues.redhat.com/browse/OCPBUGS-33917): add alert data to upgrade health in oc adm upgrade status [#1794](https://github.com/openshift/oc/pull/1794)
* [OCPBUGS-33975](https://issues.redhat.com/browse/OCPBUGS-33975): pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK [#1776](https://github.com/openshift/oc/pull/1776)
* [OCPBUGS-34406](https://issues.redhat.com/browse/OCPBUGS-34406): Simplify output when not updating [#1781](https://github.com/openshift/oc/pull/1781)
* [OCPBUGS-33918](https://issues.redhat.com/browse/OCPBUGS-33918): `adm update status`: Show information about the upgrade target version [#1772](https://github.com/openshift/oc/pull/1772)
* [OCPBUGS-33916](https://issues.redhat.com/browse/OCPBUGS-33916): Add s390x based oc into extraction target [#1770](https://github.com/openshift/oc/pull/1770)
* [OCPNODE-2281](https://issues.redhat.com/browse/OCPNODE-2281): Support multiple icsps in migrate icsp [#1751](https://github.com/openshift/oc/pull/1751)
* [OCPNODE-2282](https://issues.redhat.com/browse/OCPNODE-2282): Support multiple ImageDigestMirrorSet objects in the th… [#1756](https://github.com/openshift/oc/pull/1756)
* [OTA-1275](https://issues.redhat.com/browse/OTA-1275): cli/admin/release/git: use optimized git flags [#1754](https://github.com/openshift/oc/pull/1754)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Switch cli image to RHEL9 base image [#1752](https://github.com/openshift/oc/pull/1752)
* [OTA-1154](https://issues.redhat.com/browse/OTA-1154): pkg/cli/admin/upgrade/status: Drop free-form Progressing output line [#1753](https://github.com/openshift/oc/pull/1753)
* [OTA-1279](https://issues.redhat.com/browse/OTA-1279): pkg/cli/admin/upgrade/status: Move Failing from free-form to updateInsight [#1744](https://github.com/openshift/oc/pull/1744)
* [OCPBUGS-32841](https://issues.redhat.com/browse/OCPBUGS-32841): Bump go-jose indirect reference to 2.6.3 [#1747](https://github.com/openshift/oc/pull/1747)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `update status`: unify on `--details` [#1748](https://github.com/openshift/oc/pull/1748)
* [OCPBUGS-32786](https://issues.redhat.com/browse/OCPBUGS-32786): Improve error message when binary is not in target list [#1746](https://github.com/openshift/oc/pull/1746)
* [OCPBUGS-32080](https://issues.redhat.com/browse/OCPBUGS-32080): release: extract ccoctl.rhel8 and ccoctl.rhel9 [#1734](https://github.com/openshift/oc/pull/1734)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Show resources in `--details=health` [#1737](https://github.com/openshift/oc/pull/1737)
* [OTA-1155](https://issues.redhat.com/browse/OTA-1155): `update status`: Simplify CO status line [#1741](https://github.com/openshift/oc/pull/1741)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1652](https://github.com/openshift/oc/pull/1652)
* NO-JIRA: Print an error msg instead of panicking when all image manifests are filtered out [#1729](https://github.com/openshift/oc/pull/1729)
* [WRKLDS-1190](https://issues.redhat.com/browse/WRKLDS-1190): oc adm must-gather: print timestamp when logging in fallback mode [#1738](https://github.com/openshift/oc/pull/1738)
* [OTA-1202](https://issues.redhat.com/browse/OTA-1202): Changing the conditional risk to known issues [#1739](https://github.com/openshift/oc/pull/1739)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Expand health insights with `--detailed=health` [#1736](https://github.com/openshift/oc/pull/1736)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: add `--detailed=nodes` that shows all nodes [#1735](https://github.com/openshift/oc/pull/1735)
* [MCO-1056](https://issues.redhat.com/browse/MCO-1056): MCO-1057: Implement oc adm prune machineconfigs command [#1723](https://github.com/openshift/oc/pull/1723)
* NO-JIRA: Report tests for feature [#1728](https://github.com/openshift/oc/pull/1728)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm update status`: Refactor node status [#1732](https://github.com/openshift/oc/pull/1732)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm upgrade status`: Add control plane nodes status [#1731](https://github.com/openshift/oc/pull/1731)
* [OCPBUGS-31498](https://issues.redhat.com/browse/OCPBUGS-31498): Add OIDC specific certificate authority bundle flag [#1720](https://github.com/openshift/oc/pull/1720)
* [WRKLDS-1171](https://issues.redhat.com/browse/WRKLDS-1171): Add openshift-install-fips target to oc release extract [#1725](https://github.com/openshift/oc/pull/1725)
* [OCPBUGS-31615](https://issues.redhat.com/browse/OCPBUGS-31615): Add help text the behavior of filter-by-os against single image [#1721](https://github.com/openshift/oc/pull/1721)
* make output table slightly easier to read [#1719](https://github.com/openshift/oc/pull/1719)
* NO-JIRA: update featuregate diff for clusterprofiles [#1714](https://github.com/openshift/oc/pull/1714)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): revert cli/admin/release/git: use optimized git flags [#1718](https://github.com/openshift/oc/pull/1718)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Remove some of newapp unit tests relying on external deprecated images [#1717](https://github.com/openshift/oc/pull/1717)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): cli/admin/release/git: use optimized git flags [#1708](https://github.com/openshift/oc/pull/1708)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Remove redundant endpoint resource modification [#1692](https://github.com/openshift/oc/pull/1692)
* [OCPBUGS-30703](https://issues.redhat.com/browse/OCPBUGS-30703): Bump coreos/go-oidc to 3.10.0 [#1713](https://github.com/openshift/oc/pull/1713)
* [WRKLDS-1103](https://issues.redhat.com/browse/WRKLDS-1103): tools: extend the image with sosreport [#1704](https://github.com/openshift/oc/pull/1704)
* [OTA-1165](https://issues.redhat.com/browse/OTA-1165): `adm upgrade status`: Add Worker Node Status [#1689](https://github.com/openshift/oc/pull/1689)
* [OCPBUGS-29623](https://issues.redhat.com/browse/OCPBUGS-29623): Introduce certificate-authority flag for image related commands [#1693](https://github.com/openshift/oc/pull/1693)
* [OCPBUGS-30212](https://issues.redhat.com/browse/OCPBUGS-30212): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1680](https://github.com/openshift/oc/pull/1680)
* [OCPBUGS-30244](https://issues.redhat.com/browse/OCPBUGS-30244): Add images mismatching kubectl version into warning to track [#1695](https://github.com/openshift/oc/pull/1695)
* [OCPBUGS-30162](https://issues.redhat.com/browse/OCPBUGS-30162): Introduce --issuer-url flag in oc login [#1694](https://github.com/openshift/oc/pull/1694)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1684](https://github.com/openshift/oc/pull/1684)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Extract oc also for linux/ppc64le [#1691](https://github.com/openshift/oc/pull/1691)
* [OTA-1080](https://issues.redhat.com/browse/OTA-1080): pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand [#1674](https://github.com/openshift/oc/pull/1674)
* [OCPBUGS-29210](https://issues.redhat.com/browse/OCPBUGS-29210): Update some commands incorrect examples [#1686](https://github.com/openshift/oc/pull/1686)
* NO-JIRA: Print log rather than returning an error when kubectl version mistmaches [#1685](https://github.com/openshift/oc/pull/1685)
* Do not force the ancient OS version dist tag. [#1536](https://github.com/openshift/oc/pull/1536)
* [TRT-1503](https://issues.redhat.com/browse/TRT-1503): Tools image no longer has python;adding [#1682](https://github.com/openshift/oc/pull/1682)
* Revert "NO-JIRA: Bump k8s dependencies to 1.29.1" [#1683](https://github.com/openshift/oc/pull/1683)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1681](https://github.com/openshift/oc/pull/1681)
* [OCPBUGS-29039](https://issues.redhat.com/browse/OCPBUGS-29039): fix copy-to-node [#1679](https://github.com/openshift/oc/pull/1679)
* [OCPBUGS-28540](https://issues.redhat.com/browse/OCPBUGS-28540): Copy oc.rhel8 instead of symlink [#1669](https://github.com/openshift/oc/pull/1669)
* [OCPBUGS-27732](https://issues.redhat.com/browse/OCPBUGS-27732): Bump joelanford/ignore to bump go-git to 5.11.0 [#1671](https://github.com/openshift/oc/pull/1671)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1661](https://github.com/openshift/oc/pull/1661)
* [OCPBUGS-27957](https://issues.redhat.com/browse/OCPBUGS-27957): pkg/cli/admin/inspect: use since/since-time for previous container logs [#1666](https://github.com/openshift/oc/pull/1666)
* NO-JIRA: Fix --parallelism flag formatting in help [#1664](https://github.com/openshift/oc/pull/1664)
* NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error [#1663](https://github.com/openshift/oc/pull/1663)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1667](https://github.com/openshift/oc/pull/1667)
* [OCPBUGS-27489](https://issues.redhat.com/browse/OCPBUGS-27489): Use correct hash sum of extracted tarball after re-signing with codesign [#1659](https://github.com/openshift/oc/pull/1659)
* NO-JIRA: Simplified kubectl component version check [#1662](https://github.com/openshift/oc/pull/1662)
* [CNV-37284](https://issues.redhat.com/browse/CNV-37284): Add --all-images flag to must-gather [#1633](https://github.com/openshift/oc/pull/1633)
* Revert "WRKLDS-1016: Bump kube dependencies to 1.29.0" [#1660](https://github.com/openshift/oc/pull/1660)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1655](https://github.com/openshift/oc/pull/1655)
* NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images [#1656](https://github.com/openshift/oc/pull/1656)
* [WRKLDS-998](https://issues.redhat.com/browse/WRKLDS-998): oc login: Built-in cred exec plugin implementation and wiring [#1640](https://github.com/openshift/oc/pull/1640)
* NO-JIRA: adm update status: add TODOs to remind us to revise early decisions [#1654](https://github.com/openshift/oc/pull/1654)
* [WRKLDS-1012](https://issues.redhat.com/browse/WRKLDS-1012): oc adm must-gather: pull gather container logs [#1641](https://github.com/openshift/oc/pull/1641)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): add since and since-time flags to limit log collection on must-gather [#1648](https://github.com/openshift/oc/pull/1648)
* [WRKLDS-1010](https://issues.redhat.com/browse/WRKLDS-1010): pkg/cli/admin/inspect: use since/since-time for rotated logs [#1653](https://github.com/openshift/oc/pull/1653)
* NO-ISSUE: add information about featuregate diff in a particular release [#1650](https://github.com/openshift/oc/pull/1650)
* NO-JIRA: report kubectl version to the release controller [#1651](https://github.com/openshift/oc/pull/1651)
* [OCPBUGS-25461](https://issues.redhat.com/browse/OCPBUGS-25461): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1647](https://github.com/openshift/oc/pull/1647)
* [OTA-1087](https://issues.redhat.com/browse/OTA-1087): Add upgade health section to `adm update status` [#1636](https://github.com/openshift/oc/pull/1636)
* [OCPBUGS-19807](https://issues.redhat.com/browse/OCPBUGS-19807): pkg/cli/admin/release/extract: Log a warning on --credentials-requests without --included [#1551](https://github.com/openshift/oc/pull/1551)
* NO-JIRA: Sanitize path using filepath Clean [#1645](https://github.com/openshift/oc/pull/1645)
* [OTA-492](https://issues.redhat.com/browse/OTA-492): pkg/cli/admin/upgrade/rollback: New rollback command [#1642](https://github.com/openshift/oc/pull/1642)
* NO-JIRA: oc adm prune images: fix --certificate-authority flag name in validation code [#1644](https://github.com/openshift/oc/pull/1644)
* [OCPBUGS-25703](https://issues.redhat.com/browse/OCPBUGS-25703): validate tag name on creation [#1643](https://github.com/openshift/oc/pull/1643)
* NO-JIRA: Migrate from deprecated ioutils to relevant libraries [#1602](https://github.com/openshift/oc/pull/1602)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Generate FIPS compatible RHEL9 oc binary [#1632](https://github.com/openshift/oc/pull/1632)
* [OCPBUGS-25021](https://issues.redhat.com/browse/OCPBUGS-25021): Bump ocp images to 4.16 in addition to go 1.21 [#1628](https://github.com/openshift/oc/pull/1628)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release extract: Introduce --idms-file and deprecate icsp-file [#1624](https://github.com/openshift/oc/pull/1624)
* [OCPBUGS-24834](https://issues.redhat.com/browse/OCPBUGS-24834): Bump api to include the new CloudCredential cap [#1622](https://github.com/openshift/oc/pull/1622)
* [OCPBUGS-24225](https://issues.redhat.com/browse/OCPBUGS-24225): Remove deprecated password defaulting in default config flag [#1619](https://github.com/openshift/oc/pull/1619)
* [OCPBUGS-24375](https://issues.redhat.com/browse/OCPBUGS-24375): Overwrite template's namespace with the explicit one [#1612](https://github.com/openshift/oc/pull/1612)
* [OCPBUGS-23723](https://issues.redhat.com/browse/OCPBUGS-23723): Add .snyk file to exclude vendor and ignore unit tests [#1604](https://github.com/openshift/oc/pull/1604)
* [ACM-7713](https://issues.redhat.com/browse/ACM-7713): Skip related objects which are invalid [#1550](https://github.com/openshift/oc/pull/1550)
* [OTA-1035](https://issues.redhat.com/browse/OTA-1035): `adm upgrade status` Add control plane update status [#1597](https://github.com/openshift/oc/pull/1597)
* [OCPBUGS-23071](https://issues.redhat.com/browse/OCPBUGS-23071): Mention inspection completion in the error message [#1601](https://github.com/openshift/oc/pull/1601)
* NO-JIRA: Add client version in must-gather summary [#1603](https://github.com/openshift/oc/pull/1603)
* [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): Promote some experimental commands, deprecate others [#1596](https://github.com/openshift/oc/pull/1596)
* [WRKLDS-860](https://issues.redhat.com/browse/WRKLDS-860): Add volume usage percentage checker script in must-gather's gather container [#1533](https://github.com/openshift/oc/pull/1533)
* [OTA-1035](https://issues.redhat.com/browse/OTA-1035): Allow testing `adm upgrade status` on mock data [#1595](https://github.com/openshift/oc/pull/1595)
* NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594)
* Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591)
* [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588)
* moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532)
* [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586)
* pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583)
* oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585)
* create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582)
* pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581)
* [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557)
* [OCPBUGS-20381](https://issues.redhat.com/browse/OCPBUGS-20381): Bump golang.org/x/net to v0.17.0 [#1578](https://github.com/openshift/oc/pull/1578)
* [OCPBUGS-20528](https://issues.redhat.com/browse/OCPBUGS-20528): Revert "OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror" [#1575](https://github.com/openshift/oc/pull/1575)
* [OCPBUGS-20474](https://issues.redhat.com/browse/OCPBUGS-20474): Set ImportPolicy to PreserveOriginal to honor --keep-manifest-list when mirroring a payload to an image stream [#1572](https://github.com/openshift/oc/pull/1572)
* [OCPBUGS-20342](https://issues.redhat.com/browse/OCPBUGS-20342): Reflect container's exit code for long running tasks not attached to terminal [#1571](https://github.com/openshift/oc/pull/1571)
* [OCPBUGS-20063](https://issues.redhat.com/browse/OCPBUGS-20063): regeneratemco: explicitly check for PlatformStatus field [#1555](https://github.com/openshift/oc/pull/1555)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Bump distribution/v3 to sync with oc-mirror [#1556](https://github.com/openshift/oc/pull/1556)
* [OCPBUGS-20181](https://issues.redhat.com/browse/OCPBUGS-20181): Use quay redis image instead docker mysql [#1559](https://github.com/openshift/oc/pull/1559)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Introduce refreshable dynamic credential store for image manifests [#1540](https://github.com/openshift/oc/pull/1540)
* Updating excluded list of unsupported oc adm commands in MicroShift [#1558](https://github.com/openshift/oc/pull/1558)
* [WINC-692](https://issues.redhat.com/browse/WINC-692): Add Windows node functionality to debug command [#1524](https://github.com/openshift/oc/pull/1524)
* [WRKLDS-537](https://issues.redhat.com/browse/WRKLDS-537): oc adm release info: Add --first-parent to git log for simplification [#1552](https://github.com/openshift/oc/pull/1552)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#1547](https://github.com/openshift/oc/pull/1547)
* [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545)
* [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544)
* [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548)
* [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546)
* [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542)
* [Full changelog](https://github.com/openshift/oc/compare/f7b14a92857ad1f28be2e2eaec3ae8229d4c2761...a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
* [OCPBUGS-32948](https://issues.redhat.com/browse/OCPBUGS-32948): Update documentation to restart pods when enabling workload identity [#701](https://github.com/openshift/cloud-credential-operator/pull/701)
* [OCPBUGS-32026](https://issues.redhat.com/browse/OCPBUGS-32026): Docs: Fix migration to azure workload identy to apply the webhook config [#695](https://github.com/openshift/cloud-credential-operator/pull/695)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Dockerfile should keep prior rhel8 behavior for ccoctl default [#694](https://github.com/openshift/cloud-credential-operator/pull/694)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 [#693](https://github.com/openshift/cloud-credential-operator/pull/693)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 [#692](https://github.com/openshift/cloud-credential-operator/pull/692)
* [OCPBUGS-31678](https://issues.redhat.com/browse/OCPBUGS-31678): aws: remove non-existent permission [#690](https://github.com/openshift/cloud-credential-operator/pull/690)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#681](https://github.com/openshift/cloud-credential-operator/pull/681)
* [OCPBUGS-30713](https://issues.redhat.com/browse/OCPBUGS-30713): update go-jose module to v4.0.1 [#687](https://github.com/openshift/cloud-credential-operator/pull/687)
* [OCPBUGS-30478](https://issues.redhat.com/browse/OCPBUGS-30478): Update to cloud.google.com/go/storage v1.39.1 [#688](https://github.com/openshift/cloud-credential-operator/pull/688)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Scope networkResourceGroup permissions to more operators [#682](https://github.com/openshift/cloud-credential-operator/pull/682)
* [OCPBUGS-28787](https://issues.redhat.com/browse/OCPBUGS-28787): gcp actuator update check to consider custom roles [#685](https://github.com/openshift/cloud-credential-operator/pull/685)
* [CCO-525](https://issues.redhat.com/browse/CCO-525): Azure workload identity doc updates [#680](https://github.com/openshift/cloud-credential-operator/pull/680)
* NO-JIRA:docu change: fix find command [#677](https://github.com/openshift/cloud-credential-operator/pull/677)
* NO-JIRA: Fix update-codegen.sh [#669](https://github.com/openshift/cloud-credential-operator/pull/669)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#672](https://github.com/openshift/cloud-credential-operator/pull/672)
* [OCPBUGS-28388](https://issues.redhat.com/browse/OCPBUGS-28388): Fix the ClusterOperator watch of the status controller [#665](https://github.com/openshift/cloud-credential-operator/pull/665)
* [OCPBUGS-27214](https://issues.redhat.com/browse/OCPBUGS-27214): ccoctl - use proxy when validating CloudFront URL [#654](https://github.com/openshift/cloud-credential-operator/pull/654)
* [OCPBUGS-28535](https://issues.redhat.com/browse/OCPBUGS-28535): stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster [#667](https://github.com/openshift/cloud-credential-operator/pull/667)
* NO-JIRA: Fix user-facing typos [#668](https://github.com/openshift/cloud-credential-operator/pull/668)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#663](https://github.com/openshift/cloud-credential-operator/pull/663)
* NO-JIRA: Keep metrics.md up-to-date [#664](https://github.com/openshift/cloud-credential-operator/pull/664)
* [OCPBUGS-27446](https://issues.redhat.com/browse/OCPBUGS-27446): Report manualpodidentity mode in metrics when using Azure Workload Identity [#657](https://github.com/openshift/cloud-credential-operator/pull/657)
* [OCPBUGS-27445](https://issues.redhat.com/browse/OCPBUGS-27445): Use cached clients to avoid client side throttling [#656](https://github.com/openshift/cloud-credential-operator/pull/656)
* NO-JIRA: azwi doc: apply webhook manifest to cluster [#652](https://github.com/openshift/cloud-credential-operator/pull/652)
* [CCO-454](https://issues.redhat.com/browse/CCO-454): Bump go.mod k8s deps to 0.29.1 [#655](https://github.com/openshift/cloud-credential-operator/pull/655)
* [OCPBUGS-16181](https://issues.redhat.com/browse/OCPBUGS-16181): Write manifests when AWS IAM roles already exist. [#514](https://github.com/openshift/cloud-credential-operator/pull/514)
* [CCO-519](https://issues.redhat.com/browse/CCO-519): Resolve all outstanding snyk vulnerabilities [#648](https://github.com/openshift/cloud-credential-operator/pull/648)
* [OCPBUGS-26488](https://issues.redhat.com/browse/OCPBUGS-26488): Use live client for metrics [#645](https://github.com/openshift/cloud-credential-operator/pull/645)
* [OCPBUGS-25533](https://issues.redhat.com/browse/OCPBUGS-25533): Updating ose-cloud-credential-operator-container image to be consistent with ART [#642](https://github.com/openshift/cloud-credential-operator/pull/642)
* NO-JIRA: Update docs/sts.md [#634](https://github.com/openshift/cloud-credential-operator/pull/634)
* [OCPBUGS-24807](https://issues.redhat.com/browse/OCPBUGS-24807): Updating ose-cloud-credential-operator-container image to be consistent with ART [#639](https://github.com/openshift/cloud-credential-operator/pull/639)
* NO-JIRA: Fixed typos [#633](https://github.com/openshift/cloud-credential-operator/pull/633)
* [OCPVE-647](https://issues.redhat.com/browse/OCPVE-647): annotate manifests with capability name [#594](https://github.com/openshift/cloud-credential-operator/pull/594)
* [CCO-338](https://issues.redhat.com/browse/CCO-338): cmd/operator: use correct kubeconfig for all clients [#638](https://github.com/openshift/cloud-credential-operator/pull/638)
* [CCO-244](https://issues.redhat.com/browse/CCO-244): gcp-ro-credentialrequest to use granular permissions [#626](https://github.com/openshift/cloud-credential-operator/pull/626)
* [OCPBUGS-23178](https://issues.redhat.com/browse/OCPBUGS-23178): Enable GCP sync to undelete custom roles [#637](https://github.com/openshift/cloud-credential-operator/pull/637)
* [OCPBUGS-13597](https://issues.redhat.com/browse/OCPBUGS-13597): Discover AWS dns suffix from partition and region. [#596](https://github.com/openshift/cloud-credential-operator/pull/596)
* [CCO-372](https://issues.redhat.com/browse/CCO-372): Azure Workload Identity info in CredsRequests creates a Secret [#587](https://github.com/openshift/cloud-credential-operator/pull/587)
* [OCPBUGS-20478](https://issues.redhat.com/browse/OCPBUGS-20478): Explicitly set the vsphere secret credential data on sync. [#628](https://github.com/openshift/cloud-credential-operator/pull/628)
* [CCO-440](https://issues.redhat.com/browse/CCO-440): Bump k8s deps to 0.28.3 [#614](https://github.com/openshift/cloud-credential-operator/pull/614)
* [CCO-192](https://issues.redhat.com/browse/CCO-192): Use Leases for leader election [#627](https://github.com/openshift/cloud-credential-operator/pull/627)
* [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611)
* snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613)
* [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610)
* Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609)
* [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607)
* Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606)
* Revert #592 "CCO-421: *: split pod identity webhooks from core controller" [#604](https://github.com/openshift/cloud-credential-operator/pull/604)
* [CCO-421](https://issues.redhat.com/browse/CCO-421): *: split pod identity webhooks from core controller [#592](https://github.com/openshift/cloud-credential-operator/pull/592)
* Docs: azure workload identity no longer requires TechPreviewNoUpgrade [#603](https://github.com/openshift/cloud-credential-operator/pull/603)
* [CCO-437](https://issues.redhat.com/browse/CCO-437): Document steps for in-place migration to Azure AD Workload Identity. [#598](https://github.com/openshift/cloud-credential-operator/pull/598)
* [OCPBUGS-19123](https://issues.redhat.com/browse/OCPBUGS-19123): Updating ose-cloud-credential-operator images to be consistent with ART [#600](https://github.com/openshift/cloud-credential-operator/pull/600)
* [OCPBUGS-18246](https://issues.redhat.com/browse/OCPBUGS-18246): Add networkResourceGroupName parameter for Azure [#597](https://github.com/openshift/cloud-credential-operator/pull/597)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/67fe51ea7cc53e73aba861d75696fc051b404d4d...48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8ceee78810756afaa2efb75f60bef0358502834f)
* [OCPBUGS-33617](https://issues.redhat.com/browse/OCPBUGS-33617): Avoid panic when looking up attachedOutboundRule.ID in azure [#144](https://github.com/openshift/cloud-network-config-controller/pull/144)
* NO-JIRA: Update dependency google.golang.org/api [#143](https://github.com/openshift/cloud-network-config-controller/pull/143)
* [OCPBUGS-33154](https://issues.redhat.com/browse/OCPBUGS-33154): Incorrect use of go wait groups [#140](https://github.com/openshift/cloud-network-config-controller/pull/140)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#136](https://github.com/openshift/cloud-network-config-controller/pull/136)
* [OCPBUGS-27422](https://issues.redhat.com/browse/OCPBUGS-27422): Avoid nil pointer panic while assigning private IP on Azure [#133](https://github.com/openshift/cloud-network-config-controller/pull/133)
* [OCPBUGS-30146](https://issues.redhat.com/browse/OCPBUGS-30146): Serialize scheme construction to prevent panic [#134](https://github.com/openshift/cloud-network-config-controller/pull/134)
* [OCPBUGS-31289](https://issues.redhat.com/browse/OCPBUGS-31289): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 [#135](https://github.com/openshift/cloud-network-config-controller/pull/135)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#132](https://github.com/openshift/cloud-network-config-controller/pull/132)
* [SDN-4405](https://issues.redhat.com/browse/SDN-4405): 1.29_rebase: [#131](https://github.com/openshift/cloud-network-config-controller/pull/131)
* [OCPBUGS-28282](https://issues.redhat.com/browse/OCPBUGS-28282): Add Snyk file to exclude vendor dependent libraries on scan [#130](https://github.com/openshift/cloud-network-config-controller/pull/130)
* [OCPBUGS-24823](https://issues.redhat.com/browse/OCPBUGS-24823): Updating ose-cloud-network-config-controller-container image to be consistent with ART [#129](https://github.com/openshift/cloud-network-config-controller/pull/129)
* Kube 1.28 rebase for cloud-network-config-controller [#124](https://github.com/openshift/cloud-network-config-controller/pull/124)
* Bump CI image [#123](https://github.com/openshift/cloud-network-config-controller/pull/123)
* [OCPBUGS-5491](https://issues.redhat.com/browse/OCPBUGS-5491): Azure: skip backend pool if attached to an outbound rule [#121](https://github.com/openshift/cloud-network-config-controller/pull/121)
* [OCPBUGS-19163](https://issues.redhat.com/browse/OCPBUGS-19163): Updating ose-cloud-network-config-controller images to be consistent with ART [#122](https://github.com/openshift/cloud-network-config-controller/pull/122)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/1bd04641f210d19370f782086949f827bfb7a264...8ceee78810756afaa2efb75f60bef0358502834f)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/b415439ebab2829c8da1ea17c05f2ac75fe5dbe8)
* NO-JIRA: remove go-jose not to get flagged with its CVEs [#668](https://github.com/openshift/cluster-authentication-operator/pull/668)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#656](https://github.com/openshift/cluster-authentication-operator/pull/656)
* [OCPBUGS-24195](https://issues.redhat.com/browse/OCPBUGS-24195): the apiservice controller waits until bootstrap complete [#662](https://github.com/openshift/cluster-authentication-operator/pull/662)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#640](https://github.com/openshift/cluster-authentication-operator/pull/640)
* NO-JIRA: e2e Keycloak: retry logging in as admin [#666](https://github.com/openshift/cluster-authentication-operator/pull/666)
* [OCPBUGS-32089](https://issues.redhat.com/browse/OCPBUGS-32089): wellknown-readiness: perform several attempts to connect before going unavailable [#664](https://github.com/openshift/cluster-authentication-operator/pull/664)
* NO-ISSUE: bump to the latest version of openshift/api [#663](https://github.com/openshift/cluster-authentication-operator/pull/663)
* NO-ISSUE: bump dependencies [#659](https://github.com/openshift/cluster-authentication-operator/pull/659)
* NO-JIRA: test/lib: create SA on deploy [#660](https://github.com/openshift/cluster-authentication-operator/pull/660)
* NO-ISSUE: oauth-apiserver: disable priority and fairness [#658](https://github.com/openshift/cluster-authentication-operator/pull/658)
* NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after [#657](https://github.com/openshift/cluster-authentication-operator/pull/657)
* NO-JIRA: _output - remove dir [#651](https://github.com/openshift/cluster-authentication-operator/pull/651)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#632](https://github.com/openshift/cluster-authentication-operator/pull/632)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#646](https://github.com/openshift/cluster-authentication-operator/pull/646)
* [OCPBUGS-24883](https://issues.redhat.com/browse/OCPBUGS-24883): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#644](https://github.com/openshift/cluster-authentication-operator/pull/644)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#636](https://github.com/openshift/cluster-authentication-operator/pull/636)
* [OCPBUGS-24217](https://issues.redhat.com/browse/OCPBUGS-24217): Annotate certs with ownership information [#642](https://github.com/openshift/cluster-authentication-operator/pull/642)
* [OCPBUGS-21719](https://issues.redhat.com/browse/OCPBUGS-21719): go.mod: bump golang.org/x/net to v0.17.0 [#635](https://github.com/openshift/cluster-authentication-operator/pull/635)
* [OCPBUGS-17987](https://issues.redhat.com/browse/OCPBUGS-17987): generate only >=0 number of random bits [#629](https://github.com/openshift/cluster-authentication-operator/pull/629)
* [OCPBUGS-19125](https://issues.redhat.com/browse/OCPBUGS-19125): Updating ose-cluster-authentication-operator images to be consistent with ART [#634](https://github.com/openshift/cluster-authentication-operator/pull/634)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e...b415439ebab2829c8da1ea17c05f2ac75fe5dbe8)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/eecb123a3b02358046a2c2ce52adfc548a5caa17)
* [OCPBUGS-33932](https://issues.redhat.com/browse/OCPBUGS-33932): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#303](https://github.com/openshift/kubernetes-autoscaler/pull/303)
* NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup [#298](https://github.com/openshift/kubernetes-autoscaler/pull/298)
* [OCPBUGS-31421](https://issues.redhat.com/browse/OCPBUGS-31421): add check for taint.value == nil [#292](https://github.com/openshift/kubernetes-autoscaler/pull/292)
* [OCPBUGS-28334](https://issues.redhat.com/browse/OCPBUGS-28334): update snyk file [#287](https://github.com/openshift/kubernetes-autoscaler/pull/287)
* [PODAUTO-99](https://issues.redhat.com/browse/PODAUTO-99): Fix VPA e2e test failures [#286](https://github.com/openshift/kubernetes-autoscaler/pull/286)
* [OCPCLOUD-2431](https://issues.redhat.com/browse/OCPCLOUD-2431): rebase on upstream 1.29.0 release [#285](https://github.com/openshift/kubernetes-autoscaler/pull/285)
* [PODAUTO-104](https://issues.redhat.com/browse/PODAUTO-104): Add downstream pod autoscaling team member jkyros to VPA OWNERS [#283](https://github.com/openshift/kubernetes-autoscaler/pull/283)
* [OCPBUGS-27509](https://issues.redhat.com/browse/OCPBUGS-27509): Fix unstructured taint parsing in Cluster API provider [#281](https://github.com/openshift/kubernetes-autoscaler/pull/281)
* [OCPBUGS-26504](https://issues.redhat.com/browse/OCPBUGS-26504): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 [#279](https://github.com/openshift/kubernetes-autoscaler/pull/279)
* [OCPBUGS-25855](https://issues.redhat.com/browse/OCPBUGS-25855): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 [#277](https://github.com/openshift/kubernetes-autoscaler/pull/277)
* [OCPBUGS-25625](https://issues.redhat.com/browse/OCPBUGS-25625): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/kubernetes-autoscaler/pull/276)
* [OCPBUGS-24783](https://issues.redhat.com/browse/OCPBUGS-24783): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#271](https://github.com/openshift/kubernetes-autoscaler/pull/271)
* [OCPBUGS-25579](https://issues.redhat.com/browse/OCPBUGS-25579): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#274](https://github.com/openshift/kubernetes-autoscaler/pull/274)
* [PODAUTO-91](https://issues.redhat.com/browse/PODAUTO-91): Add joelsmith to OWNERS for approving of VPA-only PRs [#273](https://github.com/openshift/kubernetes-autoscaler/pull/273)
* [OCPBUGS-24974](https://issues.redhat.com/browse/OCPBUGS-24974): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#272](https://github.com/openshift/kubernetes-autoscaler/pull/272)
* [OCPBUGS-24146](https://issues.redhat.com/browse/OCPBUGS-24146): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#269](https://github.com/openshift/kubernetes-autoscaler/pull/269)
* [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265)
* Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261)
* [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262)
* [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9d87281f73fc26a5fac17c50dcf63c2de17f619a...eecb123a3b02358046a2c2ce52adfc548a5caa17)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#315](https://github.com/openshift/cluster-autoscaler-operator/pull/315)
* [OCPBUGS-20565](https://issues.redhat.com/browse/OCPBUGS-20565): Set webhook minimum TLS version to 1.3 [#320](https://github.com/openshift/cluster-autoscaler-operator/pull/320)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add empty string as value for GpuType if GpuCount is empty 0 [#317](https://github.com/openshift/cluster-autoscaler-operator/pull/317)
* [OCPBUGS-31960](https://issues.redhat.com/browse/OCPBUGS-31960): Bump x/net to v.0.24.0 [#318](https://github.com/openshift/cluster-autoscaler-operator/pull/318)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Update CAO to add upstream annotations [#316](https://github.com/openshift/cluster-autoscaler-operator/pull/316)
* [OCPCLOUD-2523](https://issues.redhat.com/browse/OCPCLOUD-2523): add ExpanderOrderList api option [#304](https://github.com/openshift/cluster-autoscaler-operator/pull/304)
* [OCPBUGS-29863](https://issues.redhat.com/browse/OCPBUGS-29863): Apply hypershift cluster-profile for ibm-cloud-managed [#314](https://github.com/openshift/cluster-autoscaler-operator/pull/314)
* [OCPBUGS-28207](https://issues.redhat.com/browse/OCPBUGS-28207): update min/max memory limit documentation [#313](https://github.com/openshift/cluster-autoscaler-operator/pull/313)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Revert "OCPBUGS-18137: Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch" [#311](https://github.com/openshift/cluster-autoscaler-operator/pull/311)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#312](https://github.com/openshift/cluster-autoscaler-operator/pull/312)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH [#297](https://github.com/openshift/cluster-autoscaler-operator/pull/297)
* [OCPCLOUD-2432](https://issues.redhat.com/browse/OCPCLOUD-2432): Bump k8s packages to v1.29 [#310](https://github.com/openshift/cluster-autoscaler-operator/pull/310)
* [OCPBUGS-25559](https://issues.redhat.com/browse/OCPBUGS-25559): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#305](https://github.com/openshift/cluster-autoscaler-operator/pull/305)
* [OCPBUGS-25633](https://issues.redhat.com/browse/OCPBUGS-25633): Add Snyk file to exclude vendor directory on scan [#306](https://github.com/openshift/cluster-autoscaler-operator/pull/306)
* [OCPBUGS-24911](https://issues.redhat.com/browse/OCPBUGS-24911): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#303](https://github.com/openshift/cluster-autoscaler-operator/pull/303)
* [OCPBUGS-24102](https://issues.redhat.com/browse/OCPBUGS-24102): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-autoscaler-operator/pull/302)
* [OCPCLOUD-2137](https://issues.redhat.com/browse/OCPCLOUD-2137): Check scale from zero annotations on MachineSets [#294](https://github.com/openshift/cluster-autoscaler-operator/pull/294)
* [OCPBUGS-21791](https://issues.redhat.com/browse/OCPBUGS-21791): Bump x/net package to v0.17.0 [#295](https://github.com/openshift/cluster-autoscaler-operator/pull/295)
* Update OWNERS [#296](https://github.com/openshift/cluster-autoscaler-operator/pull/296)
* [OCPCLOUD-2196](https://issues.redhat.com/browse/OCPCLOUD-2196): Update dependencies k8s 1.28 [#293](https://github.com/openshift/cluster-autoscaler-operator/pull/293)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#284](https://github.com/openshift/cluster-autoscaler-operator/pull/284)
* [OCPBUGS-18954](https://issues.redhat.com/browse/OCPBUGS-18954): Ensure status reporter caches exit if they don't sync [#285](https://github.com/openshift/cluster-autoscaler-operator/pull/285)
* [OCPBUGS-19411](https://issues.redhat.com/browse/OCPBUGS-19411): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#287](https://github.com/openshift/cluster-autoscaler-operator/pull/287)
* [OCPBUGS-19169](https://issues.redhat.com/browse/OCPBUGS-19169): Updating ose-cluster-autoscaler-operator images to be consistent with ART [#286](https://github.com/openshift/cluster-autoscaler-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/32854baae386c4d6854d7fd8658fdff75588e919...40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fe453644c42480cd3803b1d8a9fc7cdc28f89b59)
* [OCPBUGS-34041](https://issues.redhat.com/browse/OCPBUGS-34041): Run metal3 containers as specific users and groups [#418](https://github.com/openshift/cluster-baremetal-operator/pull/418)
* [OCPBUGS-33493](https://issues.redhat.com/browse/OCPBUGS-33493): Enable leader election for baremetal-operator [#416](https://github.com/openshift/cluster-baremetal-operator/pull/416)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Drop unneccessary capabilities [#401](https://github.com/openshift/cluster-baremetal-operator/pull/401)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Wait for bootstrapping to finish before starting [#415](https://github.com/openshift/cluster-baremetal-operator/pull/415)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#413](https://github.com/openshift/cluster-baremetal-operator/pull/413)
* [METAL-979](https://issues.redhat.com/browse/METAL-979): Add RBAC for newer CRDs hostfirmwarecomponents and dataimages [#412](https://github.com/openshift/cluster-baremetal-operator/pull/412)
* [METAL-904](https://issues.redhat.com/browse/METAL-904): Move parts of ICC config to a new secret [#406](https://github.com/openshift/cluster-baremetal-operator/pull/406)
* [OCPBUGS-31341](https://issues.redhat.com/browse/OCPBUGS-31341): Refactor Pull Secret application [#409](https://github.com/openshift/cluster-baremetal-operator/pull/409)
* [OCPBUGS-27760](https://issues.redhat.com/browse/OCPBUGS-27760): Update the leader election durations to be tolerant [#403](https://github.com/openshift/cluster-baremetal-operator/pull/403)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): pass all IPs to image-customization-controller [#400](https://github.com/openshift/cluster-baremetal-operator/pull/400)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Reduce container privileges [#396](https://github.com/openshift/cluster-baremetal-operator/pull/396)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add terminationmessagepolicy to show last of error log in API [#399](https://github.com/openshift/cluster-baremetal-operator/pull/399)
* [METAL-856](https://issues.redhat.com/browse/METAL-856): set USE_IRONIC_INSPECTOR explicitly [#398](https://github.com/openshift/cluster-baremetal-operator/pull/398)
* [OCPBUGS-25766](https://issues.redhat.com/browse/OCPBUGS-25766): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#395](https://github.com/openshift/cluster-baremetal-operator/pull/395)
* [OCPBUGS-25572](https://issues.redhat.com/browse/OCPBUGS-25572): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#394](https://github.com/openshift/cluster-baremetal-operator/pull/394)
* [OCPBUGS-24946](https://issues.redhat.com/browse/OCPBUGS-24946): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#393](https://github.com/openshift/cluster-baremetal-operator/pull/393)
* [OCPBUGS-20572](https://issues.redhat.com/browse/OCPBUGS-20572): Obsolete protocols for webhook [#375](https://github.com/openshift/cluster-baremetal-operator/pull/375)
* [OCPBUGS-24125](https://issues.redhat.com/browse/OCPBUGS-24125): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#392](https://github.com/openshift/cluster-baremetal-operator/pull/392)
* NO-ISSUE: Fix ordering problem in the unit tests [#390](https://github.com/openshift/cluster-baremetal-operator/pull/390)
* [OCPBUGS-23131](https://issues.redhat.com/browse/OCPBUGS-23131), [OCPBUGS-23149](https://issues.redhat.com/browse/OCPBUGS-23149): fix IRONIC_EXTERNAL_URL_V6 [#380](https://github.com/openshift/cluster-baremetal-operator/pull/380)
* [MGMT-16047](https://issues.redhat.com/browse/MGMT-16047): update dependencies [#383](https://github.com/openshift/cluster-baremetal-operator/pull/383)
* NO-ISSUE: Stop linting when building the image [#343](https://github.com/openshift/cluster-baremetal-operator/pull/343)
* [OCPBUGS-20563](https://issues.redhat.com/browse/OCPBUGS-20563): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#374](https://github.com/openshift/cluster-baremetal-operator/pull/374)
* [OCPBUGS-17003](https://issues.redhat.com/browse/OCPBUGS-17003): Trigger reconcile on service-ca CO [#365](https://github.com/openshift/cluster-baremetal-operator/pull/365)
* [OCPBUGS-21741](https://issues.redhat.com/browse/OCPBUGS-21741): Uplift x/net to v0.17.0 [#368](https://github.com/openshift/cluster-baremetal-operator/pull/368)
* Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes [#352](https://github.com/openshift/cluster-baremetal-operator/pull/352)
* [OCPBUGS-18788](https://issues.redhat.com/browse/OCPBUGS-18788): Remove metrics port from baremetal-operator [#361](https://github.com/openshift/cluster-baremetal-operator/pull/361)
* [OCPBUGS-19203](https://issues.redhat.com/browse/OCPBUGS-19203): Updating ose-cluster-baremetal-operator images to be consistent with ART [#362](https://github.com/openshift/cluster-baremetal-operator/pull/362)
* [OCPBUGS-17589](https://issues.redhat.com/browse/OCPBUGS-17589): Guard against nil PlatformStatus [#359](https://github.com/openshift/cluster-baremetal-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/270579c644f97dd9f2e8e771c939833ffee1dd3e...fe453644c42480cd3803b1d8a9fc7cdc28f89b59)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/27bfb59fd0ff399224ee673869b8875ef10f1962)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#103](https://github.com/openshift/cluster-bootstrap/pull/103)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#102](https://github.com/openshift/cluster-bootstrap/pull/102)
* [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/93fba13f576831ba0953190663ab26aaf5766984...27bfb59fd0ff399224ee673869b8875ef10f1962)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/5830a10a2f545dc25ff4ca4c4efd9005088676aa)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#207](https://github.com/openshift/cluster-api/pull/207)
* [OCPBUGS-30480](https://issues.redhat.com/browse/OCPBUGS-30480): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master [#203](https://github.com/openshift/cluster-api/pull/203)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master [#199](https://github.com/openshift/cluster-api/pull/199)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#200](https://github.com/openshift/cluster-api/pull/200)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): openshift: promote core CAPI IPAM CRDs to GA [#197](https://github.com/openshift/cluster-api/pull/197)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): openshift: add CustomNoUpgrade annotation value to feature-set [#196](https://github.com/openshift/cluster-api/pull/196)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): openshift: generate separate manifest for core CAPI CRDs [#195](https://github.com/openshift/cluster-api/pull/195)
* [OCPBUGS-26111](https://issues.redhat.com/browse/OCPBUGS-26111): add snyk file [#194](https://github.com/openshift/cluster-api/pull/194)
* [OCPCLOUD-2449](https://issues.redhat.com/browse/OCPCLOUD-2449): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master [#192](https://github.com/openshift/cluster-api/pull/192)
* NO-JIRA: e2e: add openstack testing script [#193](https://github.com/openshift/cluster-api/pull/193)
* [OCPBUGS-25586](https://issues.redhat.com/browse/OCPBUGS-25586): Updating ose-cluster-api-container image to be consistent with ART [#191](https://github.com/openshift/cluster-api/pull/191)
* [OCPBUGS-25000](https://issues.redhat.com/browse/OCPBUGS-25000): Updating ose-cluster-api-container image to be consistent with ART [#190](https://github.com/openshift/cluster-api/pull/190)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#189](https://github.com/openshift/cluster-api/pull/189)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#179](https://github.com/openshift/cluster-api/pull/179)
* Update OWNERS [#183](https://github.com/openshift/cluster-api/pull/183)
* [OCPBUGS-21645](https://issues.redhat.com/browse/OCPBUGS-21645): Bump golang.org/x/net to v0.17.0 [#182](https://github.com/openshift/cluster-api/pull/182)
* [OCPBUGS-17286](https://issues.redhat.com/browse/OCPBUGS-17286), [OCPCLOUD-2222](https://issues.redhat.com/browse/OCPCLOUD-2222): Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master [#181](https://github.com/openshift/cluster-api/pull/181)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-cluster-api images to be consistent with ART [#180](https://github.com/openshift/cluster-api/pull/180)
* [Full changelog](https://github.com/openshift/cluster-api/compare/ae83c5533706d539dc492229eebd67533468e48b...5830a10a2f545dc25ff4ca4c4efd9005088676aa)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/a24f1aeb106bd4ad353615dacde6d4e884f5face)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#172](https://github.com/openshift/cluster-capi-operator/pull/172)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#171](https://github.com/openshift/cluster-capi-operator/pull/171)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609), [OCPCLOUD-1610](https://issues.redhat.com/browse/OCPCLOUD-1610): Add Support for VSphere [#149](https://github.com/openshift/cluster-capi-operator/pull/149)
* NO-JIRA: CAPA: use v1beta2 [#151](https://github.com/openshift/cluster-capi-operator/pull/151)
* NO-JIRA: Fix manifests-gen tool + testing [#168](https://github.com/openshift/cluster-capi-operator/pull/168)
* [OCPBUGS-29832](https://issues.redhat.com/browse/OCPBUGS-29832), [OCPCLOUD-2451](https://issues.redhat.com/browse/OCPCLOUD-2451): Bump CAPI 1.6 and k8s 1.28 [#164](https://github.com/openshift/cluster-capi-operator/pull/164)
* [OCPBUGS-29676](https://issues.redhat.com/browse/OCPBUGS-29676): create openshift-cluster-api namespace in CustomNoUpgrade [#163](https://github.com/openshift/cluster-capi-operator/pull/163)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): manifests-gen: promote Core CAPI IPAM CRDs to GA [#162](https://github.com/openshift/cluster-capi-operator/pull/162)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): manifests-gen: also add CustomNoUpgrade annotation value [#161](https://github.com/openshift/cluster-capi-operator/pull/161)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): manifests-gen: store core capi crds also in their own manifest [#159](https://github.com/openshift/cluster-capi-operator/pull/159)
* [OCPBUGS-28539](https://issues.redhat.com/browse/OCPBUGS-28539): Start operator controllers only on supported platforms, add unsupported controller [#157](https://github.com/openshift/cluster-capi-operator/pull/157)
* [OCPBUGS-26121](https://issues.redhat.com/browse/OCPBUGS-26121): Add Snyk file to exclude vendor directory on scan [#156](https://github.com/openshift/cluster-capi-operator/pull/156)
* [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#87](https://github.com/openshift/cluster-capi-operator/pull/87)
* NO-JIRA: e2e: add openstack testing script [#154](https://github.com/openshift/cluster-capi-operator/pull/154)
* [OCPBUGS-25778](https://issues.redhat.com/browse/OCPBUGS-25778): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.16 [#153](https://github.com/openshift/cluster-capi-operator/pull/153)
* [OCPBUGS-24979](https://issues.redhat.com/browse/OCPBUGS-24979): Updating ose-cluster-capi-operator-container image to be consistent with ART [#150](https://github.com/openshift/cluster-capi-operator/pull/150)
* [OCPVE-787](https://issues.redhat.com/browse/OCPVE-787): annotate credentials request manifests [#143](https://github.com/openshift/cluster-capi-operator/pull/143)
* [OCPBUGS-24301](https://issues.redhat.com/browse/OCPBUGS-24301): openstack: Don't substitute manager container command [#148](https://github.com/openshift/cluster-capi-operator/pull/148)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255), [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): refactor: remove cluster-api-operator, rework assets/manifests [#121](https://github.com/openshift/cluster-capi-operator/pull/121)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): Add granular permissions for Azure [#124](https://github.com/openshift/cluster-capi-operator/pull/124)
* [OCPBUGS-19842](https://issues.redhat.com/browse/OCPBUGS-19842): Limit deletion webhook to openshift namespace [#135](https://github.com/openshift/cluster-capi-operator/pull/135)
* [OCPBUGS-23467](https://issues.redhat.com/browse/OCPBUGS-23467): manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration [#145](https://github.com/openshift/cluster-capi-operator/pull/145)
* [OCPBUGS-19841](https://issues.redhat.com/browse/OCPBUGS-19841): Add format key into the worker-user-data secret [#140](https://github.com/openshift/cluster-capi-operator/pull/140)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Bump CAPG to v1.5.0 [#142](https://github.com/openshift/cluster-capi-operator/pull/142)
* [OCPBUGS-22403](https://issues.redhat.com/browse/OCPBUGS-22403): Disable CAPI Azure Infrastructure Provider [#141](https://github.com/openshift/cluster-capi-operator/pull/141)
* Update OWNERS [#133](https://github.com/openshift/cluster-capi-operator/pull/133)
* [OCPBUGS-17287](https://issues.redhat.com/browse/OCPBUGS-17287), [OCPBUGS-21642](https://issues.redhat.com/browse/OCPBUGS-21642), [OCPCLOUD-2214](https://issues.redhat.com/browse/OCPCLOUD-2214): Bump capi/capi providers/k8s 1.27 [#132](https://github.com/openshift/cluster-capi-operator/pull/132)
* [OCPBUGS-19240](https://issues.redhat.com/browse/OCPBUGS-19240): Updating ose-cluster-capi-operator images to be consistent with ART [#129](https://github.com/openshift/cluster-capi-operator/pull/129)
* [MULTIARCH-3761](https://issues.redhat.com/browse/MULTIARCH-3761): Power VS CAPI Remove deprecated flag [#128](https://github.com/openshift/cluster-capi-operator/pull/128)
* [OCPBUGS-18504](https://issues.redhat.com/browse/OCPBUGS-18504): e2e: set ControlPlaneEndpoint in AWSCluster [#126](https://github.com/openshift/cluster-capi-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b4c4fb13a40c2c71b8f21fe379befad95e341a77...a24f1aeb106bd4ad353615dacde6d4e884f5face)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/bbb13b9ad6e49e7dcd8d0b1a84f59ca8ff073599)
* [OCPBUGS-34826](https://issues.redhat.com/browse/OCPBUGS-34826): Nutanix CCM pods Cipher Suites vulnerability issue [#350](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/350)
* NO-JIRA: Ensure termination message policy in tests [#344](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/344)
* [OCPBUGS-33405](https://issues.redhat.com/browse/OCPBUGS-33405): update azure and ash tolerations on node manager [#342](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/342)
* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Pass --cluster-name to OpenStack CCM [#337](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/337)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition logic [#335](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/335)
* Bug OCPBUGS-29605: Allow to patch events in OpenStack RBAC [#336](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/336)
* [OCPVE-660](https://issues.redhat.com/browse/OCPVE-660): add CloudController capability annotation [#284](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/284)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on feature gates for whether to deploy CCMs [#334](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/334)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Increase Azure Concurrent Service Syncs to 10 [#328](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/328)
* [OCPBUGS-29220](https://issues.redhat.com/browse/OCPBUGS-29220): Set AZURE_FEDERATED_TOKEN_FILE on CCM container [#332](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/332)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Add EndpointSlices permissions for Azure [#331](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/331)
* [OCPBUGS-13106](https://issues.redhat.com/browse/OCPBUGS-13106): Increase GCP Concurrent Service Syncs to 10 [#329](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/329)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#330](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/330)
* NO-JIRA:Use expressive Gomega matchers with Eventually [#327](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/327)
* [OCPBUGS-24486](https://issues.redhat.com/browse/OCPBUGS-24486): Enforce the use of shared health checks [#326](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/326)
* [OCPCLOUD-2424](https://issues.redhat.com/browse/OCPCLOUD-2424): Bump k8s packages to v1.29 [#325](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/325)
* [OCPBUGS-25887](https://issues.redhat.com/browse/OCPBUGS-25887): IBMCloud: Patch CCM for 4.16 [#323](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/323)
* [OCPBUGS-26494](https://issues.redhat.com/browse/OCPBUGS-26494): PowerVS: handle 4.16 changes [#322](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/322)
* [OCPBUGS-25483](https://issues.redhat.com/browse/OCPBUGS-25483): Adds CloudConfigTransformer for Azure [#316](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/316)
* [OCPBUGS-24948](https://issues.redhat.com/browse/OCPBUGS-24948): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#308](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/308)
* [OCPBUGS-25750](https://issues.redhat.com/browse/OCPBUGS-25750): Add Snyk file to exclude vendor directory on scan [#313](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/313)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Adds GCP ClusterRole and ClusterRoleBinding [#310](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/310)
* [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#205](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/205)
* trt-1382: reorder flag initialization [#309](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/309)
* trt-1382: test add space [#307](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/307)
* [OCPVE-788](https://issues.redhat.com/browse/OCPVE-788): annotate credentials request manifests [#293](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/293)
* Undo TRT-1378: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#306](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/306)
* [TRT-1378](https://issues.redhat.com/browse/TRT-1378): Revert #304 "Undo TRT-1374: Revert for \"OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS\"" [#305](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/305)
* Undo TRT-1374: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#304](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/304)
* [OCPBUGS-24127](https://issues.redhat.com/browse/OCPBUGS-24127): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/302)
* [TRT-1374](https://issues.redhat.com/browse/TRT-1374): Revert #301 "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#303](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/303)
* [OCPCLOUD-2278](https://issues.redhat.com/browse/OCPCLOUD-2278): Add kube-rbac-proxy container & ensure metrics are only available via HTTPS [#301](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/301)
* [OCPBUGS-23996](https://issues.redhat.com/browse/OCPBUGS-23996): trust bundle CA controller: add owner annotation for ccm-trusted-ca configmap [#300](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/300)
* [OCPBUGS-23308](https://issues.redhat.com/browse/OCPBUGS-23308): Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only [#299](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/299)
* [OSASINFRA-3289](https://issues.redhat.com/browse/OSASINFRA-3289): OpenStack: Remove Kuryr bits [#294](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/294)
* [OSASINFRA-3284](https://issues.redhat.com/browse/OSASINFRA-3284): Add Events to OpenStack's RBAC [#292](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/292)
* [OCPBUGS-20213](https://issues.redhat.com/browse/OCPBUGS-20213): Add azure cloud config transformer [#291](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/291)
* Update OWNERS [#290](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/290)
* [OCPBUGS-17652](https://issues.redhat.com/browse/OCPBUGS-17652): apply necessary RBAC for the alibaba cloud controller manager [#276](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/276)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Additional permissions for internal load balancer on STS [#287](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/287)
* [OCPCLOUD-2188](https://issues.redhat.com/browse/OCPCLOUD-2188): Bump k8s packages to v1.28 [#285](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/285)
* update readme to stable status [#286](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/286)
* [OCPBUGS-19205](https://issues.redhat.com/browse/OCPBUGS-19205): Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#278](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/278)
* [OCPBUGS-18641](https://issues.redhat.com/browse/OCPBUGS-18641): Set dual-stack IPFamilyPriority for vSphere [#279](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/279)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Ensure subnets read permission for granular roles [#281](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/281)
* [OCPBUGS-14718](https://issues.redhat.com/browse/OCPBUGS-14718): Add message for CABundleControllerDegradedCondition error [#275](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/275)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a0b9c0d70748ff24de5a40874207de3ea5bfa91e...bbb13b9ad6e49e7dcd8d0b1a84f59ca8ff073599)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/441d29c92b1759d1780a525112e764280b78b0d6)
* [SPLAT-1630](https://issues.redhat.com/browse/SPLAT-1630): Bump API version to get new VSphereMultiVCenters featuregate. [#418](https://github.com/openshift/cluster-config-operator/pull/418)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#410](https://github.com/openshift/cluster-config-operator/pull/410)
* [OCPBUGS-24871](https://issues.redhat.com/browse/OCPBUGS-24871): Updating ose-cluster-config-operator-container image to be consistent with ART [#390](https://github.com/openshift/cluster-config-operator/pull/390)
* [TRT-1581](https://issues.redhat.com/browse/TRT-1581): default to self-managed clusterprofile [#414](https://github.com/openshift/cluster-config-operator/pull/414)
* NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable [#412](https://github.com/openshift/cluster-config-operator/pull/412)
* [OCPBUGS-29576](https://issues.redhat.com/browse/OCPBUGS-29576): Apply hypershift cluster-profile for ibm-cloud-managed [#408](https://github.com/openshift/cluster-config-operator/pull/408)
* NO-JIRA: add check to ensure clusterprofile matches for featuregates [#411](https://github.com/openshift/cluster-config-operator/pull/411)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Fix PSa labels [#406](https://github.com/openshift/cluster-config-operator/pull/406)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Bump(openshift/api): to get new VolumeGroupSnapshot API [#405](https://github.com/openshift/cluster-config-operator/pull/405)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Add required PSa labels [#401](https://github.com/openshift/cluster-config-operator/pull/401)
* [SPLAT-1400](https://issues.redhat.com/browse/SPLAT-1400): promote vSphere control plane machinesets from tech preview [#400](https://github.com/openshift/cluster-config-operator/pull/400)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#399](https://github.com/openshift/cluster-config-operator/pull/399)
* Revert "OCPBUGS-26541: remove duplicate manifests in image" [#397](https://github.com/openshift/cluster-config-operator/pull/397)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#392](https://github.com/openshift/cluster-config-operator/pull/392)
* [OCPNODE-1671](https://issues.redhat.com/browse/OCPNODE-1671): Update api,client-go to add imagepolicy api [#376](https://github.com/openshift/cluster-config-operator/pull/376)
* Revert "OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART" [#388](https://github.com/openshift/cluster-config-operator/pull/388)
* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator-container image to be consistent with ART [#385](https://github.com/openshift/cluster-config-operator/pull/385)
* read featuregates from openshift/api [#349](https://github.com/openshift/cluster-config-operator/pull/349)
* yield CRDs and empty resource rendering to api imge [#379](https://github.com/openshift/cluster-config-operator/pull/379)
* [CNF-10479](https://issues.redhat.com/browse/CNF-10479): Bump up api to pull mixed cpu allocation feature gate [#386](https://github.com/openshift/cluster-config-operator/pull/386)
* [NP-793](https://issues.redhat.com/browse/NP-793): Bump github.com/openshift/api [#375](https://github.com/openshift/cluster-config-operator/pull/375)
* create manifest directory during rendering [#382](https://github.com/openshift/cluster-config-operator/pull/382)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#378](https://github.com/openshift/cluster-config-operator/pull/378)
* create parent dir for output [#381](https://github.com/openshift/cluster-config-operator/pull/381)
* Allow split rendering between cluster-config and openshift/api [#380](https://github.com/openshift/cluster-config-operator/pull/380)
* [MON-3480](https://issues.redhat.com/browse/MON-3480): Add MetricsServer FeatureGate [#377](https://github.com/openshift/cluster-config-operator/pull/377)
* NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie [#361](https://github.com/openshift/cluster-config-operator/pull/361)
* [MCO-813](https://issues.redhat.com/browse/MCO-813): add MCN featuregate [#368](https://github.com/openshift/cluster-config-operator/pull/368)
* [SPLAT-1127](https://issues.redhat.com/browse/SPLAT-1127): bring in vSphere CPMSO API updates [#342](https://github.com/openshift/cluster-config-operator/pull/342)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Update openshift/api package to latest version [#365](https://github.com/openshift/cluster-config-operator/pull/365)
* [OCPBUGS-21744](https://issues.redhat.com/browse/OCPBUGS-21744): bump library-go to include switch to HTTP/1.1 [#366](https://github.com/openshift/cluster-config-operator/pull/366)
* [CFE-887](https://issues.redhat.com/browse/CFE-887): Bump openshift/api to add DNSNameResolver. [#364](https://github.com/openshift/cluster-config-operator/pull/364)
* Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. [#358](https://github.com/openshift/cluster-config-operator/pull/358)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Remove Build CRD [#360](https://github.com/openshift/cluster-config-operator/pull/360)
* Remove AdmissionWebhookMatchConditions feature gate [#359](https://github.com/openshift/cluster-config-operator/pull/359)
* [OCPVE-708](https://issues.redhat.com/browse/OCPVE-708): feat: bump(api) [#357](https://github.com/openshift/cluster-config-operator/pull/357)
* [OCPCLOUD-1989](https://issues.redhat.com/browse/OCPCLOUD-1989): Promote GCP CCM from TPNU to default [#319](https://github.com/openshift/cluster-config-operator/pull/319)
* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator images to be consistent with ART [#353](https://github.com/openshift/cluster-config-operator/pull/353)
* [CCO-412](https://issues.redhat.com/browse/CCO-412): Bump API to promote azureWorkloadIdentity to defaultFeatures [#351](https://github.com/openshift/cluster-config-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/91fa980a5be1d3c91786ff41a0a9394adb75671f...441d29c92b1759d1780a525112e764280b78b0d6)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1a0064052f0f83792f9c668d93746dbfb7f7a5d8)
* [OCPBUGS-34970](https://issues.redhat.com/browse/OCPBUGS-34970): Add unreadyNodeGracePeriod for allowing brief node hiccups [#298](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/298)
* [OCPBUGS-35227](https://issues.redhat.com/browse/OCPBUGS-35227): Improved debugging of API listing errors [#300](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/300)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Modified webhook to reject changes to vsphere fields coming from failure domains. [#291](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/291)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#282](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/282)
* Drop CRDs for CPMS [#292](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/292)
* [OCPBUGS-31808](https://issues.redhat.com/browse/OCPBUGS-31808): Fix ExportFailureDomain to handle empty platform spec [#287](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/287)
* [OCPBUGS-32295](https://issues.redhat.com/browse/OCPBUGS-32295): Modified webhook to allow templates by name instead of just by path. [#288](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/288)
* [SPLAT-1440](https://issues.redhat.com/browse/SPLAT-1440): prevent rollout due to irrelevant path artifacts [#275](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/275)
* [OCPBUGS-26127](https://issues.redhat.com/browse/OCPBUGS-26127): add snyk configuration file [#277](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/277)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Fix vSphere machineprovider InjectFailureDomain to handle empty network device list. [#281](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/281)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Modified vSphere config provider to not lose AddressesFromPools when applying Failure Domains [#273](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/273)
* [OCPBUGS-29249](https://issues.redhat.com/browse/OCPBUGS-29249): Never delete a Machine when there's a single Machine in an index [#278](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/278)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#276](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/276)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#274](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/274)
* [SPLAT-1391](https://issues.redhat.com/browse/SPLAT-1391): promote vSphere from tech preview [#272](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/272)
* [OCPCLOUD-2415](https://issues.redhat.com/browse/OCPCLOUD-2415): Update K8s deps to 1.29 [#271](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/271)
* [OCPBUGS-25577](https://issues.redhat.com/browse/OCPBUGS-25577): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#270](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/270)
* [OCPCLOUD-1894](https://issues.redhat.com/browse/OCPCLOUD-1894): Implement admission warning for missing target pools [#269](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/269)
* [OCPBUGS-24967](https://issues.redhat.com/browse/OCPBUGS-24967): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#268](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/268)
* [OCPBUGS-24140](https://issues.redhat.com/browse/OCPBUGS-24140): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#266](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/266)
* [SPLAT-1280](https://issues.redhat.com/browse/SPLAT-1280): update documentation for vSphere [#267](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/267)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains [#258](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/258)
* [SPLAT-1129](https://issues.redhat.com/browse/SPLAT-1129): adding failure domain awareness for vSphere [#228](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/228)
* [OCPCLOUD-2297](https://issues.redhat.com/browse/OCPCLOUD-2297): webhook/openstack: validate etcd block device size [#264](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/264)
* Revert #239 "OCPCLOUD-2167: Test unhealthy node cases" [#262](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/262)
* OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices [#255](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/255)
* [OCPCLOUD-2167](https://issues.redhat.com/browse/OCPCLOUD-2167): Test unhealthy node cases [#239](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/239)
* [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Reimplement "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#234](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/234)
* [SPLAT-1211](https://issues.redhat.com/browse/SPLAT-1211): recognize topology and failure domains represented by the infrastructure resource [#250](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/250)
* Update OWNERS [#253](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/253)
* [OCPBUGS-21863](https://issues.redhat.com/browse/OCPBUGS-21863): webhooks: set min version TLS 1.2 [#252](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/252)
* [OCPBUGS-21641](https://issues.redhat.com/browse/OCPBUGS-21641): Bump golang.org/x/net to v0.17.0 [#251](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/251)
* [OCPBUGS-17288](https://issues.redhat.com/browse/OCPBUGS-17288), [OCPCLOUD-2179](https://issues.redhat.com/browse/OCPCLOUD-2179): Update dependencies to k8s 1.28 [#248](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/248)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): e2e: gcp e2-custom increase memory [#246](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/246)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): fix: e2e: add gcp custom type to test framework [#244](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/244)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Check CPMS events are not present when we expect error [#243](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/243)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Add events for machine creation/deletion [#242](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/242)
* [OCPBUGS-19226](https://issues.redhat.com/browse/OCPBUGS-19226): Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#241](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/241)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/074a22ce411beae063af06423ecf3458c67e9cc3...1a0064052f0f83792f9c668d93746dbfb7f7a5d8)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/439826e1a723c094717877db0f2ca1848d0fb10a)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#196](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/196)
* [STOR-1817](https://issues.redhat.com/browse/STOR-1817): Avoid deleting VolumeGroupSnapshot resources [#200](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/200)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#193](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/193)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Update manifests to v7.0.0 [#201](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/201)
* [OCPBUGS-31497](https://issues.redhat.com/browse/OCPBUGS-31497): create suitable role and roleBinding for csi-snapshot-webhook [#202](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/202)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set SecurityContext for HyperShift [#197](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/197)
* [OCPBUGS-30483](https://issues.redhat.com/browse/OCPBUGS-30483): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#198](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/198)
* [OCPBUGS-29577](https://issues.redhat.com/browse/OCPBUGS-29577): Apply hypershift cluster-profile for ibm-cloud-managed [#194](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/194)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Fix: typo of volumegroupsnapshots [#195](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/195)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Pass VolumeGroupSnapshot argument if feature is enabled [#191](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/191)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#192](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/192)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#190](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/190)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#187](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/187)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Revert "HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook" [#188](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/188)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): add KAS access label to csi-snapshot-controller and csi-snapshot-webhook [#182](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/182)
* [OCPBUGS-25558](https://issues.redhat.com/browse/OCPBUGS-25558): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#183](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/183)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#181](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/181)
* [OCPBUGS-25149](https://issues.redhat.com/browse/OCPBUGS-25149): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#179](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/179)
* [OCPBUGS-23838](https://issues.redhat.com/browse/OCPBUGS-23838): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#177](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/177)
* [OCPBUGS-24908](https://issues.redhat.com/browse/OCPBUGS-24908): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#178](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/178)
* [OCPBUGS-24099](https://issues.redhat.com/browse/OCPBUGS-24099): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#176](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/176)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#175](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/175)
* [OCPBUGS-22569](https://issues.redhat.com/browse/OCPBUGS-22569): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#173](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/173)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#172](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/172)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#166](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/166)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Restart webhook Pods if `csi-snapshot-webhook-secret` changed [#157](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/157)
* [OCPBUGS-19162](https://issues.redhat.com/browse/OCPBUGS-19162): Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#160](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/160)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Move readonlyRootFilesystem to the right place [#159](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/159)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d4a1162514ecbf248b04e6e8625d17bc2b775ccd...439826e1a723c094717877db0f2ca1848d0fb10a)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a14431f277364605ede8e95530453c5fb7267e33)
* [CFE-964](https://issues.redhat.com/browse/CFE-964): Add DNSNameResolver controller [#394](https://github.com/openshift/cluster-dns-operator/pull/394)
* [OCPBUGS-32941](https://issues.redhat.com/browse/OCPBUGS-32941): Bump to Kubernetes 1.29 and controller-runtime 0.17.3 [#408](https://github.com/openshift/cluster-dns-operator/pull/408)
* [OCPBUGS-27924](https://issues.redhat.com/browse/OCPBUGS-27924): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 [#402](https://github.com/openshift/cluster-dns-operator/pull/402)
* [CFE-852](https://issues.redhat.com/browse/CFE-852): Enable ocp_dnsnameresolver CoreDNS plugin [#393](https://github.com/openshift/cluster-dns-operator/pull/393)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#403](https://github.com/openshift/cluster-dns-operator/pull/403)
* [OCPBUGS-24884](https://issues.redhat.com/browse/OCPBUGS-24884): Updating ose-cluster-dns-operator-container image to be consistent with ART [#397](https://github.com/openshift/cluster-dns-operator/pull/397)
* [OCPBUGS-24602](https://issues.redhat.com/browse/OCPBUGS-24602): Enable topology-aware hints iff nodes in >=2 zones [#398](https://github.com/openshift/cluster-dns-operator/pull/398)
* [OCPBUGS-23741](https://issues.redhat.com/browse/OCPBUGS-23741): Bump to k8s.io v0.28.3, controller-runtime v0.16.3 [#395](https://github.com/openshift/cluster-dns-operator/pull/395)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Ignore max unavailable for status [#386](https://github.com/openshift/cluster-dns-operator/pull/386)
* [OCPBUGS-22018](https://issues.redhat.com/browse/OCPBUGS-22018): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#387](https://github.com/openshift/cluster-dns-operator/pull/387)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "Revert "Set DNS DaemonSet's maxSurge value to 10%"" [#384](https://github.com/openshift/cluster-dns-operator/pull/384)
* [OCPBUGS-19510](https://issues.redhat.com/browse/OCPBUGS-19510): test/e2e: Set controller-runtime logger [#381](https://github.com/openshift/cluster-dns-operator/pull/381)
* [OCPBUGS-19126](https://issues.redhat.com/browse/OCPBUGS-19126): Updating ose-cluster-dns-operator images to be consistent with ART [#380](https://github.com/openshift/cluster-dns-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/9964f0b6fce1ba7a26995762602685cd07416928...a14431f277364605ede8e95530453c5fb7267e33)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/dc4f4e858ba8395dce6883242c7d12009685d145)
* [ETCD-621](https://issues.redhat.com/browse/ETCD-621): Update api vendor libraries to get GA'ed tuning profiles [#1265](https://github.com/openshift/cluster-etcd-operator/pull/1265)
* [OCPBUGS-33495](https://issues.redhat.com/browse/OCPBUGS-33495): return errors in wait-for-ceo [#1260](https://github.com/openshift/cluster-etcd-operator/pull/1260)
* [OCPBUGS-31849](https://issues.redhat.com/browse/OCPBUGS-31849): check the quorum in case the cluster is healthy or not after generating certs [#1239](https://github.com/openshift/cluster-etcd-operator/pull/1239)
* NO-JIRA: remove cluster-backup pod [#1182](https://github.com/openshift/cluster-etcd-operator/pull/1182)
* [OCPBUGS-31956](https://issues.redhat.com/browse/OCPBUGS-31956): update golang x net [#1252](https://github.com/openshift/cluster-etcd-operator/pull/1252)
* [OCPBUGS-31249](https://issues.redhat.com/browse/OCPBUGS-31249): remove etcd-health-probe log [#1230](https://github.com/openshift/cluster-etcd-operator/pull/1230)
* [ETCD-583](https://issues.redhat.com/browse/ETCD-583): add signer expiration metric and alert [#1249](https://github.com/openshift/cluster-etcd-operator/pull/1249)
* [API-1800](https://issues.redhat.com/browse/API-1800): manifests: convert SecretTypeTLS secrets to kubernetes.io/tls [#1247](https://github.com/openshift/cluster-etcd-operator/pull/1247)
* NO-ISSUE: use IsBootstrapComplete from library-go [#1244](https://github.com/openshift/cluster-etcd-operator/pull/1244)
* [OCPBUGS-32217](https://issues.redhat.com/browse/OCPBUGS-32217): avoid race conditions during render cert creation [#1246](https://github.com/openshift/cluster-etcd-operator/pull/1246)
* [OCPBUGS-32176](https://issues.redhat.com/browse/OCPBUGS-32176): immediately return on dynamic certs errors [#1245](https://github.com/openshift/cluster-etcd-operator/pull/1245)
* Revert "ETCD-579: store revision at which signers are rotated" [#1243](https://github.com/openshift/cluster-etcd-operator/pull/1243)
* [ETCD-579](https://issues.redhat.com/browse/ETCD-579): store revision at which signers are rotated [#1235](https://github.com/openshift/cluster-etcd-operator/pull/1235)
* [ETCD-580](https://issues.redhat.com/browse/ETCD-580): Decrease validity period to prevent cert expiry for offline clusters [#1238](https://github.com/openshift/cluster-etcd-operator/pull/1238)
* [OCPBUGS-31658](https://issues.redhat.com/browse/OCPBUGS-31658): Fix feature set custom no upgrade [#1233](https://github.com/openshift/cluster-etcd-operator/pull/1233)
* NO-JIRA: fail certsignercontroller sync when secret can not be applied [#1226](https://github.com/openshift/cluster-etcd-operator/pull/1226)
* [ETCD-535](https://issues.redhat.com/browse/ETCD-535): Manual CA rotation should rotate all leaf certs [#1200](https://github.com/openshift/cluster-etcd-operator/pull/1200)
* Revert "OCPBUGS-30169: add timeout to etcd client.New config" [#1222](https://github.com/openshift/cluster-etcd-operator/pull/1222)
* [OCPBUGS-30873](https://issues.redhat.com/browse/OCPBUGS-30873): CEO aliveness check should only detect deadlocks [#1223](https://github.com/openshift/cluster-etcd-operator/pull/1223)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=master [#1219](https://github.com/openshift/cluster-etcd-operator/pull/1219)
* [ETCD-518](https://issues.redhat.com/browse/ETCD-518): garbage collect unused dynamic certs [#1209](https://github.com/openshift/cluster-etcd-operator/pull/1209)
* [OCPBUGS-30169](https://issues.redhat.com/browse/OCPBUGS-30169): add timeout to etcd client.New config [#1215](https://github.com/openshift/cluster-etcd-operator/pull/1215)
* NO-JIRA: replace nodelister with master nodelister [#1205](https://github.com/openshift/cluster-etcd-operator/pull/1205)
* [ETCD-517](https://issues.redhat.com/browse/ETCD-517): run certsignercontroller for bootstrap render [#1186](https://github.com/openshift/cluster-etcd-operator/pull/1186)
* [ETCD-516](https://issues.redhat.com/browse/ETCD-516): CEO needs to react on changing CA cert bundle and client certs [#1202](https://github.com/openshift/cluster-etcd-operator/pull/1202)
* NO-JIRA: increase client pool size [#1203](https://github.com/openshift/cluster-etcd-operator/pull/1203)
* [OCPBUGS-29417](https://issues.redhat.com/browse/OCPBUGS-29417): Sno fix bootstrap race [#1201](https://github.com/openshift/cluster-etcd-operator/pull/1201)
* [OCPBUGS-27926](https://issues.redhat.com/browse/OCPBUGS-27926): Updating cluster-etcd-operator-container image to be c… [#1189](https://github.com/openshift/cluster-etcd-operator/pull/1189)
* Revert "Revert "OCPBUGS-22969: Use v1 for flowcontrol API"" [#1199](https://github.com/openshift/cluster-etcd-operator/pull/1199)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1194](https://github.com/openshift/cluster-etcd-operator/pull/1194)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-etcd-operator namespace [#1198](https://github.com/openshift/cluster-etcd-operator/pull/1198)
* Revert "OCPBUGS-22969: Use v1 for flowcontrol API" [#1197](https://github.com/openshift/cluster-etcd-operator/pull/1197)
* [TRT-1485](https://issues.redhat.com/browse/TRT-1485): Revert #1177 "ETCD-512: refactoring the cert signer controller" [#1193](https://github.com/openshift/cluster-etcd-operator/pull/1193)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1177](https://github.com/openshift/cluster-etcd-operator/pull/1177)
* [OCPBUGS-27959](https://issues.redhat.com/browse/OCPBUGS-27959): fix panic in health check timeouts [#1190](https://github.com/openshift/cluster-etcd-operator/pull/1190)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1149](https://github.com/openshift/cluster-etcd-operator/pull/1149)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): update library-go to latest commit [#1180](https://github.com/openshift/cluster-etcd-operator/pull/1180)
* [OCPBUGS-24889](https://issues.redhat.com/browse/OCPBUGS-24889): Updating cluster-etcd-operator-container image to be consistent with ART [#1175](https://github.com/openshift/cluster-etcd-operator/pull/1175)
* NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy [#1171](https://github.com/openshift/cluster-etcd-operator/pull/1171)
* add ownership for etcd-ca-bundle that I don't think is updated [#1159](https://github.com/openshift/cluster-etcd-operator/pull/1159)
* [MON-3287](https://issues.redhat.com/browse/MON-3287): manage RBAC resources for prometheus to scrape openshift-etcd [#1164](https://github.com/openshift/cluster-etcd-operator/pull/1164)
* Revert "OCPBUGS-17199: remove revision stability check from bootstrap complet…" [#1167](https://github.com/openshift/cluster-etcd-operator/pull/1167)
* [OCPBUGS-23461](https://issues.redhat.com/browse/OCPBUGS-23461): Add annotation in the etcd-guard static pod for worklo… [#1161](https://github.com/openshift/cluster-etcd-operator/pull/1161)
* [OCPBUGS-21922](https://issues.redhat.com/browse/OCPBUGS-21922): fixing CVE-2023-39325 by updating dependencies [#1141](https://github.com/openshift/cluster-etcd-operator/pull/1141)
* [OCPBUGS-17199](https://issues.redhat.com/browse/OCPBUGS-17199): remove revision stability check from bootstrap complet… [#1087](https://github.com/openshift/cluster-etcd-operator/pull/1087)
* [ETCD-478](https://issues.redhat.com/browse/ETCD-478): Use golang etcd client for auto backups [#1099](https://github.com/openshift/cluster-etcd-operator/pull/1099)
* [OCPBUGS-19987](https://issues.redhat.com/browse/OCPBUGS-19987): relax readiness to local serializable requests [#1134](https://github.com/openshift/cluster-etcd-operator/pull/1134)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): prioritize podman pull in etcdctl dl [#1132](https://github.com/openshift/cluster-etcd-operator/pull/1132)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): remove UpgradeBackupController [#1129](https://github.com/openshift/cluster-etcd-operator/pull/1129)
* [ETCD-187](https://issues.redhat.com/browse/ETCD-187): add dashboards CPU iotwait on master nodes [#1119](https://github.com/openshift/cluster-etcd-operator/pull/1119)
* [OCPBUGS-19528](https://issues.redhat.com/browse/OCPBUGS-19528): introduce backup removal controller [#1126](https://github.com/openshift/cluster-etcd-operator/pull/1126)
* [OCPBUGS-19137](https://issues.redhat.com/browse/OCPBUGS-19137): Updating cluster-etcd-operator images to be consistent with ART [#1115](https://github.com/openshift/cluster-etcd-operator/pull/1115)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1123](https://github.com/openshift/cluster-etcd-operator/pull/1123)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): Avoid caching etcdctl on cluster-backup.sh [#1113](https://github.com/openshift/cluster-etcd-operator/pull/1113)
* indicate ownership of etcd certificates [#1110](https://github.com/openshift/cluster-etcd-operator/pull/1110)
* [OCPBUGS-18990](https://issues.redhat.com/browse/OCPBUGS-18990): restore the correct static pod list [#1111](https://github.com/openshift/cluster-etcd-operator/pull/1111)
* [OCPBUGS-18357](https://issues.redhat.com/browse/OCPBUGS-18357): prepend authfile to podman create [#1105](https://github.com/openshift/cluster-etcd-operator/pull/1105)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a85f3135b23924ceb5bb5c05ab72af99b23ba061...dc4f4e858ba8395dce6883242c7d12009685d145)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0fc07edf2cd988e119961d07e67c36c7717ce6f2)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): add SAR capability to image-registry [#1054](https://github.com/openshift/cluster-image-registry-operator/pull/1054)
* [OCPBUGS-34165](https://issues.redhat.com/browse/OCPBUGS-34165): azure-path-fix: get client secret from k8s secret [#1041](https://github.com/openshift/cluster-image-registry-operator/pull/1041)
* [OCPBUGS-34166](https://issues.redhat.com/browse/OCPBUGS-34166): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1042](https://github.com/openshift/cluster-image-registry-operator/pull/1042)
* [OCPBUGS-34069](https://issues.redhat.com/browse/OCPBUGS-34069): Bump openshift api, client-go & library-go [#1039](https://github.com/openshift/cluster-image-registry-operator/pull/1039)
* [OCPBUGS-33172](https://issues.redhat.com/browse/OCPBUGS-33172): azurepathfix: check if platform status is nil before accessing it [#1030](https://github.com/openshift/cluster-image-registry-operator/pull/1030)
* [OCPBUGS-32491](https://issues.redhat.com/browse/OCPBUGS-32491): Power VS: Add support for Power VS endpoint overrides [#1024](https://github.com/openshift/cluster-image-registry-operator/pull/1024)
* [OCPBUGS-29559](https://issues.redhat.com/browse/OCPBUGS-29559): Apply hypershift cluster-profile for ibm-cloud-managed [#999](https://github.com/openshift/cluster-image-registry-operator/pull/999)
* [OCPBUGS-32328](https://issues.redhat.com/browse/OCPBUGS-32328): azure-path-fix: support auth via account key (without clientID) [#1021](https://github.com/openshift/cluster-image-registry-operator/pull/1021)
* [OCPBUGS-30484](https://issues.redhat.com/browse/OCPBUGS-30484): bump indirect google protobuf dependency [#1015](https://github.com/openshift/cluster-image-registry-operator/pull/1015)
* NO-JIRA: remove bparees from owners [#1019](https://github.com/openshift/cluster-image-registry-operator/pull/1019)
* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): bump aws-sdk-go from v1.44 to v1.50 [#1012](https://github.com/openshift/cluster-image-registry-operator/pull/1012)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1008](https://github.com/openshift/cluster-image-registry-operator/pull/1008)
* NO-JIRA: bump golangci-lint to v1.56.2 [#1013](https://github.com/openshift/cluster-image-registry-operator/pull/1013)
* [OCPBUGS-29932](https://issues.redhat.com/browse/OCPBUGS-29932): cmd/move-blobs: log and exit 1 on error instead of panic [#1006](https://github.com/openshift/cluster-image-registry-operator/pull/1006)
* [OCPBUGS-29637](https://issues.redhat.com/browse/OCPBUGS-29637): azurepathfix: fix stack hub, government and workload identity setup [#1003](https://github.com/openshift/cluster-image-registry-operator/pull/1003)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): move azure storage blobs from `docker` back into `/docker` [#998](https://github.com/openshift/cluster-image-registry-operator/pull/998)
* NO-JIRA: Add hack/local-dev.sh [#996](https://github.com/openshift/cluster-image-registry-operator/pull/996)
* [OCPBUGS-28225](https://issues.redhat.com/browse/OCPBUGS-28225): pkg/storage/s3: enable bucket key on encryption settings [#993](https://github.com/openshift/cluster-image-registry-operator/pull/993)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#992](https://github.com/openshift/cluster-image-registry-operator/pull/992)
* NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 [#989](https://github.com/openshift/cluster-image-registry-operator/pull/989)
* [OCPBUGS-26767](https://issues.redhat.com/browse/OCPBUGS-26767): MULTIARCH-4074: PowerVS: update supported regions [#987](https://github.com/openshift/cluster-image-registry-operator/pull/987)
* [IR-409](https://issues.redhat.com/browse/IR-409): build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 [#974](https://github.com/openshift/cluster-image-registry-operator/pull/974)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#979](https://github.com/openshift/cluster-image-registry-operator/pull/979)
* [IR-410](https://issues.redhat.com/browse/IR-410): build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 [#980](https://github.com/openshift/cluster-image-registry-operator/pull/980)
* [OCPBUGS-11624](https://issues.redhat.com/browse/OCPBUGS-11624): manifests/02-rbac.yaml: stop using wild cards [#964](https://github.com/openshift/cluster-image-registry-operator/pull/964)
* [OCPBUGS-24649](https://issues.redhat.com/browse/OCPBUGS-24649): add private endpoint permissions to Azure credentials request [#971](https://github.com/openshift/cluster-image-registry-operator/pull/971)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#975](https://github.com/openshift/cluster-image-registry-operator/pull/975)
* [IR-412](https://issues.redhat.com/browse/IR-412): IBMCloud: Add support for endpoint overrides [#955](https://github.com/openshift/cluster-image-registry-operator/pull/955)
* [CCO-248](https://issues.redhat.com/browse/CCO-248): Revert "Merge pull request #965 from jstuever/TRT-1368" [#967](https://github.com/openshift/cluster-image-registry-operator/pull/967)
* [OCPVE-790](https://issues.redhat.com/browse/OCPVE-790): annotate credentials request manifests [#959](https://github.com/openshift/cluster-image-registry-operator/pull/959)
* [OCPBUGS-24161](https://issues.redhat.com/browse/OCPBUGS-24161): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#966](https://github.com/openshift/cluster-image-registry-operator/pull/966)
* [TRT-1368](https://issues.redhat.com/browse/TRT-1368): Revert "Merge pull request #935 from flavianmissi/CCO-248" [#965](https://github.com/openshift/cluster-image-registry-operator/pull/965)
* [IR-366](https://issues.redhat.com/browse/IR-366), [IR-367](https://issues.redhat.com/browse/IR-367), [IR-411](https://issues.redhat.com/browse/IR-411): allow users to configure private storage accounts in Azure [#930](https://github.com/openshift/cluster-image-registry-operator/pull/930)
* [IR-408](https://issues.redhat.com/browse/IR-408): request individual permissions for gcs [#935](https://github.com/openshift/cluster-image-registry-operator/pull/935)
* [OCPBUGS-2889](https://issues.redhat.com/browse/OCPBUGS-2889): accept user/pass OR application credentials on Swift UPI secret [#924](https://github.com/openshift/cluster-image-registry-operator/pull/924)
* [IR-406](https://issues.redhat.com/browse/IR-406), [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): bump k8s and openshift packages [#936](https://github.com/openshift/cluster-image-registry-operator/pull/936)
* [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): disable http2 for metrics endpoint [#938](https://github.com/openshift/cluster-image-registry-operator/pull/938)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): move pruner role creation from openshift-apiserver [#925](https://github.com/openshift/cluster-image-registry-operator/pull/925)
* [OCPBUGS-19262](https://issues.redhat.com/browse/OCPBUGS-19262): Updating ose-cluster-image-registry-operator images to be consistent with ART [#918](https://github.com/openshift/cluster-image-registry-operator/pull/918)
* [OCPBUGS-18469](https://issues.redhat.com/browse/OCPBUGS-18469): increase storage account key cache expiration [#912](https://github.com/openshift/cluster-image-registry-operator/pull/912)
* [OCPBUGS-17060](https://issues.redhat.com/browse/OCPBUGS-17060): use Recreate on operator deployment [#908](https://github.com/openshift/cluster-image-registry-operator/pull/908)
* [OCPBUGS-18103](https://issues.redhat.com/browse/OCPBUGS-18103): check if response is nil before using it [#909](https://github.com/openshift/cluster-image-registry-operator/pull/909)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/36b3ccaf8de00ef242e2c328dc4a054d7c9be106...0fc07edf2cd988e119961d07e67c36c7717ce6f2)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/28c943937d7bc6718e10af50da82097ce8fc6877)
* [OCPBUGS-34835](https://issues.redhat.com/browse/OCPBUGS-34835): internalServiceChanged: Fix target port logic [#1072](https://github.com/openshift/cluster-ingress-operator/pull/1072)
* [OCPBUGS-34837](https://issues.redhat.com/browse/OCPBUGS-34837): Bump openshift/library-go to resolve NewPrometheusClient E2E failures [#1074](https://github.com/openshift/cluster-ingress-operator/pull/1074)
* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Allow operator to update Route spec.subdomain [#1047](https://github.com/openshift/cluster-ingress-operator/pull/1047)
* [OCPBUGS-32942](https://issues.redhat.com/browse/OCPBUGS-32942): Bump controller-runtime to v0.17.3 [#1050](https://github.com/openshift/cluster-ingress-operator/pull/1050)
* [OCPBUGS-28673](https://issues.redhat.com/browse/OCPBUGS-28673): implement connect timeout tuning option [#1035](https://github.com/openshift/cluster-ingress-operator/pull/1035)
* [NE-1317](https://issues.redhat.com/browse/NE-1317): manifests - add ingress capability annotation [#950](https://github.com/openshift/cluster-ingress-operator/pull/950)
* [OCPBUGS-32371](https://issues.redhat.com/browse/OCPBUGS-32371): Bump openshift/api, and update CRD generation [#1045](https://github.com/openshift/cluster-ingress-operator/pull/1045)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add vnet subnet read and join permission for azure [#1029](https://github.com/openshift/cluster-ingress-operator/pull/1029)
* [OCPBUGS-30834](https://issues.redhat.com/browse/OCPBUGS-30834): Update to go 1.21 [#1040](https://github.com/openshift/cluster-ingress-operator/pull/1040)
* [OCPBUGS-31722](https://issues.redhat.com/browse/OCPBUGS-31722): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1037](https://github.com/openshift/cluster-ingress-operator/pull/1037)
* [OCPBUGS-3522](https://issues.redhat.com/browse/OCPBUGS-3522): Include recent errors in canary checks fail [#865](https://github.com/openshift/cluster-ingress-operator/pull/865)
* [OCPBUGS-30091](https://issues.redhat.com/browse/OCPBUGS-30091): TestHostNetworkPortBinding: Delete t.Parallel() [#1032](https://github.com/openshift/cluster-ingress-operator/pull/1032)
* [CFE-987](https://issues.redhat.com/browse/CFE-987): Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods [#1017](https://github.com/openshift/cluster-ingress-operator/pull/1017)
* [CORS-2317](https://issues.redhat.com/browse/CORS-2317): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1016](https://github.com/openshift/cluster-ingress-operator/pull/1016)
* [OCPBUGS-28596](https://issues.redhat.com/browse/OCPBUGS-28596): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 [#1020](https://github.com/openshift/cluster-ingress-operator/pull/1020)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1019](https://github.com/openshift/cluster-ingress-operator/pull/1019)
* [NE-1490](https://issues.redhat.com/browse/NE-1490): update to go v1.20 [#1012](https://github.com/openshift/cluster-ingress-operator/pull/1012)
* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes [#980](https://github.com/openshift/cluster-ingress-operator/pull/980)
* [CCO-249](https://issues.redhat.com/browse/CCO-249): Replace GCP role with explicit permissions [#844](https://github.com/openshift/cluster-ingress-operator/pull/844)
* [OCPBUGS-25006](https://issues.redhat.com/browse/OCPBUGS-25006): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-ingress-operator/pull/1006)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert " OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved" [#1011](https://github.com/openshift/cluster-ingress-operator/pull/1011)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert "Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest" and add changes to skip test only for Azure and GCP [#1008](https://github.com/openshift/cluster-ingress-operator/pull/1008)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Skip CI for scope change until OCPBUGS-24044 is resolved [#1007](https://github.com/openshift/cluster-ingress-operator/pull/1007)
* [OCPVE-780](https://issues.redhat.com/browse/OCPVE-780): annotate credentials request manifests [#995](https://github.com/openshift/cluster-ingress-operator/pull/995)
* [OCPBUGS-23742](https://issues.redhat.com/browse/OCPBUGS-23742): Bump controller-runtime to v0.16.3 [#1001](https://github.com/openshift/cluster-ingress-operator/pull/1001)
* [NE-1402](https://issues.redhat.com/browse/NE-1402): Add service endpoint override capability to IBM DNS provider [#990](https://github.com/openshift/cluster-ingress-operator/pull/990)
* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Revert "OCPBUGS-16762: Bump openshift/api for container.maxLength fix" [#982](https://github.com/openshift/cluster-ingress-operator/pull/982)
* [OCPBUGS-14994](https://issues.redhat.com/browse/OCPBUGS-14994): Don't add clientca-configmap finalizer if deleting [#948](https://github.com/openshift/cluster-ingress-operator/pull/948)
* [OCPBUGS-22020](https://issues.redhat.com/browse/OCPBUGS-22020): Bump golang.org/x/net for CVE-2023-44487 [#985](https://github.com/openshift/cluster-ingress-operator/pull/985)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): test/e2e: Add test case for 2000000 maxConnections [#983](https://github.com/openshift/cluster-ingress-operator/pull/983)
* [OCPBUGS-20192](https://issues.redhat.com/browse/OCPBUGS-20192): Require non-readonly filesystem in router container [#981](https://github.com/openshift/cluster-ingress-operator/pull/981)
* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Bump openshift/api for container.maxLength fix [#979](https://github.com/openshift/cluster-ingress-operator/pull/979)
* [OCPBUGS-3541](https://issues.redhat.com/browse/OCPBUGS-3541): Don't create route metrics for ingress controllers that are not admitted [#869](https://github.com/openshift/cluster-ingress-operator/pull/869)
* [OCPBUGS-18248](https://issues.redhat.com/browse/OCPBUGS-18248): Prevent GatewayClass from getting recreated [#975](https://github.com/openshift/cluster-ingress-operator/pull/975)
* [OCPBUGS-19268](https://issues.redhat.com/browse/OCPBUGS-19268): Updating ose-cluster-ingress-operator images to be consistent with ART [#977](https://github.com/openshift/cluster-ingress-operator/pull/977)
* [OCPBUGS-15900](https://issues.redhat.com/browse/OCPBUGS-15900): TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. [#973](https://github.com/openshift/cluster-ingress-operator/pull/973)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): E2E test for cookie length truncation [#871](https://github.com/openshift/cluster-ingress-operator/pull/871)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/c6fc4df40f69091e864054bc79a88733e7af00fe...28c943937d7bc6718e10af50da82097ce8fc6877)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d790493cfc43fd33450ca27633cbe37aa17427d2)
* [OCPBUGS-25104](https://issues.redhat.com/browse/OCPBUGS-25104): revert dev cert rotation 4.16 [#1695](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1695)
* [OCPBUGS-34408](https://issues.redhat.com/browse/OCPBUGS-34408): Create one-shot migrations for the flowcontrol group. [#1690](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1690)
* [OCPBUGS-33522](https://issues.redhat.com/browse/OCPBUGS-33522): add a controller that reconciles SCCs' volumes [#1675](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1675)
* NO-ISSUE: Revert "add SNO control plane high cpu usage alert" [#1674](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1674)
* [OCPBUGS-33184](https://issues.redhat.com/browse/OCPBUGS-33184): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1671](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1671)
* [OCPEDGE-902](https://issues.redhat.com/browse/OCPEDGE-902): add SNO control plane high cpu usage alert [#1660](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1660)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#1664](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1664)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1577](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1577)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret controller in update only mode [#1659](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1659)
* NO-ISSUE: Revert "certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates [#1661](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1661)
* NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry [#1652](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1652)
* [OCPBUGS-30119](https://issues.redhat.com/browse/OCPBUGS-30119): certrotation: Bump library-go to latest master [#1651](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1651)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): External CCM should no longer rely on feature gate access [#1649](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1649)
* [OCPBUGS-25894](https://issues.redhat.com/browse/OCPBUGS-25894): operator: stop removing kube-apiserver-slos asset [#1642](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1642)
* NO-JIRA: extend node-system-admin-client validity to 2 years [#1618](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1618)
* [OBSDA-553](https://issues.redhat.com/browse/OBSDA-553): add provider name to cluster_infrastructure_provider when external platform [#1638](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1638)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-kube-apiserver-operator namespace [#1637](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1637)
* [OCPBUGS-27842](https://issues.redhat.com/browse/OCPBUGS-27842): Add sno section to alert description [#1633](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1633)
* NO-JIRA: Add Vu and Vadim to OWNERS [#1634](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1634)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): when skipping a webhook check because of missing CA log the name of the webhook [#1632](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1632)
* NO-JIRA: Add ownership for the admin kubeconfig [#1584](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1584)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#1546](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1546)
* NO-ISSUE: prevent update status conflicts [#1621](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1621)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#1619](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1619)
* [OCPBUGS-14496](https://issues.redhat.com/browse/OCPBUGS-14496): manifests: fix the scope of the TechPreviewNoUpgrade alert [#1512](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1512)
* [OCPBUGS-24907](https://issues.redhat.com/browse/OCPBUGS-24907): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1606](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1606)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1608](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1608)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1587](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1587)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): revert #1586 #1596 [#1607](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1607)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#1586](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1586)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Set flag to skip setting cloud-provider=external [#1596](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1596)
* [OCPBUGS-24701](https://issues.redhat.com/browse/OCPBUGS-24701): ignore vendor folder in SAST scan [#1599](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1599)
* [AUTH-442](https://issues.redhat.com/browse/AUTH-442): psa cluster fleet evaluation [#1588](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1588)
* [OCPBUGS-24213](https://issues.redhat.com/browse/OCPBUGS-24213): Annotate managed certs [#1568](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1568)
* [OCPBUGS-23796](https://issues.redhat.com/browse/OCPBUGS-23796): use AlwaysAllow UnhealthyPodEvictionPolicy option [#1579](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1579)
* [OCPBUGS-21836](https://issues.redhat.com/browse/OCPBUGS-21836): use external load balancer url for jwks-uri [#1578](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1578)
* manifests: set owning component for TLS artifacts [#1583](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1583)
* [OCPBUGS-19160](https://issues.redhat.com/browse/OCPBUGS-19160): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1550](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1550)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules [#1566](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1566)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests: rename API performance dashboard [#1565](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1565)
* [OCPBUGS-21729](https://issues.redhat.com/browse/OCPBUGS-21729): bump library-go to include switch to HTTP/1.1 [#1567](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1567)
* Update required GV for ValidatingAdmissionPolicy gate. [#1561](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1561)
* Update "deprecated API in use" alert expressions for 1.28. [#1562](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1562)
* bump(openshift/client-go,library-go) [#1560](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1560)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1557](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1557)
* [OCPBUGS-19024](https://issues.redhat.com/browse/OCPBUGS-19024): remove featuregate upgradeable controller that moved to cluster-config-operator [#1547](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1547)
* [OCPBUGS-18247](https://issues.redhat.com/browse/OCPBUGS-18247): manifests: don't include recording rules when Console capability is not enabled [#1542](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1542)
* [OCPBUGS-15504](https://issues.redhat.com/browse/OCPBUGS-15504): manifest: remove kube-apiserver PrometheusRule [#1543](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1543)
* Bump openshift/* libs [#1549](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1549)
* Update to Kubernetes 1.28.2 [#1548](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1548)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1534](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1534)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4302637f4d521bd9880de93df6bc41d44a4b0756...d790493cfc43fd33450ca27633cbe37aa17427d2)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)
* [OCPBUGS-28592](https://issues.redhat.com/browse/OCPBUGS-28592): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/cluster-api-operator/pull/37)
* [OCPBUGS-26140](https://issues.redhat.com/browse/OCPBUGS-26140): Fix formatting in snyk vendor exclusions [#36](https://github.com/openshift/cluster-api-operator/pull/36)
* [OCPBUGS-25634](https://issues.redhat.com/browse/OCPBUGS-25634): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/cluster-api-operator/pull/33)
* [OCPBUGS-24887](https://issues.redhat.com/browse/OCPBUGS-24887): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#32](https://github.com/openshift/cluster-api-operator/pull/32)
* Update OWNERS [#26](https://github.com/openshift/cluster-api-operator/pull/26)
* [OCPBUGS-17289](https://issues.redhat.com/browse/OCPBUGS-17289), [OCPBUGS-21650](https://issues.redhat.com/browse/OCPBUGS-21650), [OCPCLOUD-2215](https://issues.redhat.com/browse/OCPCLOUD-2215): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main [#25](https://github.com/openshift/cluster-api-operator/pull/25)
* [OCPBUGS-19135](https://issues.redhat.com/browse/OCPBUGS-19135): Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#24](https://github.com/openshift/cluster-api-operator/pull/24)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b287d08b3dabe6b3b67b87a8a284f19ed12a165e...95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0338b3be6912024d03def2c26f0fa10218fc2c25)
* [OCPBUGS-33933](https://issues.redhat.com/browse/OCPBUGS-33933): Remove cloud-provider, cloud-config, and cloud-volume-plugin flags [#808](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/808)
* [API-1800](https://issues.redhat.com/browse/API-1800): bindata: convert SecretTypeTLS secrets [#804](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/804)
* [WRKLDS-1169](https://issues.redhat.com/browse/WRKLDS-1169): tolerate node-role.kubernetes.io/control-plane:NoExecute [#802](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/802)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#800](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/800)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): revision_controller: do not create a new revision when a required object is missing [#796](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/796)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition [#795](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/795)
* [OCPBUGS-30488](https://issues.redhat.com/browse/OCPBUGS-30488): bump(google.golang.org/protobuf)=v1.33.0 [#798](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/798)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. [#794](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/794)
* [OCPBUGS-29565](https://issues.redhat.com/browse/OCPBUGS-29565): Apply hypershift cluster-profile for ibm-cloud-managed [#793](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/793)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#786](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/786)
* [OCPBUGS-26117](https://issues.redhat.com/browse/OCPBUGS-26117): Add .snyk file to exclude vendor and ignore unit tests [#784](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/784)
* [OCPBUGS-25587](https://issues.redhat.com/browse/OCPBUGS-25587): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#780](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/780)
* NO-JIRA: Make render unit pass consistently [#782](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/782)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#781](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/781)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#770](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/770)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Removes legacy cloud-provider resources [#778](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/778)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#777](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/777)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#757](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/757)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#775](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/775)
* [OCPBUGS-24162](https://issues.redhat.com/browse/OCPBUGS-24162): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#772](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/772)
* [OCPBUGS-24215](https://issues.redhat.com/browse/OCPBUGS-24215): Annotate rotated certificates [#769](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/769)
* [OCPBUGS-23462](https://issues.redhat.com/browse/OCPBUGS-23462): bump(library-go) [#771](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/771)
* bump(k8s) [#763](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/763)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): bump(openshift/api|client-go|library-go) to pick up http2 disablement [#762](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/762)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): Bump deps to address CVE-2023-44487 [#755](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/755)
* bump(openshift/client-go,library-go) [#753](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/753)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#750](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/750)
* [OCPBUGS-19263](https://issues.redhat.com/browse/OCPBUGS-19263): Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#747](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/747)
* Bump openshift/* libs [#746](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/746)
* Update to Kubernetes 1.28.2 [#744](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/744)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#742](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/742)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/4e059638c2cbf003551ee699106dc024760eece3...0338b3be6912024d03def2c26f0fa10218fc2c25)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/630f63bc7a30d2662bbb5115233144079de6eef6)
* [WRKLDS-1168](https://issues.redhat.com/browse/WRKLDS-1168): tolerate node-role.kubernetes.io/control-plane:NoExecute [#539](https://github.com/openshift/cluster-kube-scheduler-operator/pull/539)
* [OCPBUGS-30489](https://issues.redhat.com/browse/OCPBUGS-30489): bump(google.golang.org/protobuf)=v1.33.0 [#538](https://github.com/openshift/cluster-kube-scheduler-operator/pull/538)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=release-4.16 [#536](https://github.com/openshift/cluster-kube-scheduler-operator/pull/536)
* [OCPBUGS-29566](https://issues.redhat.com/browse/OCPBUGS-29566): Apply hypershift cluster-profile for ibm-cloud-managed [#535](https://github.com/openshift/cluster-kube-scheduler-operator/pull/535)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): README: fix dynamicResourceAllocation field name [#534](https://github.com/openshift/cluster-kube-scheduler-operator/pull/534)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate [#532](https://github.com/openshift/cluster-kube-scheduler-operator/pull/532)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): add PSa labels to openshift-kube-scheduler-operator namespace [#533](https://github.com/openshift/cluster-kube-scheduler-operator/pull/533)
* NO-JIRA: readme: describe mapping between logLevel and log level [#531](https://github.com/openshift/cluster-kube-scheduler-operator/pull/531)
* NO-JIRA: README: add notes about dumping KS's node cache [#530](https://github.com/openshift/cluster-kube-scheduler-operator/pull/530)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#526](https://github.com/openshift/cluster-kube-scheduler-operator/pull/526)
* [OCPBUGS-23631](https://issues.redhat.com/browse/OCPBUGS-23631): Add .snyk file to exclude vendor and ignore unit tests [#524](https://github.com/openshift/cluster-kube-scheduler-operator/pull/524)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#522](https://github.com/openshift/cluster-kube-scheduler-operator/pull/522)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#521](https://github.com/openshift/cluster-kube-scheduler-operator/pull/521)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#510](https://github.com/openshift/cluster-kube-scheduler-operator/pull/510)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#519](https://github.com/openshift/cluster-kube-scheduler-operator/pull/519)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#517](https://github.com/openshift/cluster-kube-scheduler-operator/pull/517)
* [OCPBUGS-24106](https://issues.redhat.com/browse/OCPBUGS-24106): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#513](https://github.com/openshift/cluster-kube-scheduler-operator/pull/513)
* [OCPBUGS-24218](https://issues.redhat.com/browse/OCPBUGS-24218): Annotate serviceaccount-ca with ownership information [#511](https://github.com/openshift/cluster-kube-scheduler-operator/pull/511)
* [OCPBUGS-23463](https://issues.redhat.com/browse/OCPBUGS-23463): bump(library-go) [#512](https://github.com/openshift/cluster-kube-scheduler-operator/pull/512)
* NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof [#507](https://github.com/openshift/cluster-kube-scheduler-operator/pull/507)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 [#508](https://github.com/openshift/cluster-kube-scheduler-operator/pull/508)
* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump openshift/library-go to disable http/2 by default [#503](https://github.com/openshift/cluster-kube-scheduler-operator/pull/503)
* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump deps to address CVE-2023-44487 [#500](https://github.com/openshift/cluster-kube-scheduler-operator/pull/500)
* bump(openshift/client-go,library-go) [#498](https://github.com/openshift/cluster-kube-scheduler-operator/pull/498)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#496](https://github.com/openshift/cluster-kube-scheduler-operator/pull/496)
* [OCPBUGS-19175](https://issues.redhat.com/browse/OCPBUGS-19175): Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-kube-scheduler-operator/pull/493)
* Bump openshift/* libs [#492](https://github.com/openshift/cluster-kube-scheduler-operator/pull/492)
* Update to Kubernetes 1.28.2 [#491](https://github.com/openshift/cluster-kube-scheduler-operator/pull/491)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#490](https://github.com/openshift/cluster-kube-scheduler-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4...630f63bc7a30d2662bbb5115233144079de6eef6)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/bf6afbb820531b4adc3a52f78a90f317c5580bad)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#107](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/107)
* [OCPBUGS-29567](https://issues.redhat.com/browse/OCPBUGS-29567): Apply hypershift cluster-profile for ibm-cloud-managed [#106](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/106)
* [OCPBUGS-27930](https://issues.redhat.com/browse/OCPBUGS-27930): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/103)
* [OCPBUGS-24989](https://issues.redhat.com/browse/OCPBUGS-24989): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#101](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/101)
* [OCPBUGS-21738](https://issues.redhat.com/browse/OCPBUGS-21738): bump library-go to include switch to HTTP/1.1 [#95](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/95)
* [OCPBUGS-19253](https://issues.redhat.com/browse/OCPBUGS-19253): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#94](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/94)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9cd9922a42a64fe058718f10e3b4123b943bb55f...bf6afbb820531b4adc3a52f78a90f317c5580bad)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3eba7eeda244ea48c520d5384547659e9257cb58)
* [OCPBUGS-34161](https://issues.redhat.com/browse/OCPBUGS-34161): check for machine crd before listing machines [#233](https://github.com/openshift/cluster-machine-approver/pull/233)
* [OCPBUGS-29568](https://issues.redhat.com/browse/OCPBUGS-29568): Apply hypershift cluster-profile for ibm-cloud-managed [#229](https://github.com/openshift/cluster-machine-approver/pull/229)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#227](https://github.com/openshift/cluster-machine-approver/pull/227)
* [OCPBUGS-26116](https://issues.redhat.com/browse/OCPBUGS-26116): Add Snyk file to exclude vendor directory on scan [#225](https://github.com/openshift/cluster-machine-approver/pull/225)
* [OCPCLOUD-2417](https://issues.redhat.com/browse/OCPCLOUD-2417): Update to kube 1.29 and controller-runtime 0.17.0 [#224](https://github.com/openshift/cluster-machine-approver/pull/224)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Increase concurrent reconciles to 10 [#222](https://github.com/openshift/cluster-machine-approver/pull/222)
* [OCPBUGS-25582](https://issues.redhat.com/browse/OCPBUGS-25582): Updating ose-cluster-machine-approver-container image to be consistent with ART [#223](https://github.com/openshift/cluster-machine-approver/pull/223)
* [OCPBUGS-24985](https://issues.redhat.com/browse/OCPBUGS-24985): Updating ose-cluster-machine-approver-container image to be consistent with ART [#218](https://github.com/openshift/cluster-machine-approver/pull/218)
* [OCPBUGS-24154](https://issues.redhat.com/browse/OCPBUGS-24154): Updating ose-cluster-machine-approver-container image to be consistent with ART [#217](https://github.com/openshift/cluster-machine-approver/pull/217)
* [OCPCLOUD-2277](https://issues.redhat.com/browse/OCPCLOUD-2277): Ensure Cluster Machine Approver metrics are only available via HTTPS [#211](https://github.com/openshift/cluster-machine-approver/pull/211)
* [OCPBUGS-21594](https://issues.redhat.com/browse/OCPBUGS-21594): Filter non node CSRs in metrics [#208](https://github.com/openshift/cluster-machine-approver/pull/208)
* [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204)
* Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205)
* [OCPBUGS-19250](https://issues.redhat.com/browse/OCPBUGS-19250): Updating ose-cluster-machine-approver images to be consistent with ART [#201](https://github.com/openshift/cluster-machine-approver/pull/201)
* [OCPCLOUD-2181](https://issues.redhat.com/browse/OCPCLOUD-2181): Update K8s dependencies to 1.28 [#203](https://github.com/openshift/cluster-machine-approver/pull/203)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/711b4f6eeb038f8c7bd88db3ea51ebad350a116d...3eba7eeda244ea48c520d5384547659e9257cb58)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
* [OCPBUGS-34806](https://issues.redhat.com/browse/OCPBUGS-34806): send cnv_abnormal metric via telemetry [#2364](https://github.com/openshift/cluster-monitoring-operator/pull/2364)
* [MON-3861](https://issues.redhat.com/browse/MON-3861): Bump go tools 1.21 [#2348](https://github.com/openshift/cluster-monitoring-operator/pull/2348)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#2342](https://github.com/openshift/cluster-monitoring-operator/pull/2342)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): change metrics-server probes for SNO [#2337](https://github.com/openshift/cluster-monitoring-operator/pull/2337)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#2338](https://github.com/openshift/cluster-monitoring-operator/pull/2338)
* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#2336](https://github.com/openshift/cluster-monitoring-operator/pull/2336)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): tweak Prometheus RBAC setup as a temp fix. [#2334](https://github.com/openshift/cluster-monitoring-operator/pull/2334)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#2335](https://github.com/openshift/cluster-monitoring-operator/pull/2335)
* [MON-3163](https://issues.redhat.com/browse/MON-3163): support VPAs [#2078](https://github.com/openshift/cluster-monitoring-operator/pull/2078)
* [OCPBUGS-23801](https://issues.redhat.com/browse/OCPBUGS-23801): update OTEL `google.golang.org/grpc/otelgrpc` [#2321](https://github.com/openshift/cluster-monitoring-operator/pull/2321)
* NO-JIRA: Increase `checkAlertmanagerAPIVerbs` timeout [#2330](https://github.com/openshift/cluster-monitoring-operator/pull/2330)
* [MON-3487](https://issues.redhat.com/browse/MON-3487): base CP enablement on dedicated feature gate [#2153](https://github.com/openshift/cluster-monitoring-operator/pull/2153)
* [OCPBUGS-32177](https://issues.redhat.com/browse/OCPBUGS-32177): fix wrong dir hack/tools of tools.go [#2327](https://github.com/openshift/cluster-monitoring-operator/pull/2327)
* [MON-3707](https://issues.redhat.com/browse/MON-3707): Add ipsec state metric into telemetry [#2326](https://github.com/openshift/cluster-monitoring-operator/pull/2326)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for k8s Prometheus [#2323](https://github.com/openshift/cluster-monitoring-operator/pull/2323)
* [MON-3839](https://issues.redhat.com/browse/MON-3839): test: add skip tests for prometheus adapter tests [#2328](https://github.com/openshift/cluster-monitoring-operator/pull/2328)
* [MON-3820](https://issues.redhat.com/browse/MON-3820): allow read-only access for Alertmanager API [#2319](https://github.com/openshift/cluster-monitoring-operator/pull/2319)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove trusted CA bundle from Thanos Querier [#2325](https://github.com/openshift/cluster-monitoring-operator/pull/2325)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): follow-up of PR #2308 [#2324](https://github.com/openshift/cluster-monitoring-operator/pull/2324)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Synchronize versions of the downstream components [#2322](https://github.com/openshift/cluster-monitoring-operator/pull/2322)
* [OCPBUGS-30430](https://issues.redhat.com/browse/OCPBUGS-30430): update `google.golang.org/protobuf` [#2320](https://github.com/openshift/cluster-monitoring-operator/pull/2320)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for main Alertmanager [#2310](https://github.com/openshift/cluster-monitoring-operator/pull/2310)
* [MON-3783](https://issues.redhat.com/browse/MON-3783): add controller-id annotation to pods deployments and operator [#2309](https://github.com/openshift/cluster-monitoring-operator/pull/2309)
* [OCPBUGS-18643](https://issues.redhat.com/browse/OCPBUGS-18643): address lint warnings [#2284](https://github.com/openshift/cluster-monitoring-operator/pull/2284)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): assets, jsonnet: Add container_network openshift-kubernetes.rules [#2314](https://github.com/openshift/cluster-monitoring-operator/pull/2314)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Synchronize versions of the downstream components [#2318](https://github.com/openshift/cluster-monitoring-operator/pull/2318)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove references to OAuth proxy [#2308](https://github.com/openshift/cluster-monitoring-operator/pull/2308)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: simplify GetServiceAccountToken() [#2272](https://github.com/openshift/cluster-monitoring-operator/pull/2272)
* [MON-3621](https://issues.redhat.com/browse/MON-3621): Enable `extra-scrape-metrics` feature in PrometheusUWM [#2302](https://github.com/openshift/cluster-monitoring-operator/pull/2302)
* [OCPBUGS-31411](https://issues.redhat.com/browse/OCPBUGS-31411): add runbook link for KubeAggregatedAPIErrors alert [#2316](https://github.com/openshift/cluster-monitoring-operator/pull/2316)
* [OCPBUGS-29531](https://issues.redhat.com/browse/OCPBUGS-29531): Add include.release.openshift.io/hypershift label [#2264](https://github.com/openshift/cluster-monitoring-operator/pull/2264)
* [MON-3778](https://issues.redhat.com/browse/MON-3778), [OLS-117](https://issues.redhat.com/browse/OLS-117): Add OLS metrics to telemetry whitelist [#2300](https://github.com/openshift/cluster-monitoring-operator/pull/2300)
* [OCPBUGS-31920](https://issues.redhat.com/browse/OCPBUGS-31920): go.mod: bump openshift/api [#2290](https://github.com/openshift/cluster-monitoring-operator/pull/2290)
* [MON-3700](https://issues.redhat.com/browse/MON-3700): replace OAuth proxy for Thanos Ruler [#2294](https://github.com/openshift/cluster-monitoring-operator/pull/2294)
* [MON-3799](https://issues.redhat.com/browse/MON-3799): Synchronize versions of the downstream components [#2301](https://github.com/openshift/cluster-monitoring-operator/pull/2301)
* [MON-3749](https://issues.redhat.com/browse/MON-3749): enable request headers flags for metrics server [#2293](https://github.com/openshift/cluster-monitoring-operator/pull/2293)
* [OCPBUGS-28650](https://issues.redhat.com/browse/OCPBUGS-28650): fix generation of telemeter token hash [#2298](https://github.com/openshift/cluster-monitoring-operator/pull/2298)
* [MON-3801](https://issues.redhat.com/browse/MON-3801): remove oauth-redirectreference annotations [#2299](https://github.com/openshift/cluster-monitoring-operator/pull/2299)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Synchronize versions of the downstream components [#2295](https://github.com/openshift/cluster-monitoring-operator/pull/2295)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): jsonnet: Bump jsonnet deps for prometheus-operator [#2296](https://github.com/openshift/cluster-monitoring-operator/pull/2296)
* [MON-3792](https://issues.redhat.com/browse/MON-3792): fix metrics-server path for /test versions [#2286](https://github.com/openshift/cluster-monitoring-operator/pull/2286)
* [MON-3789](https://issues.redhat.com/browse/MON-3789): add a golangci-lint-fix makefile target to fix golangci-lint errros when possible [#2275](https://github.com/openshift/cluster-monitoring-operator/pull/2275)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): update Prometheus operator to v0.72.0 [#2288](https://github.com/openshift/cluster-monitoring-operator/pull/2288)
* [MON-3498](https://issues.redhat.com/browse/MON-3498): Modify prometheus-adapter e2e tests to compact with metrics server [#2196](https://github.com/openshift/cluster-monitoring-operator/pull/2196)
* [OCPBUGS-30257](https://issues.redhat.com/browse/OCPBUGS-30257): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2269](https://github.com/openshift/cluster-monitoring-operator/pull/2269)
* [OCPNODE-2100](https://issues.redhat.com/browse/OCPNODE-2100): jsonnet: update crio port to TLS port 9637 [#2257](https://github.com/openshift/cluster-monitoring-operator/pull/2257)
* [MON-3694](https://issues.redhat.com/browse/MON-3694): chore: encourage the use of the new 'slices' package instead of 'golang.org/x/exp/slices' [#2243](https://github.com/openshift/cluster-monitoring-operator/pull/2243)
* [MON-3748](https://issues.redhat.com/browse/MON-3748): Enable audit logs by default for metrics-server [#2280](https://github.com/openshift/cluster-monitoring-operator/pull/2280)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): adjust prometheus-k8s service openshift.io/description [#2279](https://github.com/openshift/cluster-monitoring-operator/pull/2279)
* [MON-3747](https://issues.redhat.com/browse/MON-3747): Increase e2e test timeout to 150 min [#2278](https://github.com/openshift/cluster-monitoring-operator/pull/2278)
* [MON-3381](https://issues.redhat.com/browse/MON-3381): replace OAuth proxy for Alertmanager [#2260](https://github.com/openshift/cluster-monitoring-operator/pull/2260)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix Thanos ruler alert generator url [#2267](https://github.com/openshift/cluster-monitoring-operator/pull/2267)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): Revert "chore: poll immediately in the e2e tests" [#2271](https://github.com/openshift/cluster-monitoring-operator/pull/2271)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. [#2226](https://github.com/openshift/cluster-monitoring-operator/pull/2226)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): update library-go to get https://github.com/openshift/libra… [#2266](https://github.com/openshift/cluster-monitoring-operator/pull/2266)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): re-add kube-rbac-proxy for /metrics and /federate [#2261](https://github.com/openshift/cluster-monitoring-operator/pull/2261)
* [MON-3172](https://issues.redhat.com/browse/MON-3172): describe monitoring services [#2188](https://github.com/openshift/cluster-monitoring-operator/pull/2188)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: poll immediately in the e2e tests [#2258](https://github.com/openshift/cluster-monitoring-operator/pull/2258)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): replace OAuth proxy for prometheus-k8s [#2246](https://github.com/openshift/cluster-monitoring-operator/pull/2246)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add Console cap annotation to dashboards [#2254](https://github.com/openshift/cluster-monitoring-operator/pull/2254)
* [TRT-1489](https://issues.redhat.com/browse/TRT-1489): Revert "jsonnet: update crio port to TLS port 9637" [#2255](https://github.com/openshift/cluster-monitoring-operator/pull/2255)
* [OCPNODE-2022](https://issues.redhat.com/browse/OCPNODE-2022): jsonnet: update crio port to TLS port 9637 [#2229](https://github.com/openshift/cluster-monitoring-operator/pull/2229)
* [MON-3705](https://issues.redhat.com/browse/MON-3705): [bot] Update jsonnet dependencies [#2208](https://github.com/openshift/cluster-monitoring-operator/pull/2208)
* [MON-3699](https://issues.redhat.com/browse/MON-3699): chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc [#2247](https://github.com/openshift/cluster-monitoring-operator/pull/2247)
* [MON-3697](https://issues.redhat.com/browse/MON-3697): use `maximumStartupDurationSeconds` instead of container patch [#2251](https://github.com/openshift/cluster-monitoring-operator/pull/2251)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix: set externalURL in UWM Prometheus [#2250](https://github.com/openshift/cluster-monitoring-operator/pull/2250)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Synchronize versions of the downstream components [#2245](https://github.com/openshift/cluster-monitoring-operator/pull/2245)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 [#2244](https://github.com/openshift/cluster-monitoring-operator/pull/2244)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to cluster-storage-operator [#2235](https://github.com/openshift/cluster-monitoring-operator/pull/2235)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): rollout metrics-server on cert rotations [#2242](https://github.com/openshift/cluster-monitoring-operator/pull/2242)
* [OCPBUGS-27213](https://issues.redhat.com/browse/OCPBUGS-27213): Adjust lastError injection to wait.PollUntilContextTimeout's final error [#2234](https://github.com/openshift/cluster-monitoring-operator/pull/2234)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#2240](https://github.com/openshift/cluster-monitoring-operator/pull/2240)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Synchronize versions of the downstream components [#2238](https://github.com/openshift/cluster-monitoring-operator/pull/2238)
* [MON-2853](https://issues.redhat.com/browse/MON-2853): add runbook link to TargetDown alert [#2237](https://github.com/openshift/cluster-monitoring-operator/pull/2237)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): [bot] Synchronize versions of the downstream components [#2236](https://github.com/openshift/cluster-monitoring-operator/pull/2236)
* [OCPBUGS-26983](https://issues.redhat.com/browse/OCPBUGS-26983): rollout monitoring plugin on TLS rotation [#2233](https://github.com/openshift/cluster-monitoring-operator/pull/2233)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): chore: update Prometheus operator to v0.71.0 [#2230](https://github.com/openshift/cluster-monitoring-operator/pull/2230)
* [MON-3667](https://issues.redhat.com/browse/MON-3667): remove outdated documentation [#2232](https://github.com/openshift/cluster-monitoring-operator/pull/2232)
* [OCPBUGS-25849](https://issues.redhat.com/browse/OCPBUGS-25849): make PrometheusAdapter and MetricsServer tasks less conflict prone [#2218](https://github.com/openshift/cluster-monitoring-operator/pull/2218)
* [OCPBUGS-25378](https://issues.redhat.com/browse/OCPBUGS-25378): drop InfoInhibitor from default Alertmanager config [#2225](https://github.com/openshift/cluster-monitoring-operator/pull/2225)
* [MON-3664](https://issues.redhat.com/browse/MON-3664): chore: avoid issues with std.set* functions [#2231](https://github.com/openshift/cluster-monitoring-operator/pull/2231)
* [MON-3654](https://issues.redhat.com/browse/MON-3654): use Go standard errors package instead of github.com/pkg/errors [#2224](https://github.com/openshift/cluster-monitoring-operator/pull/2224)
* [MON-1047](https://issues.redhat.com/browse/MON-1047): fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… [#2228](https://github.com/openshift/cluster-monitoring-operator/pull/2228)
* [MON-3552](https://issues.redhat.com/browse/MON-3552): remove temporary cleanup code and no longer needed tests [#2210](https://github.com/openshift/cluster-monitoring-operator/pull/2210)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Synchronize versions of the downstream components [#2222](https://github.com/openshift/cluster-monitoring-operator/pull/2222)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Synchronize versions of the downstream components [#2221](https://github.com/openshift/cluster-monitoring-operator/pull/2221)
* [MON-3644](https://issues.redhat.com/browse/MON-3644): Ease the tracking of monitoring components versions. [#2220](https://github.com/openshift/cluster-monitoring-operator/pull/2220)
* [OCPBUGS-25803](https://issues.redhat.com/browse/OCPBUGS-25803): make CMO ConsolePluginComponents task resilient to dependencies [#2193](https://github.com/openshift/cluster-monitoring-operator/pull/2193)
* [OCPBUGS-25676](https://issues.redhat.com/browse/OCPBUGS-25676): fix(tasks): adjust 'trusted CA bundle ConfigMap' related logs for alertmanagers. [#2219](https://github.com/openshift/cluster-monitoring-operator/pull/2219)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Synchronize versions of the downstream components [#2214](https://github.com/openshift/cluster-monitoring-operator/pull/2214)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2211](https://github.com/openshift/cluster-monitoring-operator/pull/2211)
* [OCPBUGS-25403](https://issues.redhat.com/browse/OCPBUGS-25403): go.mod update k8s.io/api* to v0.29.0 [#2205](https://github.com/openshift/cluster-monitoring-operator/pull/2205)
* [MON-3589](https://issues.redhat.com/browse/MON-3589): Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for --scrape.timestamp-tolerance on Platform Prometheus [#2194](https://github.com/openshift/cluster-monitoring-operator/pull/2194)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): use 1.20 in go.mod [#2199](https://github.com/openshift/cluster-monitoring-operator/pull/2199)
* [MON-3592](https://issues.redhat.com/browse/MON-3592): Use strict yaml unmarshaling [#2195](https://github.com/openshift/cluster-monitoring-operator/pull/2195)
* [OCPBUGS-25025](https://issues.redhat.com/browse/OCPBUGS-25025): go.mod: bump prometheus-operator to v0.70.0 [#2191](https://github.com/openshift/cluster-monitoring-operator/pull/2191)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2190](https://github.com/openshift/cluster-monitoring-operator/pull/2190)
* [OCPBUGS-24630](https://issues.redhat.com/browse/OCPBUGS-24630): additionalArgs: list items must have named fields [#2189](https://github.com/openshift/cluster-monitoring-operator/pull/2189)
* [MON-3553](https://issues.redhat.com/browse/MON-3553): Set scrape.timestamp tolerance [#2187](https://github.com/openshift/cluster-monitoring-operator/pull/2187)
* [OCPBUGS-23516](https://issues.redhat.com/browse/OCPBUGS-23516): prevent plugin entry assets from caching [#2186](https://github.com/openshift/cluster-monitoring-operator/pull/2186)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Detect ipv4/ipv6 socket in pod ip for nginx conf [#2173](https://github.com/openshift/cluster-monitoring-operator/pull/2173)
* [MON-3134](https://issues.redhat.com/browse/MON-3134): allow to query alerts from thanos-querier tenancy port [#2184](https://github.com/openshift/cluster-monitoring-operator/pull/2184)
* [MON-3551](https://issues.redhat.com/browse/MON-3551): fix: simplify jq script avoids error with jq1.7 [#2180](https://github.com/openshift/cluster-monitoring-operator/pull/2180)
* [MON-3454](https://issues.redhat.com/browse/MON-3454): Add track timestamps staleness [#2160](https://github.com/openshift/cluster-monitoring-operator/pull/2160)
* [OCPBUGS-24212](https://issues.redhat.com/browse/OCPBUGS-24212): Add ownership annotation for certificates [#2158](https://github.com/openshift/cluster-monitoring-operator/pull/2158)
* [MON-3379](https://issues.redhat.com/browse/MON-3379): Replace the oauth-proxy before thanos-querier with kube-rbac-proxy [#2136](https://github.com/openshift/cluster-monitoring-operator/pull/2136)
* [MON-3544](https://issues.redhat.com/browse/MON-3544): Adjust NodeClock* alerting rules to work with PTP operator [#2182](https://github.com/openshift/cluster-monitoring-operator/pull/2182)
* [OCPBUGS-23745](https://issues.redhat.com/browse/OCPBUGS-23745): Wait for 3 (instead of 2) consecutive failing reconcil… [#2179](https://github.com/openshift/cluster-monitoring-operator/pull/2179)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): [bot] Synchronize versions of the downstream components [#2183](https://github.com/openshift/cluster-monitoring-operator/pull/2183)
* [MON-3543](https://issues.redhat.com/browse/MON-3543): Update API docs for Metrics Server [#2181](https://github.com/openshift/cluster-monitoring-operator/pull/2181)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): synchronize versions of the downstream components [#2174](https://github.com/openshift/cluster-monitoring-operator/pull/2174)
* [OCPBUGS-24340](https://issues.redhat.com/browse/OCPBUGS-24340): patch securityContext for Thanos querier [#2178](https://github.com/openshift/cluster-monitoring-operator/pull/2178)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): update prometheus-operator jsonnet to v0.70.0 [#2177](https://github.com/openshift/cluster-monitoring-operator/pull/2177)
* [MON-3287](https://issues.redhat.com/browse/MON-3287): Remove openshift-etcd related RBAC as they will be manager by [#2165](https://github.com/openshift/cluster-monitoring-operator/pull/2165)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): revert #2166 [#2172](https://github.com/openshift/cluster-monitoring-operator/pull/2172)
* [MON-3524](https://issues.redhat.com/browse/MON-3524): Update metrics-server in CHANGELOG and README [#2169](https://github.com/openshift/cluster-monitoring-operator/pull/2169)
* [MON-3533](https://issues.redhat.com/browse/MON-3533): Update cluster:kube_persistentvolume_plugin_type_counts:sum [#2171](https://github.com/openshift/cluster-monitoring-operator/pull/2171)
* [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add SELinux metrics to telemetry [#2155](https://github.com/openshift/cluster-monitoring-operator/pull/2155)
* [MON-3500](https://issues.redhat.com/browse/MON-3500): Enable sending exemplars over RW in UWM [#2161](https://github.com/openshift/cluster-monitoring-operator/pull/2161)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Change config to allow ipv6/4 [#2166](https://github.com/openshift/cluster-monitoring-operator/pull/2166)
* [MON-3511](https://issues.redhat.com/browse/MON-3511): hack/local-cmo.sh: pass desired version in cmo run command [#2168](https://github.com/openshift/cluster-monitoring-operator/pull/2168)
* [MON-3211](https://issues.redhat.com/browse/MON-3211): Implement switching to metrics-server [#2022](https://github.com/openshift/cluster-monitoring-operator/pull/2022)
* [MON-3505](https://issues.redhat.com/browse/MON-3505): move aggregated-metrics-reader role to cmo jsonnet [#2163](https://github.com/openshift/cluster-monitoring-operator/pull/2163)
* [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2162](https://github.com/openshift/cluster-monitoring-operator/pull/2162)
* [OCPBUGS-23495](https://issues.redhat.com/browse/OCPBUGS-23495): Change UWM Prometheus' kube-rbac-proxy-thanos port num… [#2164](https://github.com/openshift/cluster-monitoring-operator/pull/2164)
* [MON-3479](https://issues.redhat.com/browse/MON-3479): update Prometheus operator assets to v0.69.1 [#2152](https://github.com/openshift/cluster-monitoring-operator/pull/2152)
* [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2150](https://github.com/openshift/cluster-monitoring-operator/pull/2150)
* [MON-3421](https://issues.redhat.com/browse/MON-3421): improve the detection of CMO unavailability/degradation due to U… [#2129](https://github.com/openshift/cluster-monitoring-operator/pull/2129)
* [MON-3476](https://issues.redhat.com/browse/MON-3476): Add code block to check FeatureGate status [#2151](https://github.com/openshift/cluster-monitoring-operator/pull/2151)
* [OCPBUGS-17035](https://issues.redhat.com/browse/OCPBUGS-17035): fix KRP permissions for Thanos Querier [#2057](https://github.com/openshift/cluster-monitoring-operator/pull/2057)
* [OCPBUGS-22742](https://issues.redhat.com/browse/OCPBUGS-22742): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2138](https://github.com/openshift/cluster-monitoring-operator/pull/2138)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2145](https://github.com/openshift/cluster-monitoring-operator/pull/2145)
* [MON-3398](https://issues.redhat.com/browse/MON-3398): Add RHACM telemetry metric [#2100](https://github.com/openshift/cluster-monitoring-operator/pull/2100)
* Synchronize versions of the downstream components [#2135](https://github.com/openshift/cluster-monitoring-operator/pull/2135)
* Fix UWM alert access permissions [#2131](https://github.com/openshift/cluster-monitoring-operator/pull/2131)
* Synchronize versions of the downstream components [#2133](https://github.com/openshift/cluster-monitoring-operator/pull/2133)
* [OCPBUGS-4069](https://issues.redhat.com/browse/OCPBUGS-4069): Prometheus Adatper takes metrics from kubelet job only. [#2117](https://github.com/openshift/cluster-monitoring-operator/pull/2117)
* [MON-3422](https://issues.redhat.com/browse/MON-3422): Remove temporary no more needed code [#2132](https://github.com/openshift/cluster-monitoring-operator/pull/2132)
* fix: force HTTP/1.1 connections [#2128](https://github.com/openshift/cluster-monitoring-operator/pull/2128)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2105](https://github.com/openshift/cluster-monitoring-operator/pull/2105)
* [OCPBUGS-21631](https://issues.redhat.com/browse/OCPBUGS-21631): upgrade golang.org/x/net to v0.17.0 [#2120](https://github.com/openshift/cluster-monitoring-operator/pull/2120)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): revert previous fix to avoid activating console capability during update [#2118](https://github.com/openshift/cluster-monitoring-operator/pull/2118)
* [MON-3286](https://issues.redhat.com/browse/MON-3286): Remove no longer needed code. [#2116](https://github.com/openshift/cluster-monitoring-operator/pull/2116)
* [OCPBUGS-17850](https://issues.redhat.com/browse/OCPBUGS-17850): replace nonResourceURLs permissions by subresource [#2099](https://github.com/openshift/cluster-monitoring-operator/pull/2099)
* Synchronize versions of the downstream components [#2115](https://github.com/openshift/cluster-monitoring-operator/pull/2115)
* Update jsonnet dependencies [#2076](https://github.com/openshift/cluster-monitoring-operator/pull/2076)
* OWNERS: remove sthaha [#2114](https://github.com/openshift/cluster-monitoring-operator/pull/2114)
* build: add `-e` to `go list` command to install tools [#2112](https://github.com/openshift/cluster-monitoring-operator/pull/2112)
* Change kube-rbac-proxy-thanos port [#2113](https://github.com/openshift/cluster-monitoring-operator/pull/2113)
* [OCPBUGS-11344](https://issues.redhat.com/browse/OCPBUGS-11344): alertmanager: use alertmanager CRD's automountServiceAccountToken option [#2111](https://github.com/openshift/cluster-monitoring-operator/pull/2111)
* Remove deprecated ioutil [#2108](https://github.com/openshift/cluster-monitoring-operator/pull/2108)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add console capability annotation to dashboards and monitoring-plugin. [#2101](https://github.com/openshift/cluster-monitoring-operator/pull/2101)
* [MON-3302](https://issues.redhat.com/browse/MON-3302): add RHACS telemetry metrics [#2062](https://github.com/openshift/cluster-monitoring-operator/pull/2062)
* add `machine424` and `rexagod` to OWNERS [#2083](https://github.com/openshift/cluster-monitoring-operator/pull/2083)
* Remove bparees from approvers [#2104](https://github.com/openshift/cluster-monitoring-operator/pull/2104)
* Revert "feat: add olm capability annotation" [#2103](https://github.com/openshift/cluster-monitoring-operator/pull/2103)
* [MON-3270](https://issues.redhat.com/browse/MON-3270): Add kube-metrics-server to image-references [#2102](https://github.com/openshift/cluster-monitoring-operator/pull/2102)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2095](https://github.com/openshift/cluster-monitoring-operator/pull/2095)
* chore: fix imports order [#2098](https://github.com/openshift/cluster-monitoring-operator/pull/2098)
* Set Thanos version in the Thanos Ruler spec [#2094](https://github.com/openshift/cluster-monitoring-operator/pull/2094)
* [OCPBUGS-19237](https://issues.redhat.com/browse/OCPBUGS-19237): Updating cluster-monitoring-operator images to be consistent with ART [#2084](https://github.com/openshift/cluster-monitoring-operator/pull/2084)
* Synchronize versions of the downstream components [#2093](https://github.com/openshift/cluster-monitoring-operator/pull/2093)
* Synchronize versions of the downstream components [#2089](https://github.com/openshift/cluster-monitoring-operator/pull/2089)
* [MON-3383](https://issues.redhat.com/browse/MON-3383): Remove weak cryptograhic primitive usage [#2086](https://github.com/openshift/cluster-monitoring-operator/pull/2086)
* [OCPBUGS-18390](https://issues.redhat.com/browse/OCPBUGS-18390): jsonnet/rules: exclude -1 from etcd objects count [#2081](https://github.com/openshift/cluster-monitoring-operator/pull/2081)
* [OCPBUGS-19059](https://issues.redhat.com/browse/OCPBUGS-19059): Enable ipv6 on monitoring-plugin nginx [#2090](https://github.com/openshift/cluster-monitoring-operator/pull/2090)
* [MON-3376](https://issues.redhat.com/browse/MON-3376): Remove deprecated --logtostderr argument [#2077](https://github.com/openshift/cluster-monitoring-operator/pull/2077)
* [OCPBUGS-19356](https://issues.redhat.com/browse/OCPBUGS-19356): Topology spread constraints admission webhook [#2073](https://github.com/openshift/cluster-monitoring-operator/pull/2073)
* [OCPBUGS-17682](https://issues.redhat.com/browse/OCPBUGS-17682): add topologySpreadConstraints to UWM prometheus operator [#2072](https://github.com/openshift/cluster-monitoring-operator/pull/2072)
* Synchronize versions of the downstream components [#2082](https://github.com/openshift/cluster-monitoring-operator/pull/2082)
* [MON-2642](https://issues.redhat.com/browse/MON-2642): Improve e2e tests for alertrelabelconfigs CRD [#2080](https://github.com/openshift/cluster-monitoring-operator/pull/2080)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/618dee4f3101ce9468e55c51ad3c436e8367ae41...e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/84f9a080d03777c95a1c5a0d13ca16e5aa342d98)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Limit iptables-alerter's cpu [#2407](https://github.com/openshift/cluster-network-operator/pull/2407)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Handle pod exiting race conditions in iptables-alerter [#2394](https://github.com/openshift/cluster-network-operator/pull/2394)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [OCPBUGS-35061](https://issues.redhat.com/browse/OCPBUGS-35061): Add ANP metric rule expressions for telemetry exposure [#2398](https://github.com/openshift/cluster-network-operator/pull/2398)
* [OCPBUGS-34612](https://issues.redhat.com/browse/OCPBUGS-34612), [OCPBUGS-34660](https://issues.redhat.com/browse/OCPBUGS-34660), [OCPBUGS-34663](https://issues.redhat.com/browse/OCPBUGS-34663): Live migration backports [#2392](https://github.com/openshift/cluster-network-operator/pull/2392)
* [OCPBUGS-34964](https://issues.redhat.com/browse/OCPBUGS-34964): Fix DNSResolver feature gate enablement [#2402](https://github.com/openshift/cluster-network-operator/pull/2402)
* [OCPBUGS-34770](https://issues.redhat.com/browse/OCPBUGS-34770): Ensure that the node-identity webhook address contains colons for IPv6 [#2395](https://github.com/openshift/cluster-network-operator/pull/2395)
* [OCPBUGS-34214](https://issues.redhat.com/browse/OCPBUGS-34214): Add conditions for ignored-namespaces [#2378](https://github.com/openshift/cluster-network-operator/pull/2378)
* [OCPBUGS-34013](https://issues.redhat.com/browse/OCPBUGS-34013): Add custom masquerade subnet against right key at ovnkube-config CM [#2374](https://github.com/openshift/cluster-network-operator/pull/2374)
* [CFE-888](https://issues.redhat.com/browse/CFE-888): Enable DNSNameResolver feature-gate [#2131](https://github.com/openshift/cluster-network-operator/pull/2131)
* [OCPBUGS-32979](https://issues.redhat.com/browse/OCPBUGS-32979): Update network operator status for IPsec [#2360](https://github.com/openshift/cluster-network-operator/pull/2360)
* [USHIFT-2912](https://issues.redhat.com/browse/USHIFT-2912): Add ref to MicroShift's Multus and CNI Plugins [#2365](https://github.com/openshift/cluster-network-operator/pull/2365)
* [OCPBUGS-29403](https://issues.redhat.com/browse/OCPBUGS-29403): add more safe sysctls [#2273](https://github.com/openshift/cluster-network-operator/pull/2273)
* [OCPBUGS-32525](https://issues.redhat.com/browse/OCPBUGS-32525): Check every MachineConfigPool for IPsec plugin existence [#2349](https://github.com/openshift/cluster-network-operator/pull/2349)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2364](https://github.com/openshift/cluster-network-operator/pull/2364)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Update EQoS CRD to latest [#2362](https://github.com/openshift/cluster-network-operator/pull/2362)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Reapply "Merge pull request #2330 from pperiyasamy/block-sdn-upgrade" [#2361](https://github.com/openshift/cluster-network-operator/pull/2361)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2354](https://github.com/openshift/cluster-network-operator/pull/2354)
* Revert #2330 "SDN-4726: Block upgrade for openshift-sdn" [#2356](https://github.com/openshift/cluster-network-operator/pull/2356)
* [SDN-4434](https://issues.redhat.com/browse/SDN-4434): Network diagnostics scheduling [#2339](https://github.com/openshift/cluster-network-operator/pull/2339)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Block upgrade for openshift-sdn [#2330](https://github.com/openshift/cluster-network-operator/pull/2330)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Add iptables-alerter daemonset [#2329](https://github.com/openshift/cluster-network-operator/pull/2329)
* [OCPBUGS-31528](https://issues.redhat.com/browse/OCPBUGS-31528): infraconfig: handle vSphere UPI by not updating any fields [#2327](https://github.com/openshift/cluster-network-operator/pull/2327)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Improved prometheus rule for ipsec metric [#2346](https://github.com/openshift/cluster-network-operator/pull/2346)
* [OCPBUGS-32402](https://issues.redhat.com/browse/OCPBUGS-32402): Fix wait logic for IPsec certificate signing request [#2342](https://github.com/openshift/cluster-network-operator/pull/2342)
* [SDN-4688](https://issues.redhat.com/browse/SDN-4688): ANP: Add RBAC for cluster-manager [#2338](https://github.com/openshift/cluster-network-operator/pull/2338)
* [OCPBUGS-32347](https://issues.redhat.com/browse/OCPBUGS-32347): Improve IPsec MachineConfig readiness check [#2341](https://github.com/openshift/cluster-network-operator/pull/2341)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Add ipsec state to telemetry [#2270](https://github.com/openshift/cluster-network-operator/pull/2270)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#2095](https://github.com/openshift/cluster-network-operator/pull/2095)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2340](https://github.com/openshift/cluster-network-operator/pull/2340)
* [SDN-4519](https://issues.redhat.com/browse/SDN-4519): Configure CNO as per new API changes for join and transit switch subnet [#2318](https://github.com/openshift/cluster-network-operator/pull/2318)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2334](https://github.com/openshift/cluster-network-operator/pull/2334)
* [NP-956](https://issues.redhat.com/browse/NP-956): Remove managed cluster checking for live migration [#2321](https://github.com/openshift/cluster-network-operator/pull/2321)
* [OCPBUGS-26408](https://issues.redhat.com/browse/OCPBUGS-26408): automountServiceAccountToken:false hosted CP pods [#2306](https://github.com/openshift/cluster-network-operator/pull/2306)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Update (B)ANP CRDs; prepare for GA [#2328](https://github.com/openshift/cluster-network-operator/pull/2328)
* [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319)
* [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309)
* [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313)
* [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307)
* [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288)
* [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308)
* [OCPBUGS-30299](https://issues.redhat.com/browse/OCPBUGS-30299): Fix managed cluster detection on ARO [#2299](https://github.com/openshift/cluster-network-operator/pull/2299)
* [OPNET-358](https://issues.redhat.com/browse/OPNET-358), [OPNET-360](https://issues.redhat.com/browse/OPNET-360): Allow VIP mutation in Infra CR [#2130](https://github.com/openshift/cluster-network-operator/pull/2130)
* [OCPBUGS-29288](https://issues.redhat.com/browse/OCPBUGS-29288): Ensure proper deprecation for the default field manager [#2274](https://github.com/openshift/cluster-network-operator/pull/2274)
* [OCPBUGS-24380](https://issues.redhat.com/browse/OCPBUGS-24380), [OCPBUGS-24381](https://issues.redhat.com/browse/OCPBUGS-24381), [OCPBUGS-24382](https://issues.redhat.com/browse/OCPBUGS-24382): Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods [#2262](https://github.com/openshift/cluster-network-operator/pull/2262)
* [OCPBUGS-25764](https://issues.redhat.com/browse/OCPBUGS-25764): memory-trim-on-compaction is enabled by default [#2260](https://github.com/openshift/cluster-network-operator/pull/2260)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#2127](https://github.com/openshift/cluster-network-operator/pull/2127)
* [OCPBUGS-29341](https://issues.redhat.com/browse/OCPBUGS-29341): Run dhcp-daemon pods as system-node-critical priority [#2280](https://github.com/openshift/cluster-network-operator/pull/2280)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Disable network-node-identity on ROKS [#2197](https://github.com/openshift/cluster-network-operator/pull/2197)
* [OCPBUGS-26492](https://issues.redhat.com/browse/OCPBUGS-26492): Not set CNO to degraded if API server returns conflict error [#2192](https://github.com/openshift/cluster-network-operator/pull/2192)
* [OCPBUGS-24214](https://issues.redhat.com/browse/OCPBUGS-24214): Add ownership annotations [#2120](https://github.com/openshift/cluster-network-operator/pull/2120)
* [OCPBUGS-24601](https://issues.redhat.com/browse/OCPBUGS-24601): Add minReadySeconds to network-node-identity [#2151](https://github.com/openshift/cluster-network-operator/pull/2151)
* [OCPBUGS-29305](https://issues.redhat.com/browse/OCPBUGS-29305): ipsec: fix openssl typo [#2269](https://github.com/openshift/cluster-network-operator/pull/2269)
* [OCPBUGS-28920](https://issues.redhat.com/browse/OCPBUGS-28920): Update ingressconfig_controller to use field Manager [#2259](https://github.com/openshift/cluster-network-operator/pull/2259)
* NO-JIRA: Remove ILB from CNCC [#2182](https://github.com/openshift/cluster-network-operator/pull/2182)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Fix CloudPrivateIPConfig CRD in common [#2249](https://github.com/openshift/cluster-network-operator/pull/2249)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2233](https://github.com/openshift/cluster-network-operator/pull/2233)
* [OCPBUGS-28676](https://issues.redhat.com/browse/OCPBUGS-28676): Remove libreswan rpm existence checks [#2238](https://github.com/openshift/cluster-network-operator/pull/2238)
* [OCPBUGS-29099](https://issues.redhat.com/browse/OCPBUGS-29099): Add hostNetwork:true to cni-sysctl-allowlist ds [#2237](https://github.com/openshift/cluster-network-operator/pull/2237)
* [OCPBUGS-24436](https://issues.redhat.com/browse/OCPBUGS-24436): Add probes to node-network-identity [#2148](https://github.com/openshift/cluster-network-operator/pull/2148)
* [OCPBUGS-24299](https://issues.redhat.com/browse/OCPBUGS-24299): network-node-identity mounts secrets with mode 0640 [#2142](https://github.com/openshift/cluster-network-operator/pull/2142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#2224](https://github.com/openshift/cluster-network-operator/pull/2224)
* [NP-874](https://issues.redhat.com/browse/NP-874), [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Bump openshift API [#2246](https://github.com/openshift/cluster-network-operator/pull/2246)
* [OCPBUGS-24383](https://issues.redhat.com/browse/OCPBUGS-24383): Limit write permissions for egressservices [#2171](https://github.com/openshift/cluster-network-operator/pull/2171)
* [NP-903](https://issues.redhat.com/browse/NP-903): Only allows live migration on standalone managed clusters [#2236](https://github.com/openshift/cluster-network-operator/pull/2236)
* [OCPBUGS-19551](https://issues.redhat.com/browse/OCPBUGS-19551): ovnkube: simplify northd threading and SNO templating [#2234](https://github.com/openshift/cluster-network-operator/pull/2234)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156)
* [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208)
* NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226)
* [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209)
* [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807)
* [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201)
* [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206)
* NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199)
* [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191)
* [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170)
* [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153)
* [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187)
* [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173)
* [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169)
* [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179)
* [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070)
* [SDN-4227](https://issues.redhat.com/browse/SDN-4227): Use specific permissions for CNCC in GCP [#2069](https://github.com/openshift/cluster-network-operator/pull/2069)
* [OCPBUGS-24693](https://issues.redhat.com/browse/OCPBUGS-24693): HyperShift, network-node-identity: Check the deployment in the management cluster [#2166](https://github.com/openshift/cluster-network-operator/pull/2166)
* [OCPBUGS-24176](https://issues.redhat.com/browse/OCPBUGS-24176): Ignore invalid PEM blocks [#2178](https://github.com/openshift/cluster-network-operator/pull/2178)
* [OCPBUGS-25337](https://issues.redhat.com/browse/OCPBUGS-25337): Avoid removal of ipsec-host daemonset when node is NotReady [#2161](https://github.com/openshift/cluster-network-operator/pull/2161)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): remove service account token mount in cloud-network-con… [#2165](https://github.com/openshift/cluster-network-operator/pull/2165)
* [OCPBUGS-23729](https://issues.redhat.com/browse/OCPBUGS-23729): Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy [#2159](https://github.com/openshift/cluster-network-operator/pull/2159)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2114](https://github.com/openshift/cluster-network-operator/pull/2114)
* [OCPBUGS-23199](https://issues.redhat.com/browse/OCPBUGS-23199): add env var in whereabouts-reconciler daemonset [#2160](https://github.com/openshift/cluster-network-operator/pull/2160)
* [OCPBUGS-19830](https://issues.redhat.com/browse/OCPBUGS-19830): fix whereabouts conformance test failures [#2103](https://github.com/openshift/cluster-network-operator/pull/2103)
* [OCPBUGS-24650](https://issues.redhat.com/browse/OCPBUGS-24650), [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Set enable-multi-external-gateway flag in ovnkube.conf [#2149](https://github.com/openshift/cluster-network-operator/pull/2149)
* [OCPBUGS-19817](https://issues.redhat.com/browse/OCPBUGS-19817), [SDN-4162](https://issues.redhat.com/browse/SDN-4162): Upgrade IPsec with single daemonset pod [#2087](https://github.com/openshift/cluster-network-operator/pull/2087)
* [NP-615](https://issues.redhat.com/browse/NP-615): Live migration [#2091](https://github.com/openshift/cluster-network-operator/pull/2091)
* [OCPBUGS-23161](https://issues.redhat.com/browse/OCPBUGS-23161): Set logging for controller-runtime [#2129](https://github.com/openshift/cluster-network-operator/pull/2129)
* [SDN-4061](https://issues.redhat.com/browse/SDN-4061): Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture [#2101](https://github.com/openshift/cluster-network-operator/pull/2101)
* [OCPVE-779](https://issues.redhat.com/browse/OCPVE-779): Annotate credentials request manifests [#2105](https://github.com/openshift/cluster-network-operator/pull/2105)
* [NP-615](https://issues.redhat.com/browse/NP-615): Bump github.com/openshift/api [#2138](https://github.com/openshift/cluster-network-operator/pull/2138)
* [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Update status merge for APBRoute and EgressFirewall. [#2132](https://github.com/openshift/cluster-network-operator/pull/2132)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Add apbroute/status patch rights for ovnkube-node to update status [#2139](https://github.com/openshift/cluster-network-operator/pull/2139)
* [NETOBSERV-1047](https://issues.redhat.com/browse/NETOBSERV-1047): Add a cluster monitoring dashboard for ovn [#1871](https://github.com/openshift/cluster-network-operator/pull/1871)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump library-go [#2082](https://github.com/openshift/cluster-network-operator/pull/2082)
* [SDN-4101](https://issues.redhat.com/browse/SDN-4101): Remove HyperShift API dependency, Bump kubernetes dependencies [#2128](https://github.com/openshift/cluster-network-operator/pull/2128)
* NO ISSUE: add ownership of the proxy-ca [#2111](https://github.com/openshift/cluster-network-operator/pull/2111)
* [OCPBUGS-22869](https://issues.redhat.com/browse/OCPBUGS-22869): hypershift, hosted clusters: enable multi-homing and multi-net features [#2113](https://github.com/openshift/cluster-network-operator/pull/2113)
* [OCPBUGS-23082](https://issues.redhat.com/browse/OCPBUGS-23082): set automountServiceAccountToken to false for hypershift managed network-node-identity deploy [#2100](https://github.com/openshift/cluster-network-operator/pull/2100)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060)
* [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084)
* two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052)
* [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047)
* [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048)
* [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795)
* multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010)
* [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986)
* [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074)
* [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819)
* Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929)
* [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065)
* Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037)
* Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056)
* [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051)
* [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049)
* Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038)
* Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778)
* [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042)
* Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985)
* [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039)
* [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018)
* [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021)
* [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031)
* [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030)
* [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978)
* [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009)
* [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007)
* [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983)
* [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020)
* [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003)
* [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015)
* [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845)
* Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982)
* [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999)
* [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006)
* separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938)
* [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981)
* [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990)
* [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996)
* [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/796bf8f5d5268e1123f033a644b7c7abf3bec823...84f9a080d03777c95a1c5a0d13ca16e5aa342d98)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/2bd8891ead93e161b9a871ac2eaa947bfc17309f)
* [OCPBUGS-33682](https://issues.redhat.com/browse/OCPBUGS-33682): right-hand-side profile_dirs take precedence (#1080) [#1080](https://github.com/openshift/cluster-node-tuning-operator/pull/1080)
* NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) [#1046](https://github.com/openshift/cluster-node-tuning-operator/pull/1046)
* [CNF-11817](https://issues.redhat.com/browse/CNF-11817): e2e: control and data planes clients (#1004) [#1004](https://github.com/openshift/cluster-node-tuning-operator/pull/1004)
* Unify OKD and OCP Dockerfiles (#1058) [#1058](https://github.com/openshift/cluster-node-tuning-operator/pull/1058)
* [OCPBUGS-33460](https://issues.redhat.com/browse/OCPBUGS-33460): E2E: change tuned profile path (#1055) [#1055](https://github.com/openshift/cluster-node-tuning-operator/pull/1055)
* E2E: modify test use HaveKey matchter instead of ContainElement (#1056) [#1056](https://github.com/openshift/cluster-node-tuning-operator/pull/1056)
* E2E: Add automation to check default cpuset from cpu manager state file (#1050) [#1050](https://github.com/openshift/cluster-node-tuning-operator/pull/1050)
* perfprof: latency e2e: adjust failure message (#1044) [#1044](https://github.com/openshift/cluster-node-tuning-operator/pull/1044)
* set required-scc for openshift workloads (#968) [#968](https://github.com/openshift/cluster-node-tuning-operator/pull/968)
* [OCPBUGS-26401](https://issues.redhat.com/browse/OCPBUGS-26401): TuneD prior to kubelet in one-shot mode (#1045) [#1045](https://github.com/openshift/cluster-node-tuning-operator/pull/1045)
* perfprof: e2e: account for node base load (#1047) [#1047](https://github.com/openshift/cluster-node-tuning-operator/pull/1047)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 2] Hypershift PAO adoption (#1037) [#1037](https://github.com/openshift/cluster-node-tuning-operator/pull/1037)
* [CNF-11099](https://issues.redhat.com/browse/CNF-11099): set intel_pstate driver to automatic as default (#950) [#950](https://github.com/openshift/cluster-node-tuning-operator/pull/950)
* [OCPBUGS-32469](https://issues.redhat.com/browse/OCPBUGS-32469): Remove tuned/rendered object (#1036) [#1036](https://github.com/openshift/cluster-node-tuning-operator/pull/1036)
* NO-JIRA: 4.16 go deps (#1042) [#1042](https://github.com/openshift/cluster-node-tuning-operator/pull/1042)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 1] Hypershift PAO adoption (#1032) [#1032](https://github.com/openshift/cluster-node-tuning-operator/pull/1032)
* [PSAP-1354](https://issues.redhat.com/browse/PSAP-1354): Updated a script for deploying a custom NTO image to a cluster (#1030) [#1030](https://github.com/openshift/cluster-node-tuning-operator/pull/1030)
* [OCPBUGS-30111](https://issues.redhat.com/browse/OCPBUGS-30111): Negative net interface name does not reduce queues (#973) [#973](https://github.com/openshift/cluster-node-tuning-operator/pull/973)
* Enhance latency cnf-tests UX (#1041) [#1041](https://github.com/openshift/cluster-node-tuning-operator/pull/1041)
* pao:controller: remove depracated function (#1039) [#1039](https://github.com/openshift/cluster-node-tuning-operator/pull/1039)
* Replaced tuned hard-included repo with a git submodule (#1029) [#1029](https://github.com/openshift/cluster-node-tuning-operator/pull/1029)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): NTO operand (openshift-tuned) fixes (#1024) [#1024](https://github.com/openshift/cluster-node-tuning-operator/pull/1024)
* NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) [#1031](https://github.com/openshift/cluster-node-tuning-operator/pull/1031)
* NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) [#1022](https://github.com/openshift/cluster-node-tuning-operator/pull/1022)
* Update the awk print field to fetch rhcos-image (#1033) [#1033](https://github.com/openshift/cluster-node-tuning-operator/pull/1033)
* set Cgroups V2 as default (#1010) [#1010](https://github.com/openshift/cluster-node-tuning-operator/pull/1010)
* E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) [#1011](https://github.com/openshift/cluster-node-tuning-operator/pull/1011)
* NO-JIRA: deps: Bump to K8s 1.29.2 (#990) [#990](https://github.com/openshift/cluster-node-tuning-operator/pull/990)
* Delete duplicate mixedcpus e2e test (#1015) [#1015](https://github.com/openshift/cluster-node-tuning-operator/pull/1015)
* e2e: Enhance tests related to crio annotations (#955) [#955](https://github.com/openshift/cluster-node-tuning-operator/pull/955)
* NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) [#993](https://github.com/openshift/cluster-node-tuning-operator/pull/993)
* [OCPBUGS-30569](https://issues.redhat.com/browse/OCPBUGS-30569): Systemd processes not being moved to cpuset/systemd.slice fix (#992) [#992](https://github.com/openshift/cluster-node-tuning-operator/pull/992)
* NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) [#991](https://github.com/openshift/cluster-node-tuning-operator/pull/991)
* e2e: when crun is enabled by default skip checking runc config (#948) [#948](https://github.com/openshift/cluster-node-tuning-operator/pull/948)
* NO-JIRA: Update tuned profile degraded test (#1005) [#1005](https://github.com/openshift/cluster-node-tuning-operator/pull/1005)
* Change .snyk format (#1000) [#1000](https://github.com/openshift/cluster-node-tuning-operator/pull/1000)
* Remove removePerformanceOLMOperator() (#997) [#997](https://github.com/openshift/cluster-node-tuning-operator/pull/997)
* [CNF-11213](https://issues.redhat.com/browse/CNF-11213): added mixedCpus e2e test (#967) [#967](https://github.com/openshift/cluster-node-tuning-operator/pull/967)
* NO-JIRA: Add positive tests with ginkgo timeout (#964) [#964](https://github.com/openshift/cluster-node-tuning-operator/pull/964)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): Remove TuneD timeout code and reload on ERRORs (#998) [#998](https://github.com/openshift/cluster-node-tuning-operator/pull/998)
* Add sync for rendering extra ctrcfgs (#980) [#980](https://github.com/openshift/cluster-node-tuning-operator/pull/980)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): Reduce number of reboots in offline tests (#940) [#940](https://github.com/openshift/cluster-node-tuning-operator/pull/940)
* makefile:hypershift: initial make target (#995) [#995](https://github.com/openshift/cluster-node-tuning-operator/pull/995)
* e2e:mixedcpus: check env variables of init process (#961) [#961](https://github.com/openshift/cluster-node-tuning-operator/pull/961)
* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 24786: update protobuf (#985) [#985](https://github.com/openshift/cluster-node-tuning-operator/pull/985)
* Ignore scheduler plugin IRQs when globally enabled (#987) [#987](https://github.com/openshift/cluster-node-tuning-operator/pull/987)
* E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) [#988](https://github.com/openshift/cluster-node-tuning-operator/pull/988)
* Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) [#969](https://github.com/openshift/cluster-node-tuning-operator/pull/969)
* Update OWNERS file (#872) [#872](https://github.com/openshift/cluster-node-tuning-operator/pull/872)
* e2e: perf-prof: increase logging for debugging (#974) [#974](https://github.com/openshift/cluster-node-tuning-operator/pull/974)
* [OCPBUGS-26400](https://issues.redhat.com/browse/OCPBUGS-26400): scheduler plugin: ignore IRQs (#976) [#976](https://github.com/openshift/cluster-node-tuning-operator/pull/976)
* e2e: testdata: remove the annotated profile (#962) [#962](https://github.com/openshift/cluster-node-tuning-operator/pull/962)
* [OCPBUGS-29641](https://issues.redhat.com/browse/OCPBUGS-29641): fix rendering extra ctrcfgs (#972) [#972](https://github.com/openshift/cluster-node-tuning-operator/pull/972)
* NTO operand cleanup (#970) [#970](https://github.com/openshift/cluster-node-tuning-operator/pull/970)
* Render: Don't fail if there is no recommended profile. (#935) [#935](https://github.com/openshift/cluster-node-tuning-operator/pull/935)
* [OCPBUGS-23167](https://issues.redhat.com/browse/OCPBUGS-23167): Add performance real time tuned template (#954) [#954](https://github.com/openshift/cluster-node-tuning-operator/pull/954)
* Add support to inject owner-ref argument to render command (#960) [#960](https://github.com/openshift/cluster-node-tuning-operator/pull/960)
* [OCPBUGS-29546](https://issues.redhat.com/browse/OCPBUGS-29546): Apply hypershift cluster-profile for ibm-cloud-managed (#958) [#958](https://github.com/openshift/cluster-node-tuning-operator/pull/958)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): e2e: fix comparing incompatible types (#957) [#957](https://github.com/openshift/cluster-node-tuning-operator/pull/957)
* Render: Add MCSelector to missing default MCPs (#956) [#956](https://github.com/openshift/cluster-node-tuning-operator/pull/956)
* e2e: check if shared CPUs survive Kubelet restart (#912) [#912](https://github.com/openshift/cluster-node-tuning-operator/pull/912)
* render: perfprofile: don't annotate perfprof (#951) [#951](https://github.com/openshift/cluster-node-tuning-operator/pull/951)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: mixedcpus test (#892) [#892](https://github.com/openshift/cluster-node-tuning-operator/pull/892)
* e2e: fix typo in label name (#947) [#947](https://github.com/openshift/cluster-node-tuning-operator/pull/947)
* skip realtime disabled tests due to OCPBUGS-28828 (#944) [#944](https://github.com/openshift/cluster-node-tuning-operator/pull/944)
* [OCPBUGS-29183](https://issues.redhat.com/browse/OCPBUGS-29183): Enable crun as runtime only if missing (#937) [#937](https://github.com/openshift/cluster-node-tuning-operator/pull/937)
* Fix e2e tests on SNO (#939) [#939](https://github.com/openshift/cluster-node-tuning-operator/pull/939)
* e2e: classifying tests using labels (#936) [#936](https://github.com/openshift/cluster-node-tuning-operator/pull/936)
* Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) [#938](https://github.com/openshift/cluster-node-tuning-operator/pull/938)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: cgroups: introduce cgroup package (#906) [#906](https://github.com/openshift/cluster-node-tuning-operator/pull/906)
* New flags in Performance profile creator (#908) [#908](https://github.com/openshift/cluster-node-tuning-operator/pull/908)
* NO-JIRA: e2e: set performance profile cpus using env vars (#909) [#909](https://github.com/openshift/cluster-node-tuning-operator/pull/909)
* [CNF-11091](https://issues.redhat.com/browse/CNF-11091): Change webhook failure policy to ignore (#933) [#933](https://github.com/openshift/cluster-node-tuning-operator/pull/933)
* [CNF-11145](https://issues.redhat.com/browse/CNF-11145): Enhance render sync to include bootstrap rendering tests (#932) [#932](https://github.com/openshift/cluster-node-tuning-operator/pull/932)
* NO-JIRA: perfprof: render: make ownerReference optional (#907) [#907](https://github.com/openshift/cluster-node-tuning-operator/pull/907)
* Revert "NO-JIRA: skip crun configuration test" (#918) [#918](https://github.com/openshift/cluster-node-tuning-operator/pull/918)
* Render MC without additional PP (#924) [#924](https://github.com/openshift/cluster-node-tuning-operator/pull/924)
* Report duplicate priority only for multiple matching profiles (#890) [#890](https://github.com/openshift/cluster-node-tuning-operator/pull/890)
* e2e: `UpdateWithRetry` only update spec (#914) [#914](https://github.com/openshift/cluster-node-tuning-operator/pull/914)
* Skip PerformanceProfile update test (#929) [#929](https://github.com/openshift/cluster-node-tuning-operator/pull/929)
* Export ValidateBasicFields for Hypershift (#916) [#916](https://github.com/openshift/cluster-node-tuning-operator/pull/916)
* e2e: log: set ctrl-runtime logger (#911) [#911](https://github.com/openshift/cluster-node-tuning-operator/pull/911)
* [OCPBUGS-22095](https://issues.redhat.com/browse/OCPBUGS-22095): Add default MCP objects for rendering (#833) [#833](https://github.com/openshift/cluster-node-tuning-operator/pull/833)
* README Doc Typo Fix (#920) [#920](https://github.com/openshift/cluster-node-tuning-operator/pull/920)
* HyperShift code linter PR837 followup (#910) [#910](https://github.com/openshift/cluster-node-tuning-operator/pull/910)
* [CNF-10786](https://issues.redhat.com/browse/CNF-10786): e2e: general improvements and cleanup (#898) [#898](https://github.com/openshift/cluster-node-tuning-operator/pull/898)
* dnm: skip crun configuration test (#917) [#917](https://github.com/openshift/cluster-node-tuning-operator/pull/917)
* Add .snyk file for static code analysis (#902) [#902](https://github.com/openshift/cluster-node-tuning-operator/pull/902)
* [OCPBUGS-25699](https://issues.redhat.com/browse/OCPBUGS-25699): irqbalance: set banned cpus list to '0' (#899) [#899](https://github.com/openshift/cluster-node-tuning-operator/pull/899)
* rps: fail silently when rps application failed (#895) [#895](https://github.com/openshift/cluster-node-tuning-operator/pull/895)
* [OCPBUGS-20368](https://issues.redhat.com/browse/OCPBUGS-20368): E2E: Add tests for Dynamic ovs pinning (#746) [#746](https://github.com/openshift/cluster-node-tuning-operator/pull/746)
* NTO: Add MCP name to filter PP (#878) [#878](https://github.com/openshift/cluster-node-tuning-operator/pull/878)
* [OCPBUGS-24581](https://issues.redhat.com/browse/OCPBUGS-24581): rps: fix mask update for SR-IOV devices (#877) [#877](https://github.com/openshift/cluster-node-tuning-operator/pull/877)
* [OCPBUGS-24792](https://issues.redhat.com/browse/OCPBUGS-24792): Make MC names deterministic (#875) [#875](https://github.com/openshift/cluster-node-tuning-operator/pull/875)
* makefile: add target to trigger mixedcpus e2e test (#883) [#883](https://github.com/openshift/cluster-node-tuning-operator/pull/883)
* Fix error logging in metrics server.go (#882) [#882](https://github.com/openshift/cluster-node-tuning-operator/pull/882)
* e2e-test: Call SetLogger (#881) [#881](https://github.com/openshift/cluster-node-tuning-operator/pull/881)
* Use go 1.21 (#879) [#879](https://github.com/openshift/cluster-node-tuning-operator/pull/879)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#868) [#868](https://github.com/openshift/cluster-node-tuning-operator/pull/868)
* Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) [#867](https://github.com/openshift/cluster-node-tuning-operator/pull/867)
* e2e: images: bump default test image to 4.14 (#856) [#856](https://github.com/openshift/cluster-node-tuning-operator/pull/856)
* cpuset-configure: exit gracefully on cgroup v2 (#866) [#866](https://github.com/openshift/cluster-node-tuning-operator/pull/866)
* [CNF-7610](https://issues.redhat.com/browse/CNF-7610): Mixed CPUs plugin deployment support (#853) [#853](https://github.com/openshift/cluster-node-tuning-operator/pull/853)
* New MachineConfig render command (#844) [#844](https://github.com/openshift/cluster-node-tuning-operator/pull/844)
* Report duplicate profiles as ERRORs (#864) [#864](https://github.com/openshift/cluster-node-tuning-operator/pull/864)
* [CNF-10473](https://issues.redhat.com/browse/CNF-10473): featuregates: main: add feature gates support for PAO controller (#858) [#858](https://github.com/openshift/cluster-node-tuning-operator/pull/858)
* e2e:latency: omit LatencyTestRun env variable (#857) [#857](https://github.com/openshift/cluster-node-tuning-operator/pull/857)
* [OCPBUGS-18649](https://issues.redhat.com/browse/OCPBUGS-18649): E2E: PPC Test cases (#708) [#708](https://github.com/openshift/cluster-node-tuning-operator/pull/708)
* [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): Fix Racing Machine Configs and add Day 0 Support (#854) [#854](https://github.com/openshift/cluster-node-tuning-operator/pull/854)
* Avoid k8s.io/kubernetes as dep (#848) [#848](https://github.com/openshift/cluster-node-tuning-operator/pull/848)
* Remove most //nolint:* overrides (#837) [#837](https://github.com/openshift/cluster-node-tuning-operator/pull/837)
* [CNF-10294](https://issues.redhat.com/browse/CNF-10294): main: remove deprecated multi ns function (#770) [#770](https://github.com/openshift/cluster-node-tuning-operator/pull/770)
* [OCPBUGS-22519](https://issues.redhat.com/browse/OCPBUGS-22519): bump opentelemetry package (#840) [#840](https://github.com/openshift/cluster-node-tuning-operator/pull/840)
* Disable HTTP/2 for webhook and metrics servers (#834) [#834](https://github.com/openshift/cluster-node-tuning-operator/pull/834)
* Remove obsolete protocols and weak ciphers (#827) [#827](https://github.com/openshift/cluster-node-tuning-operator/pull/827)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): rps: trigger udev even per queue (#816) [#816](https://github.com/openshift/cluster-node-tuning-operator/pull/816)
* render: change dir path (#824) [#824](https://github.com/openshift/cluster-node-tuning-operator/pull/824)
* Makefile: remote tmp folder on clean target (#823) [#823](https://github.com/openshift/cluster-node-tuning-operator/pull/823)
* Add golangci-lint (#793) [#793](https://github.com/openshift/cluster-node-tuning-operator/pull/793)
* Updating cluster-node-tuning-operator images to be consistent with ART (#795) [#795](https://github.com/openshift/cluster-node-tuning-operator/pull/795)
* fix: add if check for no resource match error (#801) [#801](https://github.com/openshift/cluster-node-tuning-operator/pull/801)
* nto: avoid timeout when there are too many CSV (#731) [#731](https://github.com/openshift/cluster-node-tuning-operator/pull/731)
* Set non-default UserAgent for easier debugging (#807) [#807](https://github.com/openshift/cluster-node-tuning-operator/pull/807)
* Improve co/node-tuning operand version reporting (#792) [#792](https://github.com/openshift/cluster-node-tuning-operator/pull/792)
* Add the k8s reporter to the configuration suite (#815) [#815](https://github.com/openshift/cluster-node-tuning-operator/pull/815)
* [OCPBUGS-18783](https://issues.redhat.com/browse/OCPBUGS-18783): e2e: perfprof: enhance the scheduling domain tests (#791) [#791](https://github.com/openshift/cluster-node-tuning-operator/pull/791)
* Add kubeconfig path for IBM Managed OpenShift (#810) [#810](https://github.com/openshift/cluster-node-tuning-operator/pull/810)
* Add k8s reporter to e2e tests (#666) [#666](https://github.com/openshift/cluster-node-tuning-operator/pull/666)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#804) [#804](https://github.com/openshift/cluster-node-tuning-operator/pull/804)
* Memory manager E2E test fixes (#784) [#784](https://github.com/openshift/cluster-node-tuning-operator/pull/784)
* Some unit tests fail with go1.19 as some modules require 1.20 (#794) [#794](https://github.com/openshift/cluster-node-tuning-operator/pull/794)
* e2e: add expected max latancy to hwlatdetec test & rename constant (#719) [#719](https://github.com/openshift/cluster-node-tuning-operator/pull/719)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): e2e:rps: improve logging (#787) [#787](https://github.com/openshift/cluster-node-tuning-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d1894c1dc96cfab024fb0a80903eac060bce39b3...2bd8891ead93e161b9a871ac2eaa947bfc17309f)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/27bf70ddf9421637e1da18b249785b2cca177272)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#54](https://github.com/openshift/cluster-olm-operator/pull/54)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for clusterextensions [#53](https://github.com/openshift/cluster-olm-operator/pull/53)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for validating admission policy APIs [#52](https://github.com/openshift/cluster-olm-operator/pull/52)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Update dependencies [#51](https://github.com/openshift/cluster-olm-operator/pull/51)
* [OCPBUGS-31280](https://issues.redhat.com/browse/OCPBUGS-31280): manual art compliance [#50](https://github.com/openshift/cluster-olm-operator/pull/50)
* [OCPBUGS-32188](https://issues.redhat.com/browse/OCPBUGS-32188): Update README.md [#49](https://github.com/openshift/cluster-olm-operator/pull/49)
* [OCPBUGS-30491](https://issues.redhat.com/browse/OCPBUGS-30491): Update kube dep to 1.27.12 [#48](https://github.com/openshift/cluster-olm-operator/pull/48)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#46](https://github.com/openshift/cluster-olm-operator/pull/46)
* NO-ISSUE: Remove ncdc from OWNERS [#45](https://github.com/openshift/cluster-olm-operator/pull/45)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Reenable cluster-olm-operator [#44](https://github.com/openshift/cluster-olm-operator/pull/44)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Disable cluster-olm-operator [#43](https://github.com/openshift/cluster-olm-operator/pull/43)
* [OCPBUGS-25542](https://issues.redhat.com/browse/OCPBUGS-25542): Updating ose-cluster-olm-operator-container image to be consistent with ART [#42](https://github.com/openshift/cluster-olm-operator/pull/42)
* [OCPBUGS-24794](https://issues.redhat.com/browse/OCPBUGS-24794): Updating ose-cluster-olm-operator-container image to be consistent with ART [#39](https://github.com/openshift/cluster-olm-operator/pull/39)
* NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#37](https://github.com/openshift/cluster-olm-operator/pull/37)
* [OCPBUGS-24451](https://issues.redhat.com/browse/OCPBUGS-24451): Bump k8s dependencies [#36](https://github.com/openshift/cluster-olm-operator/pull/36)
* [OCPBUGS-24068](https://issues.redhat.com/browse/OCPBUGS-24068): Updating ose-cluster-olm-operator-container image to be consistent with ART [#35](https://github.com/openshift/cluster-olm-operator/pull/35)
* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART [#34](https://github.com/openshift/cluster-olm-operator/pull/34)
* [OCPBUGS-21670](https://issues.redhat.com/browse/OCPBUGS-21670): Bump golang.org/x/net to v0.17.0 [#32](https://github.com/openshift/cluster-olm-operator/pull/32)
* [OCPBUGS-19095](https://issues.redhat.com/browse/OCPBUGS-19095): Updating ose-cluster-olm-operator images to be consistent with ART [#31](https://github.com/openshift/cluster-olm-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0dbbb6132ced379602040731ff889eebb4202e73...27bf70ddf9421637e1da18b249785b2cca177272)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/d26f3002e10be6f206f69a829d1511130e8188d9)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): Set required-scc for openshift workloads [#573](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/573)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#574](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/574)
* [OCPBUGS-29580](https://issues.redhat.com/browse/OCPBUGS-29580): Apply hypershift cluster-profile for ibm-cloud-managed [#572](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/572)
* [OCPBUGS-32346](https://issues.redhat.com/browse/OCPBUGS-32346): the apiservice controller waits until bootstrap complete [#575](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/575)
* NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets [#577](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/577)
* NO-ISSUE: fix: TestRedeployOnConfigChange [#576](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/576)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#559](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/559)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#566](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/566)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#547](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/547)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#562](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/562)
* [OCPBUGS-24972](https://issues.redhat.com/browse/OCPBUGS-24972): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#561](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/561)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#551](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/551)
* [OCPBUGS-19231](https://issues.redhat.com/browse/OCPBUGS-19231): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#548](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/548)
* [OCPBUGS-21733](https://issues.redhat.com/browse/OCPBUGS-21733): bump library-go to include switch to HTTP/1.1 [#552](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/700dc111fd98c315648a78371b11be34fa4dbba3...d26f3002e10be6f206f69a829d1511130e8188d9)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/899699681f8bb984d0f249dec171e630440c461b)
* [OCPBUGS-34384](https://issues.redhat.com/browse/OCPBUGS-34384): [release-4.16] Disable Rolebindings for Capabilities [#350](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/350)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#336](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/336)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps opentelemetry dependencies [#341](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/341)
* [OCPBUGS-29973](https://issues.redhat.com/browse/OCPBUGS-29973): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 [#337](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/337)
* [OCPBUGS-29581](https://issues.redhat.com/browse/OCPBUGS-29581): Apply hypershift cluster-profile for ibm-cloud-managed [#334](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/334)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#316](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/316)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#338](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/338)
* [OCPBUGS-24888](https://issues.redhat.com/browse/OCPBUGS-24888): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#321](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/321)
* [OCPBUGS-28666](https://issues.redhat.com/browse/OCPBUGS-28666): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#326](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/326)
* [OCPBUGS-23624](https://issues.redhat.com/browse/OCPBUGS-23624): Add .snyk file to exclude vendor and ignore unit tests [#325](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/325)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump k8s dependencies to 1.29.0 [#324](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/324)
* [OCPBUGS-24190](https://issues.redhat.com/browse/OCPBUGS-24190): Disable deployer-controller when deploymentconfig is disabled [#320](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/320)
* [OCPBUGS-22956](https://issues.redhat.com/browse/OCPBUGS-22956): Remove blockage of ConfigObserver by build informer HasSynced flag [#315](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/315)
* Revert "Revert #300 "API-1666: add image pull secret cleanup controller"" [#314](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/314)
* Revert #300 "API-1666: add image pull secret cleanup controller" [#313](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/313)
* [API-1642](https://issues.redhat.com/browse/API-1642): add image pull secret cleanup controller [#300](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/300)
* [API-1642](https://issues.redhat.com/browse/API-1642): Do not generate image pull secrets for internal registry when internal registry is disabled. [#298](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/298)
* [OCPBUGS-21830](https://issues.redhat.com/browse/OCPBUGS-21830): bump(k8s,openshift) to address CVE-2023-44487 [#308](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/308)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Include Build CRD in manifests [#306](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/306)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#305](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/305)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#304](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/304)
* [OCPBUGS-18932](https://issues.redhat.com/browse/OCPBUGS-18932): Always sort disabled controller list [#302](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/302)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable BuildConfigChange controller when Build cap is disabled [#299](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/3985c55f99e1ea013be2db096059c09b2ed98118...899699681f8bb984d0f249dec171e630440c461b)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/eaea543f4c845a7b65705f12e162cc121bb12f88)
* [OCPBUGS-30496](https://issues.redhat.com/browse/OCPBUGS-30496): bump(google.golang.org/protobuf)=v1.33.0 [#147](https://github.com/openshift/cluster-policy-controller/pull/147)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#146](https://github.com/openshift/cluster-policy-controller/pull/146)
* [OCPBUGS-24877](https://issues.redhat.com/browse/OCPBUGS-24877): Updating ose-cluster-policy-controller-container image to be consistent with ART [#144](https://github.com/openshift/cluster-policy-controller/pull/144)
* [OCPBUGS-26190](https://issues.redhat.com/browse/OCPBUGS-26190): Add .snyk file to exclude vendor and ignore unit tests [#145](https://github.com/openshift/cluster-policy-controller/pull/145)
* [OCPBUGS-24078](https://issues.redhat.com/browse/OCPBUGS-24078): Updating ose-cluster-policy-controller-container image to be consistent with ART [#143](https://github.com/openshift/cluster-policy-controller/pull/143)
* go.mod: remove replaces [#138](https://github.com/openshift/cluster-policy-controller/pull/138)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): bump(k8s,openshift) to address CVE-2023-44487 [#137](https://github.com/openshift/cluster-policy-controller/pull/137)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): Bump deps to address CVE-2023-44487 [#133](https://github.com/openshift/cluster-policy-controller/pull/133)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#132](https://github.com/openshift/cluster-policy-controller/pull/132)
* [OCPBUGS-19119](https://issues.redhat.com/browse/OCPBUGS-19119): Updating cluster-policy-controller images to be consistent with ART [#131](https://github.com/openshift/cluster-policy-controller/pull/131)
* [OCPBUGS-17458](https://issues.redhat.com/browse/OCPBUGS-17458): ps syncer: don't hotloop on a missing namespace [#130](https://github.com/openshift/cluster-policy-controller/pull/130)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/219f6f6f072d867201d4923d39fd8bcaecbe7c59...eaea543f4c845a7b65705f12e162cc121bb12f88)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/d4dd84396472c5e974f0562046a6ad068b6f20f8)
* [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543)
* Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542)
* [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540)
* [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#530](https://github.com/openshift/cluster-samples-operator/pull/530)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#527](https://github.com/openshift/cluster-samples-operator/pull/527)
* [SO-119](https://issues.redhat.com/browse/SO-119): Fix mariadb import url in OKD [#525](https://github.com/openshift/cluster-samples-operator/pull/525)
* [SO-118](https://issues.redhat.com/browse/SO-118): Bumping the K8s to 28.2 and golang to 1.20 [#524](https://github.com/openshift/cluster-samples-operator/pull/524)
* [SO-117](https://issues.redhat.com/browse/SO-117): Library Sync for OCP release 4.15 [#522](https://github.com/openshift/cluster-samples-operator/pull/522)
* [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519)
* Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/61a34659e4499188ab6f790e3a07aba8be9e9bdd...d4dd84396472c5e974f0562046a6ad068b6f20f8)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7cb826784c64b234d9ce1c99b2f8fd6082670c36)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#470](https://github.com/openshift/cluster-storage-operator/pull/470)
* [OCPBUGS-29126](https://issues.redhat.com/browse/OCPBUGS-29126): vsphere-problem-detector: don't set Available condition [#456](https://github.com/openshift/cluster-storage-operator/pull/456)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#467](https://github.com/openshift/cluster-storage-operator/pull/467)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): update ClusterCSIDriver CRDs [#464](https://github.com/openshift/cluster-storage-operator/pull/464)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#459](https://github.com/openshift/cluster-storage-operator/pull/459)
* [OCPBUGS-28748](https://issues.redhat.com/browse/OCPBUGS-28748): log default storage class names when collector is triggered [#460](https://github.com/openshift/cluster-storage-operator/pull/460)
* [OCPBUGS-30498](https://issues.redhat.com/browse/OCPBUGS-30498): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#463](https://github.com/openshift/cluster-storage-operator/pull/463)
* [STOR-1758](https://issues.redhat.com/browse/STOR-1758): Add azure file hypershift [#454](https://github.com/openshift/cluster-storage-operator/pull/454)
* [OCPBUGS-28879](https://issues.redhat.com/browse/OCPBUGS-28879): Fix problem-detector proxy setting [#457](https://github.com/openshift/cluster-storage-operator/pull/457)
* [OCPBUGS-29573](https://issues.redhat.com/browse/OCPBUGS-29573): Apply hypershift cluster-profile for ibm-cloud-managed [#458](https://github.com/openshift/cluster-storage-operator/pull/458)
* [OCPBUGS-28765](https://issues.redhat.com/browse/OCPBUGS-28765): Remove master node selector from azure-csi-driver-operator deployment [#448](https://github.com/openshift/cluster-storage-operator/pull/448)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#455](https://github.com/openshift/cluster-storage-operator/pull/455)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#447](https://github.com/openshift/cluster-storage-operator/pull/447)
* [STOR-1611](https://issues.redhat.com/browse/STOR-1611): remove ibm-vpc-node-label-updater [#445](https://github.com/openshift/cluster-storage-operator/pull/445)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Allow vSphere CSI driver to be disabled [#444](https://github.com/openshift/cluster-storage-operator/pull/444)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to CSO [#442](https://github.com/openshift/cluster-storage-operator/pull/442)
* [STOR-1354](https://issues.redhat.com/browse/STOR-1354): Remove Alibaba Disk CSI Driver [#440](https://github.com/openshift/cluster-storage-operator/pull/440)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#443](https://github.com/openshift/cluster-storage-operator/pull/443)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Azure disk hypershift [#420](https://github.com/openshift/cluster-storage-operator/pull/420)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#437](https://github.com/openshift/cluster-storage-operator/pull/437)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert [#430](https://github.com/openshift/cluster-storage-operator/pull/430)
* [OCPBUGS-22422](https://issues.redhat.com/browse/OCPBUGS-22422): Fix PodStartupStorageOperationsFailing alert [#436](https://github.com/openshift/cluster-storage-operator/pull/436)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#434](https://github.com/openshift/cluster-storage-operator/pull/434)
* [OCPBUGS-25564](https://issues.redhat.com/browse/OCPBUGS-25564): Updating ose-cluster-storage-operator-container image to be consistent with ART [#435](https://github.com/openshift/cluster-storage-operator/pull/435)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): replace instanceAdmin role with specific compute permissions [#429](https://github.com/openshift/cluster-storage-operator/pull/429)
* [OCPBUGS-24927](https://issues.redhat.com/browse/OCPBUGS-24927): Updating ose-cluster-storage-operator-container image to be consistent with ART [#432](https://github.com/openshift/cluster-storage-operator/pull/432)
* [OCPBUGS-23852](https://issues.redhat.com/browse/OCPBUGS-23852): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#431](https://github.com/openshift/cluster-storage-operator/pull/431)
* [OCPVE-789](https://issues.redhat.com/browse/OCPVE-789): annotate credentials request manifests [#418](https://github.com/openshift/cluster-storage-operator/pull/418)
* [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add Prometheus rules for SELinux telemetry [#422](https://github.com/openshift/cluster-storage-operator/pull/422)
* [TRT-1376](https://issues.redhat.com/browse/TRT-1376): Revert #410 "CCO-251: use granular permissions for gcp credentails request" [#426](https://github.com/openshift/cluster-storage-operator/pull/426)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): use granular permissions for gcp credentails request [#410](https://github.com/openshift/cluster-storage-operator/pull/410)
* [OCPBUGS-24112](https://issues.redhat.com/browse/OCPBUGS-24112): Updating ose-cluster-storage-operator-container image to be consistent with ART [#424](https://github.com/openshift/cluster-storage-operator/pull/424)
* [STOR-1487](https://issues.redhat.com/browse/STOR-1487): bump openshift/api to get IBMCloudCSIDriverConfigSpec [#423](https://github.com/openshift/cluster-storage-operator/pull/423)
* [OCPBUGS-24027](https://issues.redhat.com/browse/OCPBUGS-24027): forbidden access to resource on shared-resource-csi-driver-operator [#425](https://github.com/openshift/cluster-storage-operator/pull/425)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#421](https://github.com/openshift/cluster-storage-operator/pull/421)
* [OCPBUGS-23120](https://issues.redhat.com/browse/OCPBUGS-23120): [IBM ROKS] cluster-storage-operator does not set upgradeable=True [#417](https://github.com/openshift/cluster-storage-operator/pull/417)
* [STOR-1453](https://issues.redhat.com/browse/STOR-1453): Grant permissions to access `apiserver` to CSI driver operators [#415](https://github.com/openshift/cluster-storage-operator/pull/415)
* [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404)
* [OCPBUGS-13669](https://issues.redhat.com/browse/OCPBUGS-13669): skip Azure File installation on Azure StackHub [#395](https://github.com/openshift/cluster-storage-operator/pull/395)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Move KAS access label to right place [#403](https://github.com/openshift/cluster-storage-operator/pull/403)
* update readme [#400](https://github.com/openshift/cluster-storage-operator/pull/400)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399)
* [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398)
* [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192...7cb826784c64b234d9ce1c99b2f8fd6082670c36)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)
* [OCPBUGS-29570](https://issues.redhat.com/browse/OCPBUGS-29570): Apply hypershift cluster-profile for ibm-cloud-managed [#54](https://github.com/openshift/cluster-update-keys/pull/54)
* [OCPBUGS-24932](https://issues.redhat.com/browse/OCPBUGS-24932): Updating ose-cluster-update-keys-container image to be consistent with ART [#53](https://github.com/openshift/cluster-update-keys/pull/53)
* [OCPBUGS-24115](https://issues.redhat.com/browse/OCPBUGS-24115): Updating ose-cluster-update-keys-container image to be consistent with ART [#52](https://github.com/openshift/cluster-update-keys/pull/52)
* [OCPBUGS-19189](https://issues.redhat.com/browse/OCPBUGS-19189): Updating ose-cluster-update-keys images to be consistent with ART [#51](https://github.com/openshift/cluster-update-keys/pull/51)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e0c26a084139906e866d9eec89f05d2d3211b334...c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6f553e98877e87d08a5c5fa9b13758a12cdcef8c)
* [OCPBUGS-35249](https://issues.redhat.com/browse/OCPBUGS-35249): Revert: Add support for Custom Certificate Authorities for custom signature stores" [#1053](https://github.com/openshift/cluster-version-operator/pull/1053)
* [OCPBUGS-24700](https://issues.redhat.com/browse/OCPBUGS-24700): Add support for Custom Certificate Authorities for custom signature stores [#1030](https://github.com/openshift/cluster-version-operator/pull/1030)
* [OTA-1160](https://issues.redhat.com/browse/OTA-1160): pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart [#1044](https://github.com/openshift/cluster-version-operator/pull/1044)
* NO-ISSUE: pkg/payload/task: Drop unused Requeued property [#1043](https://github.com/openshift/cluster-version-operator/pull/1043)
* [NE-1318](https://issues.redhat.com/browse/NE-1318): Add always-enable-capabilities flag and set Ingress as always enabled [#946](https://github.com/openshift/cluster-version-operator/pull/946)
* [OCPBUGS-9133](https://issues.redhat.com/browse/OCPBUGS-9133): pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded [#746](https://github.com/openshift/cluster-version-operator/pull/746)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1038](https://github.com/openshift/cluster-version-operator/pull/1038)
* NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 [#1042](https://github.com/openshift/cluster-version-operator/pull/1042)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): pkg/cvo: Render status.Failure in ReconciliationIssues [#1041](https://github.com/openshift/cluster-version-operator/pull/1041)
* [OTA-1210](https://issues.redhat.com/browse/OTA-1210): *: Add --update-service command-line option [#1035](https://github.com/openshift/cluster-version-operator/pull/1035)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [2/3] Maintain `ReconciliationIssues` condition [#1032](https://github.com/openshift/cluster-version-operator/pull/1032)
* [OCPBUGS-29868](https://issues.redhat.com/browse/OCPBUGS-29868): Apply hypershift cluster-profile for ibm-cloud-managed [#1037](https://github.com/openshift/cluster-version-operator/pull/1037)
* NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded [#1036](https://github.com/openshift/cluster-version-operator/pull/1036)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api with new capability [#979](https://github.com/openshift/cluster-version-operator/pull/979)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [1/x] Refactor syncStatus for testability [#1031](https://github.com/openshift/cluster-version-operator/pull/1031)
* [OCPBUGS-18454](https://issues.redhat.com/browse/OCPBUGS-18454): Avoid using risk names as condition reasons when invalid [#962](https://github.com/openshift/cluster-version-operator/pull/962)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): yield lock while retrieving payload [#1005](https://github.com/openshift/cluster-version-operator/pull/1005)
* NO-JIRA: manifests: fix service manifest filename [#1027](https://github.com/openshift/cluster-version-operator/pull/1027)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features [#1026](https://github.com/openshift/cluster-version-operator/pull/1026)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): Refactor & improve SyncWorker lock code [#1020](https://github.com/openshift/cluster-version-operator/pull/1020)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): deps: bump openshift/api and k8s.io/client.go [#1022](https://github.com/openshift/cluster-version-operator/pull/1022)
* [OCPBUGS-25862](https://issues.redhat.com/browse/OCPBUGS-25862): CO health: only track current in-progress upgrade start [#1011](https://github.com/openshift/cluster-version-operator/pull/1011)
* [OCPBUGS-26014](https://issues.redhat.com/browse/OCPBUGS-26014): clusterOperatorBuilder: Reconcile metadata on COs [#1012](https://github.com/openshift/cluster-version-operator/pull/1012)
* [OCPBUGS-25708](https://issues.redhat.com/browse/OCPBUGS-25708): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1009](https://github.com/openshift/cluster-version-operator/pull/1009)
* [OCPBUGS-24535](https://issues.redhat.com/browse/OCPBUGS-24535): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#996](https://github.com/openshift/cluster-version-operator/pull/996)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-version-operator/pull/1006)
* [OCPBUGS-25055](https://issues.redhat.com/browse/OCPBUGS-25055): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1003](https://github.com/openshift/cluster-version-operator/pull/1003)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1004](https://github.com/openshift/cluster-version-operator/pull/1004)
* [OTA-917](https://issues.redhat.com/browse/OTA-917): pkg/customsignaturestore: Implement signatureStores customization [#994](https://github.com/openshift/cluster-version-operator/pull/994)
* [OCPVE-646](https://issues.redhat.com/browse/OCPVE-646): add cloud credential capability [#963](https://github.com/openshift/cluster-version-operator/pull/963)
* [OTA-855](https://issues.redhat.com/browse/OTA-855): Create GET requests to the Prometheus API server [#999](https://github.com/openshift/cluster-version-operator/pull/999)
* [OCPBUGS-23290](https://issues.redhat.com/browse/OCPBUGS-23290): install/0000_90_cluster-version-operator_02_servicemonitor: 'oc get …' for CannotRetrieveUpdates [#995](https://github.com/openshift/cluster-version-operator/pull/995)
* [OCPBUGS-24138](https://issues.redhat.com/browse/OCPBUGS-24138): NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART [#1000](https://github.com/openshift/cluster-version-operator/pull/1000)
* [OCPBUGS-23377](https://issues.redhat.com/browse/OCPBUGS-23377): to reduce log noise, only log sync_worker messages on retry or payload change [#997](https://github.com/openshift/cluster-version-operator/pull/997)
* [OCPBUGS-19391](https://issues.redhat.com/browse/OCPBUGS-19391): do not reconcile rules if aggregationRule is set [#993](https://github.com/openshift/cluster-version-operator/pull/993)
* [OCPBUGS-8079](https://issues.redhat.com/browse/OCPBUGS-8079): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#992](https://github.com/openshift/cluster-version-operator/pull/992)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): vendor: bump openshift/api [#984](https://github.com/openshift/cluster-version-operator/pull/984)
* [OCPBUGS-21933](https://issues.redhat.com/browse/OCPBUGS-21933): Bump http-related deps [#983](https://github.com/openshift/cluster-version-operator/pull/983)
* [OCPVE-673](https://issues.redhat.com/browse/OCPVE-673): Bump API to Add OLM Capability [#971](https://github.com/openshift/cluster-version-operator/pull/971)
* Revert openshift/api bump PR merged by mistake (977) [#978](https://github.com/openshift/cluster-version-operator/pull/978)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api [#977](https://github.com/openshift/cluster-version-operator/pull/977)
* [OCPBUGS-19868](https://issues.redhat.com/browse/OCPBUGS-19868): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#975](https://github.com/openshift/cluster-version-operator/pull/975)
* [OCPBUGS-19512](https://issues.redhat.com/browse/OCPBUGS-19512): pkg/clusterconditions/promql: Warm cache with 1s delay [#939](https://github.com/openshift/cluster-version-operator/pull/939)
* [OCPBUGS-18386](https://issues.redhat.com/browse/OCPBUGS-18386): Properly reconcile SCC resources [#966](https://github.com/openshift/cluster-version-operator/pull/966)
* [OTA-854](https://issues.redhat.com/browse/OTA-854): Add configurable CVO knobs for risk-evaluation PromQL target [#926](https://github.com/openshift/cluster-version-operator/pull/926)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition [#968](https://github.com/openshift/cluster-version-operator/pull/968)
* [OCPBUGS-19222](https://issues.redhat.com/browse/OCPBUGS-19222): Updating cluster-version-operator images to be consistent with ART [#970](https://github.com/openshift/cluster-version-operator/pull/970)
* [OCPBUGS-18567](https://issues.redhat.com/browse/OCPBUGS-18567): lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment [#965](https://github.com/openshift/cluster-version-operator/pull/965)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/af210dc66d38bce5793155aac8bfb6220a7085d9...6f553e98877e87d08a5c5fa9b13758a12cdcef8c)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)
* [MON-3671](https://issues.redhat.com/browse/MON-3671): add machine424 and rexagod to OWNERS [#55](https://github.com/openshift/configmap-reload/pull/55)
* [OCPBUGS-24912](https://issues.redhat.com/browse/OCPBUGS-24912): Updating configmap-reload-container image to be consistent with ART [#58](https://github.com/openshift/configmap-reload/pull/58)
* Updating configmap-reload-container image to be consistent with ART [#57](https://github.com/openshift/configmap-reload/pull/57)
* [OCPBUGS-19171](https://issues.redhat.com/browse/OCPBUGS-19171): Updating configmap-reload images to be consistent with ART [#56](https://github.com/openshift/configmap-reload/pull/56)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/716a0c33bb693127fba3b3512622710785a59e8e...dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)
### [console](https://github.com/openshift/console/tree/cb7b0786c142a10610fa50cddc25cd1de8a62653)
* [OCPBUGS-35395](https://issues.redhat.com/browse/OCPBUGS-35395): Keep useUserSettings hook in the internal api [#13970](https://github.com/openshift/console/pull/13970)
* [OCPBUGS-35152](https://issues.redhat.com/browse/OCPBUGS-35152): restore missing CloseButton styles [#13947](https://github.com/openshift/console/pull/13947)
* [OCPBUGS-35318](https://issues.redhat.com/browse/OCPBUGS-35318), [OCPBUGS-35319](https://issues.redhat.com/browse/OCPBUGS-35319), [OCPBUGS-35320](https://issues.redhat.com/browse/OCPBUGS-35320): disabling add-flow A-04-TC01 test and knative tests due to flakes [#13962](https://github.com/openshift/console/pull/13962)
* (chore) Update tectonic builder image to use golang-1.21 [#13944](https://github.com/openshift/console/pull/13944)
* [OCPBUGS-34139](https://issues.redhat.com/browse/OCPBUGS-34139): Improve Pipeline list page performance [#13882](https://github.com/openshift/console/pull/13882)
* [OCPBUGS-34002](https://issues.redhat.com/browse/OCPBUGS-34002): Fix console crash-loop with OIDC auth config [#13874](https://github.com/openshift/console/pull/13874)
* [OCPBUGS-34711](https://issues.redhat.com/browse/OCPBUGS-34711): show "Debug container" link for pods with status.phase… [#13914](https://github.com/openshift/console/pull/13914)
* [OCPBUGS-33965](https://issues.redhat.com/browse/OCPBUGS-33965): i18n - Download and merge French and Spanish languages translations in the OCP Console [#13870](https://github.com/openshift/console/pull/13870)
* [OCPBUGS-34393](https://issues.redhat.com/browse/OCPBUGS-34393): fix bug where textarea is not resizable [#13894](https://github.com/openshift/console/pull/13894)
* [OCPBUGS-33989](https://issues.redhat.com/browse/OCPBUGS-33989): Updating the secrets using Form editor displays an unknown warning message [#13873](https://github.com/openshift/console/pull/13873)
* [OCPBUGS-34112](https://issues.redhat.com/browse/OCPBUGS-34112): Fix Admission webhook warning for Route and BuildConfig creation via import flow [#13881](https://github.com/openshift/console/pull/13881)
* [OCPBUGS-34141](https://issues.redhat.com/browse/OCPBUGS-34141): UI inconsistency in topology when application grouping is collapsed [#13883](https://github.com/openshift/console/pull/13883)
* [OCPBUGS-34142](https://issues.redhat.com/browse/OCPBUGS-34142): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13884](https://github.com/openshift/console/pull/13884)
* [OCPBUGS-34143](https://issues.redhat.com/browse/OCPBUGS-34143): Create Serverless form does not create BuildConfig [#13885](https://github.com/openshift/console/pull/13885)
* [OCPBUGS-33872](https://issues.redhat.com/browse/OCPBUGS-33872): add user-impersonation to QuickStartGettingStartedCard,… [#13864](https://github.com/openshift/console/pull/13864)
* [OCPBUGS-32631](https://issues.redhat.com/browse/OCPBUGS-32631): TaskRuns should not be fetched for Failed PLR's [#13806](https://github.com/openshift/console/pull/13806)
* [OCPBUGS-33567](https://issues.redhat.com/browse/OCPBUGS-33567): Expose useUserSettings hooks in dynamic plugin sdk [#13843](https://github.com/openshift/console/pull/13843)
* [ODC-7576](https://issues.redhat.com/browse/ODC-7576): Pipelines plugin test fixes [#13841](https://github.com/openshift/console/pull/13841)
* [OCPBUGS-31901](https://issues.redhat.com/browse/OCPBUGS-31901): Patch PF dynamic module parser to exclude 'next' modules [#13832](https://github.com/openshift/console/pull/13832)
* [ODC-7574](https://issues.redhat.com/browse/ODC-7574): Add e2e tests for QuickStart from Masthead in CI [#13837](https://github.com/openshift/console/pull/13837)
* [OCPBUGS-33523](https://issues.redhat.com/browse/OCPBUGS-33523): restrict Masthead logo to max-height [#13838](https://github.com/openshift/console/pull/13838)
* [OCPBUGS-29745](https://issues.redhat.com/browse/OCPBUGS-29745): Fix Pipeline details page with when expression using CEL expression [#13834](https://github.com/openshift/console/pull/13834)
* [CONSOLE-4019](https://issues.redhat.com/browse/CONSOLE-4019): Display a warning message from kube-apiserver when creating resource integration tests [#13814](https://github.com/openshift/console/pull/13814)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Backup to segment public api key [#13821](https://github.com/openshift/console/pull/13821)
* [OCPBUGS-33352](https://issues.redhat.com/browse/OCPBUGS-33352): Fix PatternFly modules check [#13817](https://github.com/openshift/console/pull/13817)
* [OCPBUGS-33345](https://issues.redhat.com/browse/OCPBUGS-33345): Disable create button on NAD empty state for regular user [#13805](https://github.com/openshift/console/pull/13805)
* [CNV-36170](https://issues.redhat.com/browse/CNV-36170): Multi NetworkPolicies [#13772](https://github.com/openshift/console/pull/13772)
* [OCPBUGS-33219](https://issues.redhat.com/browse/OCPBUGS-33219): Fix StatusItem layout when no timestamp is present [#13815](https://github.com/openshift/console/pull/13815)
* [OCPBUGS-31558](https://issues.redhat.com/browse/OCPBUGS-31558): Fix NAD creation defaulting to the default namespace [#13822](https://github.com/openshift/console/pull/13822)
* [OCPBUGS-33222](https://issues.redhat.com/browse/OCPBUGS-33222): List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature [#13818](https://github.com/openshift/console/pull/13818)
* [OCPBUGS-33199](https://issues.redhat.com/browse/OCPBUGS-33199): The filepath including leading slash makes error during parsing devfile using Gitlab [#13812](https://github.com/openshift/console/pull/13812)
* [OCPBUGS-33202](https://issues.redhat.com/browse/OCPBUGS-33202): Pipeline list page is crashed when navigating from Search page [#13813](https://github.com/openshift/console/pull/13813)
* [CONSOLE-3939](https://issues.redhat.com/browse/CONSOLE-3939): Display a warning message from kube-apiserver when creating / updating workloads resource [#13763](https://github.com/openshift/console/pull/13763)
* [OCPBUGS-32707](https://issues.redhat.com/browse/OCPBUGS-32707): Fix React Router useParams in dynamic demo plugin [#13803](https://github.com/openshift/console/pull/13803)
* [CONSOLE-1756](https://issues.redhat.com/browse/CONSOLE-1756): replace PodIP with PodIPs or HostIP with HostIPs if mor… [#13774](https://github.com/openshift/console/pull/13774)
* [ODC-7437](https://issues.redhat.com/browse/ODC-7437): Remove pf classes in topology package [#13710](https://github.com/openshift/console/pull/13710)
* [OCPBUGS-33011](https://issues.redhat.com/browse/OCPBUGS-33011): fix issues with Edit Route form [#13799](https://github.com/openshift/console/pull/13799)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014), [OCPBUGS-32791](https://issues.redhat.com/browse/OCPBUGS-32791): Consume telemetry CLUSTER_ID and use it together with orgId as segment identifier [#13786](https://github.com/openshift/console/pull/13786)
* [ODC-7435](https://issues.redhat.com/browse/ODC-7435): Remove pf classes in pipelines package [#13739](https://github.com/openshift/console/pull/13739)
* [ODC-7569](https://issues.redhat.com/browse/ODC-7569): Automation of the Recently Used Resources Section in the Search Resource page Dropdown [#13791](https://github.com/openshift/console/pull/13791)
* [ODC-7566](https://issues.redhat.com/browse/ODC-7566): Remove the Approvals Feature from the Console Repository [#13789](https://github.com/openshift/console/pull/13789)
* [ODC-7547](https://issues.redhat.com/browse/ODC-7547): Add e2e tests for QuickStarts in CI [#13764](https://github.com/openshift/console/pull/13764)
* [ODC-7438](https://issues.redhat.com/browse/ODC-7438), [ODC-7535](https://issues.redhat.com/browse/ODC-7535): web-terminal automation improvement [#13749](https://github.com/openshift/console/pull/13749)
* [OCPBUGS-32741](https://issues.redhat.com/browse/OCPBUGS-32741): change OperatorHub filter FIPS Mode to Designed for FIPS [#13790](https://github.com/openshift/console/pull/13790)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): Use record created for container_network metrics [#13759](https://github.com/openshift/console/pull/13759)
* [OBSDOCS-986](https://issues.redhat.com/browse/OBSDOCS-986): Update the Monitoring topic used by the console team [#13765](https://github.com/openshift/console/pull/13765)
* [ODC-7433](https://issues.redhat.com/browse/ODC-7433): Remove PatternFly classes from helm integration tests [#13777](https://github.com/openshift/console/pull/13777)
* [CONSOLE-4020](https://issues.redhat.com/browse/CONSOLE-4020): i18n upload/download routine task - Sprint 252 [#13760](https://github.com/openshift/console/pull/13760)
* [OCPBUGS-32725](https://issues.redhat.com/browse/OCPBUGS-32725): fix OIDC logging out [#13755](https://github.com/openshift/console/pull/13755)
* [OCPBUGS-32059](https://issues.redhat.com/browse/OCPBUGS-32059): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13776](https://github.com/openshift/console/pull/13776)
* [OCPBUGS-32222](https://issues.redhat.com/browse/OCPBUGS-32222): Add warning about service binding operator will not be supported from 4.15 [#13766](https://github.com/openshift/console/pull/13766)
* [ODC-7554](https://issues.redhat.com/browse/ODC-7554): Update the UI according to the recent changes from UX [#13723](https://github.com/openshift/console/pull/13723)
* [ODC-7565](https://issues.redhat.com/browse/ODC-7565): Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) [#13773](https://github.com/openshift/console/pull/13773)
* [OCPBUGS-13114](https://issues.redhat.com/browse/OCPBUGS-13114): Add visual connector between VMs and non VMs workloads [#13617](https://github.com/openshift/console/pull/13617)
* [OCPBUGS-31809](https://issues.redhat.com/browse/OCPBUGS-31809): Pipeline details page Metrics tab crashed due to no custom data [#13733](https://github.com/openshift/console/pull/13733)
* [OCPBUGS-30426](https://issues.redhat.com/browse/OCPBUGS-30426): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#13661](https://github.com/openshift/console/pull/13661)
* [OCPBUGS-28723](https://issues.redhat.com/browse/OCPBUGS-28723): Improve Create serverless function error message [#13591](https://github.com/openshift/console/pull/13591)
* [OCPBUGS-32218](https://issues.redhat.com/browse/OCPBUGS-32218): fix runtime error on Pending pod details page [#13768](https://github.com/openshift/console/pull/13768)
* [ODC-7479](https://issues.redhat.com/browse/ODC-7479): automation of quick-starts-cluster-overview.feature [#13715](https://github.com/openshift/console/pull/13715)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Add NaN handling for Stacked Graphs [#13712](https://github.com/openshift/console/pull/13712)
* [OCPBUGS-26073](https://issues.redhat.com/browse/OCPBUGS-26073): setting correct image trigger annotation [#13492](https://github.com/openshift/console/pull/13492)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944): Disable segment analytics when cluster telemetry is disabled [#13677](https://github.com/openshift/console/pull/13677)
* [OCPBUGS-32019](https://issues.redhat.com/browse/OCPBUGS-32019): Handle loading issue for PLR status in PLR list page [#13747](https://github.com/openshift/console/pull/13747)
* [OCPBUGS-29377](https://issues.redhat.com/browse/OCPBUGS-29377): Routes created by devfiles do not always use HTTPS [#13725](https://github.com/openshift/console/pull/13725)
* [OCPBUGS-32307](https://issues.redhat.com/browse/OCPBUGS-32307): Increase Max node limit for topology page to 300 [#13761](https://github.com/openshift/console/pull/13761)
* [OCPBUGS-22405](https://issues.redhat.com/browse/OCPBUGS-22405): Add a button to enable autoscaling for a deployment that is scaled to 0 [#13711](https://github.com/openshift/console/pull/13711)
* [OCPBUGS-32189](https://issues.redhat.com/browse/OCPBUGS-32189): Fix PatternFly version resolution check script for MacOS [#13757](https://github.com/openshift/console/pull/13757)
* [CONSOLE-3759](https://issues.redhat.com/browse/CONSOLE-3759): Update file-loader pkg [#13743](https://github.com/openshift/console/pull/13743)
* [OCPBUGS-31430](https://issues.redhat.com/browse/OCPBUGS-31430): Re-enable Pipelines e2e tests [#13700](https://github.com/openshift/console/pull/13700)
* [OCPBUGS-32175](https://issues.redhat.com/browse/OCPBUGS-32175): Update i18n docs : Change "traditional Chinese" to "simplified Chinese" [#13754](https://github.com/openshift/console/pull/13754)
* [OCPBUGS-32117](https://issues.redhat.com/browse/OCPBUGS-32117): Add flag to hide Output tab contributed by pipelines-plugin [#13751](https://github.com/openshift/console/pull/13751)
* [CONSOLE-3997](https://issues.redhat.com/browse/CONSOLE-3997): Bump Yarn to v1 latest & add script to check PatternFly modules [#13706](https://github.com/openshift/console/pull/13706)
* [OCPBUGS-31745](https://issues.redhat.com/browse/OCPBUGS-31745): TaskRun status is not displayed near the name [#13746](https://github.com/openshift/console/pull/13746)
* [CONSOLE-3916](https://issues.redhat.com/browse/CONSOLE-3916): Direct OIDC tech debt [#13647](https://github.com/openshift/console/pull/13647)
* [OCPBUGS-31082](https://issues.redhat.com/browse/OCPBUGS-31082): Remove deprecated resources from spec of the Pipeline [#13741](https://github.com/openshift/console/pull/13741)
* [OCPBUGS-31759](https://issues.redhat.com/browse/OCPBUGS-31759): Update i18n docs on how to update Phrase Project Template [#13730](https://github.com/openshift/console/pull/13730)
* [OCPBUGS-31843](https://issues.redhat.com/browse/OCPBUGS-31843): Use UserInfo username field when logging out as kubeadmin [#13740](https://github.com/openshift/console/pull/13740)
* [OCPBUGS-31680](https://issues.redhat.com/browse/OCPBUGS-31680): Correct the button text for VolumeSnapshotContent [#13742](https://github.com/openshift/console/pull/13742)
* [WINC-1182](https://issues.redhat.com/browse/WINC-1182): [node] Modify filesystem queries to include Windows metrics [#13662](https://github.com/openshift/console/pull/13662)
* [OCPBUGS-31703](https://issues.redhat.com/browse/OCPBUGS-31703): Resource yaml with create [#13722](https://github.com/openshift/console/pull/13722)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment [#13728](https://github.com/openshift/console/pull/13728)
* [OCPBUGS-23319](https://issues.redhat.com/browse/OCPBUGS-23319): fix bug where paused MCPs were incorrectly unpausing w… [#13717](https://github.com/openshift/console/pull/13717)
* [OCPBUGS-31744](https://issues.redhat.com/browse/OCPBUGS-31744): Add fr and es languages to i18n script for Memsource upload [#13729](https://github.com/openshift/console/pull/13729)
* [OCPBUGS-29616](https://issues.redhat.com/browse/OCPBUGS-29616), [OCPBUGS-29823](https://issues.redhat.com/browse/OCPBUGS-29823), [OCPBUGS-31613](https://issues.redhat.com/browse/OCPBUGS-31613): Add validation for vSphere fields [#13726](https://github.com/openshift/console/pull/13726)
* [OCPBUGS-23480](https://issues.redhat.com/browse/OCPBUGS-23480): Improve PipelineRun list view performance [#13676](https://github.com/openshift/console/pull/13676)
* [OCPBUGS-31732](https://issues.redhat.com/browse/OCPBUGS-31732): Hide the cluster configuration for analytics [#13727](https://github.com/openshift/console/pull/13727)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: use our own pre-configured client for token refreshes [#13716](https://github.com/openshift/console/pull/13716)
* [OCPBUGS-31695](https://issues.redhat.com/browse/OCPBUGS-31695): Use bearer-token for local dev with auth [#13720](https://github.com/openshift/console/pull/13720)
* [OCPBUGS-31355](https://issues.redhat.com/browse/OCPBUGS-31355): add readOnly option to ResourceYAMLEditor [#13694](https://github.com/openshift/console/pull/13694)
* [ODC-7436](https://issues.redhat.com/browse/ODC-7436): shipwright test package update concerning pf5 update [#13660](https://github.com/openshift/console/pull/13660)
* [OCPBUGS-31431](https://issues.redhat.com/browse/OCPBUGS-31431): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13701](https://github.com/openshift/console/pull/13701)
* [ODC-7431](https://issues.redhat.com/browse/ODC-7431): dev-console test package update concerning pf5 update [#13685](https://github.com/openshift/console/pull/13685)
* [OCPBUGS-31315](https://issues.redhat.com/browse/OCPBUGS-31315): i18n upload/download routine task - Sprint 249 [#13692](https://github.com/openshift/console/pull/13692)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): fix asynccache improper initialization [#13703](https://github.com/openshift/console/pull/13703)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13454](https://github.com/openshift/console/pull/13454)
* Revert "OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters" [#13705](https://github.com/openshift/console/pull/13705)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Improve local plugin development docs [#13679](https://github.com/openshift/console/pull/13679)
* [OCPBUGS-30958](https://issues.redhat.com/browse/OCPBUGS-30958): Upgrade Pipeline trigger resources to v1beta1 [#13702](https://github.com/openshift/console/pull/13702)
* [OCPBUGS-30824](https://issues.redhat.com/browse/OCPBUGS-30824): Remove react-helmet from Console provided shared modules [#13687](https://github.com/openshift/console/pull/13687)
* [CONSOLE-3971](https://issues.redhat.com/browse/CONSOLE-3971): add impersonate action to Group list and details pages [#13671](https://github.com/openshift/console/pull/13671)
* [OCPBUGS-28585](https://issues.redhat.com/browse/OCPBUGS-28585): remove generics from use*Modal docs [#13689](https://github.com/openshift/console/pull/13689)
* [OCPBUGS-24637](https://issues.redhat.com/browse/OCPBUGS-24637): Fix storage request unit dropdown to display any valid unit [#13620](https://github.com/openshift/console/pull/13620)
* [OCPBUGS-29992](https://issues.redhat.com/browse/OCPBUGS-29992), [OCPBUGS-30584](https://issues.redhat.com/browse/OCPBUGS-30584): PatternFly upgrade to 5.2.1 followup to… [#13693](https://github.com/openshift/console/pull/13693)
* [CONSOLE-3972](https://issues.redhat.com/browse/CONSOLE-3972): add Last Status to Pod details Container list and Conta… [#13674](https://github.com/openshift/console/pull/13674)
* [ODC-7531](https://issues.redhat.com/browse/ODC-7531): Added the ApprovalTask List Tabbed Page [#13651](https://github.com/openshift/console/pull/13651)
* [ODC-7546](https://issues.redhat.com/browse/ODC-7546): Fix that the UI doesn't load on non-openshift clusters [#13408](https://github.com/openshift/console/pull/13408)
* [ODC-7498](https://issues.redhat.com/browse/ODC-7498): Show an opt-in / opt-out option to the user depending on the cluster configuration [#13587](https://github.com/openshift/console/pull/13587)
* [ODC-7434](https://issues.redhat.com/browse/ODC-7434): Knative test package update concerning pf5 update [#13562](https://github.com/openshift/console/pull/13562)
* [OCPBUGS-24049](https://issues.redhat.com/browse/OCPBUGS-24049): Add option to enable/disable tailing to Pod log viewer mobile screen issues [#13394](https://github.com/openshift/console/pull/13394)
* [CONSOLE-3949](https://issues.redhat.com/browse/CONSOLE-3949): Add support for returning response.header in consoleFetchCommon function [#13623](https://github.com/openshift/console/pull/13623)
* [CONSOLE-3969](https://issues.redhat.com/browse/CONSOLE-3969): Enable French and Spanish in the OCP Console [#13665](https://github.com/openshift/console/pull/13665)
* [ODC-7519](https://issues.redhat.com/browse/ODC-7519): Update the Pipeline Topology to adjust the new node design for the CustomRun [#13613](https://github.com/openshift/console/pull/13613)
* [CONSOLE-3922](https://issues.redhat.com/browse/CONSOLE-3922): Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage [#13560](https://github.com/openshift/console/pull/13560)
* [ODC-7489](https://issues.redhat.com/browse/ODC-7489): automation for getting-started-tour-dev-perspective feature file [#13531](https://github.com/openshift/console/pull/13531)
* [OCPBUGS-30052](https://issues.redhat.com/browse/OCPBUGS-30052), [OCPBUGS-30575](https://issues.redhat.com/browse/OCPBUGS-30575): PipelineRuns in Console show wrong status or load indefinitely [#13659](https://github.com/openshift/console/pull/13659)
* [CONSOLE-3965](https://issues.redhat.com/browse/CONSOLE-3965): i18n upload/download routine task for version-4.16/ sprint-248 [#13652](https://github.com/openshift/console/pull/13652)
* [ODC-7492](https://issues.redhat.com/browse/ODC-7492): automation for sample-card-add-page feature file [#13589](https://github.com/openshift/console/pull/13589)
* [OCPBUGS-30567](https://issues.redhat.com/browse/OCPBUGS-30567): Remove wrong arguments in K8sCreate method instance for Create YAML editor [#13658](https://github.com/openshift/console/pull/13658)
* [OCPBUGS-30297](https://issues.redhat.com/browse/OCPBUGS-30297): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13650](https://github.com/openshift/console/pull/13650)
* [CONSOLE-3931](https://issues.redhat.com/browse/CONSOLE-3931): replace existing CloseButton with one from @patternfly/… [#13588](https://github.com/openshift/console/pull/13588)
* [OCPBUGS-30805](https://issues.redhat.com/browse/OCPBUGS-30805): fix Configure link in AlertmanagerReceiversNotConfigur… [#13666](https://github.com/openshift/console/pull/13666)
* [OCPBUGS-30762](https://issues.redhat.com/browse/OCPBUGS-30762): Fix bugs in Console dynamic plugin SDK webpack code [#13657](https://github.com/openshift/console/pull/13657)
* [ODC-7539](https://issues.redhat.com/browse/ODC-7539): Update devfile library to v2.2.2 [#13045](https://github.com/openshift/console/pull/13045)
* [OCPBUGS-26415](https://issues.redhat.com/browse/OCPBUGS-26415): Application creation fail when manually entering input scaling value in local setup [#13487](https://github.com/openshift/console/pull/13487)
* [OCPBUGS-30551](https://issues.redhat.com/browse/OCPBUGS-30551): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13654](https://github.com/openshift/console/pull/13654)
* [OCPBUGS-29513](https://issues.redhat.com/browse/OCPBUGS-29513): Update the Pipeline List and Details Pages to acknowledge Custom Task [#13614](https://github.com/openshift/console/pull/13614)
* [OCPBUGS-29365](https://issues.redhat.com/browse/OCPBUGS-29365): Requesting for country codes in localization of openshift - webconsole [#13612](https://github.com/openshift/console/pull/13612)
* [OCPBUGS-25931](https://issues.redhat.com/browse/OCPBUGS-25931): fix for execute inline markdown syntax issue [#13580](https://github.com/openshift/console/pull/13580)
* [RHSTOR-4130](https://issues.redhat.com/browse/RHSTOR-4130): Cross storage class clone /restore [#13549](https://github.com/openshift/console/pull/13549)
* [OCPBUGS-27469](https://issues.redhat.com/browse/OCPBUGS-27469): "Deploy Image" with "Serverless Deployment", Scaling "Min Pods"/"Max Pods" should set "autoscaling.knative.dev/min-scale"/max-scale not minScale/maxScale [#13534](https://github.com/openshift/console/pull/13534)
* [OCPBUGS-30073](https://issues.redhat.com/browse/OCPBUGS-30073): Upload Jar form's Clear button is not functioning [#13644](https://github.com/openshift/console/pull/13644)
* [OCPBUGS-21800](https://issues.redhat.com/browse/OCPBUGS-21800): Dev console buildconfig got [the server does not allow this method on the requested resource] error when not setting metadate.namespace [#13544](https://github.com/openshift/console/pull/13544)
* [OCPBUGS-30046](https://issues.redhat.com/browse/OCPBUGS-30046): Missing dependency warning error in console UI dev env [#13640](https://github.com/openshift/console/pull/13640)
* [OCPBUGS-22894](https://issues.redhat.com/browse/OCPBUGS-22894): adjusting documentation links for 4.15 [#13634](https://github.com/openshift/console/pull/13634)
* [OCPBUGS-30077](https://issues.redhat.com/browse/OCPBUGS-30077): Add additional search filters in the toolbar [#13233](https://github.com/openshift/console/pull/13233)
* [ODC-7480](https://issues.redhat.com/browse/ODC-7480): Recently Searched Section in Search Resource Page Dropdown [#13389](https://github.com/openshift/console/pull/13389)
* [CONSOLE-3907](https://issues.redhat.com/browse/CONSOLE-3907): add actions extension point to Events [#13554](https://github.com/openshift/console/pull/13554)
* [OCPBUGS-22487](https://issues.redhat.com/browse/OCPBUGS-22487): Fix operands list endpoint. [#13632](https://github.com/openshift/console/pull/13632)
* [CONSOLE-3948](https://issues.redhat.com/browse/CONSOLE-3948): rename 'supported but not recommended' to 'known issues… [#13622](https://github.com/openshift/console/pull/13622)
* [OCPBUGS-29701](https://issues.redhat.com/browse/OCPBUGS-29701): Use selfsubjectreview API from frontend [#13605](https://github.com/openshift/console/pull/13605)
* [ODC-7478](https://issues.redhat.com/browse/ODC-7478): Gherkin and automation of "Install Red Hat Developer Hub with a Helm Chart" guided tour [#13511](https://github.com/openshift/console/pull/13511)
* [CONSOLE-3924](https://issues.redhat.com/browse/CONSOLE-3924): i18n upload/download routine task - version4.16/sprint247 [#13608](https://github.com/openshift/console/pull/13608)
* [CONSOLE-3776](https://issues.redhat.com/browse/CONSOLE-3776): Add GCP token auth to Infrastructure features filter section in OpertorHub [#13559](https://github.com/openshift/console/pull/13559)
* [OCPBUGS-29816](https://issues.redhat.com/browse/OCPBUGS-29816): Switch to service from external result route endpoint [#13624](https://github.com/openshift/console/pull/13624)
* [OCPBUGS-29757](https://issues.redhat.com/browse/OCPBUGS-29757): Use HTTP proxy configuration from environment variables in dev-console proxies, so that our backend proxies works fine on airgapped clusters [#13619](https://github.com/openshift/console/pull/13619)
* [OCPBUGS-28967](https://issues.redhat.com/browse/OCPBUGS-28967): 'Oh no somthing went wrong' shown on Image Manifest Vulnerability page after create IMV via CL [#13578](https://github.com/openshift/console/pull/13578)
* [CONSOLE-3921](https://issues.redhat.com/browse/CONSOLE-3921): Remove Disks/NICs page from Node details [#13552](https://github.com/openshift/console/pull/13552)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update dynamic plugins README [#13598](https://github.com/openshift/console/pull/13598)
* [OCPBUGS-29760](https://issues.redhat.com/browse/OCPBUGS-29760): Dev console: Observe > Dashboard page should be called "Dashboards" (OU-260) [#13597](https://github.com/openshift/console/pull/13597)
* [CONSOLE-3774](https://issues.redhat.com/browse/CONSOLE-3774): Enable OperatorHub filter by TLSProfiles annotation [#13555](https://github.com/openshift/console/pull/13555)
* [ODC-7477](https://issues.redhat.com/browse/ODC-7477): automation of quick-start-access-code-snippet.feature [#13494](https://github.com/openshift/console/pull/13494)
* [OCPBUGS-29423](https://issues.redhat.com/browse/OCPBUGS-29423): update TableData doc to use PatternFly 5 classname [#13606](https://github.com/openshift/console/pull/13606)
* [OCPBUGS-29363](https://issues.redhat.com/browse/OCPBUGS-29363): TaskRuns list page is loading constantly for all projects [#13604](https://github.com/openshift/console/pull/13604)
* [OCPBUGS-29355](https://issues.redhat.com/browse/OCPBUGS-29355): Output image url link leads to 404 for Shipwright Builds [#13602](https://github.com/openshift/console/pull/13602)
* [OCPBUGS-29601](https://issues.redhat.com/browse/OCPBUGS-29601): Disabling pipeline tests to restore CI health [#13611](https://github.com/openshift/console/pull/13611)
* [ODC-7476](https://issues.redhat.com/browse/ODC-7476): automation for getting-started-serverless gherkin [#13476](https://github.com/openshift/console/pull/13476)
* [OCPBUGS-27473](https://issues.redhat.com/browse/OCPBUGS-27473): Error in displaying BuildRun logs in Console [#13583](https://github.com/openshift/console/pull/13583)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update Console vs. dynamic plugin SDK package compat table [#13586](https://github.com/openshift/console/pull/13586)
* [OCPBUGS-9714](https://issues.redhat.com/browse/OCPBUGS-9714): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13411](https://github.com/openshift/console/pull/13411)
* [OCPBUGS-28718](https://issues.redhat.com/browse/OCPBUGS-28718): Revision tab and routes tab in serving details page showing no resource found [#13556](https://github.com/openshift/console/pull/13556)
* [OCPBUGS-26566](https://issues.redhat.com/browse/OCPBUGS-26566): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13504](https://github.com/openshift/console/pull/13504)
* [OCPBUGS-28383](https://issues.redhat.com/browse/OCPBUGS-28383): Activity card event has expanded content that is not correctly left aligned with the rest of the card content [#13547](https://github.com/openshift/console/pull/13547)
* [OCPBUGS-27247](https://issues.redhat.com/browse/OCPBUGS-27247): improve empty state message for Machines and MachineSets page [#13577](https://github.com/openshift/console/pull/13577)
* [OCPBUGS-25942](https://issues.redhat.com/browse/OCPBUGS-25942): make sure folder is encapsulated with quotas [#13477](https://github.com/openshift/console/pull/13477)
* [OCPBUGS-27246](https://issues.redhat.com/browse/OCPBUGS-27246): Unhealthy conditions table should put Type as first column on MachineHealthCheck details page [#13576](https://github.com/openshift/console/pull/13576)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name to "network-xxx-xxx" when creating [#13568](https://github.com/openshift/console/pull/13568)
* [ODC-7490](https://issues.redhat.com/browse/ODC-7490): Add TaskRun tab in PLR details page using plugin [#13527](https://github.com/openshift/console/pull/13527)
* [OCPBUGS-28856](https://issues.redhat.com/browse/OCPBUGS-28856): make getGroupVersionKindForResource null safe [#13574](https://github.com/openshift/console/pull/13574)
* [OCPBUGS-27908](https://issues.redhat.com/browse/OCPBUGS-27908): fix i18n for Remove volume modal [#13550](https://github.com/openshift/console/pull/13550)
* [CONSOLE-3377](https://issues.redhat.com/browse/CONSOLE-3377): Add Cypress integration tests for ConsoleYAMLSample CRDs [#13567](https://github.com/openshift/console/pull/13567)
* [OCPBUGS-28836](https://issues.redhat.com/browse/OCPBUGS-28836): AUTH-440: fix usersettings identifier creation [#13557](https://github.com/openshift/console/pull/13557)
* [OCPBUGS-27310](https://issues.redhat.com/browse/OCPBUGS-27310): Source column header not displayed in PVC > VolumeSnapshots tab [#13565](https://github.com/openshift/console/pull/13565)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Optimize module federation of PatternFly packages [#13521](https://github.com/openshift/console/pull/13521)
* [CONSOLE-3909](https://issues.redhat.com/browse/CONSOLE-3909): i18n upload/download routine task - chore(i18n): update translations [#13519](https://github.com/openshift/console/pull/13519)
* [CONSOLE-3818](https://issues.redhat.com/browse/CONSOLE-3818): Remove Chrome from the console builder image [#13539](https://github.com/openshift/console/pull/13539)
* [OCPBUGS-28216](https://issues.redhat.com/browse/OCPBUGS-28216): Adjust width and spacing so that warning icons are not clipped. [#13546](https://github.com/openshift/console/pull/13546)
* [OCPBUGS-26236](https://issues.redhat.com/browse/OCPBUGS-26236): VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab [#13485](https://github.com/openshift/console/pull/13485)
* [OCPBUGS-25936](https://issues.redhat.com/browse/OCPBUGS-25936): fix copy-execute-demo.yaml inline syntax [#13471](https://github.com/openshift/console/pull/13471)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13513](https://github.com/openshift/console/pull/13513)
* [OCPBUGS-25843](https://issues.redhat.com/browse/OCPBUGS-25843): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13483](https://github.com/openshift/console/pull/13483)
* [OCPBUGS-25881](https://issues.redhat.com/browse/OCPBUGS-25881): remove "openshift-storage" namespace usage from the console [#13418](https://github.com/openshift/console/pull/13418)
* [OCPBUGS-27455](https://issues.redhat.com/browse/OCPBUGS-27455): do not deduplicate ImageManifestVulns in Overview popover [#13529](https://github.com/openshift/console/pull/13529)
* [OCPBUGS-27016](https://issues.redhat.com/browse/OCPBUGS-27016): fix resizeObserver limit exceed for dev-console [#13502](https://github.com/openshift/console/pull/13502)
* [OCPBUGS-27152](https://issues.redhat.com/browse/OCPBUGS-27152): Fix popover jump in Tables [#13524](https://github.com/openshift/console/pull/13524)
* [OCPBUGS-25788](https://issues.redhat.com/browse/OCPBUGS-25788): Add Node Maintenance menu actions to Node list/details [#13506](https://github.com/openshift/console/pull/13506)
* [OCPBUGS-27779](https://issues.redhat.com/browse/OCPBUGS-27779): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13532](https://github.com/openshift/console/pull/13532)
* [CONSOLE-3430](https://issues.redhat.com/browse/CONSOLE-3430): add Cluster Settings > Details integration tests [#13515](https://github.com/openshift/console/pull/13515)
* [ODC-7482](https://issues.redhat.com/browse/ODC-7482): Add flags checks to hide Pipeline static plugin List and details pages [#13512](https://github.com/openshift/console/pull/13512)
* [OCPBUGS-27498](https://issues.redhat.com/browse/OCPBUGS-27498): Update get method so it can display zero value when set [#13533](https://github.com/openshift/console/pull/13533)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): Addition of optional chaining to prevent yaml crash [#13510](https://github.com/openshift/console/pull/13510)
* [OCPBUGS-27399](https://issues.redhat.com/browse/OCPBUGS-27399): Filter out Client CSRs for nodes which already exist [#13522](https://github.com/openshift/console/pull/13522)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-16814](https://issues.redhat.com/browse/OCPBUGS-16814): backend: use the k8s SelfSubjectReview API to get info about a user [#13321](https://github.com/openshift/console/pull/13321)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13276](https://github.com/openshift/console/pull/13276)
* [OCPBUGS-26772](https://issues.redhat.com/browse/OCPBUGS-26772): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13503](https://github.com/openshift/console/pull/13503)
* [OCPBUGS-26039](https://issues.redhat.com/browse/OCPBUGS-26039): Make editor sidebar width consistent [#13495](https://github.com/openshift/console/pull/13495)
* [OCPBUGS-10851](https://issues.redhat.com/browse/OCPBUGS-10851): Add source maps to production builds [#13497](https://github.com/openshift/console/pull/13497)
* [OCPBUGS-25890](https://issues.redhat.com/browse/OCPBUGS-25890): Prevent complete page reload when changing perspective [#13500](https://github.com/openshift/console/pull/13500)
* [OCPBUGS-14481](https://issues.redhat.com/browse/OCPBUGS-14481): update check for the 'provider' label on the PackageMa… [#13491](https://github.com/openshift/console/pull/13491)
* [OCPBUGS-26554](https://issues.redhat.com/browse/OCPBUGS-26554): Fixed some problems in topology Chinese translation text [#13458](https://github.com/openshift/console/pull/13458)
* [OCPBUGS-18699](https://issues.redhat.com/browse/OCPBUGS-18699): add additional check to determine if file is binary [#13496](https://github.com/openshift/console/pull/13496)
* [ODC-7465](https://issues.redhat.com/browse/ODC-7465): Update Getting started section in Openshift UI to use expandable section [#13466](https://github.com/openshift/console/pull/13466)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13441](https://github.com/openshift/console/pull/13441)
* [OCPBUGS-25722](https://issues.redhat.com/browse/OCPBUGS-25722): Add support for custom segment domains (to load JS and make API calls) [#13459](https://github.com/openshift/console/pull/13459)
* [OCPBUGS-26049](https://issues.redhat.com/browse/OCPBUGS-26049): Tab VolumeSnapshots crashed on PVC page [#13481](https://github.com/openshift/console/pull/13481)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): add integration test to check that Update cluster moda… [#13480](https://github.com/openshift/console/pull/13480)
* [OCPBUGS-25898](https://issues.redhat.com/browse/OCPBUGS-25898): Fix PipelineRun Logs tab navigation [#13470](https://github.com/openshift/console/pull/13470)
* [OCPBUGS-25840](https://issues.redhat.com/browse/OCPBUGS-25840): make Azure warning title consistent [#13472](https://github.com/openshift/console/pull/13472)
* [OCPBUGS-25771](https://issues.redhat.com/browse/OCPBUGS-25771): Enable catalog source badge to truncate for long names [#13474](https://github.com/openshift/console/pull/13474)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): fix bug where Update cluster modal will not open [#13473](https://github.com/openshift/console/pull/13473)
* [OCPBUGS-25934](https://issues.redhat.com/browse/OCPBUGS-25934): clean up icon color and sizes [#13460](https://github.com/openshift/console/pull/13460)
* [OCPBUGS-25927](https://issues.redhat.com/browse/OCPBUGS-25927): Fix config ini format [#13210](https://github.com/openshift/console/pull/13210)
* [OCPBUGS-25612](https://issues.redhat.com/browse/OCPBUGS-25612): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13455](https://github.com/openshift/console/pull/13455)
* [OCPBUGS-24592](https://issues.redhat.com/browse/OCPBUGS-24592): Fix CI tests in helm and devconsole packages [#13464](https://github.com/openshift/console/pull/13464)
* [OCPBUGS-25206](https://issues.redhat.com/browse/OCPBUGS-25206): Re-enable and fix pipelines e2e tests [#13438](https://github.com/openshift/console/pull/13438)
* [OCPBUGS-18844](https://issues.redhat.com/browse/OCPBUGS-18844): Replace the old sr-only class to the patternfly pf-v5-u-screen-reader class [#13453](https://github.com/openshift/console/pull/13453)
* [HELM-522](https://issues.redhat.com/browse/HELM-522): bump helm version to 3.13.2 for OCP 4.15 [#13410](https://github.com/openshift/console/pull/13410)
* [OCPBUGS-25441](https://issues.redhat.com/browse/OCPBUGS-25441): fix Observe tab in Topology overview [#13451](https://github.com/openshift/console/pull/13451)
* [OCPBUGS-25530](https://issues.redhat.com/browse/OCPBUGS-25530): fix bug where filter at mobile could be empty on Searc… [#13456](https://github.com/openshift/console/pull/13456)
* [OCPBUGS-25396](https://issues.redhat.com/browse/OCPBUGS-25396): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13450](https://github.com/openshift/console/pull/13450)
* [CONSOLE-3874](https://issues.redhat.com/browse/CONSOLE-3874): Refactor EventStream [#13431](https://github.com/openshift/console/pull/13431)
* [OCPBUGS-23299](https://issues.redhat.com/browse/OCPBUGS-23299): Replace checkbox with PF checkbox component to correct alignment [#13397](https://github.com/openshift/console/pull/13397)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13445](https://github.com/openshift/console/pull/13445)
* [OCPBUGS-24711](https://issues.redhat.com/browse/OCPBUGS-24711): fix preferredTab selection on Pipelines page [#13430](https://github.com/openshift/console/pull/13430)
* [OCPBUGS-24715](https://issues.redhat.com/browse/OCPBUGS-24715), [OCPBUGS-25018](https://issues.redhat.com/browse/OCPBUGS-25018): Fix pipelineRuns loading on repository details page [#13432](https://github.com/openshift/console/pull/13432)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13434](https://github.com/openshift/console/pull/13434)
* [OCPBUGS-24408](https://issues.redhat.com/browse/OCPBUGS-24408): fix runtime error on Node details Overview when Machin… [#13422](https://github.com/openshift/console/pull/13422)
* [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Prevent text overlap with popover close button on Create NetworkPolicy form [#13429](https://github.com/openshift/console/pull/13429)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Prevent PatternFly styles from being included in plugin compilation [#13388](https://github.com/openshift/console/pull/13388)
* [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): Add missing https:// check for an external link [#13421](https://github.com/openshift/console/pull/13421)
* chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13403](https://github.com/openshift/console/pull/13403)
* [OCPBUGS-5113](https://issues.redhat.com/browse/OCPBUGS-5113): Date&Time values are not showing as per browser default language [#12506](https://github.com/openshift/console/pull/12506)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Only show VPAs that are associated with the selected namespace [#13417](https://github.com/openshift/console/pull/13417)
* [OCPBUGS-24186](https://issues.redhat.com/browse/OCPBUGS-24186): Strip 'Server' header from proxy response [#13404](https://github.com/openshift/console/pull/13404)
* Console-3733: Add support for Azure Workload Identity / Federated Identity based installs in OperatorHub [#13082](https://github.com/openshift/console/pull/13082)
* [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Update OpenShift favicons as well [#13420](https://github.com/openshift/console/pull/13420)
* [OCPBUGS-24582](https://issues.redhat.com/browse/OCPBUGS-24582): Updated functions list page to use new hook useParams [#13419](https://github.com/openshift/console/pull/13419)
* [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): add type and text filters to Events integration test [#13407](https://github.com/openshift/console/pull/13407)
* [OCPBUGS-13206](https://issues.redhat.com/browse/OCPBUGS-13206): Fix customPythonDeploymentConfig YAML script to create a Pipeline wasn't working [#13149](https://github.com/openshift/console/pull/13149)
* [OCPBUGS-13204](https://issues.redhat.com/browse/OCPBUGS-13204): Fix that customNodeDeployment pipeline YAML script wasn't working [#13148](https://github.com/openshift/console/pull/13148)
* [OCPBUGS-24252](https://issues.redhat.com/browse/OCPBUGS-24252): fix subscription page fields [#13416](https://github.com/openshift/console/pull/13416)
* [OCPBUGS-23764](https://issues.redhat.com/browse/OCPBUGS-23764): bump PF dependencies to the latest patch fix [#13380](https://github.com/openshift/console/pull/13380)
* [OU-286](https://issues.redhat.com/browse/OU-286): add test-id to panel charts to ease e2e tests when titles change [#13340](https://github.com/openshift/console/pull/13340)
* [OCPBUGS-23554](https://issues.redhat.com/browse/OCPBUGS-23554): Fix for monaco editor that happens with yaml is being edited [#13414](https://github.com/openshift/console/pull/13414)
* [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Set min-width for PF popovers that are being overridden by an inline style [#13390](https://github.com/openshift/console/pull/13390)
* [OCPBUGS-23347](https://issues.redhat.com/browse/OCPBUGS-23347): fix vCenter cluster being empty [#13209](https://github.com/openshift/console/pull/13209)
* [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Do not depend on a global installed lint-staged [#13409](https://github.com/openshift/console/pull/13409)
* [OCPBUGS-24399](https://issues.redhat.com/browse/OCPBUGS-24399): Update our overrides css rule to remove list bullet from PF4 ui elements [#13406](https://github.com/openshift/console/pull/13406)
* [OCPBUGS-23761](https://issues.redhat.com/browse/OCPBUGS-23761): PatternFly5 update: Fix quick search input background color in dark mode [#13398](https://github.com/openshift/console/pull/13398)
* [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): fix filtering issues on Events [#13395](https://github.com/openshift/console/pull/13395)
* [OCPBUGS-23263](https://issues.redhat.com/browse/OCPBUGS-23263): Update i18next-parser dev dependency in console [#13330](https://github.com/openshift/console/pull/13330)
* [OCPBUGS-24267](https://issues.redhat.com/browse/OCPBUGS-24267): Cluster configuration fields are not visible [#13386](https://github.com/openshift/console/pull/13386)
* [OCPBUGS-22976](https://issues.redhat.com/browse/OCPBUGS-22976): S2I Build Wizard should check for Containerfile in addition to Dockerfile [#13378](https://github.com/openshift/console/pull/13378)
* [OCPBUGS-24001](https://issues.redhat.com/browse/OCPBUGS-24001): Fix crash when ArtifactHub Task has no version [#13379](https://github.com/openshift/console/pull/13379)
* [OCPBUGS-18371](https://issues.redhat.com/browse/OCPBUGS-18371): Searching for items in quick search is confusing [#13381](https://github.com/openshift/console/pull/13381)
* [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): view sbom link redirection should be based on taskrun annotation [#13387](https://github.com/openshift/console/pull/13387)
* [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Add note about git hooks and PATH env var to README [#13396](https://github.com/openshift/console/pull/13396)
* [OCPBUGS-18542](https://issues.redhat.com/browse/OCPBUGS-18542): Fixed topology package e2e tests [#13136](https://github.com/openshift/console/pull/13136)
* [CONSOLE-3852](https://issues.redhat.com/browse/CONSOLE-3852): remove PatternFly classnames from integration tests [#13337](https://github.com/openshift/console/pull/13337)
* [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#13383](https://github.com/openshift/console/pull/13383)
* [CONSOLE-3732](https://issues.redhat.com/browse/CONSOLE-3732): Add option to enable/disable tailing to Pod log viewer [#13298](https://github.com/openshift/console/pull/13298)
* [CONSOLE-3705](https://issues.redhat.com/browse/CONSOLE-3705): Phase 1 of using OpenShift Dynamic Plugin SDK [#13188](https://github.com/openshift/console/pull/13188)
* [OCPBUGS-23779](https://issues.redhat.com/browse/OCPBUGS-23779): Fix crash when user clicks on Show tooltips [#13382](https://github.com/openshift/console/pull/13382)
* [OCPBUGS-19426](https://issues.redhat.com/browse/OCPBUGS-19426): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#13333](https://github.com/openshift/console/pull/13333)
* [CONSOLE-3764](https://issues.redhat.com/browse/CONSOLE-3764): Update husky to v8.0.3 [#13320](https://github.com/openshift/console/pull/13320)
* [OCPBUGS-23125](https://issues.redhat.com/browse/OCPBUGS-23125): add access review for impersonate [#13345](https://github.com/openshift/console/pull/13345)
* [OCPBUGS-23780](https://issues.redhat.com/browse/OCPBUGS-23780), [OCPBUGS-23783](https://issues.redhat.com/browse/OCPBUGS-23783), [OCPBUGS-23794](https://issues.redhat.com/browse/OCPBUGS-23794), [OCPBUGS-23977](https://issues.redhat.com/browse/OCPBUGS-23977): Bring back the Decorators and Pod Rings around resources in Topology [#13376](https://github.com/openshift/console/pull/13376)
* [OCPBUGS-23956](https://issues.redhat.com/browse/OCPBUGS-23956): PatternFly5 update: Remove text decoration for task node on hover [#13371](https://github.com/openshift/console/pull/13371)
* [OCPBUGS-23786](https://issues.redhat.com/browse/OCPBUGS-23786): PatternFly5 update: fix code snippet color in quick start in dark mode [#13366](https://github.com/openshift/console/pull/13366)
* [OCPBUGS-23770](https://issues.redhat.com/browse/OCPBUGS-23770): After PatternFly5 update: Typology sidebar layout issue [#13363](https://github.com/openshift/console/pull/13363)
* [OCPBUGS-23248](https://issues.redhat.com/browse/OCPBUGS-23248): change Alertmanager form to create using matchers inst… [#13358](https://github.com/openshift/console/pull/13358)
* [OCPBUGS-23980](https://issues.redhat.com/browse/OCPBUGS-23980): Fix logs streaming auto scroll issue [#13377](https://github.com/openshift/console/pull/13377)
* [OCPBUGS-23778](https://issues.redhat.com/browse/OCPBUGS-23778): Apply the correct font-family for the page header action button and menu items. [#13375](https://github.com/openshift/console/pull/13375)
* [OCPBUGS-23756](https://issues.redhat.com/browse/OCPBUGS-23756): fix layout of Show tooltips in YAML editor [#13374](https://github.com/openshift/console/pull/13374)
* [OCPBUGS-23971](https://issues.redhat.com/browse/OCPBUGS-23971): remove pf-m-grid-md from tables so table headers appea… [#13373](https://github.com/openshift/console/pull/13373)
* [OCPBUGS-23927](https://issues.redhat.com/browse/OCPBUGS-23927): fix table layout issue with Identity providers table [#13372](https://github.com/openshift/console/pull/13372)
* [OCPBUGS-23769](https://issues.redhat.com/browse/OCPBUGS-23769): PatternFly5 update: fix Topologylist view hover effect [#13368](https://github.com/openshift/console/pull/13368)
* [CONSOLE-3793](https://issues.redhat.com/browse/CONSOLE-3793): add uptime to Node pages [#13312](https://github.com/openshift/console/pull/13312)
* [OCPBUGS-23559](https://issues.redhat.com/browse/OCPBUGS-23559): Styling issue in functions list page after PatternFly upgrade [#13356](https://github.com/openshift/console/pull/13356)
* chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 [#13253](https://github.com/openshift/console/pull/13253)
* [OCPBUGS-23923](https://issues.redhat.com/browse/OCPBUGS-23923): fix PipelineRun task logs switcher [#13369](https://github.com/openshift/console/pull/13369)
* [OCPBUGS-23775](https://issues.redhat.com/browse/OCPBUGS-23775): After PatternFly5 update: Form error is missing when import a container image [#13365](https://github.com/openshift/console/pull/13365)
* [OCPBUGS-23765](https://issues.redhat.com/browse/OCPBUGS-23765): fix dark theme issue for helm release readme modal [#13370](https://github.com/openshift/console/pull/13370)
* [ODC-7359](https://issues.redhat.com/browse/ODC-7359): Fix shipwright build e2e tests [#13296](https://github.com/openshift/console/pull/13296)
* [OCPBUGS-23787](https://issues.redhat.com/browse/OCPBUGS-23787): PatternFly5 update: fix Quickstarts catalog item count alignment [#13367](https://github.com/openshift/console/pull/13367)
* [OCPBUGS-23776](https://issues.redhat.com/browse/OCPBUGS-23776): After PatternFly5 update: Add page > more button dropdown is too wide [#13361](https://github.com/openshift/console/pull/13361)
* [OCPBUGS-23768](https://issues.redhat.com/browse/OCPBUGS-23768): After PatternFly5 update: Navigation: Extra space after divider [#13362](https://github.com/openshift/console/pull/13362)
* [OCPBUGS-23912](https://issues.redhat.com/browse/OCPBUGS-23912), [OCPBUGS-23918](https://issues.redhat.com/browse/OCPBUGS-23918): Add Vulnerabilities column and signed icon in PAC repository PLR list [#13364](https://github.com/openshift/console/pull/13364)
* [ODC-7426](https://issues.redhat.com/browse/ODC-7426): Deletion of pipeline run after tekton result installation should be user-friendly [#13353](https://github.com/openshift/console/pull/13353)
* [OCPBUGS-23388](https://issues.redhat.com/browse/OCPBUGS-23388): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13344](https://github.com/openshift/console/pull/13344)
* [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Replace topology graphic with new version for openshift v4.15 [#13350](https://github.com/openshift/console/pull/13350)
* [OCPBUGS-23543](https://issues.redhat.com/browse/OCPBUGS-23543): Deployment option is missing in 'Deploy Image' [#13354](https://github.com/openshift/console/pull/13354)
* [ODC-7428](https://issues.redhat.com/browse/ODC-7428): Update quick start name and document links for getting started section [#13348](https://github.com/openshift/console/pull/13348)
* [OCPBUGS-22778](https://issues.redhat.com/browse/OCPBUGS-22778): Fix for yaml editor that crashes with MCE and ACM plugins enabled [#13346](https://github.com/openshift/console/pull/13346)
* [GITOPS-3575](https://issues.redhat.com/browse/GITOPS-3575): Added disallowed flag to gitops static plugin [#13307](https://github.com/openshift/console/pull/13307)
* [ODC-7419](https://issues.redhat.com/browse/ODC-7419): Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) [#13303](https://github.com/openshift/console/pull/13303)
* [CONSOLE-3693](https://issues.redhat.com/browse/CONSOLE-3693): Upgrade to PFv5 versions [#12983](https://github.com/openshift/console/pull/12983)
* [ODC-7425](https://issues.redhat.com/browse/ODC-7425): Add serverless function icon in Add page group header [#13338](https://github.com/openshift/console/pull/13338)
* [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): account for `useK8sWatchResource` returning `{}` like it does f… [#13347](https://github.com/openshift/console/pull/13347)
* [ODC-7383](https://issues.redhat.com/browse/ODC-7383), [ODC-7384](https://issues.redhat.com/browse/ODC-7384), [ODC-7385](https://issues.redhat.com/browse/ODC-7385): Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info [#13328](https://github.com/openshift/console/pull/13328)
* [ODC-7424](https://issues.redhat.com/browse/ODC-7424): Add e2e tests for vulnerabilities column in pipelinerun list and details page [#13335](https://github.com/openshift/console/pull/13335)
* [OCPBUGS-23164](https://issues.redhat.com/browse/OCPBUGS-23164): Cannot Edit Shipwright Build [#13341](https://github.com/openshift/console/pull/13341)
* [ODC-7382](https://issues.redhat.com/browse/ODC-7382), [ODC-7395](https://issues.redhat.com/browse/ODC-7395): add support for tektonresult api to load PipelineRuns [#13311](https://github.com/openshift/console/pull/13311)
* [ODC-7421](https://issues.redhat.com/browse/ODC-7421): Show vulnerability column in the pipelinerun list page [#13329](https://github.com/openshift/console/pull/13329)
* [ODC-7424](https://issues.redhat.com/browse/ODC-7424): add e2e tests for SBOM section and output tab [#13325](https://github.com/openshift/console/pull/13325)
* [OCPBUGS-23292](https://issues.redhat.com/browse/OCPBUGS-23292): Webpack-DevServer Hot-Reload Not Working [#13331](https://github.com/openshift/console/pull/13331)
* [CONSOLE-3823](https://issues.redhat.com/browse/CONSOLE-3823): Split auth config to its own module [#13261](https://github.com/openshift/console/pull/13261)
* [ODC-7423](https://issues.redhat.com/browse/ODC-7423): move pipelinerun results to output tab [#13323](https://github.com/openshift/console/pull/13323)
* [ODC-7399](https://issues.redhat.com/browse/ODC-7399): Create getting started content in functions list page [#13289](https://github.com/openshift/console/pull/13289)
* [ODC-7422](https://issues.redhat.com/browse/ODC-7422): Add SBOM link and signed badge in PLR details page [#13314](https://github.com/openshift/console/pull/13314)
* [CONSOLE-3618](https://issues.redhat.com/browse/CONSOLE-3618): Remove frontend multicluster code [#13245](https://github.com/openshift/console/pull/13245)
* [CONSOLE-3777](https://issues.redhat.com/browse/CONSOLE-3777): Update NodeJS v14 to v18 [#13213](https://github.com/openshift/console/pull/13213)
* [ODC-7414](https://issues.redhat.com/browse/ODC-7414): Update Shipwright API from v1alpha1 to v1beta1 [#13304](https://github.com/openshift/console/pull/13304)
* [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): improve labels and annotations modal display and editi… [#13295](https://github.com/openshift/console/pull/13295)
* [CONSOLE-3695](https://issues.redhat.com/browse/CONSOLE-3695): Add details item extension to console dynamic plugin SDK [#13240](https://github.com/openshift/console/pull/13240)
* [CONSOLE-3814](https://issues.redhat.com/browse/CONSOLE-3814): Conditionally render "Users" and "Groups" nav items [#13287](https://github.com/openshift/console/pull/13287)
* [OCPBUGS-23110](https://issues.redhat.com/browse/OCPBUGS-23110): Disable Pipelines E2E Tests [#13318](https://github.com/openshift/console/pull/13318)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Address memory issues in CI [#13309](https://github.com/openshift/console/pull/13309)
* [CONSOLE-3614](https://issues.redhat.com/browse/CONSOLE-3614): Remove multicluster code from Bridge [#13244](https://github.com/openshift/console/pull/13244)
* [CONSOLE-3822](https://issues.redhat.com/browse/CONSOLE-3822): Update obsolete deps [#13294](https://github.com/openshift/console/pull/13294)
* [OCPBUGS-22930](https://issues.redhat.com/browse/OCPBUGS-22930): remove expandable toggle for conditional update risk d… [#13306](https://github.com/openshift/console/pull/13306)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name by using unique-names-generator [#13263](https://github.com/openshift/console/pull/13263)
* [CONSOLE-3781](https://issues.redhat.com/browse/CONSOLE-3781): remove cypress.config comments [#13301](https://github.com/openshift/console/pull/13301)
* [CONSOLE-3819](https://issues.redhat.com/browse/CONSOLE-3819): change Cypress' default browser to Electron [#13300](https://github.com/openshift/console/pull/13300)
* [OCPBUGS-19916](https://issues.redhat.com/browse/OCPBUGS-19916): Fix MachineSetList capacity logic [#13259](https://github.com/openshift/console/pull/13259)
* [CNV-30298](https://issues.redhat.com/browse/CNV-30298): Add UI for OVN Secondary Localnet Network [#13293](https://github.com/openshift/console/pull/13293)
* [OCPBUGS-19875](https://issues.redhat.com/browse/OCPBUGS-19875): Fix plugin proxy handler [#13272](https://github.com/openshift/console/pull/13272)
* [CONSOLE-3808](https://issues.redhat.com/browse/CONSOLE-3808): Remove Protactor from console-plugin-sdk [#13283](https://github.com/openshift/console/pull/13283)
* [OCPBUGS-22747](https://issues.redhat.com/browse/OCPBUGS-22747): Display "With Data upload form" in Create PVC drop down once [#13292](https://github.com/openshift/console/pull/13292)
* [CONSOLE-3811](https://issues.redhat.com/browse/CONSOLE-3811): remove shared Protractor files [#13282](https://github.com/openshift/console/pull/13282)
* [ODC-7409](https://issues.redhat.com/browse/ODC-7409): Use @kubernetes-models/shipwright types in shipwright-plugin [#13267](https://github.com/openshift/console/pull/13267)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove local-storage-operator-plugin Protractor tests [#13291](https://github.com/openshift/console/pull/13291)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove network-attachment-definition-plugin Protractor … [#13286](https://github.com/openshift/console/pull/13286)
* [ODC-7386](https://issues.redhat.com/browse/ODC-7386): Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed [#13145](https://github.com/openshift/console/pull/13145)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): migrate console Protractor tests to Cypress [#13257](https://github.com/openshift/console/pull/13257)
* [OCPBUGS-22419](https://issues.redhat.com/browse/OCPBUGS-22419): Fix the forms when BC is not installed in the cluster [#13241](https://github.com/openshift/console/pull/13241)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove cnv console tests [#13280](https://github.com/openshift/console/pull/13280)
* [OCPBUGS-10562](https://issues.redhat.com/browse/OCPBUGS-10562): fix operator uninstall test [#13214](https://github.com/openshift/console/pull/13214)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): remove references to removed packages [#13281](https://github.com/openshift/console/pull/13281)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13274](https://github.com/openshift/console/pull/13274)
* [CONSOLE-3816](https://issues.redhat.com/browse/CONSOLE-3816): Goodbye! [#13255](https://github.com/openshift/console/pull/13255)
* [OCPBUGS-19458](https://issues.redhat.com/browse/OCPBUGS-19458), [OU-241](https://issues.redhat.com/browse/OU-241): Remove unused Observe > Metrics page code [#13114](https://github.com/openshift/console/pull/13114)
* [OCPBUGS-20295](https://issues.redhat.com/browse/OCPBUGS-20295): clarify Operator installMode error message [#13232](https://github.com/openshift/console/pull/13232)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): fix bug where renamed tests weren't updated [#13275](https://github.com/openshift/console/pull/13275)
* [OCPBUGS-22284](https://issues.redhat.com/browse/OCPBUGS-22284): updating doc links for 4.14 GA [#13266](https://github.com/openshift/console/pull/13266)
* [OCPBUGS-22199](https://issues.redhat.com/browse/OCPBUGS-22199): Save also the location.search and .hash values in localStorage to restore them after login [#13268](https://github.com/openshift/console/pull/13268)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13265](https://github.com/openshift/console/pull/13265)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Workloads-AddPage: upload JAR file's i18n misses [#13264](https://github.com/openshift/console/pull/13264)
* [OCPBUGS-16756](https://issues.redhat.com/browse/OCPBUGS-16756): Cluster dropdown items are not marked for i18n when ACM/MCE installed [#13238](https://github.com/openshift/console/pull/13238)
* [OCPBUGS-20362](https://issues.redhat.com/browse/OCPBUGS-20362): Delete results.tekton.dev annotations before rerun the pipelineRun [#13230](https://github.com/openshift/console/pull/13230)
* [OCPBUGS-9422](https://issues.redhat.com/browse/OCPBUGS-9422): Telemetry- Current page was sometimes not tracked when reloading the current page [#13088](https://github.com/openshift/console/pull/13088)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): check that user dropdown is present to verify logged in [#13260](https://github.com/openshift/console/pull/13260)
* [CONSOLE-3812](https://issues.redhat.com/browse/CONSOLE-3812): remove packages/ceph-storage-plugin/integration-tests [#13249](https://github.com/openshift/console/pull/13249)
* [CONSOLE-3809](https://issues.redhat.com/browse/CONSOLE-3809): remove orphaned OLM Protractor views [#13248](https://github.com/openshift/console/pull/13248)
* [OCPBUGS-19783](https://issues.redhat.com/browse/OCPBUGS-19783): Channel page shows "Required" message for the default name when navigate to create channel page [#13222](https://github.com/openshift/console/pull/13222)
* [OCPBUGS-20229](https://issues.redhat.com/browse/OCPBUGS-20229): Service details page shows revisions and routes from other service also [#13221](https://github.com/openshift/console/pull/13221)
* [CONSOLE-3766](https://issues.redhat.com/browse/CONSOLE-3766): Update i18next-parser dev dependency in console [#13197](https://github.com/openshift/console/pull/13197)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): follow-on fixes and cleanup for Cypress upgrade [#13242](https://github.com/openshift/console/pull/13242)
* [OCPBUGS-20305](https://issues.redhat.com/browse/OCPBUGS-20305): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13236](https://github.com/openshift/console/pull/13236)
* [OCPBUGS-19714](https://issues.redhat.com/browse/OCPBUGS-19714): hide page-specific doc links for ROSA and OSD [#13229](https://github.com/openshift/console/pull/13229)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 [#13201](https://github.com/openshift/console/pull/13201)
* [OCPBUGS-21616](https://issues.redhat.com/browse/OCPBUGS-21616): Fix empty editor error [#13176](https://github.com/openshift/console/pull/13176)
* [ODC-7401](https://issues.redhat.com/browse/ODC-7401): Remove protractor from dev-console and knative plugins [#13247](https://github.com/openshift/console/pull/13247)
* [ODC-7400](https://issues.redhat.com/browse/ODC-7400): Fix e2e for dev-console, knative, topology, helm and pipeline packages [#13231](https://github.com/openshift/console/pull/13231)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Upgrade Cypress [#13070](https://github.com/openshift/console/pull/13070)
* [CONSOLE-3758](https://issues.redhat.com/browse/CONSOLE-3758): add support for new features annotations while preserv… [#13183](https://github.com/openshift/console/pull/13183)
* [ODC-7396](https://issues.redhat.com/browse/ODC-7396): Add Pipeline metrics tab using plugin [#13225](https://github.com/openshift/console/pull/13225)
* [CONSOLE-3084](https://issues.redhat.com/browse/CONSOLE-3084): frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA [#13184](https://github.com/openshift/console/pull/13184)
* [CONSOLE-3675](https://issues.redhat.com/browse/CONSOLE-3675): Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component [#13105](https://github.com/openshift/console/pull/13105)
* [OCPBUGS-20270](https://issues.redhat.com/browse/OCPBUGS-20270): Add instructions to the README for running the monitoring plugin locally [#13226](https://github.com/openshift/console/pull/13226)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): use setTimeout to allow model to be created [#13195](https://github.com/openshift/console/pull/13195)
* [OCPBUGS-4242](https://issues.redhat.com/browse/OCPBUGS-4242): Fix CSV list and details page managed namespaces for copied CSVs. [#13194](https://github.com/openshift/console/pull/13194)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Home-Projects-Default-workloads-AddPage: upload JAR file's i18n misses [#13208](https://github.com/openshift/console/pull/13208)
* [OCPBUGS-19966](https://issues.redhat.com/browse/OCPBUGS-19966): Builds - BuildConfigs : i18n misses [#13211](https://github.com/openshift/console/pull/13211)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue (additional fixes) [#13198](https://github.com/openshift/console/pull/13198)
* [ODC-7377](https://issues.redhat.com/browse/ODC-7377), [ODC-7378](https://issues.redhat.com/browse/ODC-7378): Add Revisions, Routes and Pods tab for service details page [#13174](https://github.com/openshift/console/pull/13174)
* [CONSOLE-3763](https://issues.redhat.com/browse/CONSOLE-3763): Update null-loader dev dependency in console [#13154](https://github.com/openshift/console/pull/13154)
* [OCPBUGS-7893](https://issues.redhat.com/browse/OCPBUGS-7893): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13077](https://github.com/openshift/console/pull/13077)
* [OCPBUGS-14322](https://issues.redhat.com/browse/OCPBUGS-14322): fix ResourceLog permissions when impersonating [#13196](https://github.com/openshift/console/pull/13196)
* [ODC-7391](https://issues.redhat.com/browse/ODC-7391): Add a new allowInsecure option to the internet proxy API [#13175](https://github.com/openshift/console/pull/13175)
* [OCPBUGS-19743](https://issues.redhat.com/browse/OCPBUGS-19743): Fix Invalid URL crash [#13192](https://github.com/openshift/console/pull/13192)
* [OCPBUGS-18267](https://issues.redhat.com/browse/OCPBUGS-18267): 404 - not found will show on Knative-serving Details page [#13156](https://github.com/openshift/console/pull/13156)
* [OCPBUGS-17676](https://issues.redhat.com/browse/OCPBUGS-17676): Enable white space retain in resource logs [#13101](https://github.com/openshift/console/pull/13101)
* [OCPBUGS-4426](https://issues.redhat.com/browse/OCPBUGS-4426): All Projects' dropdown": Roles and RoleBindings "before all" hook for "test Roles detail page breadcrumbs to list page restores [#13190](https://github.com/openshift/console/pull/13190)
* [OCPBUGS-8777](https://issues.redhat.com/browse/OCPBUGS-8777): Don't redirect after logout from login error route [#13102](https://github.com/openshift/console/pull/13102)
* [OCPBUGS-9157](https://issues.redhat.com/browse/OCPBUGS-9157): ‘Create Pod’ button should be disabled for normal user … [#13040](https://github.com/openshift/console/pull/13040)
* [OCPBUGS-19640](https://issues.redhat.com/browse/OCPBUGS-19640): Dont render ARN mode role field and warning for HyperShift clusters [#13191](https://github.com/openshift/console/pull/13191)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue [#13180](https://github.com/openshift/console/pull/13180)
* [OCPBUGS-19546](https://issues.redhat.com/browse/OCPBUGS-19546): Set unlimited line width in YAML editor [#13182](https://github.com/openshift/console/pull/13182)
* [OCPBUGS-19413](https://issues.redhat.com/browse/OCPBUGS-19413): Fix demo dynamic plugin dev mode cypress tests [#13172](https://github.com/openshift/console/pull/13172)
* [OCPBUGS-19367](https://issues.redhat.com/browse/OCPBUGS-19367): Console should not panic when no response is retrieved for plugin assets [#13166](https://github.com/openshift/console/pull/13166)
* [OCPBUGS-19394](https://issues.redhat.com/browse/OCPBUGS-19394): document kebab menu cell props [#13177](https://github.com/openshift/console/pull/13177)
* [OCPBUGS-13152](https://issues.redhat.com/browse/OCPBUGS-13152): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13065](https://github.com/openshift/console/pull/13065)
* [OCPBUGS-9719](https://issues.redhat.com/browse/OCPBUGS-9719): Correct logout process [#10177](https://github.com/openshift/console/pull/10177)
* [OCPBUGS-18832](https://issues.redhat.com/browse/OCPBUGS-18832): change resource icon for FenceAgentRemediationTemplate… [#13162](https://github.com/openshift/console/pull/13162)
* [OCPBUGS-18996](https://issues.redhat.com/browse/OCPBUGS-18996): fix issues with refactored "Create StorageClass" form [#13153](https://github.com/openshift/console/pull/13153)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console images to be consistent with ART [#13157](https://github.com/openshift/console/pull/13157)
* [OCPBUGS-11286](https://issues.redhat.com/browse/OCPBUGS-11286): Check if filtered object contains name property [#12810](https://github.com/openshift/console/pull/12810)
* [OCPBUGS-18464](https://issues.redhat.com/browse/OCPBUGS-18464): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13141](https://github.com/openshift/console/pull/13141)
* [OCPBUGS-18494](https://issues.redhat.com/browse/OCPBUGS-18494): Upgrade DomainMapping apiVersion to v1beta1 [#13133](https://github.com/openshift/console/pull/13133)
* [OCPBUGS-19314](https://issues.redhat.com/browse/OCPBUGS-19314): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13130](https://github.com/openshift/console/pull/13130)
* [OCPBUGS-6515](https://issues.redhat.com/browse/OCPBUGS-6515): address ConsoleExternalLogLink test flake [#13110](https://github.com/openshift/console/pull/13110)
* [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Remove redundant break line [#13109](https://github.com/openshift/console/pull/13109)
* [OCPBUGS-5571](https://issues.redhat.com/browse/OCPBUGS-5571): Update API docs content based on docs review [#13108](https://github.com/openshift/console/pull/13108)
* [OCPBUGS-3403](https://issues.redhat.com/browse/OCPBUGS-3403): Fix resource table sorting crash [#13103](https://github.com/openshift/console/pull/13103)
* [OCPBUGS-17203](https://issues.redhat.com/browse/OCPBUGS-17203): mock apis for git repo in test serverless function tests [#13064](https://github.com/openshift/console/pull/13064)
* [OCPBUGS-19313](https://issues.redhat.com/browse/OCPBUGS-19313): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13129](https://github.com/openshift/console/pull/13129)
* [OCPBUGS-19311](https://issues.redhat.com/browse/OCPBUGS-19311): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13128](https://github.com/openshift/console/pull/13128)
* [OCPBUGS-18188](https://issues.redhat.com/browse/OCPBUGS-18188): Added React Icon [#13111](https://github.com/openshift/console/pull/13111)
* [OCPBUGS-18485](https://issues.redhat.com/browse/OCPBUGS-18485): Monitoring: Fix display of silenced alerts in dev console [#13151](https://github.com/openshift/console/pull/13151)
* [OCPBUGS-6513](https://issues.redhat.com/browse/OCPBUGS-6513): Fixed Edit Application form for Knative Services [#12832](https://github.com/openshift/console/pull/12832)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13092](https://github.com/openshift/console/pull/13092)
* [OCPBUGS-18439](https://issues.redhat.com/browse/OCPBUGS-18439): use active namespace in Create cta href of create action for operator backed [#13132](https://github.com/openshift/console/pull/13132)
* [Full changelog](https://github.com/openshift/console/compare/c802a329ebd8bc5d153ad39c24ff04f63a0cdc09...cb7b0786c142a10610fa50cddc25cd1de8a62653)
### [console-operator](https://github.com/openshift/console-operator/tree/efe782291fe88877add25db7d575934d926963c4)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#901](https://github.com/openshift/console-operator/pull/901)
* [OCPBUGS-33505](https://issues.redhat.com/browse/OCPBUGS-33505): Add missing return statement to fix crash in healthcheck controller [#900](https://github.com/openshift/console-operator/pull/900)
* [OKD-214](https://issues.redhat.com/browse/OKD-214): Dockerfile: Add ARG TAGS=ocp [#896](https://github.com/openshift/console-operator/pull/896)
* [TRT-1664](https://issues.redhat.com/browse/TRT-1664): Revert #895 "CONSOLE-4047: Console-operator should be internally using listers for fetching data" [#899](https://github.com/openshift/console-operator/pull/899)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#895](https://github.com/openshift/console-operator/pull/895)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Default telemetry values [#890](https://github.com/openshift/console-operator/pull/890)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#893](https://github.com/openshift/console-operator/pull/893)
* [TRT-1623](https://issues.redhat.com/browse/TRT-1623): Revert "Merge pull request #889 from jhadvig/CONSOLE-4014" [#892](https://github.com/openshift/console-operator/pull/892)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#889](https://github.com/openshift/console-operator/pull/889)
* [OCPBUGS-20129](https://issues.redhat.com/browse/OCPBUGS-20129): Fix triggering `upgradenotification` in the cluster installation time [#790](https://github.com/openshift/console-operator/pull/790)
* [OCPBUGS-20466](https://issues.redhat.com/browse/OCPBUGS-20466): Tighten console operator permissions for cluster operators [#873](https://github.com/openshift/console-operator/pull/873)
* [OCPBUGS-32400](https://issues.redhat.com/browse/OCPBUGS-32400): base OIDC status updates on the ExternalOIDC feature gate [#887](https://github.com/openshift/console-operator/pull/887)
* [OCPBUGS-29547](https://issues.redhat.com/browse/OCPBUGS-29547): Apply hypershift cluster-profile for ibm-cloud-managed [#868](https://github.com/openshift/console-operator/pull/868)
* [OCPBUGS-30458](https://issues.redhat.com/browse/OCPBUGS-30458): Bump k8s.io/component-base to latest [#884](https://github.com/openshift/console-operator/pull/884)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944), [OCPBUGS-31020](https://issues.redhat.com/browse/OCPBUGS-31020): Disable segment analytics when cluster telemetry is disabled [#877](https://github.com/openshift/console-operator/pull/877)
* [CONSOLE-3910](https://issues.redhat.com/browse/CONSOLE-3910): Add quickstart to impersonate a system:admin user [#865](https://github.com/openshift/console-operator/pull/865)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: synchronize the CM with a CA to trust the issuer, if configured [#879](https://github.com/openshift/console-operator/pull/879)
* [OCPBUGS-29331](https://issues.redhat.com/browse/OCPBUGS-29331): Update RHDH QuickStarts and add CR examples [#878](https://github.com/openshift/console-operator/pull/878)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 [#827](https://github.com/openshift/console-operator/pull/827)
* [OCPBUGS-28541](https://issues.redhat.com/browse/OCPBUGS-28541): Remove Janus IDP and update RHDH quickstarts [#862](https://github.com/openshift/console-operator/pull/862)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): Add startupProbe to console container. [#869](https://github.com/openshift/console-operator/pull/869)
* [OCPBUGS-29532](https://issues.redhat.com/browse/OCPBUGS-29532): ouathclients: further split oidc and integrated oauth handling [#861](https://github.com/openshift/console-operator/pull/861)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): always sync oidcClients in authn status if the field is present [#857](https://github.com/openshift/console-operator/pull/857)
* [OCPBUGS-28982](https://issues.redhat.com/browse/OCPBUGS-28982): oauthclients: fix oauthclients degraded condition that never gets removed [#855](https://github.com/openshift/console-operator/pull/855)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#847](https://github.com/openshift/console-operator/pull/847)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#849](https://github.com/openshift/console-operator/pull/849)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#841](https://github.com/openshift/console-operator/pull/841)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Merge auth cert configmap deployment annotations into one [#842](https://github.com/openshift/console-operator/pull/842)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): make it impossible double set conditions in a single loop [#848](https://github.com/openshift/console-operator/pull/848)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#839](https://github.com/openshift/console-operator/pull/839)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): The console-deployment should set the number of replicas based on the ControlPlaneTopology [#838](https://github.com/openshift/console-operator/pull/838)
* NO-JIRA:(chore) remove unused loglevel [#830](https://github.com/openshift/console-operator/pull/830)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): Bump library-go to deal with GET conflict [#836](https://github.com/openshift/console-operator/pull/836)
* [OCPBUGS-24041](https://issues.redhat.com/browse/OCPBUGS-24041): Prevent healthcheck controller from Available=False blipping [#834](https://github.com/openshift/console-operator/pull/834)
* [OCPBUGS-7656](https://issues.redhat.com/browse/OCPBUGS-7656): Remove service ca controller annotation from console-redirect service. [#826](https://github.com/openshift/console-operator/pull/826)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Revert #831 and fix cluster proxy annotation on console conversion webhook deployment [#833](https://github.com/openshift/console-operator/pull/833)
* Revert #822 "OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher" [#831](https://github.com/openshift/console-operator/pull/831)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Update console conversion webhook server to use sig.k8s.io certwatcher [#822](https://github.com/openshift/console-operator/pull/822)
* [OCPBUGS-25618](https://issues.redhat.com/browse/OCPBUGS-25618): Bump documentationBaseURL to 4.16 [#824](https://github.com/openshift/console-operator/pull/824)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#823](https://github.com/openshift/console-operator/pull/823)
* [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): Reapply separation of the oauthclients controller [#814](https://github.com/openshift/console-operator/pull/814)
* [CONSOLE-3652](https://issues.redhat.com/browse/CONSOLE-3652): Create StorageVersionMigration for ConsolePlugin CRD v1 migration [#816](https://github.com/openshift/console-operator/pull/816)
* [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#819](https://github.com/openshift/console-operator/pull/819)
* [CONSOLE-3791](https://issues.redhat.com/browse/CONSOLE-3791): Add "readOnlyRootFilesystem" to all console conta… [#809](https://github.com/openshift/console-operator/pull/809)
* [OCPBUGS-23300](https://issues.redhat.com/browse/OCPBUGS-23300): Disable route controller health check for NLB setup [#815](https://github.com/openshift/console-operator/pull/815)
* [ODC-7418](https://issues.redhat.com/browse/ODC-7418): Add Janus IDP and RHDH Quick starts [#806](https://github.com/openshift/console-operator/pull/806)
* [TRT-1361](https://issues.redhat.com/browse/TRT-1361): Revert #808 "CONSOLE-3804: split oauthclient controller from the common logic" [#813](https://github.com/openshift/console-operator/pull/813)
* [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): split oauthclient controller from the common logic [#808](https://github.com/openshift/console-operator/pull/808)
* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Update vendor bundle after removing multicluster code [#810](https://github.com/openshift/console-operator/pull/810)
* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Remove multicluster code from console operator [#799](https://github.com/openshift/console-operator/pull/799)
* [OCPBUGS-21972](https://issues.redhat.com/browse/OCPBUGS-21972): Disable HTTP/2 for webhook [#802](https://github.com/openshift/console-operator/pull/802)
* [OCPVE-719](https://issues.redhat.com/browse/OCPVE-719): feat: add support for olm capability [#795](https://github.com/openshift/console-operator/pull/795)
* [HOSTEDCP-1250](https://issues.redhat.com/browse/HOSTEDCP-1250): remove redundant cert check [#801](https://github.com/openshift/console-operator/pull/801)
* [CONSOLE-3717](https://issues.redhat.com/browse/CONSOLE-3717): Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests [#782](https://github.com/openshift/console-operator/pull/782)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console-operator images to be consistent with ART [#794](https://github.com/openshift/console-operator/pull/794)
* [OCPBUGS-19080](https://issues.redhat.com/browse/OCPBUGS-19080): Reset console operator's conditions [#796](https://github.com/openshift/console-operator/pull/796)
* [Full changelog](https://github.com/openshift/console-operator/compare/e5d3f29136a89a273ed48023ce3a89c27980cf4f...efe782291fe88877add25db7d575934d926963c4)
### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/f503997690a236f322ae062ab2ebcf720b0457bf)
* [OCPBUGS-32212](https://issues.redhat.com/browse/OCPBUGS-32212): modify to invoke SAST test [#159](https://github.com/openshift/containernetworking-plugins/pull/159)
* [OCPBUGS-28559](https://issues.redhat.com/browse/OCPBUGS-28559): Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 [#150](https://github.com/openshift/containernetworking-plugins/pull/150)
* [USHIFT-2219](https://issues.redhat.com/browse/USHIFT-2219): Dockerfile for MicroShift [#153](https://github.com/openshift/containernetworking-plugins/pull/153)
* [OCPBUGS-29888](https://issues.redhat.com/browse/OCPBUGS-29888): cherry-pick containernetworking/plugins#997 [#154](https://github.com/openshift/containernetworking-plugins/pull/154)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#146](https://github.com/openshift/containernetworking-plugins/pull/146)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#145](https://github.com/openshift/containernetworking-plugins/pull/145)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#142](https://github.com/openshift/containernetworking-plugins/pull/142)
* [NP-807](https://issues.redhat.com/browse/NP-807): Upstream sync Nov 2023 [#139](https://github.com/openshift/containernetworking-plugins/pull/139)
* [OCPBUGS-21906](https://issues.redhat.com/browse/OCPBUGS-21906): Bumps x/net + upstream sync november 2023 [#128](https://github.com/openshift/containernetworking-plugins/pull/128)
* [OCPBUGS-19127](https://issues.redhat.com/browse/OCPBUGS-19127): Updating ose-containernetworking-plugins images to be consistent with ART [#122](https://github.com/openshift/containernetworking-plugins/pull/122)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407...f503997690a236f322ae062ab2ebcf720b0457bf)
### [coredns](https://github.com/openshift/coredns/tree/04d84f7f2e17ff464fad3f2841e7b29a43c8382f)
* [OCPBUGS-35296](https://issues.redhat.com/browse/OCPBUGS-35296): UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 [#123](https://github.com/openshift/coredns/pull/123)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order [#116](https://github.com/openshift/coredns/pull/116)
* [OCPBUGS-31768](https://issues.redhat.com/browse/OCPBUGS-31768): UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 [#108](https://github.com/openshift/coredns/pull/108)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin [#115](https://github.com/openshift/coredns/pull/115)
* [OCPBUGS-27928](https://issues.redhat.com/browse/OCPBUGS-27928): Updating coredns-container image to be consistent with ART for 4.16 [#111](https://github.com/openshift/coredns/pull/111)
* [OCPBUGS-27397](https://issues.redhat.com/browse/OCPBUGS-27397): UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 [#109](https://github.com/openshift/coredns/pull/109)
* [OCPBUGS-24957](https://issues.redhat.com/browse/OCPBUGS-24957): Updating coredns-container image to be consistent with ART [#107](https://github.com/openshift/coredns/pull/107)
* [OCPBUGS-15755](https://issues.redhat.com/browse/OCPBUGS-15755): UPSTREAM: <carry>: openshift: Fix OCPBUGS-15755 [#105](https://github.com/openshift/coredns/pull/105)
* [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101)
* [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94)
* [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95)
* [Full changelog](https://github.com/openshift/coredns/compare/7d3fa777871ed2e5a70715e7f3e71d3f01785330...04d84f7f2e17ff464fad3f2841e7b29a43c8382f)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5340eaab09d8057a705b7a7124e05231cfd37978)
* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Allow changing cluster-name on existing deployments [#276](https://github.com/openshift/cloud-provider-openstack/pull/276)
* [OCPBUGS-29605](https://issues.redhat.com/browse/OCPBUGS-29605): Remove enforcement of IPv6 LB as internal [#275](https://github.com/openshift/cloud-provider-openstack/pull/275)
* NO-JIRA: More snyk ignores [#265](https://github.com/openshift/cloud-provider-openstack/pull/265)
* don't use static version in sed replacement rules [#2510](https://github.com/openshift/cloud-provider-openstack/pull/2510)
* bump k8s e2e test to 1.29 [#2509](https://github.com/openshift/cloud-provider-openstack/pull/2509)
* update docs in order to reflect the current state of the ovn lb-provider support [#2489](https://github.com/openshift/cloud-provider-openstack/pull/2489)
* update CSI version [#2478](https://github.com/openshift/cloud-provider-openstack/pull/2478)
* update tags [#2204](https://github.com/openshift/cloud-provider-openstack/pull/2204)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/697083a8e5e1f68978458a0a00c426e094665271...5340eaab09d8057a705b7a7124e05231cfd37978)
### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/csi-driver-manila-operator/pull/229)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#226](https://github.com/openshift/csi-driver-manila-operator/pull/226)
* [OCPBUGS-28934](https://issues.redhat.com/browse/OCPBUGS-28934): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 [#227](https://github.com/openshift/csi-driver-manila-operator/pull/227)
* NO-ISSUE: Remove local manifests [#208](https://github.com/openshift/csi-driver-manila-operator/pull/208)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#225](https://github.com/openshift/csi-driver-manila-operator/pull/225)
* [OCPBUGS-23809](https://issues.redhat.com/browse/OCPBUGS-23809): Bump opentelemetry libs [#220](https://github.com/openshift/csi-driver-manila-operator/pull/220)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#223](https://github.com/openshift/csi-driver-manila-operator/pull/223)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#218](https://github.com/openshift/csi-driver-manila-operator/pull/218)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#217](https://github.com/openshift/csi-driver-manila-operator/pull/217)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#214](https://github.com/openshift/csi-driver-manila-operator/pull/214)
* [OCPBUGS-24824](https://issues.redhat.com/browse/OCPBUGS-24824): Updating csi-driver-manila-operator-container image to be consistent with ART [#213](https://github.com/openshift/csi-driver-manila-operator/pull/213)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#212](https://github.com/openshift/csi-driver-manila-operator/pull/212)
* [OCPBUGS-9331](https://issues.redhat.com/browse/OCPBUGS-9331): Fix selector for manila-csi-driver-controller-metrics service [#210](https://github.com/openshift/csi-driver-manila-operator/pull/210)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#207](https://github.com/openshift/csi-driver-manila-operator/pull/207)
* [OCPBUGS-21940](https://issues.redhat.com/browse/OCPBUGS-21940): Update k8s.io/apimachinery and k8s.io/apiserver [#206](https://github.com/openshift/csi-driver-manila-operator/pull/206)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#205](https://github.com/openshift/csi-driver-manila-operator/pull/205)
* [OCPBUGS-19166](https://issues.redhat.com/browse/OCPBUGS-19166): Updating csi-driver-manila-operator images to be consistent with ART [#204](https://github.com/openshift/csi-driver-manila-operator/pull/204)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/d93a218ff323960eb1dea529f0173f069ccfab42...6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/406cec72a10684a7545a976a8c31e60712bcc5b2)
* [OCPBUGS-30439](https://issues.redhat.com/browse/OCPBUGS-30439): Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#139](https://github.com/openshift/csi-driver-nfs/pull/139)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#138](https://github.com/openshift/csi-driver-nfs/pull/138)
* NO-JIRA: Add snyk configuration file [#137](https://github.com/openshift/csi-driver-nfs/pull/137)
* [OCPBUGS-24952](https://issues.redhat.com/browse/OCPBUGS-24952): Updating csi-driver-nfs-container image to be consistent with ART [#136](https://github.com/openshift/csi-driver-nfs/pull/136)
* [OCPBUGS-24131](https://issues.redhat.com/browse/OCPBUGS-24131): Updating csi-driver-nfs-container image to be consistent with ART [#135](https://github.com/openshift/csi-driver-nfs/pull/135)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): Merge upstream [#133](https://github.com/openshift/csi-driver-nfs/pull/133)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/csi-driver-nfs/pull/131)
* [OCPBUGS-19212](https://issues.redhat.com/browse/OCPBUGS-19212): Updating csi-driver-nfs images to be consistent with ART [#129](https://github.com/openshift/csi-driver-nfs/pull/129)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#128](https://github.com/openshift/csi-driver-nfs/pull/128)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...406cec72a10684a7545a976a8c31e60712bcc5b2)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/bc125def6a15a71b2ef8c59e9c1284e471e7d905)
* [BUILD-877](https://issues.redhat.com/browse/BUILD-877): BUILD-887: Add konflux config for push and pull request [#183](https://github.com/openshift/csi-driver-shared-resource/pull/183)
* [BUILD-961](https://issues.redhat.com/browse/BUILD-961): use separate dockerfile for using catalog images [#180](https://github.com/openshift/csi-driver-shared-resource/pull/180)
* [OCPBUGS-33513](https://issues.redhat.com/browse/OCPBUGS-33513): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 [#178](https://github.com/openshift/csi-driver-shared-resource/pull/178)
* [OCPBUGS-33511](https://issues.redhat.com/browse/OCPBUGS-33511): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/csi-driver-shared-resource/pull/177)
* [BUILD-957](https://issues.redhat.com/browse/BUILD-957): Update Images with Red Hat Catalog Images [#173](https://github.com/openshift/csi-driver-shared-resource/pull/173)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Compare to Other Secret Stores [#176](https://github.com/openshift/csi-driver-shared-resource/pull/176)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Simplify README [#174](https://github.com/openshift/csi-driver-shared-resource/pull/174)
* [OCPBUGS-30501](https://issues.redhat.com/browse/OCPBUGS-30501): bump google.golang.org/grpc to 1.63.0 [#172](https://github.com/openshift/csi-driver-shared-resource/pull/172)
* [OCPBUGS-29871](https://issues.redhat.com/browse/OCPBUGS-29871): Apply hypershift cluster-profile for ibm-cloud-managed [#171](https://github.com/openshift/csi-driver-shared-resource/pull/171)
* [OCPBUGS-28663](https://issues.redhat.com/browse/OCPBUGS-28663): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#165](https://github.com/openshift/csi-driver-shared-resource/pull/165)
* [OCPBUGS-27860](https://issues.redhat.com/browse/OCPBUGS-27860), [OCPBUGS-28261](https://issues.redhat.com/browse/OCPBUGS-28261): address SAST/SNYK findings [#164](https://github.com/openshift/csi-driver-shared-resource/pull/164)
* [OCPBUGS-26081](https://issues.redhat.com/browse/OCPBUGS-26081), [OCPBUGS-26114](https://issues.redhat.com/browse/OCPBUGS-26114), [OCPBUGS-26145](https://issues.redhat.com/browse/OCPBUGS-26145): add snyk config file for SAST scan [#161](https://github.com/openshift/csi-driver-shared-resource/pull/161)
* [OCPBUGS-24984](https://issues.redhat.com/browse/OCPBUGS-24984): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#159](https://github.com/openshift/csi-driver-shared-resource/pull/159)
* [OCPBUGS-25035](https://issues.redhat.com/browse/OCPBUGS-25035): Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART [#160](https://github.com/openshift/csi-driver-shared-resource/pull/160)
* [OCPBUGS-24903](https://issues.redhat.com/browse/OCPBUGS-24903): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#158](https://github.com/openshift/csi-driver-shared-resource/pull/158)
* [OCPBUGS-24310](https://issues.redhat.com/browse/OCPBUGS-24310): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#157](https://github.com/openshift/csi-driver-shared-resource/pull/157)
* [OCPBUGS-24096](https://issues.redhat.com/browse/OCPBUGS-24096): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#156](https://github.com/openshift/csi-driver-shared-resource/pull/156)
* [OCPBUGS-23108](https://issues.redhat.com/browse/OCPBUGS-23108): Should reference configmaps instead of secrets [#151](https://github.com/openshift/csi-driver-shared-resource/pull/151)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource images to be consistent with ART [#143](https://github.com/openshift/csi-driver-shared-resource/pull/143)
* [OCPBUGS-21730](https://issues.redhat.com/browse/OCPBUGS-21730): bump golang.org/x/net to v0.17.0 [#145](https://github.com/openshift/csi-driver-shared-resource/pull/145)
* [OCPBUGS-19291](https://issues.redhat.com/browse/OCPBUGS-19291): Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#144](https://github.com/openshift/csi-driver-shared-resource/pull/144)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#142](https://github.com/openshift/csi-driver-shared-resource/pull/142)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/9232c1ff48df333dadc9f7dc275649866e55ced0...bc125def6a15a71b2ef8c59e9c1284e471e7d905)
### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#107](https://github.com/openshift/csi-driver-shared-resource-operator/pull/107)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#100](https://github.com/openshift/csi-driver-shared-resource-operator/pull/100)
* [OCPBUGS-28941](https://issues.redhat.com/browse/OCPBUGS-28941): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/csi-driver-shared-resource-operator/pull/101)
* [OCPBUGS-28664](https://issues.redhat.com/browse/OCPBUGS-28664): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#99](https://github.com/openshift/csi-driver-shared-resource-operator/pull/99)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#98](https://github.com/openshift/csi-driver-shared-resource-operator/pull/98)
* [OCPBUGS-26087](https://issues.redhat.com/browse/OCPBUGS-26087): add snyk config file for SAST scan [#95](https://github.com/openshift/csi-driver-shared-resource-operator/pull/95)
* [OCPBUGS-24855](https://issues.redhat.com/browse/OCPBUGS-24855): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART [#94](https://github.com/openshift/csi-driver-shared-resource-operator/pull/94)
* [OCPBUGS-23855](https://issues.redhat.com/browse/OCPBUGS-23855): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#93](https://github.com/openshift/csi-driver-shared-resource-operator/pull/93)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/csi-driver-shared-resource-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90)
* [OCPBUGS-21724](https://issues.redhat.com/browse/OCPBUGS-21724): bump golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/csi-driver-shared-resource-operator/pull/85)
* [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c273cd52b791e69da41ac23fafb6d926c0530276...1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/7da80aab15cabd182ee35742443c0b836de4e180)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-attacher` to v4.5.1 for OCP 4.16 [#72](https://github.com/openshift/csi-external-attacher/pull/72)
* [OCPBUGS-30437](https://issues.redhat.com/browse/OCPBUGS-30437): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#71](https://github.com/openshift/csi-external-attacher/pull/71)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#70](https://github.com/openshift/csi-external-attacher/pull/70)
* [OCPBUGS-25576](https://issues.redhat.com/browse/OCPBUGS-25576): Updating csi-attacher-container image to be consistent with ART [#69](https://github.com/openshift/csi-external-attacher/pull/69)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#68](https://github.com/openshift/csi-external-attacher/pull/68)
* [OCPBUGS-25053](https://issues.redhat.com/browse/OCPBUGS-25053): Updating csi-attacher-container image to be consistent with ART [#67](https://github.com/openshift/csi-external-attacher/pull/67)
* [OCPBUGS-24966](https://issues.redhat.com/browse/OCPBUGS-24966): Updating csi-attacher-container image to be consistent with ART [#66](https://github.com/openshift/csi-external-attacher/pull/66)
* [OCPBUGS-24139](https://issues.redhat.com/browse/OCPBUGS-24139): Updating csi-attacher-container image to be consistent with ART [#65](https://github.com/openshift/csi-external-attacher/pull/65)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-external-attacher/pull/59)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-attacher` to v4.4.0 for OCP 4.15 [#58](https://github.com/openshift/csi-external-attacher/pull/58)
* [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/06e8ce0d36f7c23f0906327cd66ec6bd15165366...7da80aab15cabd182ee35742443c0b836de4e180)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/9e8af011e0a0aea96066821b57c42bdaccf24a42)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-provisioner` to v4.0.1 for OCP 4.16 [#95](https://github.com/openshift/csi-external-provisioner/pull/95)
* [OCPBUGS-30442](https://issues.redhat.com/browse/OCPBUGS-30442): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#94](https://github.com/openshift/csi-external-provisioner/pull/94)
* [OCPBUGS-29971](https://issues.redhat.com/browse/OCPBUGS-29971): Updating csi-provisioner-container image to be consistent with ART for 4.16 [#93](https://github.com/openshift/csi-external-provisioner/pull/93)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#88](https://github.com/openshift/csi-external-provisioner/pull/88)
* [OCPBUGS-25492](https://issues.redhat.com/browse/OCPBUGS-25492): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#85](https://github.com/openshift/csi-external-provisioner/pull/85)
* [OCPBUGS-25532](https://issues.redhat.com/browse/OCPBUGS-25532): Updating csi-provisioner-container image to be consistent with ART [#84](https://github.com/openshift/csi-external-provisioner/pull/84)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#83](https://github.com/openshift/csi-external-provisioner/pull/83)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-23812](https://issues.redhat.com/browse/OCPBUGS-23812): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#81](https://github.com/openshift/csi-external-provisioner/pull/81)
* [OCPBUGS-25082](https://issues.redhat.com/browse/OCPBUGS-25082): Updating csi-provisioner-container image to be consistent with ART [#80](https://github.com/openshift/csi-external-provisioner/pull/80)
* [OCPBUGS-24804](https://issues.redhat.com/browse/OCPBUGS-24804): Updating csi-provisioner-container image to be consistent with ART [#79](https://github.com/openshift/csi-external-provisioner/pull/79)
* [OCPBUGS-23062](https://issues.redhat.com/browse/OCPBUGS-23062): UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#78](https://github.com/openshift/csi-external-provisioner/pull/78)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528): UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#77](https://github.com/openshift/csi-external-provisioner/pull/77)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#71](https://github.com/openshift/csi-external-provisioner/pull/71)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-provisioner` to v3.6.0 for OCP 4.15 [#70](https://github.com/openshift/csi-external-provisioner/pull/70)
* [OCPBUGS-19114](https://issues.redhat.com/browse/OCPBUGS-19114): Updating csi-provisioner images to be consistent with ART [#69](https://github.com/openshift/csi-external-provisioner/pull/69)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/78a710fd2ccd6f87f7789c314349192d063f9f37...9e8af011e0a0aea96066821b57c42bdaccf24a42)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/bdf5bfb4da07be6a85ae5253218f29fb8af51adf)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-resizer` to v1.10.0 for OCP 4.16 [#160](https://github.com/openshift/csi-external-resizer/pull/160)
* [OCPBUGS-30502](https://issues.redhat.com/browse/OCPBUGS-30502): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#159](https://github.com/openshift/csi-external-resizer/pull/159)
* [OCPBUGS-29984](https://issues.redhat.com/browse/OCPBUGS-29984): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 [#158](https://github.com/openshift/csi-external-resizer/pull/158)
* [OCPBUGS-25540](https://issues.redhat.com/browse/OCPBUGS-25540): Updating ose-csi-external-resizer-container image to be consistent with ART [#154](https://github.com/openshift/csi-external-resizer/pull/154)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#153](https://github.com/openshift/csi-external-resizer/pull/153)
* [OCPBUGS-24846](https://issues.redhat.com/browse/OCPBUGS-24846): Updating ose-csi-external-resizer-container image to be consistent with ART [#152](https://github.com/openshift/csi-external-resizer/pull/152)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#146](https://github.com/openshift/csi-external-resizer/pull/146)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-resizer` to v1.9.0 for OCP 4.15 [#145](https://github.com/openshift/csi-external-resizer/pull/145)
* [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/59a701a4c8cd3105e272b12afdb1e62e411b2772...bdf5bfb4da07be6a85ae5253218f29fb8af51adf)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/5315d37a1e5415e8b6870f23e50238681979cc28)
* [OCPBUGS-31746](https://issues.redhat.com/browse/OCPBUGS-31746): Backport volumegroupsnapshot fixes to OCP 4.16 [#148](https://github.com/openshift/csi-external-snapshotter/pull/148)
* [OCPBUGS-31439](https://issues.redhat.com/browse/OCPBUGS-31439): Backport volumegroupsnapshot fixes to OCP 4.16 [#146](https://github.com/openshift/csi-external-snapshotter/pull/146)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase external-snapshotter to v7.0.1 for OCP 4.16 [#145](https://github.com/openshift/csi-external-snapshotter/pull/145)
* [OCPBUGS-30503](https://issues.redhat.com/browse/OCPBUGS-30503): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#144](https://github.com/openshift/csi-external-snapshotter/pull/144)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Rebase `external-snapshotter` to v7.0.0 to get VolumeGroupSnapshot [#139](https://github.com/openshift/csi-external-snapshotter/pull/139)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#137](https://github.com/openshift/csi-external-snapshotter/pull/137)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#133](https://github.com/openshift/csi-external-snapshotter/pull/133)
* [OCPBUGS-25548](https://issues.redhat.com/browse/OCPBUGS-25548): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#135](https://github.com/openshift/csi-external-snapshotter/pull/135)
* [OCPBUGS-25575](https://issues.redhat.com/browse/OCPBUGS-25575): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#136](https://github.com/openshift/csi-external-snapshotter/pull/136)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#132](https://github.com/openshift/csi-external-snapshotter/pull/132)
* [OCPBUGS-25052](https://issues.redhat.com/browse/OCPBUGS-25052): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#131](https://github.com/openshift/csi-external-snapshotter/pull/131)
* [OCPBUGS-25124](https://issues.redhat.com/browse/OCPBUGS-25124): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#130](https://github.com/openshift/csi-external-snapshotter/pull/130)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#129](https://github.com/openshift/csi-external-snapshotter/pull/129)
* [OCPBUGS-24964](https://issues.redhat.com/browse/OCPBUGS-24964): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#128](https://github.com/openshift/csi-external-snapshotter/pull/128)
* [OCPBUGS-24866](https://issues.redhat.com/browse/OCPBUGS-24866): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#127](https://github.com/openshift/csi-external-snapshotter/pull/127)
* [OCPBUGS-24330](https://issues.redhat.com/browse/OCPBUGS-24330): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#124](https://github.com/openshift/csi-external-snapshotter/pull/124)
* [OCPBUGS-24338](https://issues.redhat.com/browse/OCPBUGS-24338): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#123](https://github.com/openshift/csi-external-snapshotter/pull/123)
* [OCPBUGS-24329](https://issues.redhat.com/browse/OCPBUGS-24329): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#121](https://github.com/openshift/csi-external-snapshotter/pull/121)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#118](https://github.com/openshift/csi-external-snapshotter/pull/118)
* [OCPBUGS-24160](https://issues.redhat.com/browse/OCPBUGS-24160): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#116](https://github.com/openshift/csi-external-snapshotter/pull/116)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#117](https://github.com/openshift/csi-external-snapshotter/pull/117)
* [OCPBUGS-24071](https://issues.redhat.com/browse/OCPBUGS-24071): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#115](https://github.com/openshift/csi-external-snapshotter/pull/115)
* [OCPBUGS-23010](https://issues.redhat.com/browse/OCPBUGS-23010): UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false [#114](https://github.com/openshift/csi-external-snapshotter/pull/114)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#108](https://github.com/openshift/csi-external-snapshotter/pull/108)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-snapshotter` to v6.3.0 for OCP 4.15 [#107](https://github.com/openshift/csi-external-snapshotter/pull/107)
* [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106)
* [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105)
* [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/a6834536936b16dcd9ee81a8753a2ef6dc208541...5315d37a1e5415e8b6870f23e50238681979cc28)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/f5e3ff5532d58af34b5b407be2cac6934c1ff223)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `livenessprobe` to v2.12.0 for OCP 4.16 [#64](https://github.com/openshift/csi-livenessprobe/pull/64)
* [OCPBUGS-30440](https://issues.redhat.com/browse/OCPBUGS-30440): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#63](https://github.com/openshift/csi-livenessprobe/pull/63)
* [OCPBUGS-29972](https://issues.redhat.com/browse/OCPBUGS-29972): Updating csi-livenessprobe-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/csi-livenessprobe/pull/62)
* [OCPBUGS-25534](https://issues.redhat.com/browse/OCPBUGS-25534): Updating csi-livenessprobe-container image to be consistent with ART [#58](https://github.com/openshift/csi-livenessprobe/pull/58)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#57](https://github.com/openshift/csi-livenessprobe/pull/57)
* [OCPBUGS-25093](https://issues.redhat.com/browse/OCPBUGS-25093): Updating csi-livenessprobe-container image to be consistent with ART [#56](https://github.com/openshift/csi-livenessprobe/pull/56)
* [OCPBUGS-24815](https://issues.redhat.com/browse/OCPBUGS-24815): Updating csi-livenessprobe-container image to be consistent with ART [#55](https://github.com/openshift/csi-livenessprobe/pull/55)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/csi-livenessprobe/pull/49)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `livenessprobe` to v2.11.0 for OCP 4.15 [#48](https://github.com/openshift/csi-livenessprobe/pull/48)
* [OCPBUGS-19132](https://issues.redhat.com/browse/OCPBUGS-19132): Updating csi-livenessprobe images to be consistent with ART [#47](https://github.com/openshift/csi-livenessprobe/pull/47)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/a9bcbde134a17d3335f68a49aaad4befa8d7cc08...f5e3ff5532d58af34b5b407be2cac6934c1ff223)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/8930c368500a5d1f15c3e1a5906397e206879de0)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `node-driver-registrar` to v2.10.0 for OCP 4.16 [#70](https://github.com/openshift/csi-node-driver-registrar/pull/70)
* [OCPBUGS-30441](https://issues.redhat.com/browse/OCPBUGS-30441): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#69](https://github.com/openshift/csi-node-driver-registrar/pull/69)
* [OCPBUGS-29987](https://issues.redhat.com/browse/OCPBUGS-29987): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 [#68](https://github.com/openshift/csi-node-driver-registrar/pull/68)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#64](https://github.com/openshift/csi-node-driver-registrar/pull/64)
* [OCPBUGS-25544](https://issues.redhat.com/browse/OCPBUGS-25544): Updating csi-node-driver-registrar-container image to be consistent with ART [#62](https://github.com/openshift/csi-node-driver-registrar/pull/62)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#61](https://github.com/openshift/csi-node-driver-registrar/pull/61)
* [OCPBUGS-25117](https://issues.redhat.com/browse/OCPBUGS-25117): Updating csi-node-driver-registrar-container image to be consistent with ART [#59](https://github.com/openshift/csi-node-driver-registrar/pull/59)
* [OCPBUGS-23811](https://issues.redhat.com/browse/OCPBUGS-23811): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#58](https://github.com/openshift/csi-node-driver-registrar/pull/58)
* [OCPBUGS-24856](https://issues.redhat.com/browse/OCPBUGS-24856): Updating csi-node-driver-registrar-container image to be consistent with ART [#57](https://github.com/openshift/csi-node-driver-registrar/pull/57)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-node-driver-registrar/pull/51)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `node-driver-registrar` to v2.9.0 for OCP 4.15 [#50](https://github.com/openshift/csi-node-driver-registrar/pull/50)
* [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9dcaa7f5b7573e7ef9dbec1439abc32171003799...8930c368500a5d1f15c3e1a5906397e206879de0)
### [docker-builder](https://github.com/openshift/builder/tree/ca2b36ac7f38efc76bedc87cc81f9464f52bf332)
* [OCPBUGS-30672](https://issues.redhat.com/browse/OCPBUGS-30672): bump go-jose to fix CVE-2024-28176 [#386](https://github.com/openshift/builder/pull/386)
* [OCPBUGS-31930](https://issues.redhat.com/browse/OCPBUGS-31930): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#385](https://github.com/openshift/builder/pull/385)
* [OCPBUGS-24746](https://issues.redhat.com/browse/OCPBUGS-24746): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#382](https://github.com/openshift/builder/pull/382)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#380](https://github.com/openshift/builder/pull/380)
* [OCPBUGS-28661](https://issues.redhat.com/browse/OCPBUGS-28661): Replace 'coreydaley' with 'sayan-biswas' [#377](https://github.com/openshift/builder/pull/377)
* [OCPBUGS-23128](https://issues.redhat.com/browse/OCPBUGS-23128): bump github.com/containers/buildah to fix transient mounting in chroot isolation [#358](https://github.com/openshift/builder/pull/358)
* [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369)
* [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361)
* [OCPBUGS-20407](https://issues.redhat.com/browse/OCPBUGS-20407): drop the Overlay setting from transient mounts [#359](https://github.com/openshift/builder/pull/359)
* [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357)
* [Full changelog](https://github.com/openshift/builder/compare/9c104de024e5c52e224ffedfbab0e9053fb1efd6...ca2b36ac7f38efc76bedc87cc81f9464f52bf332)
### [docker-registry](https://github.com/openshift/image-registry/tree/58a613b36ac03c264f06e429d6260f34396668db)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): Use SAR instead of SSAR [#403](https://github.com/openshift/image-registry/pull/403)
* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): vendor: bump aws-sdk-go to support ca-west-1 [#395](https://github.com/openshift/image-registry/pull/395)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): update distribution with bugfix [#392](https://github.com/openshift/image-registry/pull/392)
* [OCPBUGS-26173](https://issues.redhat.com/browse/OCPBUGS-26173): Updating openshift-enterprise-registry-container image to be consistent with ART [#390](https://github.com/openshift/image-registry/pull/390)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#389](https://github.com/openshift/image-registry/pull/389)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#388](https://github.com/openshift/image-registry/pull/388)
* [OCPBUGS-24095](https://issues.redhat.com/browse/OCPBUGS-24095): Updating openshift-enterprise-registry-container image to be consistent with ART [#387](https://github.com/openshift/image-registry/pull/387)
* [CORS-2985](https://issues.redhat.com/browse/CORS-2985): Add support for il-central-1 region in AWS [#386](https://github.com/openshift/image-registry/pull/386)
* [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378)
* [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377)
* [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379)
* [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380)
* [Full changelog](https://github.com/openshift/image-registry/compare/f03c24040cea924f846aca8b4e02bf802159a238...58a613b36ac03c264f06e429d6260f34396668db)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1d5732f0209bb7d98661a53c66c5ac265272dce6)
* Adding the `+` char to the RT kernel version. (#156) [#156](https://github.com/openshift/driver-toolkit/pull/156)
* ART bash parser is failing on [[...]] syntax Replace with sh compatible syntax. (#152) [#152](https://github.com/openshift/driver-toolkit/pull/152)
* Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) [#150](https://github.com/openshift/driver-toolkit/pull/150)
* Use a default RHEL_VERSION when the build argument is not specified (#148) [#148](https://github.com/openshift/driver-toolkit/pull/148)
* Add importMode and set it to `PreserveOriginal` to import (#144) [#144](https://github.com/openshift/driver-toolkit/pull/144)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): Start using rhel-coreos image rather than machine-os-content. (#142) [#142](https://github.com/openshift/driver-toolkit/pull/142)
* apply hypershift cluster-profile (#143) [#143](https://github.com/openshift/driver-toolkit/pull/143)
* Add support for 64k pages with ARM64 (#140) [#140](https://github.com/openshift/driver-toolkit/pull/140)
* Updating driver-toolkit-container image to be consistent with ART (#139) [#139](https://github.com/openshift/driver-toolkit/pull/139)
* [MGMT-16313](https://issues.redhat.com/browse/MGMT-16313): Add support for C++ build (#137) [#137](https://github.com/openshift/driver-toolkit/pull/137)
* Revert "Start using `rhel-coreos` image rather than `machine-os-content` (#135)" (#136) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Start using `rhel-coreos` image rather than `machine-os-content` (#135) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Updating driver-toolkit images to be consistent with ART (#134) [#134](https://github.com/openshift/driver-toolkit/pull/134)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/cafed17b0c2b4cf8d8310304888787ed7adf7474...1d5732f0209bb7d98661a53c66c5ac265272dce6)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7534ab906e5f9d38defbbbc6b169e5d829463bb5)
* [OCPBUGS-28581](https://issues.redhat.com/browse/OCPBUGS-28581): Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 [#80](https://github.com/openshift/egress-router-cni/pull/80)
* [OCPBUGS-24860](https://issues.redhat.com/browse/OCPBUGS-24860): Updating ose-egress-router-cni-container image to be consistent with ART [#79](https://github.com/openshift/egress-router-cni/pull/79)
* [OCPBUGS-18003](https://issues.redhat.com/browse/OCPBUGS-18003): Ensure that IP forwarding is enabled [#77](https://github.com/openshift/egress-router-cni/pull/77)
* [OCPBUGS-19258](https://issues.redhat.com/browse/OCPBUGS-19258): Updating egress-router-cni images to be consistent with ART [#76](https://github.com/openshift/egress-router-cni/pull/76)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/afffdd455b65a944751f9155852781f9ddce0f5d...7534ab906e5f9d38defbbbc6b169e5d829463bb5)
### [etcd](https://github.com/openshift/etcd/tree/bc2fec27ff5b086436d438157c24396f280e0305)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): DOWNSTREAM <carry>: add native binary to installer images [#269](https://github.com/openshift/etcd/pull/269)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: installer: make etcd binaries static [#268](https://github.com/openshift/etcd/pull/268)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: add installer Dockerfile for ART builds [#267](https://github.com/openshift/etcd/pull/267)
* [OCPBUGS-31624](https://issues.redhat.com/browse/OCPBUGS-31624): Rebase etcd 3.5.13 openshift 4.16 [#259](https://github.com/openshift/etcd/pull/259)
* no-issue: Update Installer dockerfile to use golang-1.20 [#251](https://github.com/openshift/etcd/pull/251)
* [OCPBUGS-28730](https://issues.redhat.com/browse/OCPBUGS-28730): Rebase etcd 3.5.12 openshift 4.16 [#242](https://github.com/openshift/etcd/pull/242)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to build etcd for openshift-installer [#249](https://github.com/openshift/etcd/pull/249)
* [OCPBUGS-24988](https://issues.redhat.com/browse/OCPBUGS-24988): Updating ose-etcd-container image to be consistent with ART [#236](https://github.com/openshift/etcd/pull/236)
* [OCPBUGS-24931](https://issues.redhat.com/browse/OCPBUGS-24931): Rebase etcd 3.5.11 openshift 4.16 [#237](https://github.com/openshift/etcd/pull/237)
* [OCPBUGS-19279](https://issues.redhat.com/browse/OCPBUGS-19279): Updating ose-etcd images to be consistent with ART [#215](https://github.com/openshift/etcd/pull/215)
* [OCPBUGS-20560](https://issues.redhat.com/browse/OCPBUGS-20560): [4.15] Rebase openshift/etcd to 3.5.10 [#224](https://github.com/openshift/etcd/pull/224)
* [Full changelog](https://github.com/openshift/etcd/compare/5ed5044c5661c55d297ab0348056b50969af9627...bc2fec27ff5b086436d438157c24396f280e0305)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/26b43dfc7ddce718014b8991db10cbff30b7b117)
* [OCPCLOUD-2463](https://issues.redhat.com/browse/OCPCLOUD-2463): Adds auth-provider-gcp .spec file and build script [#58](https://github.com/openshift/cloud-provider-gcp/pull/58)
* [OCPBUGS-22598](https://issues.redhat.com/browse/OCPBUGS-22598): Merge https://github.com/kubernetes/cloud-provider-gcp:master (58ec6ae) into master [#53](https://github.com/openshift/cloud-provider-gcp/pull/53)
* [OCPBUGS-25754](https://issues.redhat.com/browse/OCPBUGS-25754): Add Snyk file to exclude vendor directory on scan [#54](https://github.com/openshift/cloud-provider-gcp/pull/54)
* [OCPBUGS-24044](https://issues.redhat.com/browse/OCPBUGS-24044): Merge https://github.com/kubernetes/cloud-provider-gcp:master (522e293) into master [#40](https://github.com/openshift/cloud-provider-gcp/pull/40)
* [OCPBUGS-25581](https://issues.redhat.com/browse/OCPBUGS-25581): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#52](https://github.com/openshift/cloud-provider-gcp/pull/52)
* [OCPBUGS-24981](https://issues.redhat.com/browse/OCPBUGS-24981): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#48](https://github.com/openshift/cloud-provider-gcp/pull/48)
* [OCPBUGS-24152](https://issues.redhat.com/browse/OCPBUGS-24152): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#47](https://github.com/openshift/cloud-provider-gcp/pull/47)
* [OCPBUGS-22043](https://issues.redhat.com/browse/OCPBUGS-22043): Bump golang.org/x/net to v0.18.0 [#46](https://github.com/openshift/cloud-provider-gcp/pull/46)
* [OCPBUGS-23094](https://issues.redhat.com/browse/OCPBUGS-23094): Fix commit label for commits [#41](https://github.com/openshift/cloud-provider-gcp/pull/41)
* [OCPCLOUD-2185](https://issues.redhat.com/browse/OCPCLOUD-2185): Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master [#36](https://github.com/openshift/cloud-provider-gcp/pull/36)
* Update OWNERS [#39](https://github.com/openshift/cloud-provider-gcp/pull/39)
* [OCPBUGS-19243](https://issues.redhat.com/browse/OCPBUGS-19243): Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#38](https://github.com/openshift/cloud-provider-gcp/pull/38)
* [OCPBUGS-5755](https://issues.redhat.com/browse/OCPBUGS-5755): Reuse instance-groups for internal load balancers [#35](https://github.com/openshift/cloud-provider-gcp/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c...26b43dfc7ddce718014b8991db10cbff30b7b117)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/02432df87df9a731c8d630311854fbd515602e91)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#224](https://github.com/openshift/cluster-api-provider-gcp/pull/224)
* [OCPBUGS-28331](https://issues.redhat.com/browse/OCPBUGS-28331): add test directory to snyk excludes [#220](https://github.com/openshift/cluster-api-provider-gcp/pull/220)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#222](https://github.com/openshift/cluster-api-provider-gcp/pull/222)
* [OCPCLOUD-2445](https://issues.redhat.com/browse/OCPCLOUD-2445): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.6.0 (be17146) into master [#221](https://github.com/openshift/cluster-api-provider-gcp/pull/221)
* [OCPBUGS-26143](https://issues.redhat.com/browse/OCPBUGS-26143): Fix formatting in snyk vendor exclusions [#219](https://github.com/openshift/cluster-api-provider-gcp/pull/219)
* [OCPBUGS-24875](https://issues.redhat.com/browse/OCPBUGS-24875): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#215](https://github.com/openshift/cluster-api-provider-gcp/pull/215)
* [OCPBUGS-25628](https://issues.redhat.com/browse/OCPBUGS-25628): Add Snyk file to exclude vendor directory on scan [#216](https://github.com/openshift/cluster-api-provider-gcp/pull/216)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#214](https://github.com/openshift/cluster-api-provider-gcp/pull/214)
* [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): No-op change to trigger image rebuild [#211](https://github.com/openshift/cluster-api-provider-gcp/pull/211)
* Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#210](https://github.com/openshift/cluster-api-provider-gcp/pull/210)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#209](https://github.com/openshift/cluster-api-provider-gcp/pull/209)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases [#208](https://github.com/openshift/cluster-api-provider-gcp/pull/208)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master [#207](https://github.com/openshift/cluster-api-provider-gcp/pull/207)
* Update OWNERS [#201](https://github.com/openshift/cluster-api-provider-gcp/pull/201)
* [OCPBUGS-19116](https://issues.redhat.com/browse/OCPBUGS-19116): Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#200](https://github.com/openshift/cluster-api-provider-gcp/pull/200)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d99fb31aa7280f6b5da00880a64b4774600817a2...02432df87df9a731c8d630311854fbd515602e91)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e72657c0d2713842f701f1d43c777d6ec6880cb9)
* [OCPBUGS-30520](https://issues.redhat.com/browse/OCPBUGS-30520): Bump protobuf to v1.34.0 [#82](https://github.com/openshift/machine-api-provider-gcp/pull/82)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Add user defined tags to the created gcp resource [#54](https://github.com/openshift/machine-api-provider-gcp/pull/54)
* [OCPBUGS-27866](https://issues.redhat.com/browse/OCPBUGS-27866): Update Snyk file to exclude other vendor folders [#81](https://github.com/openshift/machine-api-provider-gcp/pull/81)
* [OCPCLOUD-2427](https://issues.redhat.com/browse/OCPCLOUD-2427): Rebase k8s to 1.29 and update dependencies [#78](https://github.com/openshift/machine-api-provider-gcp/pull/78)
* [OCPBUGS-26128](https://issues.redhat.com/browse/OCPBUGS-26128): Add Snyk file to exclude vendor directory on scan [#77](https://github.com/openshift/machine-api-provider-gcp/pull/77)
* [OCPBUGS-25578](https://issues.redhat.com/browse/OCPBUGS-25578): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-gcp/pull/75)
* [OCPBUGS-24970](https://issues.redhat.com/browse/OCPBUGS-24970): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#73](https://github.com/openshift/machine-api-provider-gcp/pull/73)
* [OCPBUGS-24143](https://issues.redhat.com/browse/OCPBUGS-24143): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#72](https://github.com/openshift/machine-api-provider-gcp/pull/72)
* [OCPBUGS-2117](https://issues.redhat.com/browse/OCPBUGS-2117): Add extra check to termination handler [#71](https://github.com/openshift/machine-api-provider-gcp/pull/71)
* [MIXEDARCH-258](https://issues.redhat.com/browse/MIXEDARCH-258): Set the capacity annotation for arch-aware autoscale from zero [#60](https://github.com/openshift/machine-api-provider-gcp/pull/60)
* Update OWNERS [#63](https://github.com/openshift/machine-api-provider-gcp/pull/63)
* [OCPBUGS-21792](https://issues.redhat.com/browse/OCPBUGS-21792): Bump x/net package to v0.17.0 [#62](https://github.com/openshift/machine-api-provider-gcp/pull/62)
* [OCPCLOUD-2191](https://issues.redhat.com/browse/OCPCLOUD-2191): Update to Kube 1.28 [#59](https://github.com/openshift/machine-api-provider-gcp/pull/59)
* [OCPBUGS-20267](https://issues.redhat.com/browse/OCPBUGS-20267): update bad url endpoint termination handler test [#61](https://github.com/openshift/machine-api-provider-gcp/pull/61)
* [OCPBUGS-19228](https://issues.redhat.com/browse/OCPBUGS-19228): Updating ose-machine-api-provider-gcp images to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-gcp/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125...e72657c0d2713842f701f1d43c777d6ec6880cb9)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/5ed71c64ce9c1879f0d2a17976387f1b0292796d)
* [OCPBUGS-30511](https://issues.redhat.com/browse/OCPBUGS-30511): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#60](https://github.com/openshift/gcp-pd-csi-driver/pull/60)
* [STOR-1581](https://issues.redhat.com/browse/STOR-1581): Rebase to new upstream version 1.13.0 [#59](https://github.com/openshift/gcp-pd-csi-driver/pull/59)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#58](https://github.com/openshift/gcp-pd-csi-driver/pull/58)
* [OCPBUGS-25553](https://issues.redhat.com/browse/OCPBUGS-25553): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#56](https://github.com/openshift/gcp-pd-csi-driver/pull/56)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#55](https://github.com/openshift/gcp-pd-csi-driver/pull/55)
* [OCPBUGS-25138](https://issues.redhat.com/browse/OCPBUGS-25138): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#54](https://github.com/openshift/gcp-pd-csi-driver/pull/54)
* [OCPBUGS-24886](https://issues.redhat.com/browse/OCPBUGS-24886): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#53](https://github.com/openshift/gcp-pd-csi-driver/pull/53)
* [OCPBUGS-24084](https://issues.redhat.com/browse/OCPBUGS-24084): Move builder and base image to RHEL 9 [#52](https://github.com/openshift/gcp-pd-csi-driver/pull/52)
* [STOR-1392](https://issues.redhat.com/browse/STOR-1392): Rebase to v1.12.2 for OCP 4.15 [#50](https://github.com/openshift/gcp-pd-csi-driver/pull/50)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#43](https://github.com/openshift/gcp-pd-csi-driver/pull/43)
* [OCPBUGS-19134](https://issues.redhat.com/browse/OCPBUGS-19134): Updating ose-gcp-pd-csi-driver images to be consistent with ART [#42](https://github.com/openshift/gcp-pd-csi-driver/pull/42)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03...5ed71c64ce9c1879f0d2a17976387f1b0292796d)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/799327f7c45b362beadc39e85b9e773cab3654c5)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#119](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/119)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node registrat healthcheck [#118](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/118)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#116](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/116)
* [OCPBUGS-28939](https://issues.redhat.com/browse/OCPBUGS-28939): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.16 [#117](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/117)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#115](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/115)
* [OCPBUGS-26486](https://issues.redhat.com/browse/OCPBUGS-26486): Increase data source provision timeout [#112](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/112)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#110](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/110)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#105](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/105)
* [OCPBUGS-25541](https://issues.redhat.com/browse/OCPBUGS-25541): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#106](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/106)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#104](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/104)
* [OCPBUGS-25113](https://issues.redhat.com/browse/OCPBUGS-25113): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#101](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/101)
* [OCPBUGS-23859](https://issues.redhat.com/browse/OCPBUGS-23859): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#98](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#100](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/100)
* [OCPBUGS-24847](https://issues.redhat.com/browse/OCPBUGS-24847): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#99](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/99)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#97](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/97)
* [OCPBUGS-22600](https://issues.redhat.com/browse/OCPBUGS-22600): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#94](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/94)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#81](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/81)
* Add clone test for gcp-pd-csi-driver [#92](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#93](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/93)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/86)
* [OCPBUGS-19229](https://issues.redhat.com/browse/OCPBUGS-19229): Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART [#85](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/85)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/95d55a043a60b584a9fe28d37825761282305840...799327f7c45b362beadc39e85b9e773cab3654c5)
### [haproxy-router](https://github.com/openshift/router/tree/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
* [CFE-1020](https://issues.redhat.com/browse/CFE-1020): feature:route external certificate reference [#565](https://github.com/openshift/router/pull/565)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): generateHAProxyCertConfigMap: No H2 with dup certs [#589](https://github.com/openshift/router/pull/589)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Optimize Upgrade Validation plugin by skipping unnecessary changes [#587](https://github.com/openshift/router/pull/587)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Make ingressConditionsEqual more efficient [#588](https://github.com/openshift/router/pull/588)
* [OCPBUGS-29690](https://issues.redhat.com/browse/OCPBUGS-29690): Count active services before setting weight to 1 [#576](https://github.com/openshift/router/pull/576)
* "OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests" [#575](https://github.com/openshift/router/pull/575)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Reject routes with SHA1 certs [#552](https://github.com/openshift/router/pull/552)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Upgrade Validation plugin for SHA1 certs [#555](https://github.com/openshift/router/pull/555)
* [OCPBUGS-32044](https://issues.redhat.com/browse/OCPBUGS-32044): Introduce 'idle-close-on-response' option for frontends [#573](https://github.com/openshift/router/pull/573)
* [OCPBUGS-22739](https://issues.redhat.com/browse/OCPBUGS-22739): Properly handle rewrite-target annotation [#534](https://github.com/openshift/router/pull/534)
* NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image [#567](https://github.com/openshift/router/pull/567)
* [OCPBUGS-30314](https://issues.redhat.com/browse/OCPBUGS-30314): Refactor logging in DoHTTPProbe to avoid serialisation errors [#566](https://github.com/openshift/router/pull/566)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Bump HaProxy to the latest version 2.8 [#563](https://github.com/openshift/router/pull/563)
* [TRT-1507](https://issues.redhat.com/browse/TRT-1507): Revert #551 "NE-1444: Upgrade OpenShift Router to HAProxy 2.8" [#561](https://github.com/openshift/router/pull/561)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Upgrade OpenShift Router to HAProxy 2.8 [#551](https://github.com/openshift/router/pull/551)
* [OCPBUGS-26539](https://issues.redhat.com/browse/OCPBUGS-26539): Reject routes with MD5 certs [#553](https://github.com/openshift/router/pull/553)
* [OCPBUGS-25546](https://issues.redhat.com/browse/OCPBUGS-25546): Updating ose-haproxy-router-base-container image to be consistent with ART [#550](https://github.com/openshift/router/pull/550)
* NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug [#544](https://github.com/openshift/router/pull/544)
* [OCPBUGS-25029](https://issues.redhat.com/browse/OCPBUGS-25029): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART [#547](https://github.com/openshift/router/pull/547)
* [NE-1446](https://issues.redhat.com/browse/NE-1446): Update to RHEL9 base image [#548](https://github.com/openshift/router/pull/548)
* [OCPBUGS-24859](https://issues.redhat.com/browse/OCPBUGS-24859): Updating ose-haproxy-router-base-container image to be consistent with ART [#546](https://github.com/openshift/router/pull/546)
* [OCPBUGS-23743](https://issues.redhat.com/browse/OCPBUGS-23743): Bump k8s.io/* packages to v0.28.3 [#542](https://github.com/openshift/router/pull/542)
* [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527)
* [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513)
* [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512)
* [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508)
* [Full changelog](https://github.com/openshift/router/compare/c3a2430c09ccea623bb8a599ce56a6e267009620...4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b2f5b1171deb4bbf754961c8b72ac31d2548c896)
* [OCPBUGS-27074](https://issues.redhat.com/browse/OCPBUGS-27074): UPSTREAM: <carry>: extend termination events [#1980](https://github.com/openshift/kubernetes/pull/1980)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1985](https://github.com/openshift/kubernetes/pull/1985)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#1972](https://github.com/openshift/kubernetes/pull/1972)
* UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries [#1978](https://github.com/openshift/kubernetes/pull/1978)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): bump openshift/library-go@e22d25a [#1967](https://github.com/openshift/kubernetes/pull/1967)
* [OCPBUGS-32934](https://issues.redhat.com/browse/OCPBUGS-32934): UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods [#1966](https://github.com/openshift/kubernetes/pull/1966)
* no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#1959](https://github.com/openshift/kubernetes/pull/1959)
* NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server [#1957](https://github.com/openshift/kubernetes/pull/1957)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1954](https://github.com/openshift/kubernetes/pull/1954)
* [OCPBUGS-32296](https://issues.redhat.com/browse/OCPBUGS-32296): Bump K8s api to 1.29.4 [#1947](https://github.com/openshift/kubernetes/pull/1947)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): UPSTREAM: <carry>: Fix garbage-collection for CRDs. [#1811](https://github.com/openshift/kubernetes/pull/1811)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): UPSTREAM: <carry>: create readyz event for kubeapi server [#1914](https://github.com/openshift/kubernetes/pull/1914)
* UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads [#1902](https://github.com/openshift/kubernetes/pull/1902)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator [#1904](https://github.com/openshift/kubernetes/pull/1904)
* NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL [#1944](https://github.com/openshift/kubernetes/pull/1944)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): bump library-go [#1941](https://github.com/openshift/kubernetes/pull/1941)
* [OCPBUGS-11933](https://issues.redhat.com/browse/OCPBUGS-11933): UPSTREAM: <drop>: bump apiserver-library-go [#1910](https://github.com/openshift/kubernetes/pull/1910)
* [OCPBUGS-31663](https://issues.redhat.com/browse/OCPBUGS-31663): UPSTREAM: <carry>: add management workload check for guaranteed qos [#1928](https://github.com/openshift/kubernetes/pull/1928)
* [OCPBUGS-30957](https://issues.redhat.com/browse/OCPBUGS-30957): Use the right feature gate when updating uncertain … [#1919](https://github.com/openshift/kubernetes/pull/1919)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1932](https://github.com/openshift/kubernetes/pull/1932)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Bump k8s 1.29.3 [#1925](https://github.com/openshift/kubernetes/pull/1925)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1929](https://github.com/openshift/kubernetes/pull/1929)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1924](https://github.com/openshift/kubernetes/pull/1924)
* [OCPBUGS-30767](https://issues.redhat.com/browse/OCPBUGS-30767): UPSTREAM: 124110: retry policy creation for CRD type checking E2E test [#1922](https://github.com/openshift/kubernetes/pull/1922)
* [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852)
* UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911)
* [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900)
* [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888)
* NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872)
* NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871)
* [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841)
* [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845)
* [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849)
* [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848)
* [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846)
* [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815)
* [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799)
* [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795)
* [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806)
* [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794)
* [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800)
* [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790)
* Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788)
* [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771)
* Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769)
* UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685)
* [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757)
* Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735)
* [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734)
* Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732)
* Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731)
* Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703)
* UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726)
* [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724)
* [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711)
* UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714)
* [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716)
* Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646)
* [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638)
* UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698)
* <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686)
* [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665)
* [Full changelog](https://github.com/openshift/kubernetes/compare/78524260502e5d93191acb29397a01db5df6136b...b2f5b1171deb4bbf754961c8b72ac31d2548c896)
### [hypershift](https://github.com/openshift/hypershift/tree/6946c3cc4654833ffc3db6299d5859b58b2f20a7)
* [OCPBUGS-35369](https://issues.redhat.com/browse/OCPBUGS-35369): OCPBUGS-35252: vendor: bump openshift/api [#4197](https://github.com/openshift/hypershift/pull/4197)
* NO-JIRA: hack: make the e2e script generic [#4198](https://github.com/openshift/hypershift/pull/4198)
* [OCPBUGS-35308](https://issues.redhat.com/browse/OCPBUGS-35308): fix router on 4.14 y-stream upgrade [#4194](https://github.com/openshift/hypershift/pull/4194)
* [HOSTEDCP-1715](https://issues.redhat.com/browse/HOSTEDCP-1715): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 [#4177](https://github.com/openshift/hypershift/pull/4177)
* [HOSTEDCP-1570](https://issues.redhat.com/browse/HOSTEDCP-1570): remove liveness and readiness probes using metrics endpoint [#4116](https://github.com/openshift/hypershift/pull/4116)
* [OCPBUGS-35052](https://issues.redhat.com/browse/OCPBUGS-35052): Add missing Tag permissions to cli role [#4173](https://github.com/openshift/hypershift/pull/4173)
* [OCPBUGS-34903](https://issues.redhat.com/browse/OCPBUGS-34903): Allow access to root-ca configmap in cluster-network-operator role [#4155](https://github.com/openshift/hypershift/pull/4155)
* [OCPBUGS-34575](https://issues.redhat.com/browse/OCPBUGS-34575): Rename machine-config operator CRD references [#4105](https://github.com/openshift/hypershift/pull/4105)
* [OCPBUGS-34759](https://issues.redhat.com/browse/OCPBUGS-34759): add AWS STS URL to OIDC provider audiences [#4134](https://github.com/openshift/hypershift/pull/4134)
* [HOSTEDCP-1688](https://issues.redhat.com/browse/HOSTEDCP-1688): Use operator namespace for openshift-config-managed-trusted-ca-bundle [#4117](https://github.com/openshift/hypershift/pull/4117)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak cipher [#4139](https://github.com/openshift/hypershift/pull/4139)
* [OCPBUGS-34773](https://issues.redhat.com/browse/OCPBUGS-34773): Fix disconnected metadata inspection for nodepool [#4137](https://github.com/openshift/hypershift/pull/4137)
* [OCPBUGS-34569](https://issues.redhat.com/browse/OCPBUGS-34569), [OCPBUGS-34602](https://issues.redhat.com/browse/OCPBUGS-34602): Backports that should go in together [#4114](https://github.com/openshift/hypershift/pull/4114)
* [OCPBUGS-34542](https://issues.redhat.com/browse/OCPBUGS-34542): Reconcile KAS endpoints and endpoint slice [#4096](https://github.com/openshift/hypershift/pull/4096)
* [OCPBUGS-34554](https://issues.redhat.com/browse/OCPBUGS-34554): Fixed audit-logs sigterm failing to terminate gracefully [#4090](https://github.com/openshift/hypershift/pull/4090)
* [OCPBUGS-34390](https://issues.redhat.com/browse/OCPBUGS-34390): Add TrustedBundles to OAS container [#4087](https://github.com/openshift/hypershift/pull/4087)
* [HOSTEDCP-1561](https://issues.redhat.com/browse/HOSTEDCP-1561): Move HCP Product CLI to STS [#4092](https://github.com/openshift/hypershift/pull/4092)
* [HOSTEDCP-1556](https://issues.redhat.com/browse/HOSTEDCP-1556): Support Priority based expander for cluster-autoscaler [#4068](https://github.com/openshift/hypershift/pull/4068)
* [OCPBUGS-34171](https://issues.redhat.com/browse/OCPBUGS-34171): Make active & backup Azure KMS containers use different --metrics-addr [#4079](https://github.com/openshift/hypershift/pull/4079)
* NO-JIRA: Bump library-go dependency [#4069](https://github.com/openshift/hypershift/pull/4069)
* [TRT-1672](https://issues.redhat.com/browse/TRT-1672): e2e: proceed with teardown even if dump fails [#4052](https://github.com/openshift/hypershift/pull/4052)
* NO-JIRA: Update RHTAP references [#4042](https://github.com/openshift/hypershift/pull/4042)
* [OCPBUGS-33729](https://issues.redhat.com/browse/OCPBUGS-33729): Do not ignore single placeholder pods for a specific hosted cluster [#4037](https://github.com/openshift/hypershift/pull/4037)
* [HOSTEDCP-1668](https://issues.redhat.com/browse/HOSTEDCP-1668): remove dns-operator leader-elect flags [#4038](https://github.com/openshift/hypershift/pull/4038)
* [OCPBUGS-33595](https://issues.redhat.com/browse/OCPBUGS-33595): Cluster sizing controller: do not error on not found HC [#4023](https://github.com/openshift/hypershift/pull/4023)
* [HOSTEDCP-1655](https://issues.redhat.com/browse/HOSTEDCP-1655): Don't Ignore SubnetID and Network Security Group ID flags when values are passed through [#4021](https://github.com/openshift/hypershift/pull/4021)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#3864](https://github.com/openshift/hypershift/pull/3864)
* [HOSTEDCP-1310](https://issues.redhat.com/browse/HOSTEDCP-1310): use kms images from payload [#3996](https://github.com/openshift/hypershift/pull/3996)
* [OCPBUGS-32257](https://issues.redhat.com/browse/OCPBUGS-32257): Restrict image registry overrides to control plane components [#3952](https://github.com/openshift/hypershift/pull/3952)
* [HOSTEDCP-1560](https://issues.redhat.com/browse/HOSTEDCP-1560): Create AWS STS Role for the hypershift/hcp cli [#4003](https://github.com/openshift/hypershift/pull/4003)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies [#4012](https://github.com/openshift/hypershift/pull/4012)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump CAPI dependencies [#4011](https://github.com/openshift/hypershift/pull/4011)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Fix nil dereference in clustersizingconfig validation [#4016](https://github.com/openshift/hypershift/pull/4016)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Fixed azure using incorrect kms socket [#3981](https://github.com/openshift/hypershift/pull/3981)
* [HOSTEDCP-1563](https://issues.redhat.com/browse/HOSTEDCP-1563): Refine the Azure API in the NodePool Spec [#4004](https://github.com/openshift/hypershift/pull/4004)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Autoscaler for non request serving nodes [#4007](https://github.com/openshift/hypershift/pull/4007)
* [HOSTEDCP-1557](https://issues.redhat.com/browse/HOSTEDCP-1557): Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config [#4006](https://github.com/openshift/hypershift/pull/4006)
* NO-JIRA: Remove CLI inspection of release image [#3548](https://github.com/openshift/hypershift/pull/3548)
* [OCPBUGS-33237](https://issues.redhat.com/browse/OCPBUGS-33237): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#3999](https://github.com/openshift/hypershift/pull/3999)
* [OCPBUGS-26762](https://issues.redhat.com/browse/OCPBUGS-26762): Disable DNS resolving for CNO [#3986](https://github.com/openshift/hypershift/pull/3986)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Set arch to ppc64le within PowerVS platform func [#4002](https://github.com/openshift/hypershift/pull/4002)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Support ppc64le arch for Agent and PowerVS platform [#3979](https://github.com/openshift/hypershift/pull/3979)
* [HOSTEDCP-1544](https://issues.redhat.com/browse/HOSTEDCP-1544): Allow user to specify subnet ID for Hosted Cluster & NodePool Creation [#3945](https://github.com/openshift/hypershift/pull/3945)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Set time out for external snapshotter on kubevirt csi driver [#3968](https://github.com/openshift/hypershift/pull/3968)
* [HOSTEDCP-1523](https://issues.redhat.com/browse/HOSTEDCP-1523): Bump k8s to v0.29.3 [#3878](https://github.com/openshift/hypershift/pull/3878)
* [OCPBUGS-25012](https://issues.redhat.com/browse/OCPBUGS-25012): Updating ose-hypershift-container image to be consistent with ART [#3303](https://github.com/openshift/hypershift/pull/3303)
* [OCPBUGS-33203](https://issues.redhat.com/browse/OCPBUGS-33203), [OCPBUGS-33274](https://issues.redhat.com/browse/OCPBUGS-33274): Autoscaler: scale down unused machinesets [#3988](https://github.com/openshift/hypershift/pull/3988)
* NO-JIRA: chore(deps): update rhtap references [#3973](https://github.com/openshift/hypershift/pull/3973)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Add operator scoping support to nodepool controller [#3928](https://github.com/openshift/hypershift/pull/3928)
* [OCPBUGS-33132](https://issues.redhat.com/browse/OCPBUGS-33132): Restore ingresscontroller rbac [#3965](https://github.com/openshift/hypershift/pull/3965)
* NO-JIRA: sizing: add logging for what we're doing [#3961](https://github.com/openshift/hypershift/pull/3961)
* chore(deps): update rhtap references [#3966](https://github.com/openshift/hypershift/pull/3966)
* NO-JIRA: Minor doc updates to creating Azure HC on AKS [#3964](https://github.com/openshift/hypershift/pull/3964)
* [OCPBUGS-29110](https://issues.redhat.com/browse/OCPBUGS-29110): Reconcile over ICSP/IDMS [#3933](https://github.com/openshift/hypershift/pull/3933)
* [OCPBUGS-33101](https://issues.redhat.com/browse/OCPBUGS-33101): Fix nil pointer deref when effects not specified in CSC [#3959](https://github.com/openshift/hypershift/pull/3959)
* [OCPBUGS-32110](https://issues.redhat.com/browse/OCPBUGS-32110): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3906](https://github.com/openshift/hypershift/pull/3906)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3956](https://github.com/openshift/hypershift/pull/3956)
* [OCPBUGS-31398](https://issues.redhat.com/browse/OCPBUGS-31398): Recycler-pod image now points to the OCP Payload reference [#3901](https://github.com/openshift/hypershift/pull/3901)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Support Azure KMS key rotation [#3940](https://github.com/openshift/hypershift/pull/3940)
* [CNV-40687](https://issues.redhat.com/browse/CNV-40687): Detect machine and cluster-network cidr collision [#3880](https://github.com/openshift/hypershift/pull/3880)
* [OCPBUGS-32930](https://issues.redhat.com/browse/OCPBUGS-32930): Allow specifying resource requests per cluster size [#3941](https://github.com/openshift/hypershift/pull/3941)
* [OCPBUGS-32760](https://issues.redhat.com/browse/OCPBUGS-32760): Request serving scheduler: omit deleting nodes [#3929](https://github.com/openshift/hypershift/pull/3929)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): fix setting replicas on autoscaler [#3947](https://github.com/openshift/hypershift/pull/3947)
* [OCPBUGS-32378](https://issues.redhat.com/browse/OCPBUGS-32378): Ensure placeholder deployments are deleted [#3931](https://github.com/openshift/hypershift/pull/3931)
* [OCPBUGS-32255](https://issues.redhat.com/browse/OCPBUGS-32255): Remove kube-scheduler readiness probe [#3889](https://github.com/openshift/hypershift/pull/3889)
* [HOSTEDCP-1484](https://issues.redhat.com/browse/HOSTEDCP-1484): Disaster recovery documentation with OADP [#3950](https://github.com/openshift/hypershift/pull/3950)
* [OCPBUGS-32492](https://issues.redhat.com/browse/OCPBUGS-32492): Set ImportMode for catalog [#3937](https://github.com/openshift/hypershift/pull/3937)
* [HOSTEDCP-1522](https://issues.redhat.com/browse/HOSTEDCP-1522): Add API definitions and CEL for AzurePlatformSpec vars [#3879](https://github.com/openshift/hypershift/pull/3879)
* NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 [#3821](https://github.com/openshift/hypershift/pull/3821)
* chore(deps): update rhtap references (main) [#3943](https://github.com/openshift/hypershift/pull/3943)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Ignore subnet annotations for control plane load balancers [#3944](https://github.com/openshift/hypershift/pull/3944)
* [OCPBUGS-32759](https://issues.redhat.com/browse/OCPBUGS-32759): Fix invalid node selector in autosizing placeholder [#3930](https://github.com/openshift/hypershift/pull/3930)
* [HOSTEDCP-1044](https://issues.redhat.com/browse/HOSTEDCP-1044): Add NodePool Size/Replicas to Telemetry [#3593](https://github.com/openshift/hypershift/pull/3593)
* NO-JIRA: remove obsolete konnectivity image code [#3932](https://github.com/openshift/hypershift/pull/3932)
* [HOSTEDCP-1219](https://issues.redhat.com/browse/HOSTEDCP-1219): Add arch & multi-arch flags to HCP CLI [#3926](https://github.com/openshift/hypershift/pull/3926)
* NO-JIRA: reduce autoscaling test memory requests [#3938](https://github.com/openshift/hypershift/pull/3938)
* NO-JIRA: chore(deps): update rhtap references [#3934](https://github.com/openshift/hypershift/pull/3934)
* [ACM-11259](https://issues.redhat.com/browse/ACM-11259): Add mapping documentation for KubeVirt CSI driver snaphotting [#3925](https://github.com/openshift/hypershift/pull/3925)
* [OCPBUGS-32496](https://issues.redhat.com/browse/OCPBUGS-32496): Controller to assist autoscaling for placeholder nodes [#3922](https://github.com/openshift/hypershift/pull/3922)
* Revert "Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters"" [#3895](https://github.com/openshift/hypershift/pull/3895)
* chore(deps): update rhtap references [#3919](https://github.com/openshift/hypershift/pull/3919)
* [OCPBUGS-32487](https://issues.redhat.com/browse/OCPBUGS-32487): Fix OLM intilization args [#3918](https://github.com/openshift/hypershift/pull/3918)
* [OCPNODE-2096](https://issues.redhat.com/browse/OCPNODE-2096): Add ClusterImagePolicy to the list of valid config manifests [#3894](https://github.com/openshift/hypershift/pull/3894)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): KubeVirt, Add snapshot side car and volumesnapshot class [#3640](https://github.com/openshift/hypershift/pull/3640)
* NO-ISSUE: placeholders: ignore auto-sizer placeholders [#3877](https://github.com/openshift/hypershift/pull/3877)
* [OCPBUGS-32228](https://issues.redhat.com/browse/OCPBUGS-32228): Fix failure to create a second hostedcluster in the same namespace [#3900](https://github.com/openshift/hypershift/pull/3900)
* [OCPBUGS-32248](https://issues.redhat.com/browse/OCPBUGS-32248): Replace periods with commas in subnet label value [#3885](https://github.com/openshift/hypershift/pull/3885)
* chore(deps): update rhtap references [#3886](https://github.com/openshift/hypershift/pull/3886)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): set HostPath.Type on volumesource in CloudNodeManagerD… [#3892](https://github.com/openshift/hypershift/pull/3892)
* NO-JIRA: fixed e2e teardown failing the outer test instead of subtest [#3891](https://github.com/openshift/hypershift/pull/3891)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): feat(api): Add ingress-controller-load-balancer-scope annotation [#3848](https://github.com/openshift/hypershift/pull/3848)
* NO-JIRA: remove ovnkube-control-plane from expected component token m… [#3850](https://github.com/openshift/hypershift/pull/3850)
* [CNV-40622](https://issues.redhat.com/browse/CNV-40622): Docs: Avoid cidr Collisions b/w Infra &Guest cluster [#3863](https://github.com/openshift/hypershift/pull/3863)
* NO-JIRA: Disable kubevirt-csi crash detection in e2e [#3896](https://github.com/openshift/hypershift/pull/3896)
* Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters" [#3890](https://github.com/openshift/hypershift/pull/3890)
* [HOSTEDCP-1465](https://issues.redhat.com/browse/HOSTEDCP-1465): Create HCPs with externalDNS on AKS Clusters [#3688](https://github.com/openshift/hypershift/pull/3688)
* chore(deps): update rhtap references [#3872](https://github.com/openshift/hypershift/pull/3872)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric [#3697](https://github.com/openshift/hypershift/pull/3697)
* NO-ISSUE: *: use the api package constant for the size label [#3876](https://github.com/openshift/hypershift/pull/3876)
* NO-JIRA: bump capk ci image [#3830](https://github.com/openshift/hypershift/pull/3830)
* NO-JIRA: chore(deps): update rhtap references (main) [#3867](https://github.com/openshift/hypershift/pull/3867)
* [OCPBUGS-29466](https://issues.redhat.com/browse/OCPBUGS-29466): Fix ICSP and IDMS inclusion as registriesOverrides [#3862](https://github.com/openshift/hypershift/pull/3862)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set RUN_AS_USER if mgmt cluster doesn't have SCC [#3819](https://github.com/openshift/hypershift/pull/3819)
* [OCPBUGS-29494](https://issues.redhat.com/browse/OCPBUGS-29494): Fix disconnected metadata inspection [#3860](https://github.com/openshift/hypershift/pull/3860)
* [OCPBUGS-31012](https://issues.redhat.com/browse/OCPBUGS-31012): Disable audit-log container in kas when profile is None [#3765](https://github.com/openshift/hypershift/pull/3765)
* NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster [#3854](https://github.com/openshift/hypershift/pull/3854)
* NO-JIRA: update private cluster IAM policy doc [#3851](https://github.com/openshift/hypershift/pull/3851)
* NO-JIRA: chore(deps): update rhtap references (main) [#3856](https://github.com/openshift/hypershift/pull/3856)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): disable autoscaler when no nodepool requires it [#3846](https://github.com/openshift/hypershift/pull/3846)
* NO-JIRA: Document additional known issues for the disconnected scenario [#3611](https://github.com/openshift/hypershift/pull/3611)
* NO-JIRA: Update RHTAP references (main) [#3834](https://github.com/openshift/hypershift/pull/3834)
* [OCPBUGS-29391](https://issues.redhat.com/browse/OCPBUGS-29391): Add new permission required in CAPA [#3779](https://github.com/openshift/hypershift/pull/3779)
* [CNF-11885](https://issues.redhat.com/browse/CNF-11885): nto: add events resources under operator `Role` [#3827](https://github.com/openshift/hypershift/pull/3827)
* [OCPBUGS-31444](https://issues.redhat.com/browse/OCPBUGS-31444): use dnsPolicy: Default for konnectivity-agent in data plane [#3810](https://github.com/openshift/hypershift/pull/3810)
* NO-JIRA: docs: fixing wrong key name [#3833](https://github.com/openshift/hypershift/pull/3833)
* NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… [#3837](https://github.com/openshift/hypershift/pull/3837)
* [OCPBUGS-31725](https://issues.redhat.com/browse/OCPBUGS-31725): include hostnetwork SCC CPO role for 4.13 and earlier [#3838](https://github.com/openshift/hypershift/pull/3838)
* [HOSTEDCP-1511](https://issues.redhat.com/browse/HOSTEDCP-1511): enable and document kubevirt custom default network [#3832](https://github.com/openshift/hypershift/pull/3832)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support annotation scoping for hostedcluster resources [#3702](https://github.com/openshift/hypershift/pull/3702)
* [OCPBUGS-31415](https://issues.redhat.com/browse/OCPBUGS-31415): update desired image even when HCP doesn't exist yet [#3829](https://github.com/openshift/hypershift/pull/3829)
* NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. [#2707](https://github.com/openshift/hypershift/pull/2707)
* [OCPBUGS-31585](https://issues.redhat.com/browse/OCPBUGS-31585): disable http2 for ignition server and proxy [#3817](https://github.com/openshift/hypershift/pull/3817)
* [OTA-1211](https://issues.redhat.com/browse/OTA-1211): api/v1beta1/hostedcluster_types: Add spec.updateService [#3576](https://github.com/openshift/hypershift/pull/3576)
* [HOSTEDCP-1365](https://issues.redhat.com/browse/HOSTEDCP-1365): kubevirt, Generate kccm lb endpointslices [#3528](https://github.com/openshift/hypershift/pull/3528)
* NO-JIRA: Add --auto-repair flag to `hcp create nodepool` [#3163](https://github.com/openshift/hypershift/pull/3163)
* NO-JIRA: Set control plane to HA by default [#3788](https://github.com/openshift/hypershift/pull/3788)
* NO-JIRA: Fix docs commands related to Azure ephemeral OS disks [#3809](https://github.com/openshift/hypershift/pull/3809)
* Update RHTAP references [#3814](https://github.com/openshift/hypershift/pull/3814)
* NO-JIRA: Documentation overview of HCP KubeVirt Storage [#3763](https://github.com/openshift/hypershift/pull/3763)
* [OCPBUGS-31465](https://issues.redhat.com/browse/OCPBUGS-31465): remove max function usage from deicated request serving nodes [#3815](https://github.com/openshift/hypershift/pull/3815)
* [OCPBUGS-31106](https://issues.redhat.com/browse/OCPBUGS-31106): Reduce log file size for hypershift apiservers [#3781](https://github.com/openshift/hypershift/pull/3781)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): Enable TestNodePool and CreateCluster tests on Azure [#3732](https://github.com/openshift/hypershift/pull/3732)
* [OCPBUGS-31319](https://issues.redhat.com/browse/OCPBUGS-31319): copy issuerCertificateAuthority configmap into HC openshift-config [#3799](https://github.com/openshift/hypershift/pull/3799)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Request serving node scheduler that uses HC size label [#3776](https://github.com/openshift/hypershift/pull/3776)
* [OCPBUGS-31076](https://issues.redhat.com/browse/OCPBUGS-31076): Support other azure clouds [#3804](https://github.com/openshift/hypershift/pull/3804)
* [OCPBUGS-31110](https://issues.redhat.com/browse/OCPBUGS-31110): Fix empty RHCOSImage error when creating Azure Infrastructure [#3782](https://github.com/openshift/hypershift/pull/3782)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104): Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server [#3797](https://github.com/openshift/hypershift/pull/3797)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): fix race between ignition payload generation and MCS configmap update [#3795](https://github.com/openshift/hypershift/pull/3795)
* NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools [#3752](https://github.com/openshift/hypershift/pull/3752)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 [#3710](https://github.com/openshift/hypershift/pull/3710)
* [OCPBUGS-31089](https://issues.redhat.com/browse/OCPBUGS-31089): Fix empty resourceGroupName error when deleting Azure infra [#3775](https://github.com/openshift/hypershift/pull/3775)
* [OCPBUGS-31090](https://issues.redhat.com/browse/OCPBUGS-31090): Fix empty subnet name error when creating Azure infrastructure [#3778](https://github.com/openshift/hypershift/pull/3778)
* [OCPBUGS-31263](https://issues.redhat.com/browse/OCPBUGS-31263): Add missing PodSecurityViolation alert [#3733](https://github.com/openshift/hypershift/pull/3733)
* [OCPBUGS-31118](https://issues.redhat.com/browse/OCPBUGS-31118): fix(ignition): Fix priority class override [#3784](https://github.com/openshift/hypershift/pull/3784)
* [OCPBUGS-31088](https://issues.redhat.com/browse/OCPBUGS-31088): Fix loopvar issue [#3770](https://github.com/openshift/hypershift/pull/3770)
* Update RHTAP references [#3790](https://github.com/openshift/hypershift/pull/3790)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104), [HOSTEDCP-1105](https://issues.redhat.com/browse/HOSTEDCP-1105): Validate multi-arch aspects in an AWS Hosted Cluster [#3769](https://github.com/openshift/hypershift/pull/3769)
* [HOSTEDCP-1501](https://issues.redhat.com/browse/HOSTEDCP-1501): Create default ClusterSizingConfig CR on start [#3787](https://github.com/openshift/hypershift/pull/3787)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3789](https://github.com/openshift/hypershift/pull/3789)
* [OCPBUGS-30930](https://issues.redhat.com/browse/OCPBUGS-30930): Add CEL validation for NodePool autoScaling / replicas [#3786](https://github.com/openshift/hypershift/pull/3786)
* [OCPBUGS-31102](https://issues.redhat.com/browse/OCPBUGS-31102): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3780](https://github.com/openshift/hypershift/pull/3780)
* NO-JIRA: Adding Disable PKI Reconciliation annotation as an option [#2989](https://github.com/openshift/hypershift/pull/2989)
* [OCPBUGS-30991](https://issues.redhat.com/browse/OCPBUGS-30991): external OIDC: fix certificateAuthority field in structured auth config [#3773](https://github.com/openshift/hypershift/pull/3773)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): Add install flag to enable/disable size tagging [#3766](https://github.com/openshift/hypershift/pull/3766)
* [OCPBUGS-30968](https://issues.redhat.com/browse/OCPBUGS-30968): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3760](https://github.com/openshift/hypershift/pull/3760)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add managed service constants to HyperShift API [#3762](https://github.com/openshift/hypershift/pull/3762)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support subnet labels separated by periods [#3767](https://github.com/openshift/hypershift/pull/3767)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: wire up placeholder pods for sizes [#3749](https://github.com/openshift/hypershift/pull/3749)
* NO-JIRA: Increase stability in autoscaled environments [#3757](https://github.com/openshift/hypershift/pull/3757)
* NO-JIRA: Bump HO read budget in e2e to 6000 [#3761](https://github.com/openshift/hypershift/pull/3761)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3743](https://github.com/openshift/hypershift/pull/3743)
* [HOSTEDCP-1467](https://issues.redhat.com/browse/HOSTEDCP-1467): ARO HCP - Add ability to specify subnet at nodepool level [#3748](https://github.com/openshift/hypershift/pull/3748)
* NO-JIRA: Update RHTAP references [#3753](https://github.com/openshift/hypershift/pull/3753)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support specifying AWS LB subnets [#3746](https://github.com/openshift/hypershift/pull/3746)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add ability to set managed service type in HO [#3736](https://github.com/openshift/hypershift/pull/3736)
* NO-ISSUE: hypershift-operator: react to hosted cluster changes [#3735](https://github.com/openshift/hypershift/pull/3735)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: add a controller for t-shirt sizing [#3686](https://github.com/openshift/hypershift/pull/3686)
* [HOSTEDCP-929](https://issues.redhat.com/browse/HOSTEDCP-929): Add nodepool annotation to allow requesting IMDSv2 [#3584](https://github.com/openshift/hypershift/pull/3584)
* NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget [#3745](https://github.com/openshift/hypershift/pull/3745)
* [OCPBUGS-30320](https://issues.redhat.com/browse/OCPBUGS-30320): speed up HCP rollout durations [#3734](https://github.com/openshift/hypershift/pull/3734)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set env var when the mgmt cluster supports SCC [#3701](https://github.com/openshift/hypershift/pull/3701)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3742](https://github.com/openshift/hypershift/pull/3742)
* NO-JIRA: Update RHTAP references [#3737](https://github.com/openshift/hypershift/pull/3737)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): consider nigthly images in payoad version check [#3727](https://github.com/openshift/hypershift/pull/3727)
* [OCPBUGS-28634](https://issues.redhat.com/browse/OCPBUGS-28634): Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES [#3687](https://github.com/openshift/hypershift/pull/3687)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Support additional node selectors for request serving nodes [#3729](https://github.com/openshift/hypershift/pull/3729)
* Revert "HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation" [#3731](https://github.com/openshift/hypershift/pull/3731)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): honor HC image configuration [#3714](https://github.com/openshift/hypershift/pull/3714)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3689](https://github.com/openshift/hypershift/pull/3689)
* [OCPBUGS-30769](https://issues.redhat.com/browse/OCPBUGS-30769): include node local client loadbalancer address in kube-apiserver signing ips [#3699](https://github.com/openshift/hypershift/pull/3699)
* NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline [#3728](https://github.com/openshift/hypershift/pull/3728)
* [HOSTEDCP-1460](https://issues.redhat.com/browse/HOSTEDCP-1460): Remove resource limits on azure-cloud-node-manager [#3725](https://github.com/openshift/hypershift/pull/3725)
* [HOSTEDCP-1479](https://issues.redhat.com/browse/HOSTEDCP-1479): Update IBM/networking-go-sdk package [#3722](https://github.com/openshift/hypershift/pull/3722)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#3718](https://github.com/openshift/hypershift/pull/3718)
* NO-JIRA: Fixes Dependabot PR #3712 [#3716](https://github.com/openshift/hypershift/pull/3716)
* [HOSTEDCP-1466](https://issues.redhat.com/browse/HOSTEDCP-1466): support/metrics: don't filter HCCO metrics [#3715](https://github.com/openshift/hypershift/pull/3715)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): ignition-server/controllers: drop `MCSIgnitionProvider` [#3709](https://github.com/openshift/hypershift/pull/3709)
* [HOSTEDCP-1469](https://issues.redhat.com/browse/HOSTEDCP-1469): Set GOMEMLIMIT annotation based on request serving node label [#3708](https://github.com/openshift/hypershift/pull/3708)
* [OCPBUGS-30574](https://issues.redhat.com/browse/OCPBUGS-30574): Update OLM Default Catalog Sources to 4.16 on main [#3707](https://github.com/openshift/hypershift/pull/3707)
* chore(deps): update rhtap references [#3704](https://github.com/openshift/hypershift/pull/3704)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): Use cluster-config-operator for 4.14 payload [#3685](https://github.com/openshift/hypershift/pull/3685)
* NO-JIRA: Dependabot#3659 [#3665](https://github.com/openshift/hypershift/pull/3665)
* Revert "NO-JIRA: test/e2e: temporarily skip NTO machineconfig test" [#3700](https://github.com/openshift/hypershift/pull/3700)
* NO-JIRA: cleanup: nilness check failures [#3698](https://github.com/openshift/hypershift/pull/3698)
* [HOSTEDCP-1464](https://issues.redhat.com/browse/HOSTEDCP-1464): Add pull secret to install CLI & create k8s secret [#3682](https://github.com/openshift/hypershift/pull/3682)
* [OCPBUGS-30060](https://issues.redhat.com/browse/OCPBUGS-30060): Set OPERATOR_IMAGE environment variable [#3667](https://github.com/openshift/hypershift/pull/3667)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Use correct return error when destroying AWS SG [#3661](https://github.com/openshift/hypershift/pull/3661)
* [OCPBUGS-30301](https://issues.redhat.com/browse/OCPBUGS-30301): [kubevirt] Fix virt-launcher netpol to allow missing access [#3680](https://github.com/openshift/hypershift/pull/3680)
* [OCPBUGS-30124](https://issues.redhat.com/browse/OCPBUGS-30124): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3678](https://github.com/openshift/hypershift/pull/3678)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3658](https://github.com/openshift/hypershift/pull/3658)
* NO-JIRA: Bump the golang-dependencies group with 1 update [#3657](https://github.com/openshift/hypershift/pull/3657)
* chore(deps): update rhtap references [#3674](https://github.com/openshift/hypershift/pull/3674)
* NO-JIRA: test/e2e: temporarily skip NTO machineconfig test [#3683](https://github.com/openshift/hypershift/pull/3683)
* NO-JIRA: chore(deps): update rhtap references [#3671](https://github.com/openshift/hypershift/pull/3671)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3605](https://github.com/openshift/hypershift/pull/3605)
* [OCPBUGS-30102](https://issues.redhat.com/browse/OCPBUGS-30102): Support to disable machine management components [#3570](https://github.com/openshift/hypershift/pull/3570)
* NO-JIRA: Minor cleanup of Azure create cluster document [#3663](https://github.com/openshift/hypershift/pull/3663)
* NO-JIRA: chore(deps): update rhtap references [#3650](https://github.com/openshift/hypershift/pull/3650)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): test: add a test for invalid CSRs [#3612](https://github.com/openshift/hypershift/pull/3612)
* NO-JIRA: test: skip CCO in pod crash check [#3652](https://github.com/openshift/hypershift/pull/3652)
* [OCPBUGS-29773](https://issues.redhat.com/browse/OCPBUGS-29773): set Konnectivity cipher suites [#3618](https://github.com/openshift/hypershift/pull/3618)
* [OCPBUGS-30030](https://issues.redhat.com/browse/OCPBUGS-30030): rollout kas on auth config change [#3647](https://github.com/openshift/hypershift/pull/3647)
* NO-JIRA: test: increase CPO mutate budget [#3649](https://github.com/openshift/hypershift/pull/3649)
* NO-JIRA: test: debug certificates on unauthz error [#3642](https://github.com/openshift/hypershift/pull/3642)
* NO-JIRA: Remove replace statements [#3631](https://github.com/openshift/hypershift/pull/3631)
* NO-JIRA: DEPENDABOT#3613 [#3617](https://github.com/openshift/hypershift/pull/3617)
* NO-JIRA: chore(deps): update rhtap references [#3638](https://github.com/openshift/hypershift/pull/3638)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates [#3636](https://github.com/openshift/hypershift/pull/3636)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3634](https://github.com/openshift/hypershift/pull/3634)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Skip SG deletion if it has dependancy violation [#3622](https://github.com/openshift/hypershift/pull/3622)
* NO-JIRA: Update RHTAP references [#3621](https://github.com/openshift/hypershift/pull/3621)
* NO-JIRA: Update RHTAP references (main) [#3623](https://github.com/openshift/hypershift/pull/3623)
* [OCPBUGS-23457](https://issues.redhat.com/browse/OCPBUGS-23457): Switch to use service endpoint for Konnectivity [#3627](https://github.com/openshift/hypershift/pull/3627)
* [OCPBUGS-27180](https://issues.redhat.com/browse/OCPBUGS-27180): Update the oauth API server's shutdown delay duration [#3608](https://github.com/openshift/hypershift/pull/3608)
* NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) [#3600](https://github.com/openshift/hypershift/pull/3600)
* [OCPBUGS-29855](https://issues.redhat.com/browse/OCPBUGS-29855): feat(ho): Add flag for dedicated request serving isolation [#3601](https://github.com/openshift/hypershift/pull/3601)
* [OCPBUGS-28607](https://issues.redhat.com/browse/OCPBUGS-28607): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3477](https://github.com/openshift/hypershift/pull/3477)
* NO-JIRA: adjust pdb for oauth-apiserver [#3619](https://github.com/openshift/hypershift/pull/3619)
* [OCPBUGS-29645](https://issues.redhat.com/browse/OCPBUGS-29645): control-plane-pki-operator: fix CA used for SRE client credentials [#3615](https://github.com/openshift/hypershift/pull/3615)
* [HOSTEDCP-1424](https://issues.redhat.com/browse/HOSTEDCP-1424): ARO HCP Support Disabling Outbound SNAT [#3583](https://github.com/openshift/hypershift/pull/3583)
* NO-JIRA: always set minAvailable on PDBs to 1 [#3616](https://github.com/openshift/hypershift/pull/3616)
* [OCPBUGS-29723](https://issues.redhat.com/browse/OCPBUGS-29723): CLI: create nodepool aws - remove sg requirement [#3614](https://github.com/openshift/hypershift/pull/3614)
* NO-JIRA: Bump the misc-dependencies group with 15 updates [#3609](https://github.com/openshift/hypershift/pull/3609)
* NO-JIRA: Ignore kubectl version mistmaches in Component Versions [#3575](https://github.com/openshift/hypershift/pull/3575)
* NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates [#3598](https://github.com/openshift/hypershift/pull/3598)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Add an SCC for validation pods with Cilium SDN [#3602](https://github.com/openshift/hypershift/pull/3602)
* NO-JIRA: chore(deps): update rhtap references [#3603](https://github.com/openshift/hypershift/pull/3603)
* [HOSTEDCP-1411](https://issues.redhat.com/browse/HOSTEDCP-1411): Add capability to specify additional tags to azure resource… [#3490](https://github.com/openshift/hypershift/pull/3490)
* NO-JIRA: chore(deps): update rhtap references [#3590](https://github.com/openshift/hypershift/pull/3590)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3574](https://github.com/openshift/hypershift/pull/3574)
* [HOSTEDCP-1428](https://issues.redhat.com/browse/HOSTEDCP-1428): hcco: report node count on HCPs [#3557](https://github.com/openshift/hypershift/pull/3557)
* [HOSTEDCP-1436](https://issues.redhat.com/browse/HOSTEDCP-1436): Make nodepool.spec.aws.subnet required [#3581](https://github.com/openshift/hypershift/pull/3581)
* [OCPBUGS-29586](https://issues.redhat.com/browse/OCPBUGS-29586): use 2040 for apiserver svc in IBM provider [#3569](https://github.com/openshift/hypershift/pull/3569)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): Preserve container resources for more hosted control plane components [#3120](https://github.com/openshift/hypershift/pull/3120)
* NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements [#3585](https://github.com/openshift/hypershift/pull/3585)
* NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector [#3464](https://github.com/openshift/hypershift/pull/3464)
* NO-JIRA: remove dead code from kas config [#3578](https://github.com/openshift/hypershift/pull/3578)
* [OCPBUGS-29115](https://issues.redhat.com/browse/OCPBUGS-29115): Default NodeUpgradeType on day2 nodepool creation [#3572](https://github.com/openshift/hypershift/pull/3572)
* Revert "CNV-36608: Enable InPlace NodePool upgrade test for kubevirt" [#3547](https://github.com/openshift/hypershift/pull/3547)
* NO-JIRA: Update RHTAP references [#3577](https://github.com/openshift/hypershift/pull/3577)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Added docs to get other sdn providers deployed with agent provider [#3405](https://github.com/openshift/hypershift/pull/3405)
* Update RHTAP references [#3568](https://github.com/openshift/hypershift/pull/3568)
* [CNF-6516](https://issues.redhat.com/browse/CNF-6516): NTO: Enable PerformanceProfile [#1782](https://github.com/openshift/hypershift/pull/1782)
* [OCPBUGS-29209](https://issues.redhat.com/browse/OCPBUGS-29209): hypershift-operator: don't create PKI rbac when disabled [#3544](https://github.com/openshift/hypershift/pull/3544)
* [OCPBUGS-29104](https://issues.redhat.com/browse/OCPBUGS-29104): control-plane-pki-operator: add a signer for SRE break-glass [#3542](https://github.com/openshift/hypershift/pull/3542)
* NO-ISSUE: test: wait longer for certificate signing, revocation [#3560](https://github.com/openshift/hypershift/pull/3560)
* NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues [#3562](https://github.com/openshift/hypershift/pull/3562)
* NO-JIRA: Developer namespace template for CI clusters [#3561](https://github.com/openshift/hypershift/pull/3561)
* [HOSTEDCP-1419](https://issues.redhat.com/browse/HOSTEDCP-1419): Always include AWS default security group in worker security groups [#3527](https://github.com/openshift/hypershift/pull/3527)
* [HOSTEDCP-1407](https://issues.redhat.com/browse/HOSTEDCP-1407): Add steps for seting up azure CI cluster [#3545](https://github.com/openshift/hypershift/pull/3545)
* Update RHTAP references (main) [#3546](https://github.com/openshift/hypershift/pull/3546)
* [HOSTEDCP-1420](https://issues.redhat.com/browse/HOSTEDCP-1420): Set a fixed minimum supported version [#3525](https://github.com/openshift/hypershift/pull/3525)
* NO-JIRA: Update RHTAP references [#3518](https://github.com/openshift/hypershift/pull/3518)
* [OCPBUGS-29103](https://issues.redhat.com/browse/OCPBUGS-29103): control-plane-pki-operator: validate CN for CSR [#3538](https://github.com/openshift/hypershift/pull/3538)
* NO-JIRA: stevekuznetsov approver on CPPO and integration tests [#3540](https://github.com/openshift/hypershift/pull/3540)
* NO-JIRA: Fix issue with release note tool [#3429](https://github.com/openshift/hypershift/pull/3429)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Hypershift API separation [#3390](https://github.com/openshift/hypershift/pull/3390)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): control-plane-pki-operator: add a revocation controller [#3339](https://github.com/openshift/hypershift/pull/3339)
* [CNV-36608](https://issues.redhat.com/browse/CNV-36608): Enable InPlace NodePool upgrade test for kubevirt [#3517](https://github.com/openshift/hypershift/pull/3517)
* [OCPBUGS-27282](https://issues.redhat.com/browse/OCPBUGS-27282): Make ControllerAvailabilityPolicy immutable [#3513](https://github.com/openshift/hypershift/pull/3513)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3512](https://github.com/openshift/hypershift/pull/3512)
* [OCPBUGS-28659](https://issues.redhat.com/browse/OCPBUGS-28659): Add ValidatingAdmissionPolicy to KAS config [#3488](https://github.com/openshift/hypershift/pull/3488)
* [OCPBUGS-28741](https://issues.redhat.com/browse/OCPBUGS-28741): Fix default release image lookup [#3450](https://github.com/openshift/hypershift/pull/3450)
* NO-JIRA: Add app labels to KubeVirt CCM component [#3510](https://github.com/openshift/hypershift/pull/3510)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3491](https://github.com/openshift/hypershift/pull/3491)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3503](https://github.com/openshift/hypershift/pull/3503)
* [OCPBUGS-28625](https://issues.redhat.com/browse/OCPBUGS-28625): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3511](https://github.com/openshift/hypershift/pull/3511)
* NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools [#3505](https://github.com/openshift/hypershift/pull/3505)
* Update RHTAP references (main) [#3508](https://github.com/openshift/hypershift/pull/3508)
* [OCPBUGS-28763](https://issues.redhat.com/browse/OCPBUGS-28763): Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used [#3494](https://github.com/openshift/hypershift/pull/3494)
* [OCPBUGS-28601](https://issues.redhat.com/browse/OCPBUGS-28601): Remove webhook validations that introduce resource ordering [#3484](https://github.com/openshift/hypershift/pull/3484)
* NO-JIRA: manifests: Skip pod anti affinity for nil labels [#3507](https://github.com/openshift/hypershift/pull/3507)
* [MULTIARCH-3882](https://issues.redhat.com/browse/MULTIARCH-3882): Support PER solution for powervs platform via transit gateway [#3277](https://github.com/openshift/hypershift/pull/3277)
* [HOSTEDCP-1408](https://issues.redhat.com/browse/HOSTEDCP-1408): Update CAPZ Identity Type to Service Principal [#3501](https://github.com/openshift/hypershift/pull/3501)
* [OCPBUGS-27161](https://issues.redhat.com/browse/OCPBUGS-27161): reflect NodePool replica count nil in status [#3472](https://github.com/openshift/hypershift/pull/3472)
* NO-JIRA: Fix dependabot pr 3414 [#3453](https://github.com/openshift/hypershift/pull/3453)
* NO-JIRA: kubevirt, e2e, Add additional network test [#3449](https://github.com/openshift/hypershift/pull/3449)
* NO-JIRA: remove PrivateIngressController cleanup [#3489](https://github.com/openshift/hypershift/pull/3489)
* [HOSTEDCP-1373](https://issues.redhat.com/browse/HOSTEDCP-1373): ARO HCP - Add capability for Azure VMs to be created with ephemeral disks [#3483](https://github.com/openshift/hypershift/pull/3483)
* NO-JIRA: contrib: add code for aws-tag-lb-service-webhook [#3493](https://github.com/openshift/hypershift/pull/3493)
* NO-JIRA: Bump the misc-dependencies group with 3 updates [#3486](https://github.com/openshift/hypershift/pull/3486)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3469](https://github.com/openshift/hypershift/pull/3469)
* [HOSTEDCP-1364](https://issues.redhat.com/browse/HOSTEDCP-1364): kubevirt, use selector less services for ingress [#3343](https://github.com/openshift/hypershift/pull/3343)
* [OCPBUGS-22899](https://issues.redhat.com/browse/OCPBUGS-22899): node spread anti-affinity for HA HCP [#3286](https://github.com/openshift/hypershift/pull/3286)
* NO-JIRA: Bump the misc-dependencies group with 17 updates [#3476](https://github.com/openshift/hypershift/pull/3476)
* [HOSTEDCP-1401](https://issues.redhat.com/browse/HOSTEDCP-1401): Enable BYO NSG [#3455](https://github.com/openshift/hypershift/pull/3455)
* NO-JIRA: Update go-jose to the latest version to fix CVE [#3475](https://github.com/openshift/hypershift/pull/3475)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): re-revert api stuff [#3463](https://github.com/openshift/hypershift/pull/3463)
* [OCPBUGS-26940](https://issues.redhat.com/browse/OCPBUGS-26940): Include OperatorHubSpec sync with HC when Config is empty [#3454](https://github.com/openshift/hypershift/pull/3454)
* NO-JIRA: Simplified kubectl component version check [#3458](https://github.com/openshift/hypershift/pull/3458)
* NO-JIRA: Remove '--attach-default-network' from productized cli [#3462](https://github.com/openshift/hypershift/pull/3462)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#3451](https://github.com/openshift/hypershift/pull/3451)
* NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 [#3466](https://github.com/openshift/hypershift/pull/3466)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): indicate cluster profile to render the correct manifests [#3443](https://github.com/openshift/hypershift/pull/3443)
* [OCPBUGS-26977](https://issues.redhat.com/browse/OCPBUGS-26977): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3403](https://github.com/openshift/hypershift/pull/3403)
* [TRT-1456](https://issues.redhat.com/browse/TRT-1456): Revert #3448 "api: move CSRA to a new group" [#3460](https://github.com/openshift/hypershift/pull/3460)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): api: move CSRA to a new group [#3448](https://github.com/openshift/hypershift/pull/3448)
* [HOSTEDCP-1397](https://issues.redhat.com/browse/HOSTEDCP-1397): Add documentation on how to debug Azure nodes [#3452](https://github.com/openshift/hypershift/pull/3452)
* NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images [#3426](https://github.com/openshift/hypershift/pull/3426)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Add e2e to ensure SA token not mounted on mgmt workloa… [#3301](https://github.com/openshift/hypershift/pull/3301)
* NO-JIRA: Fix promql testdata missing issue [#3438](https://github.com/openshift/hypershift/pull/3438)
* NO-JIRA: Update RHTAP references (main) [#3446](https://github.com/openshift/hypershift/pull/3446)
* [HOSTEDCP-1188](https://issues.redhat.com/browse/HOSTEDCP-1188): Add docs for control plane scheduling topologies [#3434](https://github.com/openshift/hypershift/pull/3434)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Set outbound LoadBalancer name on AzureCluster [#3445](https://github.com/openshift/hypershift/pull/3445)
* NO-JIRA: Bump misc dependencies 21f825371d [#3433](https://github.com/openshift/hypershift/pull/3433)
* [HOSTEDCP-1207](https://issues.redhat.com/browse/HOSTEDCP-1207): Automated etcd backup [#3034](https://github.com/openshift/hypershift/pull/3034)
* NO-JIRA: Document machine configuration in HyperShift [#3331](https://github.com/openshift/hypershift/pull/3331)
* [HOSTEDCP-1382](https://issues.redhat.com/browse/HOSTEDCP-1382): [Subtask] Restore Ability to Create HCPs on Azure [#3404](https://github.com/openshift/hypershift/pull/3404)
* [HOSTEDCP-1314](https://issues.redhat.com/browse/HOSTEDCP-1314): Ensure all e2e HCs use NLB for ingress controller [#3293](https://github.com/openshift/hypershift/pull/3293)
* [OCPBUGS-26757](https://issues.redhat.com/browse/OCPBUGS-26757): Change KAS bootstrap image to cluster-config-api [#3400](https://github.com/openshift/hypershift/pull/3400)
* NO-JIRA: Improve nodepool's machine condition message [#3354](https://github.com/openshift/hypershift/pull/3354)
* [OCPBUGS-23228](https://issues.redhat.com/browse/OCPBUGS-23228): Add storage, csisnapshotcontroller and clustercsidrive… [#3396](https://github.com/openshift/hypershift/pull/3396)
* [OCPBUGS-27027](https://issues.redhat.com/browse/OCPBUGS-27027): availability-prober: wait for infrastructure name to be set [#3409](https://github.com/openshift/hypershift/pull/3409)
* NO-JIRA: remove non-existent v1beta2 from webhook [#3407](https://github.com/openshift/hypershift/pull/3407)
* [HOSTEDCP-1376](https://issues.redhat.com/browse/HOSTEDCP-1376): Bump the sigs.k8s-dependencies group and update dependabot groupings [#3392](https://github.com/openshift/hypershift/pull/3392)
* [OCPBUGS-25696](https://issues.redhat.com/browse/OCPBUGS-25696): Apply Scheduling Configuration for kCCM [#3382](https://github.com/openshift/hypershift/pull/3382)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): remove LoadBalancer filter from external-dns [#3410](https://github.com/openshift/hypershift/pull/3410)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): fix up external-dns flags [#3408](https://github.com/openshift/hypershift/pull/3408)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): reduce external-dns route53 call volume [#3394](https://github.com/openshift/hypershift/pull/3394)
* Update RHTAP references (main) [#3401](https://github.com/openshift/hypershift/pull/3401)
* [OCPBUGS-25897](https://issues.redhat.com/browse/OCPBUGS-25897): hcco: use manual mode for CCO [#3375](https://github.com/openshift/hypershift/pull/3375)
* [HOSTEDCP-1309](https://issues.redhat.com/browse/HOSTEDCP-1309): Add GC knobs for KAS [#3384](https://github.com/openshift/hypershift/pull/3384)
* NO-JIRA: [KubeVirt] Fix external infra permissions documentation [#3391](https://github.com/openshift/hypershift/pull/3391)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3373](https://github.com/openshift/hypershift/pull/3373)
* [OCPBUGS-25974](https://issues.redhat.com/browse/OCPBUGS-25974): Do not use CPO image from status if it's not a valid image reference [#3361](https://github.com/openshift/hypershift/pull/3361)
* [OCPBUGS-23518](https://issues.redhat.com/browse/OCPBUGS-23518): consider HCP upgradeable if CVO has no upgradable condition [#3239](https://github.com/openshift/hypershift/pull/3239)
* [OCPBUGS-26232](https://issues.redhat.com/browse/OCPBUGS-26232): set KAS runtime-config in alignment with feature gates [#3377](https://github.com/openshift/hypershift/pull/3377)
* [HOSTEDCP-1372](https://issues.redhat.com/browse/HOSTEDCP-1372): Bumps k8s to v0.29 [#3360](https://github.com/openshift/hypershift/pull/3360)
* [OCPBUGS-25342](https://issues.redhat.com/browse/OCPBUGS-25342): Add extra resources to be encrypted. [#3341](https://github.com/openshift/hypershift/pull/3341)
* [OCPBUGS-26197](https://issues.redhat.com/browse/OCPBUGS-26197): hostedcontrolplane: don't start pki operator when disabled [#3368](https://github.com/openshift/hypershift/pull/3368)
* [CNV-36656](https://issues.redhat.com/browse/CNV-36656): Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider [#3364](https://github.com/openshift/hypershift/pull/3364)
* NO-JIRA: Update RHTAP references (main) [#3365](https://github.com/openshift/hypershift/pull/3365)
* [HOSTEDCP-1371](https://issues.redhat.com/browse/HOSTEDCP-1371): Bump Golang to v1.21 [#3359](https://github.com/openshift/hypershift/pull/3359)
* [HOSTEDCP-1328](https://issues.redhat.com/browse/HOSTEDCP-1328): Add Ability to Encrypt VM OS Disks [#3281](https://github.com/openshift/hypershift/pull/3281)
* [HOSTEDCP-1122](https://issues.redhat.com/browse/HOSTEDCP-1122): Etcd defrag controller [#2869](https://github.com/openshift/hypershift/pull/2869)
* NO-JIRA: Update RHTAP references (main) [#3275](https://github.com/openshift/hypershift/pull/3275)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move fixtures out of API [#3342](https://github.com/openshift/hypershift/pull/3342)
* [OCPBUGS-23362](https://issues.redhat.com/browse/OCPBUGS-23362): Set new condition on SG deletion. [#3307](https://github.com/openshift/hypershift/pull/3307)
* NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update [#3251](https://github.com/openshift/hypershift/pull/3251)
* NO-JIRA: Add rbac permission for kubevirt capi [#3344](https://github.com/openshift/hypershift/pull/3344)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry writer when telemeter-client cm not exists [#3348](https://github.com/openshift/hypershift/pull/3348)
* NO-JIRA: Approvers update [#3347](https://github.com/openshift/hypershift/pull/3347)
* [HOSTEDCP-1262](https://issues.redhat.com/browse/HOSTEDCP-1262): Add additional CEL to Arch in NodePoolSpec [#3333](https://github.com/openshift/hypershift/pull/3333)
* NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools [#3334](https://github.com/openshift/hypershift/pull/3334)
* NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 [#3335](https://github.com/openshift/hypershift/pull/3335)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3332](https://github.com/openshift/hypershift/pull/3332)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move CAPI imports from /api package into support/api [#3270](https://github.com/openshift/hypershift/pull/3270)
* [OCPBUGS-24308](https://issues.redhat.com/browse/OCPBUGS-24308): Add PodDisruptionBudget for router deployment [#3337](https://github.com/openshift/hypershift/pull/3337)
* [HOSTEDCP-1355](https://issues.redhat.com/browse/HOSTEDCP-1355): Remove unused functions from repo [#3325](https://github.com/openshift/hypershift/pull/3325)
* NO-JIRA: RHTAP Multi-Arch PipelineSpec [#3340](https://github.com/openshift/hypershift/pull/3340)
* [HOSTEDCP-1329](https://issues.redhat.com/browse/HOSTEDCP-1329): Allow user to specify resource group for NodePool resources [#3279](https://github.com/openshift/hypershift/pull/3279)
* [HOSTEDCP-1353](https://issues.redhat.com/browse/HOSTEDCP-1353): Improve description for agent APIServerAddress CLI flag [#3314](https://github.com/openshift/hypershift/pull/3314)
* [ACM-8917](https://issues.redhat.com/browse/ACM-8917): Add agentLabelSelector to nodepool agent create to CLI [#3285](https://github.com/openshift/hypershift/pull/3285)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): control-plane-operator: reconcile the CCO [#2794](https://github.com/openshift/hypershift/pull/2794)
* NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools [#3045](https://github.com/openshift/hypershift/pull/3045)
* NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools [#3145](https://github.com/openshift/hypershift/pull/3145)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): use library-go crypto where we can [#3326](https://github.com/openshift/hypershift/pull/3326)
* [OCPBUGS-25332](https://issues.redhat.com/browse/OCPBUGS-25332): Force KMSv1 on [#3318](https://github.com/openshift/hypershift/pull/3318)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3320](https://github.com/openshift/hypershift/pull/3320)
* [HOSTEDCP-1327](https://issues.redhat.com/browse/HOSTEDCP-1327): Remove Old Azure SDKs from Azure Infra [#3274](https://github.com/openshift/hypershift/pull/3274)
* [OCPBUGS-25306](https://issues.redhat.com/browse/OCPBUGS-25306): Use k8s.io/kube-scheduler/config/v1 [#3313](https://github.com/openshift/hypershift/pull/3313)
* [TRT-1406](https://issues.redhat.com/browse/TRT-1406): Revert #3283 "HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation" [#3306](https://github.com/openshift/hypershift/pull/3306)
* [OCPBUGS-25103](https://issues.redhat.com/browse/OCPBUGS-25103): Remove reference to v1alpha1 flowcontrol [#3304](https://github.com/openshift/hypershift/pull/3304)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3267](https://github.com/openshift/hypershift/pull/3267)
* NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) [#3305](https://github.com/openshift/hypershift/pull/3305)
* [OCPBUGS-24261](https://issues.redhat.com/browse/OCPBUGS-24261): Konnectivity agent update strategy [#3294](https://github.com/openshift/hypershift/pull/3294)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3280](https://github.com/openshift/hypershift/pull/3280)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3284](https://github.com/openshift/hypershift/pull/3284)
* [OCPBUGS-23511](https://issues.redhat.com/browse/OCPBUGS-23511): Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals [#3215](https://github.com/openshift/hypershift/pull/3215)
* NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out [#3302](https://github.com/openshift/hypershift/pull/3302)
* [HOSTEDCP-1343](https://issues.redhat.com/browse/HOSTEDCP-1343): docs(ibmcloud): Add HC/HCP yamls for IBM Cloud [#3287](https://github.com/openshift/hypershift/pull/3287)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3283](https://github.com/openshift/hypershift/pull/3283)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3276](https://github.com/openshift/hypershift/pull/3276)
* [OCPBUGS-20035](https://issues.redhat.com/browse/OCPBUGS-20035): Add HostedCluster false conditions sumamry when cluste… [#3190](https://github.com/openshift/hypershift/pull/3190)
* [HOSTEDCP-1336](https://issues.redhat.com/browse/HOSTEDCP-1336): bump openshift/api [#3282](https://github.com/openshift/hypershift/pull/3282)
* NO-JIRA: Fix wrong annotation on cluster deletion [#3289](https://github.com/openshift/hypershift/pull/3289)
* [OTA-855](https://issues.redhat.com/browse/OTA-855): Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift [#2807](https://github.com/openshift/hypershift/pull/2807)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): correct typo for OAS internal-oauth-disabled flag [#3278](https://github.com/openshift/hypershift/pull/3278)
* NO-JIRA: Bump the golang-dependencies group with 3 updates [#3254](https://github.com/openshift/hypershift/pull/3254)
* [OCPBUGS-23126](https://issues.redhat.com/browse/OCPBUGS-23126): Fix a bug on deletion of a hostedcluster [#3234](https://github.com/openshift/hypershift/pull/3234)
* [CNV-35774](https://issues.redhat.com/browse/CNV-35774): Improve CRD defaulting for HostedCluster and NodePool [#3116](https://github.com/openshift/hypershift/pull/3116)
* [HOSTEDCP-1322](https://issues.redhat.com/browse/HOSTEDCP-1322): NodeUpgradeType defaulted by provider via CLI [#3273](https://github.com/openshift/hypershift/pull/3273)
* NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too [#3263](https://github.com/openshift/hypershift/pull/3263)
* [CNV-34093](https://issues.redhat.com/browse/CNV-34093): kubevirt: verify release image falls within supported release window [#3184](https://github.com/openshift/hypershift/pull/3184)
* [CNV-29003](https://issues.redhat.com/browse/CNV-29003): Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) [#3189](https://github.com/openshift/hypershift/pull/3189)
* [OCPBUGS-22459](https://issues.redhat.com/browse/OCPBUGS-22459): Add prestop to konnectiviy server [#3250](https://github.com/openshift/hypershift/pull/3250)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC [#3244](https://github.com/openshift/hypershift/pull/3244)
* [OCPBUGS-23397](https://issues.redhat.com/browse/OCPBUGS-23397): Set shutdown-delay-duration to 15s [#3204](https://github.com/openshift/hypershift/pull/3204)
* [HOSTEDCP-1234](https://issues.redhat.com/browse/HOSTEDCP-1234): Add KMS support on Azure clusters using Azure Key Vault [#3183](https://github.com/openshift/hypershift/pull/3183)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): set respondWithChallenges false on CLI OAuth client [#3249](https://github.com/openshift/hypershift/pull/3249)
* [WRKLDS-925](https://issues.redhat.com/browse/WRKLDS-925): remove duplicate passing of kubeconfig into route-controller-manager [#3220](https://github.com/openshift/hypershift/pull/3220)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): control-plane-pki-operator: add an operator for managing PKI [#3193](https://github.com/openshift/hypershift/pull/3193)
* [HOSTEDCP-1319](https://issues.redhat.com/browse/HOSTEDCP-1319): Fix Dependabot & Group Dependency Updates [#3246](https://github.com/openshift/hypershift/pull/3246)
* [OCPBUGS-24062](https://issues.redhat.com/browse/OCPBUGS-24062): fix(cpo): Set restart annotation on network-node-identity [#3245](https://github.com/openshift/hypershift/pull/3245)
* kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs [#3235](https://github.com/openshift/hypershift/pull/3235)
* [HOSTEDCP-1312](https://issues.redhat.com/browse/HOSTEDCP-1312): Fixed update-codegen.sh to work locally [#3214](https://github.com/openshift/hypershift/pull/3214)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): add CLI oauthclient [#3238](https://github.com/openshift/hypershift/pull/3238)
* [HOSTEDCP-1300](https://issues.redhat.com/browse/HOSTEDCP-1300): Bump k8s.io/client-go to v0.28.3 [#3191](https://github.com/openshift/hypershift/pull/3191)
* [OCPBUGS-19834](https://issues.redhat.com/browse/OCPBUGS-19834): add watch for HCP pullsecret to HCCO [#3237](https://github.com/openshift/hypershift/pull/3237)
* Update RHTAP references (main) [#3230](https://github.com/openshift/hypershift/pull/3230)
* [HOSTEDCP-1236](https://issues.redhat.com/browse/HOSTEDCP-1236): Enable public router+external DNS for azure [#3233](https://github.com/openshift/hypershift/pull/3233)
* [OCPBUGS-23921](https://issues.redhat.com/browse/OCPBUGS-23921): Use correct kubeconfig in CCM and remove CCMs access t… [#3222](https://github.com/openshift/hypershift/pull/3222)
* [OCPBUGS-22473](https://issues.redhat.com/browse/OCPBUGS-22473): Added OLMCatalogPlacement option to the CLI [#3206](https://github.com/openshift/hypershift/pull/3206)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): New hypershift_cluster_cores metric giving the total number of worker cores [#3089](https://github.com/openshift/hypershift/pull/3089)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to IPv6 KAS address on kubeconfig [#3207](https://github.com/openshift/hypershift/pull/3207)
* [OCPBUGS-23737](https://issues.redhat.com/browse/OCPBUGS-23737): remove machine-approver probes [#3227](https://github.com/openshift/hypershift/pull/3227)
* [OCPBUGS-23350](https://issues.redhat.com/browse/OCPBUGS-23350): Added IPFamilyPolicy to services exposed at the HCP in DualStack mode [#3210](https://github.com/openshift/hypershift/pull/3210)
* [OCPBUGS-23466](https://issues.redhat.com/browse/OCPBUGS-23466): Let router use svc ips [#3218](https://github.com/openshift/hypershift/pull/3218)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/hypershift: mark more conditions with list key types [#3212](https://github.com/openshift/hypershift/pull/3212)
* [OCPBUGS-23472](https://issues.redhat.com/browse/OCPBUGS-23472): unset ServiceAccount on ignition-server-proxy [#3209](https://github.com/openshift/hypershift/pull/3209)
* [OCPBUGS-23528](https://issues.redhat.com/browse/OCPBUGS-23528): Fix error when removing finalizer on cluster destroy [#3219](https://github.com/openshift/hypershift/pull/3219)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/v1beta1: annotate hostedcontrolplane conditions [#3211](https://github.com/openshift/hypershift/pull/3211)
* [OCPBUGS-23398](https://issues.redhat.com/browse/OCPBUGS-23398): Fixed AWS KMS Backup container args [#3216](https://github.com/openshift/hypershift/pull/3216)
* [HOSTEDCP-1311](https://issues.redhat.com/browse/HOSTEDCP-1311): kubevirt, Add support for secondary networks [#3066](https://github.com/openshift/hypershift/pull/3066)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): expose cert rotation scale parameter [#3208](https://github.com/openshift/hypershift/pull/3208)
* [OCPBUGS-23314](https://issues.redhat.com/browse/OCPBUGS-23314): SetLogger for CLI [#3199](https://github.com/openshift/hypershift/pull/3199)
* [HOSTEDCP-1237](https://issues.redhat.com/browse/HOSTEDCP-1237): Retrieve RHCOS VHD image from release image [#3177](https://github.com/openshift/hypershift/pull/3177)
* [HOSTEDCP-1284](https://issues.redhat.com/browse/HOSTEDCP-1284): Bumps k8s.io/pod-security-admission to v0.28.3 [#3181](https://github.com/openshift/hypershift/pull/3181)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): Validate jsonpatch annotation + add condition on wrong patch [#3197](https://github.com/openshift/hypershift/pull/3197)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Kas port svc cleanup [#3186](https://github.com/openshift/hypershift/pull/3186)
* [HOSTEDCP-1254](https://issues.redhat.com/browse/HOSTEDCP-1254): disable deployment of integrated oauth when authentication type is OIDC and set KAS flags [#3151](https://github.com/openshift/hypershift/pull/3151)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): fix the jsonpath annotation implemetation [#3201](https://github.com/openshift/hypershift/pull/3201)
* [HOSTEDCP-1305](https://issues.redhat.com/browse/HOSTEDCP-1305): Simplify HostedControlPlaneNamespace().Name [#2619](https://github.com/openshift/hypershift/pull/2619)
* [OCPBUGS-22912](https://issues.redhat.com/browse/OCPBUGS-22912): Set value of elb tag to 1 instead of true [#3198](https://github.com/openshift/hypershift/pull/3198)
* [CNV-30444](https://issues.redhat.com/browse/CNV-30444): Document recommended MTU settings for KubeVirt HCP [#3129](https://github.com/openshift/hypershift/pull/3129)
* [HOSTEDCP-1306](https://issues.redhat.com/browse/HOSTEDCP-1306): Bump Golang builder to 1.20 for RHTAP dockerfile [#3196](https://github.com/openshift/hypershift/pull/3196)
* NO-JIRA: chore(deps): update rhtap references [#3192](https://github.com/openshift/hypershift/pull/3192)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): unsupported escape hatch mechanism custom HS/KV vms [#3187](https://github.com/openshift/hypershift/pull/3187)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): generate typed clients for apis [#3179](https://github.com/openshift/hypershift/pull/3179)
* NO-JIRA: *: Fix "succesfully" -> "successfully" typos [#3188](https://github.com/openshift/hypershift/pull/3188)
* [OCPBUGS-20179](https://issues.redhat.com/browse/OCPBUGS-20179): Stop defining time series for hosted clusters or node pools which do not exist anymore. [#2671](https://github.com/openshift/hypershift/pull/2671)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Consume kas Pod port by name [#3185](https://github.com/openshift/hypershift/pull/3185)
* [OCPBUGS-23083](https://issues.redhat.com/browse/OCPBUGS-23083): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3172](https://github.com/openshift/hypershift/pull/3172)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): Update Dependencies [#3154](https://github.com/openshift/hypershift/pull/3154)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Fixed Azure nodes not joining [#3174](https://github.com/openshift/hypershift/pull/3174)
* [HOSTEDCP-1227](https://issues.redhat.com/browse/HOSTEDCP-1227): Retrieve CAPZ image from OCP release image [#3074](https://github.com/openshift/hypershift/pull/3074)
* NO-JIRA: fix formatting for releaseImage log [#3156](https://github.com/openshift/hypershift/pull/3156)
* [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150)
* [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088)
* [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164)
* [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148)
* [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141)
* [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149)
* [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067)
* [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157)
* [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132)
* Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147)
* Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134)
* [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081)
* Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136)
* [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113)
* [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072)
* [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135)
* [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086)
* contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140)
* [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138)
* run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137)
* [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115)
* [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097)
* Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092)
* [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108)
* Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093)
* Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062)
* [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103)
* OCPBUGS-19419 change trusted bundle volume mount for CPO [#3099](https://github.com/openshift/hypershift/pull/3099)
* Disabling unused monitoring services [#2730](https://github.com/openshift/hypershift/pull/2730)
* [OCPBUGS-18341](https://issues.redhat.com/browse/OCPBUGS-18341): change required pod anti-affinity rule to preferred rule [#3095](https://github.com/openshift/hypershift/pull/3095)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase upgrade rollout timers" [#3090](https://github.com/openshift/hypershift/pull/3090)
* [CNV-31891](https://issues.redhat.com/browse/CNV-31891): Document port 80 is not supported with default ingress for KubeVirt [#3079](https://github.com/openshift/hypershift/pull/3079)
* [MULTIARCH-3760](https://issues.redhat.com/browse/MULTIARCH-3760): Rename depricated flag for PowerVS capi deployment [#3028](https://github.com/openshift/hypershift/pull/3028)
* HOSTEDCP-1051 addition of grace period for aws infra destruction [#2967](https://github.com/openshift/hypershift/pull/2967)
* [HOSTEDCP-1232](https://issues.redhat.com/browse/HOSTEDCP-1232): Add clusterName label to CAPI kubeconfig secret [#3087](https://github.com/openshift/hypershift/pull/3087)
* [OCPBUGS-19957](https://issues.redhat.com/browse/OCPBUGS-19957): Reconcile CNCC secret to CPO namespace [#3065](https://github.com/openshift/hypershift/pull/3065)
* [OCPBUGS-20105](https://issues.redhat.com/browse/OCPBUGS-20105): OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes [#3077](https://github.com/openshift/hypershift/pull/3077)
* [OCPBUGS-16189](https://issues.redhat.com/browse/OCPBUGS-16189), [OCPBUGS-19746](https://issues.redhat.com/browse/OCPBUGS-19746): Added network validations [#3047](https://github.com/openshift/hypershift/pull/3047)
* [CNV-30697](https://issues.redhat.com/browse/CNV-30697): Dedicated CPU for KubeVirt node pool [#3048](https://github.com/openshift/hypershift/pull/3048)
* Add record rules for kas qps [#2858](https://github.com/openshift/hypershift/pull/2858)
* Fix a typo in KubeVirt troubleshooting script [#3073](https://github.com/openshift/hypershift/pull/3073)
* [HOSTEDCP-1184](https://issues.redhat.com/browse/HOSTEDCP-1184): Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal [#3008](https://github.com/openshift/hypershift/pull/3008)
* Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… [#3076](https://github.com/openshift/hypershift/pull/3076)
* Upate azure docs [#3075](https://github.com/openshift/hypershift/pull/3075)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working (part2). [#3014](https://github.com/openshift/hypershift/pull/3014)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939), [OCPBUGS-18128](https://issues.redhat.com/browse/OCPBUGS-18128), [OCPBUGS-18460](https://issues.redhat.com/browse/OCPBUGS-18460), [OCPBUGS-18602](https://issues.redhat.com/browse/OCPBUGS-18602), [OCPBUGS-18879](https://issues.redhat.com/browse/OCPBUGS-18879): Support Disconnected HCP [#2950](https://github.com/openshift/hypershift/pull/2950)
* Add private link perms to docs and clarify log message [#3063](https://github.com/openshift/hypershift/pull/3063)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): Add konnectivity-proxy container to CNO [#2974](https://github.com/openshift/hypershift/pull/2974)
* [OCPBUGS-19784](https://issues.redhat.com/browse/OCPBUGS-19784): Update capi agent version for CRD label [#3050](https://github.com/openshift/hypershift/pull/3050)
* KubeVirt platform troubleshooting documentation [#3055](https://github.com/openshift/hypershift/pull/3055)
* Remove EgressFirewall Creation in HCP namespace [#3049](https://github.com/openshift/hypershift/pull/3049)
* [HOSTEDCP-1212](https://issues.redhat.com/browse/HOSTEDCP-1212): Bump Golang to v1.20 [#3038](https://github.com/openshift/hypershift/pull/3038)
* Update RHTAP references (main) [#3054](https://github.com/openshift/hypershift/pull/3054)
* [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041)
* Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017)
* Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044)
* [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022)
* [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976)
* [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025)
* [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039)
* Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036)
* KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031)
* Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033)
* [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024)
* [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013)
* [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011)
* Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020)
* Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000)
* Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995)
* [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012)
* Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948)
* [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001)
* [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009)
* feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991)
* [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955)
* [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004)
* [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003)
* [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997)
* e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987)
* bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952)
* [Full changelog](https://github.com/openshift/hypershift/compare/59c8c061a4c04c23579455ed5287f88a5b405667...6946c3cc4654833ffc3db6299d5859b58b2f20a7)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)
* [OCPBUGS-22602](https://issues.redhat.com/browse/OCPBUGS-22602), [OCPCLOUD-2419](https://issues.redhat.com/browse/OCPCLOUD-2419): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (d1ca4a9) into master [#59](https://github.com/openshift/cloud-provider-ibm/pull/59)
* [OCPBUGS-25562](https://issues.redhat.com/browse/OCPBUGS-25562): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-ibm/pull/62)
* [OCPBUGS-25638](https://issues.redhat.com/browse/OCPBUGS-25638): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/cloud-provider-ibm/pull/63)
* [OCPBUGS-24921](https://issues.redhat.com/browse/OCPBUGS-24921): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-ibm/pull/61)
* [OCPBUGS-24109](https://issues.redhat.com/browse/OCPBUGS-24109): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-ibm/pull/60)
* [OCPCLOUD-2183](https://issues.redhat.com/browse/OCPCLOUD-2183): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.28 (1584359) into master [#47](https://github.com/openshift/cloud-provider-ibm/pull/47)
* Update OWNERS [#54](https://github.com/openshift/cloud-provider-ibm/pull/54)
* [OCPBUGS-19180](https://issues.redhat.com/browse/OCPBUGS-19180): Updating ose-ibm-cloud-controller-manager images to be consistent with ART [#53](https://github.com/openshift/cloud-provider-ibm/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/446871ff7626c4199836929f5bc777aba2a5f001...f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/32b4c00517de0f54bf738380064a12d58b031eec)
* [OCPBUGS-30514](https://issues.redhat.com/browse/OCPBUGS-30514): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#65](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/65)
* [STOR-1571](https://issues.redhat.com/browse/STOR-1571): Chore: Update ibm-vpc-block-csi-driver to the latest release [#64](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/64)
* [OCPBUGS-25566](https://issues.redhat.com/browse/OCPBUGS-25566): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#63](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/63)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#62](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/62)
* [OCPBUGS-25049](https://issues.redhat.com/browse/OCPBUGS-25049): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#61](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/61)
* [OCPBUGS-24930](https://issues.redhat.com/browse/OCPBUGS-24930): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#60](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/60)
* [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update OWNERS_ALIASES [#59](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/59)
* Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#58](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/58)
* [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update ibm-vpc-block-csi-driver to the latest release [#55](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/55)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#48](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/48)
* [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#43](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/43)
* [OCPBUGS-16920](https://issues.redhat.com/browse/OCPBUGS-16920): UPSTREAM: 164: Disable UUID check on xfs (#164) [#45](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/45)
* [OCPBUGS-19188](https://issues.redhat.com/browse/OCPBUGS-19188): Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#44](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/02471d9625339b1cd6d638e358a10c88b223d30e...32b4c00517de0f54bf738380064a12d58b031eec)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
* [OCPBUGS-33329](https://issues.redhat.com/browse/OCPBUGS-33329): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#115](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/115)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#114](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/114)
* [OCPBUGS-29247](https://issues.redhat.com/browse/OCPBUGS-29247): ibm-vpc-block-csi-driver is missing sidecar metrics [#112](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/112)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node registrar [#110](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/110)
* [OCPBUGS-29578](https://issues.redhat.com/browse/OCPBUGS-29578): Apply hypershift cluster-profile for ibm-cloud-managed [#111](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/111)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#108](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/108)
* [OCPBUGS-28938](https://issues.redhat.com/browse/OCPBUGS-28938): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/109)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#107](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/107)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#105](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/105)
* [OCPBUGS-25539](https://issues.redhat.com/browse/OCPBUGS-25539): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#102](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/102)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#101](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/101)
* [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#100](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/100)
* [OCPBUGS-25105](https://issues.redhat.com/browse/OCPBUGS-25105): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#98](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#97](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/97)
* [OCPBUGS-24845](https://issues.redhat.com/browse/OCPBUGS-24845): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#96](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/96)
* [STOR-1487](https://issues.redhat.com/browse/STOR-1487): Provide BYOK encryption support for OpenShift on IBM Cloud VPC [#93](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/93)
* [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): OCPBUGS-22603: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#88](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/88)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/92)
* [STOR-1485](https://issues.redhat.com/browse/STOR-1485): Support for endpoint override from config [#89](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/89)
* [OCPBUGS-22924](https://issues.redhat.com/browse/OCPBUGS-22924): Removing unncessary imagePullSecrets [#87](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/87)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#77](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/77)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#86](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/86)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#80](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/80)
* [OCPBUGS-19215](https://issues.redhat.com/browse/OCPBUGS-19215): Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#78](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/78)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/7fd94aa73f7e61cba93657cc2411e04e1b40e87b...34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/60b7ca98f5121f7e772437823b258a9fd0aa1d99)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#80](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/80)
* [OCPBUGS-29590](https://issues.redhat.com/browse/OCPBUGS-29590): Update golang.org/x/crypto module [#77](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/77)
* [OCPBUGS-24924](https://issues.redhat.com/browse/OCPBUGS-24924): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#70](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/70)
* [OCPBUGS-22604](https://issues.redhat.com/browse/OCPBUGS-22604), [OCPCLOUD-2454](https://issues.redhat.com/browse/OCPCLOUD-2454): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.7.0 (e51c61e) into main [#74](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/74)
* [OCPBUGS-26135](https://issues.redhat.com/browse/OCPBUGS-26135): Fix formatting in snyk vendor exclusions [#75](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/75)
* [OCPBUGS-25631](https://issues.redhat.com/browse/OCPBUGS-25631): Add Snyk file to exclude vendor directory on scan [#71](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/71)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#68](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/68)
* Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#65](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/65)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#64](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/64)
* [OCPBUGS-22054](https://issues.redhat.com/browse/OCPBUGS-22054): Bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/62)
* [OCPBUGS-22107](https://issues.redhat.com/browse/OCPBUGS-22107): Bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/61)
* Update OWNERS [#60](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/60)
* [OCPCLOUD-2220](https://issues.redhat.com/browse/OCPCLOUD-2220): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.6.0 (02aa85f) into main [#59](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/59)
* [OCPBUGS-19181](https://issues.redhat.com/browse/OCPBUGS-19181): Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART [#58](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/004ecde5e7e5394abdb9fe62b3063fd20300bb9c...60b7ca98f5121f7e772437823b258a9fd0aa1d99)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1a3a3030afcbbc0a26e794050d300b818069ba16)
* [OCPBUGS-27872](https://issues.redhat.com/browse/OCPBUGS-27872): add an extra vendor exclude to snyk config [#36](https://github.com/openshift/machine-api-provider-ibmcloud/pull/36)
* [OCPBUGS-28965](https://issues.redhat.com/browse/OCPBUGS-28965): update textlogger usage [#35](https://github.com/openshift/machine-api-provider-ibmcloud/pull/35)
* [OCPCLOUD-2426](https://issues.redhat.com/browse/OCPCLOUD-2426): Update to k8s 1.29 [#34](https://github.com/openshift/machine-api-provider-ibmcloud/pull/34)
* [OCPBUGS-26134](https://issues.redhat.com/browse/OCPBUGS-26134): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/machine-api-provider-ibmcloud/pull/33)
* [OCPBUGS-25574](https://issues.redhat.com/browse/OCPBUGS-25574): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#32](https://github.com/openshift/machine-api-provider-ibmcloud/pull/32)
* [OCPBUGS-24962](https://issues.redhat.com/browse/OCPBUGS-24962): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#31](https://github.com/openshift/machine-api-provider-ibmcloud/pull/31)
* [OCPCLOUD-2264](https://issues.redhat.com/browse/OCPCLOUD-2264): IBMCloud: Add boot volume key support [#27](https://github.com/openshift/machine-api-provider-ibmcloud/pull/27)
* Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#30](https://github.com/openshift/machine-api-provider-ibmcloud/pull/30)
* [OCPCLOUD-2227](https://issues.redhat.com/browse/OCPCLOUD-2227): IBMCloud: Fix version for binary [#29](https://github.com/openshift/machine-api-provider-ibmcloud/pull/29)
* [OCPCLOUD-2266](https://issues.redhat.com/browse/OCPCLOUD-2266): IBMCloud: MAPI Service Endpoint overrides [#28](https://github.com/openshift/machine-api-provider-ibmcloud/pull/28)
* Update OWNERS [#26](https://github.com/openshift/machine-api-provider-ibmcloud/pull/26)
* [OCPBUGS-17293](https://issues.redhat.com/browse/OCPBUGS-17293), [OCPCLOUD-2190](https://issues.redhat.com/browse/OCPCLOUD-2190): update k8s dependencies to release 1.28 [#25](https://github.com/openshift/machine-api-provider-ibmcloud/pull/25)
* [OCPBUGS-19221](https://issues.redhat.com/browse/OCPBUGS-19221): Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#24](https://github.com/openshift/machine-api-provider-ibmcloud/pull/24)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...1a3a3030afcbbc0a26e794050d300b818069ba16)
### [insights-operator](https://github.com/openshift/insights-operator/tree/3c7446c68efe41e66efa1edca41aac89ba38f7fc)
* Fix typo in link to gathers.json [#876](https://github.com/openshift/insights-operator/pull/876)
* [Full changelog](https://github.com/openshift/insights-operator/compare/50e132e0a016272f32f950fdb7fe45fc30526590...3c7446c68efe41e66efa1edca41aac89ba38f7fc)
### [ironic](https://github.com/openshift/ironic-image/tree/9d49fd688bcd13f28ed89f4641429f0b0797b339)
* Bug OCPBUGS-34985: Disable installation of .pyc files through pip [#509](https://github.com/openshift/ironic-image/pull/509)
* [OCPBUGS-32304](https://issues.redhat.com/browse/OCPBUGS-32304): Fix ironic-inspector permissions for creating /certs/ca directory [#500](https://github.com/openshift/ironic-image/pull/500)
* [METAL-1005](https://issues.redhat.com/browse/METAL-1005): [4.16] Update ironic projects and remove cinder and glance clients [#493](https://github.com/openshift/ironic-image/pull/493)
* NO-ISSUE: Merge from metal3-io/ironic-image [#473](https://github.com/openshift/ironic-image/pull/473)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] remove unused prometheus-exporter from OKD too [#486](https://github.com/openshift/ironic-image/pull/486)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Remove unused prometheus exporter [#484](https://github.com/openshift/ironic-image/pull/484)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Bump gunicorn version [#480](https://github.com/openshift/ironic-image/pull/480)
* NO-ISSUE: Use microversion-parse package [#481](https://github.com/openshift/ironic-image/pull/481)
* [OCPBUGS-32350](https://issues.redhat.com/browse/OCPBUGS-32350): Update to include fixes for ironic servicing feature [#478](https://github.com/openshift/ironic-image/pull/478)
* [OCPBUGS-32390](https://issues.redhat.com/browse/OCPBUGS-32390): Use unix sockets by default for reverse proxy communication [#472](https://github.com/openshift/ironic-image/pull/472)
* [OCPBUGS-32162](https://issues.redhat.com/browse/OCPBUGS-32162): Bump eventlet version [#471](https://github.com/openshift/ironic-image/pull/471)
* [METAL-949](https://issues.redhat.com/browse/METAL-949): Force pysnmp-lextudio and pyasn1 min version [#464](https://github.com/openshift/ironic-image/pull/464)
* [METAL-952](https://issues.redhat.com/browse/METAL-952): Install sushy from source [#466](https://github.com/openshift/ironic-image/pull/466)
* [METAL-804](https://issues.redhat.com/browse/METAL-804): Bump ironic hash to include recent fixes and features [#465](https://github.com/openshift/ironic-image/pull/465)
* [METAL-944](https://issues.redhat.com/browse/METAL-944): Install ironic-lib from source [#463](https://github.com/openshift/ironic-image/pull/463)
* [METAL-923](https://issues.redhat.com/browse/METAL-923): pick-up non-bootable ISO fix [#462](https://github.com/openshift/ironic-image/pull/462)
* [METAL-922](https://issues.redhat.com/browse/METAL-922): Add check requirements script [#461](https://github.com/openshift/ironic-image/pull/461)
* [METAL-901](https://issues.redhat.com/browse/METAL-901): Update ironic dependencies for OCP 4.16 [#457](https://github.com/openshift/ironic-image/pull/457)
* NO-ISSUE: Merge from upstream metal3-io/ironic-image [#459](https://github.com/openshift/ironic-image/pull/459)
* [METAL-909](https://issues.redhat.com/browse/METAL-909): Avoid context copy in CI or local builds [#458](https://github.com/openshift/ironic-image/pull/458)
* [METAL-849](https://issues.redhat.com/browse/METAL-849): Install ironic and ironic-inspector from source [#444](https://github.com/openshift/ironic-image/pull/444)
* [METAL-902](https://issues.redhat.com/browse/METAL-902): Split OKD and OCP packages list [#456](https://github.com/openshift/ironic-image/pull/456)
* NO-ISSUE: Updating openstack-ironic version [#455](https://github.com/openshift/ironic-image/pull/455)
* [OCPBUGS-27967](https://issues.redhat.com/browse/OCPBUGS-27967): Update packages for OCP 4.16 [#451](https://github.com/openshift/ironic-image/pull/451)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#449](https://github.com/openshift/ironic-image/pull/449)
* [OCPBUGS-22699](https://issues.redhat.com/browse/OCPBUGS-22699): Fix Inspector iPXE config for IPv6 addresses [#446](https://github.com/openshift/ironic-image/pull/446)
* [OCPBUGS-25605](https://issues.redhat.com/browse/OCPBUGS-25605): Relax packages requirements [#441](https://github.com/openshift/ironic-image/pull/441)
* NO-ISSUE: Merge from metal3-io/ironic-image (33275f5) [#443](https://github.com/openshift/ironic-image/pull/443)
* NO-ISSUE: Add requirements placeholders for cachito [#437](https://github.com/openshift/ironic-image/pull/437)
* [OCPBUGS-25392](https://issues.redhat.com/browse/OCPBUGS-25392): Stuck deployment [#440](https://github.com/openshift/ironic-image/pull/440)
* [OCPBUGS-24747](https://issues.redhat.com/browse/OCPBUGS-24747): Updating ironic-container image to be consistent with ART [#438](https://github.com/openshift/ironic-image/pull/438)
* [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): include the secure boot retry [#435](https://github.com/openshift/ironic-image/pull/435)
* NO-ISSUE: Update ironic packages version [#434](https://github.com/openshift/ironic-image/pull/434)
* [OCPBUGS-23759](https://issues.redhat.com/browse/OCPBUGS-23759): Ironic side of external_http_url (METAL-163) is not wired in correctly [#432](https://github.com/openshift/ironic-image/pull/432)
* [OCPBUGS-23939](https://issues.redhat.com/browse/OCPBUGS-23939): Firmware interface [#428](https://github.com/openshift/ironic-image/pull/428)
* [OCPBUGS-23485](https://issues.redhat.com/browse/OCPBUGS-23485): Uplift eventlet version [#425](https://github.com/openshift/ironic-image/pull/425)
* [OCPBUGS-22425](https://issues.redhat.com/browse/OCPBUGS-22425): Upgrade markupsafe and werkzeug dependencies [#420](https://github.com/openshift/ironic-image/pull/420)
* [METAL-726](https://issues.redhat.com/browse/METAL-726): Update packages for OCP 4.15 and pin ironic versions [#412](https://github.com/openshift/ironic-image/pull/412)
* [METAL-730](https://issues.redhat.com/browse/METAL-730): Sync202310 [#407](https://github.com/openshift/ironic-image/pull/407)
* [OCPBUGS-21876](https://issues.redhat.com/browse/OCPBUGS-21876): Use bash process substitution instead of pipe [#408](https://github.com/openshift/ironic-image/pull/408)
* Revert #395 "Sync20230829" [#405](https://github.com/openshift/ironic-image/pull/405)
* Sync20230829 [#395](https://github.com/openshift/ironic-image/pull/395)
* [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): update Ironic to include secure boot fixes [#403](https://github.com/openshift/ironic-image/pull/403)
* [OCPBUGS-18963](https://issues.redhat.com/browse/OCPBUGS-18963): update ironic to include SQLite fixes [#401](https://github.com/openshift/ironic-image/pull/401)
* [OCPBUGS-18859](https://issues.redhat.com/browse/OCPBUGS-18859): Updating ironic images to be consistent with ART [#397](https://github.com/openshift/ironic-image/pull/397)
* [OCPBUGS-19019](https://issues.redhat.com/browse/OCPBUGS-19019): Switch from current-tripleo to puppet-passed-ci [#398](https://github.com/openshift/ironic-image/pull/398)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d732a6b52ea6369d91a71026838096afa1fae360...9d49fd688bcd13f28ed89f4641429f0b0797b339)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/63681a469fdba2f223373ff36350bf2462b997a3)
* [OCPBUGS-31549](https://issues.redhat.com/browse/OCPBUGS-31549): update ironic-python-agent with latest fixes [#128](https://github.com/openshift/ironic-agent-image/pull/128)
* [OCPBUGS-32172](https://issues.redhat.com/browse/OCPBUGS-32172): Fix name in setup.cfg [#122](https://github.com/openshift/ironic-agent-image/pull/122)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Fix permission of check reqs script [#120](https://github.com/openshift/ironic-agent-image/pull/120)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add makefile with build and check reqs [#119](https://github.com/openshift/ironic-agent-image/pull/119)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Install ironic-python-agent from source [#118](https://github.com/openshift/ironic-agent-image/pull/118)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add requirements placeholders for cachito [#117](https://github.com/openshift/ironic-agent-image/pull/117)
* NO-ISSUE: Update openstack-ironic-python-agent version [#110](https://github.com/openshift/ironic-agent-image/pull/110)
* [METAL-913](https://issues.redhat.com/browse/METAL-913): drop dependency on python-hardware [#113](https://github.com/openshift/ironic-agent-image/pull/113)
* [OCPBUGS-30075](https://issues.redhat.com/browse/OCPBUGS-30075): Fix tripleo url with commit hash for openstack repos config [#114](https://github.com/openshift/ironic-agent-image/pull/114)
* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Always add ignition to set hostname on /etc/hostname [#106](https://github.com/openshift/ironic-agent-image/pull/106)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#104](https://github.com/openshift/ironic-agent-image/pull/104)
* [OCPBUGS-19950](https://issues.redhat.com/browse/OCPBUGS-19950): pick up the heartbeat retry fix [#101](https://github.com/openshift/ironic-agent-image/pull/101)
* [OCPBUGS-16607](https://issues.redhat.com/browse/OCPBUGS-16607): 502 Proxy Error [#100](https://github.com/openshift/ironic-agent-image/pull/100)
* [OCPBUGS-24781](https://issues.redhat.com/browse/OCPBUGS-24781): Updating ironic-agent-container image to be consistent with ART [#97](https://github.com/openshift/ironic-agent-image/pull/97)
* [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#95](https://github.com/openshift/ironic-agent-image/pull/95)
* [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#94](https://github.com/openshift/ironic-agent-image/pull/94)
* [OCPBUGS-18862](https://issues.redhat.com/browse/OCPBUGS-18862): Updating ironic-agent images to be consistent with ART [#88](https://github.com/openshift/ironic-agent-image/pull/88)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/7e82a52f0406df18362d4bdc7c5cc95a376be587...63681a469fdba2f223373ff36350bf2462b997a3)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/93b8b5fa33950cadd2310278b7c762ebe0057418)
* [OCPBUGS-25775](https://issues.redhat.com/browse/OCPBUGS-25775): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.16 [#96](https://github.com/openshift/ironic-rhcos-downloader/pull/96)
* [OCPBUGS-25526](https://issues.redhat.com/browse/OCPBUGS-25526): Updating ironic-rhcos-downloader-container image to be consistent with ART [#95](https://github.com/openshift/ironic-rhcos-downloader/pull/95)
* [OCPBUGS-24788](https://issues.redhat.com/browse/OCPBUGS-24788): Updating ironic-rhcos-downloader-container image to be consistent with ART [#94](https://github.com/openshift/ironic-rhcos-downloader/pull/94)
* [OCPBUGS-18863](https://issues.redhat.com/browse/OCPBUGS-18863): Updating ironic-rhcos-downloader images to be consistent with ART [#93](https://github.com/openshift/ironic-rhcos-downloader/pull/93)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...93b8b5fa33950cadd2310278b7c762ebe0057418)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/e78e4c3e6db1805816308197eb9002dfbca27560)
* [OCPBUGS-24790](https://issues.redhat.com/browse/OCPBUGS-24790): Updating ironic-static-ip-manager-container image to be consistent with ART [#41](https://github.com/openshift/ironic-static-ip-manager/pull/41)
* [OCPBUGS-18864](https://issues.redhat.com/browse/OCPBUGS-18864): Updating ironic-static-ip-manager images to be consistent with ART [#40](https://github.com/openshift/ironic-static-ip-manager/pull/40)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...e78e4c3e6db1805816308197eb9002dfbca27560)
### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/e4f859be4f56d1fc65138f99f5331baf17c15885)
* [OCPBUGS-30532](https://issues.redhat.com/browse/OCPBUGS-30532): upgrade github.com/golang/protobuf to v1.5.4 for bette… [#101](https://github.com/openshift/k8s-prometheus-adapter/pull/101)
* [OCPBUGS-25583](https://issues.redhat.com/browse/OCPBUGS-25583): Updating ose-prometheus-adapter-container image to be consistent with ART [#100](https://github.com/openshift/k8s-prometheus-adapter/pull/100)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#99](https://github.com/openshift/k8s-prometheus-adapter/pull/99)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#98](https://github.com/openshift/k8s-prometheus-adapter/pull/98)
* [MON-3584](https://issues.redhat.com/browse/MON-3584): Remove trailing spaces from Dockerfile.ocp [#97](https://github.com/openshift/k8s-prometheus-adapter/pull/97)
* [OCPBUGS-24155](https://issues.redhat.com/browse/OCPBUGS-24155): Updating ose-prometheus-adapter-container image to be consistent with ART [#95](https://github.com/openshift/k8s-prometheus-adapter/pull/95)
* [MON-3489](https://issues.redhat.com/browse/MON-3489): Bump openshift/k8s-prometheus-adapter to v0.11.2 [#94](https://github.com/openshift/k8s-prometheus-adapter/pull/94)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88)
* add `machine424` and `rexagod` to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): upgrade golang.org/x/net to 0.17.0 to address CVE-2023… [#80](https://github.com/openshift/k8s-prometheus-adapter/pull/80)
* [OCPBUGS-18971](https://issues.redhat.com/browse/OCPBUGS-18971): limit number of simultaneous client requests [#76](https://github.com/openshift/k8s-prometheus-adapter/pull/76)
* [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74)
* Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/801a912b3a60d7e840fb1ff38b5ca992f47327fd...e4f859be4f56d1fc65138f99f5331baf17c15885)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/661d4f2ac6466565889ad11acb19d49d6e11333a)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Revert #179 [#180](https://github.com/openshift/images/pull/180)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency [#179](https://github.com/openshift/images/pull/179)
* Add dnf-plugins-core in scos to help with OCP image compat [#178](https://github.com/openshift/images/pull/178)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add sig-cloud repository and enable rt repository [#177](https://github.com/openshift/images/pull/177)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add the sig-nfv repo in the CS9 base [#176](https://github.com/openshift/images/pull/176)
* [OCPBUGS-24850](https://issues.redhat.com/browse/OCPBUGS-24850): Bump OpenShift 4.16, RHEL9, and iptables package [#175](https://github.com/openshift/images/pull/175)
* [OCPBUGS-24990](https://issues.redhat.com/browse/OCPBUGS-24990): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART [#159](https://github.com/openshift/images/pull/159)
* [OCPBUGS-24800](https://issues.redhat.com/browse/OCPBUGS-24800): Updating ose-egress-http-proxy-container image to be consistent with ART [#156](https://github.com/openshift/images/pull/156)
* NO-ISSUE: Add Scott and Mrunal as image approvers [#170](https://github.com/openshift/images/pull/170)
* NO-ISSUE: remove bparees from owners [#169](https://github.com/openshift/images/pull/169)
* [OCPBUGS-29484](https://issues.redhat.com/browse/OCPBUGS-29484): update unit tests in egress/dns-proxy [#165](https://github.com/openshift/images/pull/165)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): egress/dns-proxy: switch to haproxy28 RPM package [#160](https://github.com/openshift/images/pull/160)
* [OCPBUGS-24861](https://issues.redhat.com/browse/OCPBUGS-24861): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART [#158](https://github.com/openshift/images/pull/158)
* [OCPBUGS-24751](https://issues.redhat.com/browse/OCPBUGS-24751): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART [#155](https://github.com/openshift/images/pull/155)
* [OCPBUGS-24723](https://issues.redhat.com/browse/OCPBUGS-24723): Updating openshift-enterprise-base-container image to be consistent with ART [#154](https://github.com/openshift/images/pull/154)
* [OCPBUGS-19261](https://issues.redhat.com/browse/OCPBUGS-19261): Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#153](https://github.com/openshift/images/pull/153)
* [OCPBUGS-19107](https://issues.redhat.com/browse/OCPBUGS-19107): Updating ose-egress-http-proxy images to be consistent with ART [#150](https://github.com/openshift/images/pull/150)
* [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151)
* [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149)
* [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148)
* [Full changelog](https://github.com/openshift/images/compare/f08cee3389569256aa288c33bad701a2704ce9db...661d4f2ac6466565889ad11acb19d49d6e11333a)
### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/5b658c433786797d0ac1b870db08346584794514)
* [OCPBUGS-30431](https://issues.redhat.com/browse/OCPBUGS-30431): CVE-2024-24786: bump pkg golang protobuf [#620](https://github.com/openshift/sdn/pull/620)
* [SDN-4404](https://issues.redhat.com/browse/SDN-4404): Kube 1.29 bump [#618](https://github.com/openshift/sdn/pull/618)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Do per-pod MCS/metadata blocking with nftables rather than iptables [#581](https://github.com/openshift/sdn/pull/581)
* NO-JIRA: Update README to note that openshift-sdn is deprecated [#611](https://github.com/openshift/sdn/pull/611)
* NO-JIRA: Move sdn to RHEL9 base image [#598](https://github.com/openshift/sdn/pull/598)
* [OCPBUGS-25740](https://issues.redhat.com/browse/OCPBUGS-25740): Updating ose-node-container image to be consistent with ART for 4.16 [#599](https://github.com/openshift/sdn/pull/599)
* [OCPBUGS-23666](https://issues.redhat.com/browse/OCPBUGS-23666): Add Snyk file to exclude directories on scan [#604](https://github.com/openshift/sdn/pull/604)
* [OCPBUGS-25779](https://issues.redhat.com/browse/OCPBUGS-25779): Updating kube-proxy-container image to be consistent with ART for 4.16 [#600](https://github.com/openshift/sdn/pull/600)
* [SDN-4179](https://issues.redhat.com/browse/SDN-4179): Metrics: Add metric for multicast enabled netnamespaces [#603](https://github.com/openshift/sdn/pull/603)
* [OCPBUGS-25015](https://issues.redhat.com/browse/OCPBUGS-25015): Updating kube-proxy-container image to be consistent with ART [#596](https://github.com/openshift/sdn/pull/596)
* [OCPBUGS-25036](https://issues.redhat.com/browse/OCPBUGS-25036): Use openshift-clients rpm rather than cli image [#593](https://github.com/openshift/sdn/pull/593)
* [OCPBUGS-22077](https://issues.redhat.com/browse/OCPBUGS-22077): update x/net to v0.17.0 [#585](https://github.com/openshift/sdn/pull/585)
* [OCPBUGS-16788](https://issues.redhat.com/browse/OCPBUGS-16788): Create IPAM files with 0600 permissions [#584](https://github.com/openshift/sdn/pull/584)
* [SDN-4123](https://issues.redhat.com/browse/SDN-4123): rebase sdn to kube 1.28.3 [#580](https://github.com/openshift/sdn/pull/580)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): Controller: add flag for node name [#578](https://github.com/openshift/sdn/pull/578)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-proxy images to be consistent with ART [#575](https://github.com/openshift/sdn/pull/575)
* [OCPBUGS-19103](https://issues.redhat.com/browse/OCPBUGS-19103): Updating ose-sdn images to be consistent with ART [#574](https://github.com/openshift/sdn/pull/574)
* Collect pod operation latency metrics properly [#576](https://github.com/openshift/sdn/pull/576)
* Live migration: Add flows that allow openshift-sdn to connect to ovnkube [#569](https://github.com/openshift/sdn/pull/569)
* [Full changelog](https://github.com/openshift/sdn/compare/1a9befcb519d0b6c6a0907d514493f1d88aacf45...5b658c433786797d0ac1b870db08346584794514)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/8ea2c994df4296ec161023d8ff85f9ea0e383216)
* [OCPBUGS-31955](https://issues.redhat.com/browse/OCPBUGS-31955): Merge upstream v0.17.1 release [#98](https://github.com/openshift/kube-rbac-proxy/pull/98)
* [AUTH-486](https://issues.redhat.com/browse/AUTH-486): Add tests for the hardcoded-authorizer feature [#90](https://github.com/openshift/kube-rbac-proxy/pull/90)
* [OCPBUGS-29974](https://issues.redhat.com/browse/OCPBUGS-29974): Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/kube-rbac-proxy/pull/91)
* [OCPBUGS-24818](https://issues.redhat.com/browse/OCPBUGS-24818): Updating kube-rbac-proxy-container image to be consistent with ART [#88](https://github.com/openshift/kube-rbac-proxy/pull/88)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-rbac-proxy images to be consistent with ART [#72](https://github.com/openshift/kube-rbac-proxy/pull/72)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/1a646b98d8864e53accb726531d86f084ab13977...8ea2c994df4296ec161023d8ff85f9ea0e383216)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/9b67b8d1adbd63e27b622b3d050e0673766a6f2d)
* NO-JIRA: Merge `v2.11.0` and `v2.12.0` tags [#110](https://github.com/openshift/kube-state-metrics/pull/110)
* [OCPBUGS-25585](https://issues.redhat.com/browse/OCPBUGS-25585): Updating kube-state-metrics-container image to be consistent with ART [#109](https://github.com/openshift/kube-state-metrics/pull/109)
* [OCPBUGS-24993](https://issues.redhat.com/browse/OCPBUGS-24993): Updating kube-state-metrics-container image to be consistent with ART [#108](https://github.com/openshift/kube-state-metrics/pull/108)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Bump openshift/kube-state-metrics to v2.10.1 [#107](https://github.com/openshift/kube-state-metrics/pull/107)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Merge tag v2.10.1 [#106](https://github.com/openshift/kube-state-metrics/pull/106)
* [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100)
* add `machine424` and `rexagod` to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96)
* [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/db0c54994a6aad9155a94513eaa3480c1812f45e...9b67b8d1adbd63e27b622b3d050e0673766a6f2d)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)
* [OCPBUGS-27929](https://issues.redhat.com/browse/OCPBUGS-27929): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 [#203](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/203)
* [OCPBUGS-24969](https://issues.redhat.com/browse/OCPBUGS-24969): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#202](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/202)
* [OCPBUGS-19227](https://issues.redhat.com/browse/OCPBUGS-19227): Updating ose-kube-storage-version-migrator images to be consistent with ART [#199](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/199)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/3db76104a38bd9160ca24e2ed4a33649843f210a)
* [OCPBUGS-30518](https://issues.redhat.com/browse/OCPBUGS-30518): Upstream rebase 18 04 2024 [#41](https://github.com/openshift/cloud-provider-kubevirt/pull/41)
* [OCPBUGS-24936](https://issues.redhat.com/browse/OCPBUGS-24936): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#30](https://github.com/openshift/cloud-provider-kubevirt/pull/30)
* [OCPBUGS-26182](https://issues.redhat.com/browse/OCPBUGS-26182): Upstream rebease 4 5 2024 [#40](https://github.com/openshift/cloud-provider-kubevirt/pull/40)
* [OCPBUGS-30303](https://issues.redhat.com/browse/OCPBUGS-30303): Merge github.com/kubevirt 03 06 2024 [#35](https://github.com/openshift/cloud-provider-kubevirt/pull/35)
* [OCPBUGS-19193](https://issues.redhat.com/browse/OCPBUGS-19193): Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-kubevirt/pull/25)
* Auto sync upstream 2023 09 15 20 36 [#24](https://github.com/openshift/cloud-provider-kubevirt/pull/24)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/7d96f56d4bbc8449fdddbdbc630d9337097f0030...3db76104a38bd9160ca24e2ed4a33649843f210a)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/0693093f773c5046e231f174e7930315feabd996)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Enable snapshot tests [#40](https://github.com/openshift/kubevirt-csi-driver/pull/40)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Sync upstream kubevirt-csi 2024-04-19 [#39](https://github.com/openshift/kubevirt-csi-driver/pull/39)
* "NO-JIRA: Sync upstream kubevirt-csi 2024-04-08" [#38](https://github.com/openshift/kubevirt-csi-driver/pull/38)
* [OCPBUGS-31276](https://issues.redhat.com/browse/OCPBUGS-31276): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/kubevirt-csi-driver/pull/37)
* [CNV-32073](https://issues.redhat.com/browse/CNV-32073): Sync upstream 2024-03-15 [#36](https://github.com/openshift/kubevirt-csi-driver/pull/36)
* NO-JIRA: Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#32](https://github.com/openshift/kubevirt-csi-driver/pull/32)
* NO-JIRA: Snapshot backport [#31](https://github.com/openshift/kubevirt-csi-driver/pull/31)
* NO-JIRA: Auto sync upstream 2024 01 05 18 36 [#27](https://github.com/openshift/kubevirt-csi-driver/pull/27)
* [OCPBUGS-24805](https://issues.redhat.com/browse/OCPBUGS-24805): Updating ose-kubevirt-csi-driver-container image to be consistent with ART [#26](https://github.com/openshift/kubevirt-csi-driver/pull/26)
* [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23)
* Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...0693093f773c5046e231f174e7930315feabd996)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/a336f0b5f7ee99c418aaab3d511707bd0064bd56)
* [OCPBUGS-26046](https://issues.redhat.com/browse/OCPBUGS-26046): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#281](https://github.com/openshift/cluster-api-provider-libvirt/pull/281)
* [OCPBUGS-25630](https://issues.redhat.com/browse/OCPBUGS-25630): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/cluster-api-provider-libvirt/pull/276)
* [OCPBUGS-25173](https://issues.redhat.com/browse/OCPBUGS-25173): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#275](https://github.com/openshift/cluster-api-provider-libvirt/pull/275)
* [OCPBUGS-25101](https://issues.redhat.com/browse/OCPBUGS-25101): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#274](https://github.com/openshift/cluster-api-provider-libvirt/pull/274)
* [OCPBUGS-24833](https://issues.redhat.com/browse/OCPBUGS-24833): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#273](https://github.com/openshift/cluster-api-provider-libvirt/pull/273)
* Add workaround for SLOF regression [#263](https://github.com/openshift/cluster-api-provider-libvirt/pull/263)
* client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260)
* [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...a336f0b5f7ee99c418aaab3d511707bd0064bd56)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/49a82ff09217fcef6c3c51d0a0e34582b5355c98)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1220](https://github.com/openshift/machine-api-operator/pull/1220)
* [OCPCLOUD-2501](https://issues.redhat.com/browse/OCPCLOUD-2501): Update to set GpuType annotation to remove hardcoded value [#1226](https://github.com/openshift/machine-api-operator/pull/1226)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Bug fix in unit test [#1232](https://github.com/openshift/machine-api-operator/pull/1232)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add unit tests for the functions handling ScaleFromZero annotations [#1227](https://github.com/openshift/machine-api-operator/pull/1227)
* [OCPBUGS-31962](https://issues.redhat.com/browse/OCPBUGS-31962): Bump x/net to v.0.24.0 [#1228](https://github.com/openshift/machine-api-operator/pull/1228)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1219](https://github.com/openshift/machine-api-operator/pull/1219)
* [OCPBUGS-29874](https://issues.redhat.com/browse/OCPBUGS-29874): Apply hypershift cluster-profile for ibm-cloud-managed [#1218](https://github.com/openshift/machine-api-operator/pull/1218)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump IPAM types to v1beta1. [#1205](https://github.com/openshift/machine-api-operator/pull/1205)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Add build tags to tools.go file to solve linting issues when running Snyk scans [#1215](https://github.com/openshift/machine-api-operator/pull/1215)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add additional vnet join permission for Azure [#1212](https://github.com/openshift/machine-api-operator/pull/1212)
* [SPLAT-1386](https://issues.redhat.com/browse/SPLAT-1386): reconcile additional tags assigned to machine [#1204](https://github.com/openshift/machine-api-operator/pull/1204)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Fix formatting in snyk vendor exclusions [#1201](https://github.com/openshift/machine-api-operator/pull/1201)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1211](https://github.com/openshift/machine-api-operator/pull/1211)
* [CFE-684](https://issues.redhat.com/browse/CFE-684), [OCPCLOUD-2430](https://issues.redhat.com/browse/OCPCLOUD-2430): Rebase k8s 1.29 and update dependencies [#1208](https://github.com/openshift/machine-api-operator/pull/1208)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Update GCPCloudCredentials with TagUser role [#1158](https://github.com/openshift/machine-api-operator/pull/1158)
* [OCPBUGS-27385](https://issues.redhat.com/browse/OCPBUGS-27385): Add useExternalIp gcp permission [#1206](https://github.com/openshift/machine-api-operator/pull/1206)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Set --max-concurrent-reconciles=10 for Azure machine controller [#1203](https://github.com/openshift/machine-api-operator/pull/1203)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Add AddWithActuatorOpts to allow overriding Machine controller options [#1202](https://github.com/openshift/machine-api-operator/pull/1202)
* [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1178](https://github.com/openshift/machine-api-operator/pull/1178)
* [OCPBUGS-25580](https://issues.redhat.com/browse/OCPBUGS-25580): Updating ose-machine-api-operator-container image to be consistent with ART [#1190](https://github.com/openshift/machine-api-operator/pull/1190)
* [OCPBUGS-25735](https://issues.redhat.com/browse/OCPBUGS-25735): Add Snyk file to exclude vendor directory on scan [#1192](https://github.com/openshift/machine-api-operator/pull/1192)
* [OCPBUGS-24980](https://issues.redhat.com/browse/OCPBUGS-24980): Updating ose-machine-api-operator-container image to be consistent with ART [#1187](https://github.com/openshift/machine-api-operator/pull/1187)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Update reference URL [#1184](https://github.com/openshift/machine-api-operator/pull/1184)
* [OCPVE-778](https://issues.redhat.com/browse/OCPVE-778): annotate cloud credentials request [#1174](https://github.com/openshift/machine-api-operator/pull/1174)
* [OCPBUGS-24151](https://issues.redhat.com/browse/OCPBUGS-24151): Updating ose-machine-api-operator-container image to be consistent with ART [#1179](https://github.com/openshift/machine-api-operator/pull/1179)
* NO-JIRA: Update OWNERS [#1183](https://github.com/openshift/machine-api-operator/pull/1183)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#1171](https://github.com/openshift/machine-api-operator/pull/1171)
* [OCPCLOUD-2138](https://issues.redhat.com/browse/OCPCLOUD-2138): Add module to work with scale from zero annotations for MachineSet [#1169](https://github.com/openshift/machine-api-operator/pull/1169)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Use docs URL instead of KCS article [#1172](https://github.com/openshift/machine-api-operator/pull/1172)
* [OCPBUGS-21815](https://issues.redhat.com/browse/OCPBUGS-21815): Bump golang.org/x/net to v0.17.0 [#1170](https://github.com/openshift/machine-api-operator/pull/1170)
* [OCPCLOUD-2194](https://issues.redhat.com/browse/OCPCLOUD-2194): Update k8s dependencies 1.28 [#1168](https://github.com/openshift/machine-api-operator/pull/1168)
* [MGMT-13425](https://issues.redhat.com/browse/MGMT-13425): Don't fail when workers not needed [#1165](https://github.com/openshift/machine-api-operator/pull/1165)
* [SPLAT-1172](https://issues.redhat.com/browse/SPLAT-1172): Enhance machine status relating to IPAddressClaimed [#1166](https://github.com/openshift/machine-api-operator/pull/1166)
* [OCPBUGS-19241](https://issues.redhat.com/browse/OCPBUGS-19241): Updating ose-machine-api-operator images to be consistent with ART [#1167](https://github.com/openshift/machine-api-operator/pull/1167)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/73f2a1f3f772b86bff3755bb444cfa7e182775f9...49a82ff09217fcef6c3c51d0a0e34582b5355c98)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b118fb4e80373d2ea0c1158bc5abbcdf2e8e674c)
* [OCPBUGS-35299](https://issues.redhat.com/browse/OCPBUGS-35299): Panic when we remove an OCB infra MCP and we try to create new ones with different names [#4403](https://github.com/openshift/machine-config-operator/pull/4403)
* [OCPBUGS-35042](https://issues.redhat.com/browse/OCPBUGS-35042): ensure event handlers are registered after queue is configured [#4394](https://github.com/openshift/machine-config-operator/pull/4394)
* [OCPBUGS-34799](https://issues.redhat.com/browse/OCPBUGS-34799): set required-scc for openshift workloads [#4384](https://github.com/openshift/machine-config-operator/pull/4384)
* [OCPBUGS-33901](https://issues.redhat.com/browse/OCPBUGS-33901): machine-os-puller SA refreshes every hour, causing machine config regeneration [#4374](https://github.com/openshift/machine-config-operator/pull/4374)
* [OCPBUGS-10498](https://issues.redhat.com/browse/OCPBUGS-10498): If multiple hostnames are returned, use the first one for the Node name [#4368](https://github.com/openshift/machine-config-operator/pull/4368)
* [OKD-212](https://issues.redhat.com/browse/OKD-212): Reference `stream-coreos` instead of `centos-stream-coreos-9` [#4349](https://github.com/openshift/machine-config-operator/pull/4349)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821), [OCPBUGS-31381](https://issues.redhat.com/browse/OCPBUGS-31381): certificate_writer: clean up disk-write logic [#4343](https://github.com/openshift/machine-config-operator/pull/4343)
* [MCO-1131](https://issues.redhat.com/browse/MCO-1131): Merge implementation machineOSBuild and machineOSConfig in MCO [#4327](https://github.com/openshift/machine-config-operator/pull/4327)
* [OCPBUGS-33357](https://issues.redhat.com/browse/OCPBUGS-33357): Check both ready and health ingress endpoints [#4356](https://github.com/openshift/machine-config-operator/pull/4356)
* [OCPBUGS-32583](https://issues.redhat.com/browse/OCPBUGS-32583): daemon/pinned-image-set: refactor mirrored registry auth [#4345](https://github.com/openshift/machine-config-operator/pull/4345)
* [OCPBUGS-33046](https://issues.redhat.com/browse/OCPBUGS-33046): improve status reporting for pinned image sets [#4339](https://github.com/openshift/machine-config-operator/pull/4339)
* [OPNET-282](https://issues.redhat.com/browse/OPNET-282): Configure-ovs alternative implementation [#4249](https://github.com/openshift/machine-config-operator/pull/4249)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Only re-bootstrap kubelet on X.509 errors [#4351](https://github.com/openshift/machine-config-operator/pull/4351)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: logSystem the Kube API errors that trigger a re-bootstrap [#4342](https://github.com/openshift/machine-config-operator/pull/4342)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix CoreDNS pod definition on bootstrap nodes on cloud platforms [#4238](https://github.com/openshift/machine-config-operator/pull/4238)
* [OCPBUGS-11936](https://issues.redhat.com/browse/OCPBUGS-11936): Wait for OpenStack Metadata service [#4092](https://github.com/openshift/machine-config-operator/pull/4092)
* NO-ISSUE: API bump & reconcile feature gates move [#4335](https://github.com/openshift/machine-config-operator/pull/4335)
* NO-ISSUE: Add NodeDisruptionPolicy docs [#4336](https://github.com/openshift/machine-config-operator/pull/4336)
* [OCPBUGS-32739](https://issues.redhat.com/browse/OCPBUGS-32739): MachineConfigurations is only effective with name <cluster> [#4332](https://github.com/openshift/machine-config-operator/pull/4332)
* [MCO-1017](https://issues.redhat.com/browse/MCO-1017): MCO-1018 MCO-1019: MCO-1020: MCO-1021: OCPBUGS-32583: OCPBUGS-32679: Implement PinnedImageSets [#4303](https://github.com/openshift/machine-config-operator/pull/4303)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Ignore watch failure unless kubelet needs a rebootstrap [#4337](https://github.com/openshift/machine-config-operator/pull/4337)
* [MCO-1009](https://issues.redhat.com/browse/MCO-1009): MCO-1008: MCO-905: Implement NodeDisruptionPolicy API [#4267](https://github.com/openshift/machine-config-operator/pull/4267)
* [OCPBUGS-32138](https://issues.redhat.com/browse/OCPBUGS-32138): add cluster fleet evaluation support to mco [#4316](https://github.com/openshift/machine-config-operator/pull/4316)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): cleanup: update references in docs from machine-os-contenet to rhel-coreos [#4329](https://github.com/openshift/machine-config-operator/pull/4329)
* [MCO-1029](https://issues.redhat.com/browse/MCO-1029): MCO-678: Implement Boot Image update opt-in API [#4281](https://github.com/openshift/machine-config-operator/pull/4281)
* [MCO-1117](https://issues.redhat.com/browse/MCO-1117): Make local MCO image builds faster [#4296](https://github.com/openshift/machine-config-operator/pull/4296)
* [OCPBUGS-32278](https://issues.redhat.com/browse/OCPBUGS-32278): Fix configure-ip-forwarding.sh [#4323](https://github.com/openshift/machine-config-operator/pull/4323)
* [MCO-1102](https://issues.redhat.com/browse/MCO-1102): OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API [#4285](https://github.com/openshift/machine-config-operator/pull/4285)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4318](https://github.com/openshift/machine-config-operator/pull/4318)
* [MCO-1129](https://issues.redhat.com/browse/MCO-1129): Re-land Adapting the MCO featuregate usage to new API [#4315](https://github.com/openshift/machine-config-operator/pull/4315)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4319](https://github.com/openshift/machine-config-operator/pull/4319)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Support Cluster ImagePolicy CRD [#4160](https://github.com/openshift/machine-config-operator/pull/4160)
* [OCPBUGS-32028](https://issues.redhat.com/browse/OCPBUGS-32028): Decrease logs of haproxy [#4245](https://github.com/openshift/machine-config-operator/pull/4245)
* [OCPBUGS-30192](https://issues.redhat.com/browse/OCPBUGS-30192): Move StartLimitIntervalSec to Unit section [#4304](https://github.com/openshift/machine-config-operator/pull/4304)
* [OCPBUGS-28577](https://issues.redhat.com/browse/OCPBUGS-28577): MCO-1030, MCO-910: Updating MCO base image to RHEL9 [#4241](https://github.com/openshift/machine-config-operator/pull/4241)
* [OCPBUGS-22910](https://issues.redhat.com/browse/OCPBUGS-22910): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4016](https://github.com/openshift/machine-config-operator/pull/4016)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955): make sure CO degrades if OCL config is invalid [#4294](https://github.com/openshift/machine-config-operator/pull/4294)
* [OCPBUGS-31630](https://issues.redhat.com/browse/OCPBUGS-31630): fix: resources were in the wrong indentation level [#4299](https://github.com/openshift/machine-config-operator/pull/4299)
* [TRT-1587](https://issues.redhat.com/browse/TRT-1587): Revert #4275 "MCO-1092: Adapt the MCO's featuregate usage to new API" [#4295](https://github.com/openshift/machine-config-operator/pull/4295)
* [OCPBUGS-31376](https://issues.redhat.com/browse/OCPBUGS-31376): kubelet: restorecon necessary files on kubelet's prestart [#4287](https://github.com/openshift/machine-config-operator/pull/4287)
* [MCO-1092](https://issues.redhat.com/browse/MCO-1092): Adapt the MCO's featuregate usage to new API [#4275](https://github.com/openshift/machine-config-operator/pull/4275)
* [OCPBUGS-31067](https://issues.redhat.com/browse/OCPBUGS-31067): server: still serve kubeconfig with node-bootstrapper-token [#4276](https://github.com/openshift/machine-config-operator/pull/4276)
* [OCPBUGS-9108](https://issues.redhat.com/browse/OCPBUGS-9108): OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading [#4240](https://github.com/openshift/machine-config-operator/pull/4240)
* [OCPBUGS-27316](https://issues.redhat.com/browse/OCPBUGS-27316): configure-ovs: generate profiles directly in /run [#4042](https://github.com/openshift/machine-config-operator/pull/4042)
* [OCPBUGS-25744](https://issues.redhat.com/browse/OCPBUGS-25744), [OPNET-303](https://issues.redhat.com/browse/OPNET-303): Remove weights from ingress check script [#3698](https://github.com/openshift/machine-config-operator/pull/3698)
* [OCPBUGS-31365](https://issues.redhat.com/browse/OCPBUGS-31365): make verify should use MCO's kube version [#4280](https://github.com/openshift/machine-config-operator/pull/4280)
* [MCO-760](https://issues.redhat.com/browse/MCO-760): add rebuild mechanism to ocb [#4189](https://github.com/openshift/machine-config-operator/pull/4189)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Updates GCR CredentialProviderConfig [#4260](https://github.com/openshift/machine-config-operator/pull/4260)
* [OCPBUGS-30852](https://issues.redhat.com/browse/OCPBUGS-30852): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4261](https://github.com/openshift/machine-config-operator/pull/4261)
* [MCO-909](https://issues.redhat.com/browse/MCO-909): Openshift/Kubernetes 1.29 Rebase Updates [#4256](https://github.com/openshift/machine-config-operator/pull/4256)
* [OCPBUGS-30239](https://issues.redhat.com/browse/OCPBUGS-30239): Prevent OVS-configuration to run before kdump [#4213](https://github.com/openshift/machine-config-operator/pull/4213)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514), [OCPCLOUD-2516](https://issues.redhat.com/browse/OCPCLOUD-2516): Remove reliance on feature gates for cloud provider flags [#4228](https://github.com/openshift/machine-config-operator/pull/4228)
* NO-JIRA: Sync CRI-O owners [#4234](https://github.com/openshift/machine-config-operator/pull/4234)
* [OCPNODE-2098](https://issues.redhat.com/browse/OCPNODE-2098): Add static pod for kube-rbac-proxy-crio [#4175](https://github.com/openshift/machine-config-operator/pull/4175)
* [OCPCLOUD-2462](https://issues.redhat.com/browse/OCPCLOUD-2462): Add Image Credential Provider flags for Kubelet on Azure [#4222](https://github.com/openshift/machine-config-operator/pull/4222)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821): backportable version of api-int cert work [#4106](https://github.com/openshift/machine-config-operator/pull/4106)
* [MCO-898](https://issues.redhat.com/browse/MCO-898): OCPBUGS-29857: OCPBUGS-29819: Implement an alerting mechanism for boot image update failures [#4194](https://github.com/openshift/machine-config-operator/pull/4194)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Add Image Credential Provider flags for Kubelet on GCP [#4224](https://github.com/openshift/machine-config-operator/pull/4224)
* [OCPBUGS-30136](https://issues.redhat.com/browse/OCPBUGS-30136): APIVersion and Kind sometimes are empty when listing objects [#4231](https://github.com/openshift/machine-config-operator/pull/4231)
* [OCPBUGS-29946](https://issues.redhat.com/browse/OCPBUGS-29946): Prevent pull images in podmanCopy if they are present [#4216](https://github.com/openshift/machine-config-operator/pull/4216)
* [OCPBUGS-18670](https://issues.redhat.com/browse/OCPBUGS-18670): OCPBUGS-18535: MCO-809: rendercontroller should also reconcile machineconfigs [#4158](https://github.com/openshift/machine-config-operator/pull/4158)
* [OCPBUGS-30090](https://issues.redhat.com/browse/OCPBUGS-30090): add node owner to MCN [#4223](https://github.com/openshift/machine-config-operator/pull/4223)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Add HostToContainer propogataion for coreDNS pods on cloud platforms [#4218](https://github.com/openshift/machine-config-operator/pull/4218)
* NO-JIRA: ovs-configfuration, run after nmstate.service [#4212](https://github.com/openshift/machine-config-operator/pull/4212)
* [OCPBUGS-29713](https://issues.redhat.com/browse/OCPBUGS-29713): set nodeStatusReportFrequency [#4204](https://github.com/openshift/machine-config-operator/pull/4204)
* [MCO-998](https://issues.redhat.com/browse/MCO-998): sets up MCO repository for Snyk CI scans [#4197](https://github.com/openshift/machine-config-operator/pull/4197)
* [OCPBUGS-29732](https://issues.redhat.com/browse/OCPBUGS-29732): Always touch resolv-prepender file at end of script [#4207](https://github.com/openshift/machine-config-operator/pull/4207)
* [OCPBUGS-29659](https://issues.redhat.com/browse/OCPBUGS-29659): Apply new DNS configuration only if changed [#4196](https://github.com/openshift/machine-config-operator/pull/4196)
* [OCPBUGS-29624](https://issues.redhat.com/browse/OCPBUGS-29624): Restart resolv-prepender on failure [#4201](https://github.com/openshift/machine-config-operator/pull/4201)
* [OCPNODE-1877](https://issues.redhat.com/browse/OCPNODE-1877): Delete image openshift/openshift-proxy-pull-test [#4047](https://github.com/openshift/machine-config-operator/pull/4047)
* NO-JIRA: nmstate, configure nmstate to keep service yamls [#4190](https://github.com/openshift/machine-config-operator/pull/4190)
* NO-ISSUE: OWNERS: Remove myself from reviewers [#3628](https://github.com/openshift/machine-config-operator/pull/3628)
* NO-ISSUE: add e2e-techpreview-shared, remove layering test target [#4183](https://github.com/openshift/machine-config-operator/pull/4183)
* [OCPBUGS-27162](https://issues.redhat.com/browse/OCPBUGS-27162): Add dependency on crio-wipe to resolv-prepender [#4146](https://github.com/openshift/machine-config-operator/pull/4146)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Revert "Revert "Merge pull request #4028 from cybertron/wait-for-br-ex"" [#4079](https://github.com/openshift/machine-config-operator/pull/4079)
* [OPNET-355](https://issues.redhat.com/browse/OPNET-355): Use NM's dns-change event for resolv.conf [#4133](https://github.com/openshift/machine-config-operator/pull/4133)
* [OCPBUGS-18940](https://issues.redhat.com/browse/OCPBUGS-18940): Add keepalived healthcheck for machine-config-server [#4129](https://github.com/openshift/machine-config-operator/pull/4129)
* [MCO-774](https://issues.redhat.com/browse/MCO-774): Write e2e tests for bootimage management [#4177](https://github.com/openshift/machine-config-operator/pull/4177)
* NO-JIRA: remove kube-rbac-proxy for crio port [#4181](https://github.com/openshift/machine-config-operator/pull/4181)
* [OCPBUGS-26951](https://issues.redhat.com/browse/OCPBUGS-26951): annotate on-prem static pods for workload partitioning [#4143](https://github.com/openshift/machine-config-operator/pull/4143)
* NO-JIRA: Fix patch comparison bug in test [#4176](https://github.com/openshift/machine-config-operator/pull/4176)
* docs/HACKING: Update command for building customize OCP release [#4023](https://github.com/openshift/machine-config-operator/pull/4023)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955), [OCPBUGS-18989](https://issues.redhat.com/browse/OCPBUGS-18989), [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): add capability to react to OCB ImageBuilderType changes [#4127](https://github.com/openshift/machine-config-operator/pull/4127)
* [OCPBUGS-29098](https://issues.redhat.com/browse/OCPBUGS-29098): Revert "OCPNODE-2024: crio: migrate metrics port to localhost only" [#4168](https://github.com/openshift/machine-config-operator/pull/4168)
* [OCPBUGS-28969](https://issues.redhat.com/browse/OCPBUGS-28969): On-prem coredns manifests should not be generated for GCP [#4165](https://github.com/openshift/machine-config-operator/pull/4165)
* [OCPBUGS-26557](https://issues.redhat.com/browse/OCPBUGS-26557): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4111](https://github.com/openshift/machine-config-operator/pull/4111)
* [OCPNODE-2024](https://issues.redhat.com/browse/OCPNODE-2024): crio: migrate metrics port to localhost only [#4164](https://github.com/openshift/machine-config-operator/pull/4164)
* [OCPBUGS-24356](https://issues.redhat.com/browse/OCPBUGS-24356): ovs-configure: fix `vlan_parent` calculation [#4055](https://github.com/openshift/machine-config-operator/pull/4055)
* [OCPBUGS-24705](https://issues.redhat.com/browse/OCPBUGS-24705): consider currentImage and desiredImage annotations [#4135](https://github.com/openshift/machine-config-operator/pull/4135)
* [CORS-2814](https://issues.redhat.com/browse/CORS-2814): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4018](https://github.com/openshift/machine-config-operator/pull/4018)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721), [OCPBUGS-25753](https://issues.redhat.com/browse/OCPBUGS-25753): Run resolv-prepender entirely async [#4102](https://github.com/openshift/machine-config-operator/pull/4102)
* [OCPBUGS-26489](https://issues.redhat.com/browse/OCPBUGS-26489): feat: enable nodeip service for single node [#4142](https://github.com/openshift/machine-config-operator/pull/4142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#4147](https://github.com/openshift/machine-config-operator/pull/4147)
* [OCPBUGS-24366](https://issues.redhat.com/browse/OCPBUGS-24366): Delete state files on reboot only [#4124](https://github.com/openshift/machine-config-operator/pull/4124)
* [OCPBUGS-17788](https://issues.redhat.com/browse/OCPBUGS-17788): Improved error handling for missing MC [#4096](https://github.com/openshift/machine-config-operator/pull/4096)
* [OCPBUGS-27508](https://issues.redhat.com/browse/OCPBUGS-27508): daemon: allow the user to override drains on IR changes [#4139](https://github.com/openshift/machine-config-operator/pull/4139)
* [MCO-831](https://issues.redhat.com/browse/MCO-831): added feature gate to mco for on cluster builds [#4060](https://github.com/openshift/machine-config-operator/pull/4060)
* [OCPNODE-2005](https://issues.redhat.com/browse/OCPNODE-2005): crio: add support for LinkLogs annotation by default [#4116](https://github.com/openshift/machine-config-operator/pull/4116)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Bump k8s api to v0.29.0 [#4119](https://github.com/openshift/machine-config-operator/pull/4119)
* [OCPBUGS-27190](https://issues.redhat.com/browse/OCPBUGS-27190): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4125](https://github.com/openshift/machine-config-operator/pull/4125)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Add Image Credential Provider flags for Kubelet on AWS [#4103](https://github.com/openshift/machine-config-operator/pull/4103)
* [OCPNODE-2021](https://issues.redhat.com/browse/OCPNODE-2021): add crio-kube-rbac-proxy [#4108](https://github.com/openshift/machine-config-operator/pull/4108)
* [OCPBUGS-24831](https://issues.redhat.com/browse/OCPBUGS-24831): Updating ose-machine-config-operator-container image to be consistent with ART [#4070](https://github.com/openshift/machine-config-operator/pull/4070)
* [OCPBUGS-22664](https://issues.redhat.com/browse/OCPBUGS-22664): Mount /run/nodeip-configuration into coredns containers [#4058](https://github.com/openshift/machine-config-operator/pull/4058)
* [OCPBUGS-27261](https://issues.redhat.com/browse/OCPBUGS-27261): Fix typo in AWS node env unit [#4126](https://github.com/openshift/machine-config-operator/pull/4126)
* NO-ISSUE: Update the design doc dual support icsp and idms [#4085](https://github.com/openshift/machine-config-operator/pull/4085)
* NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets [#4089](https://github.com/openshift/machine-config-operator/pull/4089)
* [OCPBUGS-25725](https://issues.redhat.com/browse/OCPBUGS-25725): ManagedBootImages: failed to fetch architecture type of machineset no linked machine found [#4088](https://github.com/openshift/machine-config-operator/pull/4088)
* [OCPBUGS-26605](https://issues.redhat.com/browse/OCPBUGS-26605): use machine client instead of oc for teardown [#4110](https://github.com/openshift/machine-config-operator/pull/4110)
* [OCPBUGS-5452](https://issues.redhat.com/browse/OCPBUGS-5452): If node is not in pool, error [#4097](https://github.com/openshift/machine-config-operator/pull/4097)
* [OCPBUGS-24416](https://issues.redhat.com/browse/OCPBUGS-24416): Sync MCN with node creation and deletion [#4062](https://github.com/openshift/machine-config-operator/pull/4062)
* NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports [#4091](https://github.com/openshift/machine-config-operator/pull/4091)
* [MCO-679](https://issues.redhat.com/browse/MCO-679): MCO-830: Managed boot images MVP [#4083](https://github.com/openshift/machine-config-operator/pull/4083)
* [OCPBUGS-25406](https://issues.redhat.com/browse/OCPBUGS-25406): Azure Run ovs-configuration.service before dnsmasq.service [#4087](https://github.com/openshift/machine-config-operator/pull/4087)
* [OCPBUGS-19628](https://issues.redhat.com/browse/OCPBUGS-19628): Log network service output to console [#3927](https://github.com/openshift/machine-config-operator/pull/3927)
* [OCPBUGS-25362](https://issues.redhat.com/browse/OCPBUGS-25362): kubelet: fix kubelet labels [#4074](https://github.com/openshift/machine-config-operator/pull/4074)
* [OCPBUGS-19427](https://issues.redhat.com/browse/OCPBUGS-19427): Add source and mirror format regex validation [#4064](https://github.com/openshift/machine-config-operator/pull/4064)
* docs/MachineOSBuilderDesign: 'Known Limitations' links [#4086](https://github.com/openshift/machine-config-operator/pull/4086)
* [OCPBUGS-25412](https://issues.redhat.com/browse/OCPBUGS-25412): APIServer URL env should exist on all nodes [#4076](https://github.com/openshift/machine-config-operator/pull/4076)
* [OCPBUGS-25245](https://issues.redhat.com/browse/OCPBUGS-25245): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4073](https://github.com/openshift/machine-config-operator/pull/4073)
* [OCPBUGS-24030](https://issues.redhat.com/browse/OCPBUGS-24030): add uncordon to mcn [#4065](https://github.com/openshift/machine-config-operator/pull/4065)
* [OCPBUGS-23085](https://issues.redhat.com/browse/OCPBUGS-23085): MCO duplicates kernel arguments during firstboot [#4046](https://github.com/openshift/machine-config-operator/pull/4046)
* [OCPBUGS-25144](https://issues.redhat.com/browse/OCPBUGS-25144): Remove MCN lister and informer from MCO struct [#4071](https://github.com/openshift/machine-config-operator/pull/4071)
* [OCPBUGS-24743](https://issues.redhat.com/browse/OCPBUGS-24743): crio: drop automatic image cleanup on upgrades [#4068](https://github.com/openshift/machine-config-operator/pull/4068)
* [OCPNODE-1943](https://issues.redhat.com/browse/OCPNODE-1943): crio: add crun handler to template [#4054](https://github.com/openshift/machine-config-operator/pull/4054)
* [OCPBUGS-17877](https://issues.redhat.com/browse/OCPBUGS-17877): daemon: Add support for new nmstate logic [#4020](https://github.com/openshift/machine-config-operator/pull/4020)
* [OCPBUGS-21597](https://issues.redhat.com/browse/OCPBUGS-21597): Alleviate confusion over mco_state [#4000](https://github.com/openshift/machine-config-operator/pull/4000)
* [OCPBUGS-24012](https://issues.redhat.com/browse/OCPBUGS-24012): Add templates for gc_thresh sysctls [#4048](https://github.com/openshift/machine-config-operator/pull/4048)
* [OCPBUGS-24035](https://issues.redhat.com/browse/OCPBUGS-24035): execute cert related processes to ensure proper rotation [#4050](https://github.com/openshift/machine-config-operator/pull/4050)
* [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#4052](https://github.com/openshift/machine-config-operator/pull/4052)
* [OCPBUGS-19352](https://issues.redhat.com/browse/OCPBUGS-19352): Fix bootstrap with NTO Operator and duplicate MachineConfigs [#3972](https://github.com/openshift/machine-config-operator/pull/3972)
* [COS-2526](https://issues.redhat.com/browse/COS-2526): CoreOS: Remove `imgid` field in coreos aleph [#4034](https://github.com/openshift/machine-config-operator/pull/4034)
* [TRT-1377](https://issues.redhat.com/browse/TRT-1377): Revert #4028 "OCPBUGS-22324: Wait for br-ex up event before node-valid-hostname" [#4053](https://github.com/openshift/machine-config-operator/pull/4053)
* [TRT-1375](https://issues.redhat.com/browse/TRT-1375): Revert #3965 "MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics" [#4051](https://github.com/openshift/machine-config-operator/pull/4051)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds on-cluster build dev preview docs [#3885](https://github.com/openshift/machine-config-operator/pull/3885)
* [OCPBUGS-24177](https://issues.redhat.com/browse/OCPBUGS-24177): fix race for MCN creation [#4049](https://github.com/openshift/machine-config-operator/pull/4049)
* [OCPBUGS-15934](https://issues.redhat.com/browse/OCPBUGS-15934): unit test ctrrcfg uses *resource.Quantity to use *resource.Quantity [#4044](https://github.com/openshift/machine-config-operator/pull/4044)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Wait for br-ex up event before node-valid-hostname [#4028](https://github.com/openshift/machine-config-operator/pull/4028)
* [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#3965](https://github.com/openshift/machine-config-operator/pull/3965)
* [OCPBUGS-24019](https://issues.redhat.com/browse/OCPBUGS-24019): Add ownership annotations to TLS artifacts [#4045](https://github.com/openshift/machine-config-operator/pull/4045)
* [MCO-795](https://issues.redhat.com/browse/MCO-795): MCO-813: MCO-473: Implement Upgrade-Monitor, FeatureGate, and MachineConfigNode types [#4012](https://github.com/openshift/machine-config-operator/pull/4012)
* [OCPBUGS-23255](https://issues.redhat.com/browse/OCPBUGS-23255): Add FIPS information to oldconfig when checking if reboot is needed [#4033](https://github.com/openshift/machine-config-operator/pull/4033)
* [OCPBUGS-23484](https://issues.redhat.com/browse/OCPBUGS-23484): kubevirt, Activate nodeip-configuration.service [#4039](https://github.com/openshift/machine-config-operator/pull/4039)
* [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#4040](https://github.com/openshift/machine-config-operator/pull/4040)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Fix syntax in vsphere-hostname.yaml for CAPI machines [#4037](https://github.com/openshift/machine-config-operator/pull/4037)
* [OCPBUGS-23209](https://issues.redhat.com/browse/OCPBUGS-23209): workaround nmstate bug by configuring ipv{4,6} addresses [#4026](https://github.com/openshift/machine-config-operator/pull/4026)
* [OCPBUGS-22200](https://issues.redhat.com/browse/OCPBUGS-22200): Retry fetching OpenStack hostname if it fails [#3990](https://github.com/openshift/machine-config-operator/pull/3990)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721): Don't retry node-ip show in resolv-prepender [#4017](https://github.com/openshift/machine-config-operator/pull/4017)
* [MCO-772](https://issues.redhat.com/browse/MCO-772): controller: allow custom pool configs to take priority [#4015](https://github.com/openshift/machine-config-operator/pull/4015)
* [OCPBUGS-18414](https://issues.redhat.com/browse/OCPBUGS-18414), [OCPBUGS-18456](https://issues.redhat.com/browse/OCPBUGS-18456), [OCPBUGS-18458](https://issues.redhat.com/browse/OCPBUGS-18458): Configures SSH Keys and Password for core, fixes config drift degradation [#3946](https://github.com/openshift/machine-config-operator/pull/3946)
* Use the bridge interface name for ofport request [#3998](https://github.com/openshift/machine-config-operator/pull/3998)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): typo s/iface_default_hint_file/default_bridge_file/ [#4004](https://github.com/openshift/machine-config-operator/pull/4004)
* [OCPBUGS-16871](https://issues.redhat.com/browse/OCPBUGS-16871): MCO - currentConfig missing on the filesystem [#3963](https://github.com/openshift/machine-config-operator/pull/3963)
* [OCPBUGS-20369](https://issues.redhat.com/browse/OCPBUGS-20369): Require a hostname override for AWS [#3979](https://github.com/openshift/machine-config-operator/pull/3979)
* [OCPBUGS-21814](https://issues.redhat.com/browse/OCPBUGS-21814): bump library-go and k8s dependencies to most recent version [#3988](https://github.com/openshift/machine-config-operator/pull/3988)
* [OCPBUGS-19736](https://issues.redhat.com/browse/OCPBUGS-19736): configure-ovs: handle SIGINT and SIGTERM [#3982](https://github.com/openshift/machine-config-operator/pull/3982)
* Add kernel-64k kernelType [#3903](https://github.com/openshift/machine-config-operator/pull/3903)
* [MCO-593](https://issues.redhat.com/browse/MCO-593): Consume MCO API and CRDs from openshift/api [#3747](https://github.com/openshift/machine-config-operator/pull/3747)
* Get the nmstate pinned package from kojihub when building on top of a CentOS base image [#3954](https://github.com/openshift/machine-config-operator/pull/3954)
* CRI-O: Use `127.0.0.1` for stream server with random port [#3853](https://github.com/openshift/machine-config-operator/pull/3853)
* [OCPBUGS-20499](https://issues.redhat.com/browse/OCPBUGS-20499): gcp-routes: don't exit on crictl failures [#3977](https://github.com/openshift/machine-config-operator/pull/3977)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): Allow specifying the interface for br-ex [#3696](https://github.com/openshift/machine-config-operator/pull/3696)
* [OCPBUGS-20338](https://issues.redhat.com/browse/OCPBUGS-20338): dashboard should detect unknown and not ready for not ready dashboard [#3964](https://github.com/openshift/machine-config-operator/pull/3964)
* [OCPBUGS-19722](https://issues.redhat.com/browse/OCPBUGS-19722): Informers are setup with incorrect namespace [#3955](https://github.com/openshift/machine-config-operator/pull/3955)
* [OCPBUGS-15087](https://issues.redhat.com/browse/OCPBUGS-15087): templates: Introduce kubelet-dependencies.target [#3865](https://github.com/openshift/machine-config-operator/pull/3865)
* [OCPBUGS-17841](https://issues.redhat.com/browse/OCPBUGS-17841): Ensure gcp-routes hack for internalLB hairpin traffic works for SGW [#3953](https://github.com/openshift/machine-config-operator/pull/3953)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Set guestinfo.hostname for CAPI VMs on vSphere [#3949](https://github.com/openshift/machine-config-operator/pull/3949)
* [OCPBUGS-19708](https://issues.redhat.com/browse/OCPBUGS-19708): Support to append the duplicate kernel arguments to the rendered MC [#3947](https://github.com/openshift/machine-config-operator/pull/3947)
* [OCPBUGS-18771](https://issues.redhat.com/browse/OCPBUGS-18771): Consider ingress VIPs when selecting node IP [#3943](https://github.com/openshift/machine-config-operator/pull/3943)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): Drop `machine-os-content` references [#3364](https://github.com/openshift/machine-config-operator/pull/3364)
* [OCPBUGS-19992](https://issues.redhat.com/browse/OCPBUGS-19992): Add v6-primary dual stack support to VSphere UPI [#3670](https://github.com/openshift/machine-config-operator/pull/3670)
* [OCPNODE-1799](https://issues.redhat.com/browse/OCPNODE-1799): support icsp and idms objects [#3898](https://github.com/openshift/machine-config-operator/pull/3898)
* Improve kubelet error log [#3914](https://github.com/openshift/machine-config-operator/pull/3914)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): Use image exists in resolv-prepender instead of wc -l [#3910](https://github.com/openshift/machine-config-operator/pull/3910)
* [MCO-707](https://issues.redhat.com/browse/MCO-707): Strip registry transport from os image URL for comparison [#3857](https://github.com/openshift/machine-config-operator/pull/3857)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): Revert "Revert "fix nodeStatusUpdateFrequency"" [#3890](https://github.com/openshift/machine-config-operator/pull/3890)
* [OCPBUGS-17811](https://issues.redhat.com/browse/OCPBUGS-17811): add certificate input to bootstrap mcs [#3876](https://github.com/openshift/machine-config-operator/pull/3876)
* [MCO-746](https://issues.redhat.com/browse/MCO-746): make buildcontroller tests less flaky [#3905](https://github.com/openshift/machine-config-operator/pull/3905)
* [OCPBUGS-18902](https://issues.redhat.com/browse/OCPBUGS-18902): Internal Registry Secrets merge causing excessive API calls [#3912](https://github.com/openshift/machine-config-operator/pull/3912)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds e2e for on-cluster build dev preview [#3807](https://github.com/openshift/machine-config-operator/pull/3807)
* Dockerfile: update local copy to OCP 4.15 image [#3922](https://github.com/openshift/machine-config-operator/pull/3922)
* [OCPBUGS-19365](https://issues.redhat.com/browse/OCPBUGS-19365): Ignore invoking nbctl calls if its SDN [#3926](https://github.com/openshift/machine-config-operator/pull/3926)
* [OCPBUGS-15910](https://issues.redhat.com/browse/OCPBUGS-15910): After dual-stack conversion reconcile IPFamilies [#3909](https://github.com/openshift/machine-config-operator/pull/3909)
* [OCPBUGS-18800](https://issues.redhat.com/browse/OCPBUGS-18800): fix merged image registry CA behavior [#3851](https://github.com/openshift/machine-config-operator/pull/3851)
* mod: Update rpmostree-client-go [#3916](https://github.com/openshift/machine-config-operator/pull/3916)
* [OCPBUGS-13044](https://issues.redhat.com/browse/OCPBUGS-13044): daemon: always use `podman cp` to copy extensions container content [#3921](https://github.com/openshift/machine-config-operator/pull/3921)
* [OCPBUGS-18906](https://issues.redhat.com/browse/OCPBUGS-18906): Remove dependency on k8s.io/kubernetes packages [#3913](https://github.com/openshift/machine-config-operator/pull/3913)
* [OCPBUGS-19097](https://issues.redhat.com/browse/OCPBUGS-19097): Updating openshift-proxy-pull-test images to be consistent with ART [#3918](https://github.com/openshift/machine-config-operator/pull/3918)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again [#3907](https://github.com/openshift/machine-config-operator/pull/3907)
* [OCPBUGS-19179](https://issues.redhat.com/browse/OCPBUGS-19179): Updating ose-machine-config-operator images to be consistent with ART [#3919](https://github.com/openshift/machine-config-operator/pull/3919)
* [OCPBUGS-16905](https://issues.redhat.com/browse/OCPBUGS-16905): install: Recreate and delayed default ServiceAccount deletion [#3895](https://github.com/openshift/machine-config-operator/pull/3895)
* [MCO-765](https://issues.redhat.com/browse/MCO-765): Examine/Remove memory limits on MCO pods [#3915](https://github.com/openshift/machine-config-operator/pull/3915)
* [MCO-731](https://issues.redhat.com/browse/MCO-731): Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service [#3858](https://github.com/openshift/machine-config-operator/pull/3858)
* [MCO-708](https://issues.redhat.com/browse/MCO-708): Extract and merge kernel arguments from /proc/cmdline [#3856](https://github.com/openshift/machine-config-operator/pull/3856)
* configure-ovs-network: Add tun device support [#3618](https://github.com/openshift/machine-config-operator/pull/3618)
* [OCPBUGS-11437](https://issues.redhat.com/browse/OCPBUGS-11437): MCO keeps the pull secret to .orig file once it replaced [#3759](https://github.com/openshift/machine-config-operator/pull/3759)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a50e9b05e3dbe0e2a0370ca83a7bcf4ac72d4e67...b118fb4e80373d2ea0c1158bc5abbcdf2e8e674c)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/394809633b6b2e33ea1af444f7237f066bf0abb1)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): drop the default for inspector URL [#124](https://github.com/openshift/image-customization-controller/pull/124)
* [OCPBUGS-28728](https://issues.redhat.com/browse/OCPBUGS-28728): Updating ose-image-customization-controller-container image to be consistent with ART for 4.16 [#122](https://github.com/openshift/image-customization-controller/pull/122)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): account for more cases when handling base URLs [#120](https://github.com/openshift/image-customization-controller/pull/120)
* [METAL-834](https://issues.redhat.com/browse/METAL-834): Add --metrics-addr argument to controller [#110](https://github.com/openshift/image-customization-controller/pull/110)
* [OCPBUGS-25538](https://issues.redhat.com/browse/OCPBUGS-25538): Updating ose-image-customization-controller-container image to be consistent with ART [#116](https://github.com/openshift/image-customization-controller/pull/116)
* [METAL-835](https://issues.redhat.com/browse/METAL-835): Get secret from mounted file when envvar empty [#115](https://github.com/openshift/image-customization-controller/pull/115)
* [OCPBUGS-25099](https://issues.redhat.com/browse/OCPBUGS-25099): Updating ose-image-customization-controller-container image to be consistent with ART [#114](https://github.com/openshift/image-customization-controller/pull/114)
* [OCPBUGS-24832](https://issues.redhat.com/browse/OCPBUGS-24832): Updating ose-image-customization-controller-container image to be consistent with ART [#113](https://github.com/openshift/image-customization-controller/pull/113)
* [OCPBUGS-15599](https://issues.redhat.com/browse/OCPBUGS-15599): configurable ironic agent vlan creation [#109](https://github.com/openshift/image-customization-controller/pull/109)
* [OCPBUGS-21789](https://issues.redhat.com/browse/OCPBUGS-21789): Uplift x/net to v0.17.0 [#103](https://github.com/openshift/image-customization-controller/pull/103)
* [OCPBUGS-19186](https://issues.redhat.com/browse/OCPBUGS-19186): Updating ose-image-customization-controller images to be consistent with ART [#99](https://github.com/openshift/image-customization-controller/pull/99)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/2a6627bafcbb00437ab97308fe1d7df9039104ad...394809633b6b2e33ea1af444f7237f066bf0abb1)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)
* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): Image to rhel9 [#36](https://github.com/openshift/machine-os-images/pull/36)
* [OCPBUGS-24816](https://issues.redhat.com/browse/OCPBUGS-24816): Updating ose-machine-os-images-container image to be consistent with ART [#34](https://github.com/openshift/machine-os-images/pull/34)
* NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 [#33](https://github.com/openshift/machine-os-images/pull/33)
* NO-ISSUE: Force updating 4.15 CI images [#32](https://github.com/openshift/machine-os-images/pull/32)
* [OCPBUGS-19133](https://issues.redhat.com/browse/OCPBUGS-19133): Updating ose-machine-os-images images to be consistent with ART [#30](https://github.com/openshift/machine-os-images/pull/30)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f1fc4315bffa538d0a18e581866093a004db460b)
* [OU-416](https://issues.redhat.com/browse/OU-416): throw an error when a custom datasource is not found [#117](https://github.com/openshift/monitoring-plugin/pull/117)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Gracefully Handle NaN values in stacked graphs [#111](https://github.com/openshift/monitoring-plugin/pull/111)
* [OU-395](https://issues.redhat.com/browse/OU-395): Alert detail page renders buttons and links from the plugin extension [#114](https://github.com/openshift/monitoring-plugin/pull/114)
* [OCPBUGS-31931](https://issues.redhat.com/browse/OCPBUGS-31931): make createdBy mandatory and auto fill with the current user [#113](https://github.com/openshift/monitoring-plugin/pull/113)
* [OU-379](https://issues.redhat.com/browse/OU-379): Add datasource parameter to handle metrics from custom datasources [#112](https://github.com/openshift/monitoring-plugin/pull/112)
* [OU-370](https://issues.redhat.com/browse/OU-370): Split Dashboard Label and Line Chart Queries [#109](https://github.com/openshift/monitoring-plugin/pull/109)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Disable nginx module for rhel9 [#110](https://github.com/openshift/monitoring-plugin/pull/110)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#108](https://github.com/openshift/monitoring-plugin/pull/108)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/monitoring-plugin/pull/103)
* [OCPBUGS-29947](https://issues.redhat.com/browse/OCPBUGS-29947): upgrade sanitize-html vulnerable dependency [#105](https://github.com/openshift/monitoring-plugin/pull/105)
* [OCPBUGS-31291](https://issues.redhat.com/browse/OCPBUGS-31291): Upgrade Webpack dev server [#104](https://github.com/openshift/monitoring-plugin/pull/104)
* NO-ISSUE: Add peteryurkovich to OWNERS [#102](https://github.com/openshift/monitoring-plugin/pull/102)
* [OU-321](https://issues.redhat.com/browse/OU-321): Fix `monitoring-alert-list-item` extension action to pass alert object [#101](https://github.com/openshift/monitoring-plugin/pull/101)
* NO-ISSUE: Update README.md [#100](https://github.com/openshift/monitoring-plugin/pull/100)
* [OU-236](https://issues.redhat.com/browse/OU-236): Add CSV export option to dashboards and metrics tables [#98](https://github.com/openshift/monitoring-plugin/pull/98)
* [OU-310](https://issues.redhat.com/browse/OU-310): Add an extension point for alerts, to be able to add an inspect link [#95](https://github.com/openshift/monitoring-plugin/pull/95)
* [OU-309](https://issues.redhat.com/browse/OU-309): consider all metric keys to display all results on dashboards tables [#96](https://github.com/openshift/monitoring-plugin/pull/96)
* [OCPBUGS-27201](https://issues.redhat.com/browse/OCPBUGS-27201): upgrade follow-redirects parent dependency [#92](https://github.com/openshift/monitoring-plugin/pull/92)
* [OU-311](https://issues.redhat.com/browse/OU-311): Add Dockerfile for local testing [#91](https://github.com/openshift/monitoring-plugin/pull/91)
* [OU-308](https://issues.redhat.com/browse/OU-308): Revert "fix default nginx path to look for static files" [#90](https://github.com/openshift/monitoring-plugin/pull/90)
* [OCPBUGS-25313](https://issues.redhat.com/browse/OCPBUGS-25313): On the alert details page, don't require all alert labels in URL [#88](https://github.com/openshift/monitoring-plugin/pull/88)
* [OCPBUGS-24848](https://issues.redhat.com/browse/OCPBUGS-24848): Updating monitoring-plugin-container image to be consistent with ART [#86](https://github.com/openshift/monitoring-plugin/pull/86)
* [OCPBUGS-24515](https://issues.redhat.com/browse/OCPBUGS-24515): remove regex from console page route path so plugin pages are found [#84](https://github.com/openshift/monitoring-plugin/pull/84)
* [OU-298](https://issues.redhat.com/browse/OU-298): fix default nginx path to look for static files [#83](https://github.com/openshift/monitoring-plugin/pull/83)
* [OCPBUGS-22104](https://issues.redhat.com/browse/OCPBUGS-22104): disable query link for non metric-based alerts [#78](https://github.com/openshift/monitoring-plugin/pull/78)
* [OU-285](https://issues.redhat.com/browse/OU-285): add test-id to panel charts to ease e2e tests when titles change [#80](https://github.com/openshift/monitoring-plugin/pull/80)
* Upgrade Node.js from v16 to v18 in images [#79](https://github.com/openshift/monitoring-plugin/pull/79)
* [OU-261](https://issues.redhat.com/browse/OU-261): Fix "Overwriting current silence" info alert to have padding [#74](https://github.com/openshift/monitoring-plugin/pull/74)
* [OU-179](https://issues.redhat.com/browse/OU-179): Fix the root cause of externalLabels not present on alerts [#53](https://github.com/openshift/monitoring-plugin/pull/53)
* Revert "Fix i18n namespace for navigation menu entries" [#77](https://github.com/openshift/monitoring-plugin/pull/77)
* Fix i18n namespace for navigation menu entries [#73](https://github.com/openshift/monitoring-plugin/pull/73)
* add ipv6 nginx configuration [#76](https://github.com/openshift/monitoring-plugin/pull/76)
* [OCPBUGS-19233](https://issues.redhat.com/browse/OCPBUGS-19233): Updating monitoring-plugin images to be consistent with ART [#75](https://github.com/openshift/monitoring-plugin/pull/75)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6fb208108720b9a35782f7d4f6738010ec97ba85...f1fc4315bffa538d0a18e581866093a004db460b)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/2591682f2d409eea29cced23bf355ca8f27fcec8)
* [OCPBUGS-32303](https://issues.redhat.com/browse/OCPBUGS-32303): Add .snyk file to fix SAST warning messages [#84](https://github.com/openshift/multus-admission-controller/pull/84)
* [OCPBUGS-32219](https://issues.redhat.com/browse/OCPBUGS-32219): Upstream sync 2024 04 [#83](https://github.com/openshift/multus-admission-controller/pull/83)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#80](https://github.com/openshift/multus-admission-controller/pull/80)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#79](https://github.com/openshift/multus-admission-controller/pull/79)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#78](https://github.com/openshift/multus-admission-controller/pull/78)
* [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76)
* [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70)
* [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/5e74b0fa273076f4a73db00dd0081032f0325405...2591682f2d409eea29cced23bf355ca8f27fcec8)
### [multus-cni](https://github.com/openshift/multus-cni/tree/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
* [OCPBUGS-34910](https://issues.redhat.com/browse/OCPBUGS-34910): Thick plugin should not wait for API readiness on CNI DEL [#238](https://github.com/openshift/multus-cni/pull/238)
* [OCPBUGS-34924](https://issues.redhat.com/browse/OCPBUGS-34924): Update owners file [#239](https://github.com/openshift/multus-cni/pull/239)
* [OCPBUGS-33256](https://issues.redhat.com/browse/OCPBUGS-33256): Fix CNI cache update function to prevent nil access [#230](https://github.com/openshift/multus-cni/pull/230)
* [OCPBUGS-32440](https://issues.redhat.com/browse/OCPBUGS-32440): Update snyk file to add exclude vendor [#229](https://github.com/openshift/multus-cni/pull/229)
* [OCPBUGS-32393](https://issues.redhat.com/browse/OCPBUGS-32393): April 2024 [#228](https://github.com/openshift/multus-cni/pull/228)
* [OCPBUGS-30449](https://issues.redhat.com/browse/OCPBUGS-30449): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [#226](https://github.com/openshift/multus-cni/pull/226)
* [USHIFT-2218](https://issues.redhat.com/browse/USHIFT-2218): Dockerfile for MicroShift [#222](https://github.com/openshift/multus-cni/pull/222)
* [OCPBUGS-29856](https://issues.redhat.com/browse/OCPBUGS-29856): Upstream sync to 2024 02 22 [#221](https://github.com/openshift/multus-cni/pull/221)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Fix SAST scan issues for multus-cni-container [#217](https://github.com/openshift/multus-cni/pull/217)
* [OCPBUGS-27429](https://issues.redhat.com/browse/OCPBUGS-27429): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#216](https://github.com/openshift/multus-cni/pull/216)
* [OCPBUGS-29162](https://issues.redhat.com/browse/OCPBUGS-29162): Upstream sync to 20240207 [#214](https://github.com/openshift/multus-cni/pull/214)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Remove unused webhook related yamls [#213](https://github.com/openshift/multus-cni/pull/213)
* [OCPBUGS-28583](https://issues.redhat.com/browse/OCPBUGS-28583): Updating multus-cni-container image to be consistent with ART for 4.16 [#212](https://github.com/openshift/multus-cni/pull/212)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait to account for the possiblity of a not ready unix socket [#208](https://github.com/openshift/multus-cni/pull/208)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#204](https://github.com/openshift/multus-cni/pull/204)
* [OCPBUGS-26397](https://issues.redhat.com/browse/OCPBUGS-26397): Revert #205 "Adds a wait on unix socket readiness" [#207](https://github.com/openshift/multus-cni/pull/207)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait on unix socket readiness [#205](https://github.com/openshift/multus-cni/pull/205)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#203](https://github.com/openshift/multus-cni/pull/203)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#202](https://github.com/openshift/multus-cni/pull/202)
* [OCPBUGS-23475](https://issues.redhat.com/browse/OCPBUGS-23475): Fix to use lumberjack only for logging files [#201](https://github.com/openshift/multus-cni/pull/201)
* [OCPBUGS-21915](https://issues.redhat.com/browse/OCPBUGS-21915): Upstream sync with go.mod update [#193](https://github.com/openshift/multus-cni/pull/193)
* [OCPBUGS-19859](https://issues.redhat.com/browse/OCPBUGS-19859): Multus annotation permissions: Certificate duration should be configurable [#191](https://github.com/openshift/multus-cni/pull/191)
* [OCPBUGS-18995](https://issues.redhat.com/browse/OCPBUGS-18995): Move chroot from multus main process to its child processes (#1161) [#186](https://github.com/openshift/multus-cni/pull/186)
* [OCPBUGS-19364](https://issues.redhat.com/browse/OCPBUGS-19364): Updating multus-cni images to be consistent with ART [#183](https://github.com/openshift/multus-cni/pull/183)
* Per node cert [#184](https://github.com/openshift/multus-cni/pull/184)
* [OCPBUGS-18307](https://issues.redhat.com/browse/OCPBUGS-18307): Performance and efficiency improvements in daemon/server mode [#180](https://github.com/openshift/multus-cni/pull/180)
* [Full changelog](https://github.com/openshift/multus-cni/compare/4ed99c3a8b0aff168f50d166e82bce2a371c2dbb...c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/c9a6ba24e92dad55e00fc17815a3e9988ee14d2d)
* Revert art-bot PR#42 [#43](https://github.com/openshift/multus-networkpolicy/pull/43)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/cd6eae10a368d23b94530cdc2a2c2f2356d8cc02...c9a6ba24e92dad55e00fc17815a3e9988ee14d2d)
### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/6a04feea1b1ab85914d9793a3bb8502c54bef172)
* [OCPBUGS-28557](https://issues.redhat.com/browse/OCPBUGS-28557): Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 [#54](https://github.com/openshift/route-override-cni/pull/54)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#53](https://github.com/openshift/route-override-cni/pull/53)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#52](https://github.com/openshift/route-override-cni/pull/52)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#51](https://github.com/openshift/route-override-cni/pull/51)
* [OCPBUGS-18848](https://issues.redhat.com/browse/OCPBUGS-18848): Updating ose-multus-route-override-cni images to be consistent with ART [#48](https://github.com/openshift/route-override-cni/pull/48)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/078aee5c466ffc79126a34b85953534c6674f28c...6a04feea1b1ab85914d9793a3bb8502c54bef172)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
* [OCPBUGS-34929](https://issues.redhat.com/browse/OCPBUGS-34929): [release-4.16] Use IP to identify orphaned allocation to be deleted [#286](https://github.com/openshift/whereabouts-cni/pull/286)
* [OCPBUGS-33565](https://issues.redhat.com/browse/OCPBUGS-33565): Upstream sync may24 [#278](https://github.com/openshift/whereabouts-cni/pull/278)
* [OCPBUGS-32931](https://issues.redhat.com/browse/OCPBUGS-32931): Add .snyk file [#254](https://github.com/openshift/whereabouts-cni/pull/254)
* [OCPBUGS-28556](https://issues.redhat.com/browse/OCPBUGS-28556): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART for 4.16 [#242](https://github.com/openshift/whereabouts-cni/pull/242)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Downstream sync - includes configurable schedule for reconciler [#227](https://github.com/openshift/whereabouts-cni/pull/227)
* [OCPBUGS-26017](https://issues.redhat.com/browse/OCPBUGS-26017): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#223](https://github.com/openshift/whereabouts-cni/pull/223)
* [OCPBUGS-24608](https://issues.redhat.com/browse/OCPBUGS-24608): Downstream sync - includes assignment error fix [#211](https://github.com/openshift/whereabouts-cni/pull/211)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#213](https://github.com/openshift/whereabouts-cni/pull/213)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#212](https://github.com/openshift/whereabouts-cni/pull/212)
* [OCPBUGS-22075](https://issues.redhat.com/browse/OCPBUGS-22075): update golang.org/x/net to v0.17.0 [#206](https://github.com/openshift/whereabouts-cni/pull/206)
* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Rechecking pending Pods (conflict resolved) [#196](https://github.com/openshift/whereabouts-cni/pull/196)
* [OCPBUGS-18847](https://issues.redhat.com/browse/OCPBUGS-18847): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#192](https://github.com/openshift/whereabouts-cni/pull/192)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/3cc3de77f370e15fddd80d58656b503d6873ce4c...c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
### [must-gather](https://github.com/openshift/must-gather/tree/7d5f789407c53600f6bd4013ab35727ae09e719e)
* [WRKLDS-1257](https://issues.redhat.com/browse/WRKLDS-1257): Switch must-gather to RHEL9 as base image [#421](https://github.com/openshift/must-gather/pull/421)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Use oc.rhel8 based on the target arch of image [#420](https://github.com/openshift/must-gather/pull/420)
* NO-JIRA: Use oc rhel8 binary explicitly until base image is rhel9 [#418](https://github.com/openshift/must-gather/pull/418)
* [MON-3754](https://issues.redhat.com/browse/MON-3754): Enable metrics-server audit log collection [#413](https://github.com/openshift/must-gather/pull/413)
* [OCPBUGS-32210](https://issues.redhat.com/browse/OCPBUGS-32210): Collect Assisted Installer Namespace Logs [#417](https://github.com/openshift/must-gather/pull/417)
* [CNF-9168](https://issues.redhat.com/browse/CNF-9168): MetalLB: adjust to support frrk8s and small fix [#412](https://github.com/openshift/must-gather/pull/412)
* [OCPBUGS-31900](https://issues.redhat.com/browse/OCPBUGS-31900): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#409](https://github.com/openshift/must-gather/pull/409)
* [SDN-4597](https://issues.redhat.com/browse/SDN-4597): Add cluster scoped ANP resource to collection [#411](https://github.com/openshift/must-gather/pull/411)
* NO-JIRA: Add ARO support to must-gather client [#392](https://github.com/openshift/must-gather/pull/392)
* [OCPBUGS-30349](https://issues.redhat.com/browse/OCPBUGS-30349): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#406](https://github.com/openshift/must-gather/pull/406)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): use must-gather since and since time env vars on inspect cmds [#400](https://github.com/openshift/must-gather/pull/400)
* [OCPBUGS-25054](https://issues.redhat.com/browse/OCPBUGS-25054): Updating ose-must-gather-container image to be consistent with ART [#395](https://github.com/openshift/must-gather/pull/395)
* [OSASINFRA-3290](https://issues.redhat.com/browse/OSASINFRA-3290): Remove Kuryr info gathering [#393](https://github.com/openshift/must-gather/pull/393)
* machineconfig: always gather MCS-served config [#380](https://github.com/openshift/must-gather/pull/380)
* [OCPBUGS-20391](https://issues.redhat.com/browse/OCPBUGS-20391): Revert "Add must gather script for network observability" [#390](https://github.com/openshift/must-gather/pull/390)
* gather_sriov: Fix typos and collect SRIOV cache at /var/lib/cni/sriov [#369](https://github.com/openshift/must-gather/pull/369)
* sriov: Clean up `ip netns` output [#387](https://github.com/openshift/must-gather/pull/387)
* [OCPBUGS-19280](https://issues.redhat.com/browse/OCPBUGS-19280): Updating ose-must-gather images to be consistent with ART [#381](https://github.com/openshift/must-gather/pull/381)
* ppc: explicitly add RuntimeClass to gathered resources [#386](https://github.com/openshift/must-gather/pull/386)
* [OCPBUGS-19761](https://issues.redhat.com/browse/OCPBUGS-19761): Removed workload partitioning annotation from ppc script [#385](https://github.com/openshift/must-gather/pull/385)
* [Full changelog](https://github.com/openshift/must-gather/compare/833e1de991e2319439fb48550c86d2d44d412501...7d5f789407c53600f6bd4013ab35727ae09e719e)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/bb911451158fc06f193917863778434944e88ae1)
* [OCPBUGS-28578](https://issues.redhat.com/browse/OCPBUGS-28578): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/bond-cni/pull/62)
* [OCPBUGS-24835](https://issues.redhat.com/browse/OCPBUGS-24835): Updating ose-network-interface-bond-cni-container image to be consistent with ART [#60](https://github.com/openshift/bond-cni/pull/60)
* [OCPBUGS-19192](https://issues.redhat.com/browse/OCPBUGS-19192): Updating ose-network-interface-bond-cni images to be consistent with ART [#59](https://github.com/openshift/bond-cni/pull/59)
* [Full changelog](https://github.com/openshift/bond-cni/compare/29f61f6b05d958c40e7213937064f26a63a8e6d9...bb911451158fc06f193917863778434944e88ae1)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/710bd872934572584eff4987eb638764afd04cdb)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#91) [#91](https://github.com/openshift/network-metrics-daemon/pull/91)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#89) [#89](https://github.com/openshift/network-metrics-daemon/pull/89)
* Added METRIC_TEST_IMAGE var (#86) [#86](https://github.com/openshift/network-metrics-daemon/pull/86)
* Update the k8s dependencies to 1.28.3 (#81) [#81](https://github.com/openshift/network-metrics-daemon/pull/81)
* Updating ose-network-metrics-daemon images to be consistent with ART (#80) [#80](https://github.com/openshift/network-metrics-daemon/pull/80)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/69d0021a4b60db315f47d83bde1c455362a03808...710bd872934572584eff4987eb638764afd04cdb)
### [network-tools](https://github.com/openshift/network-tools/tree/39eca100c0978fb59234e21bf549b130914616ac)
* [OCPBUGS-33388](https://issues.redhat.com/browse/OCPBUGS-33388): Updating ose-network-tools-container image to be consistent with ART for 4.16 [#125](https://github.com/openshift/network-tools/pull/125)
* NO-JIRA: New label for CI flakes [#124](https://github.com/openshift/network-tools/pull/124)
* NO-JIRA: Fix alphabetical ordering of packages in Dockerfiles [#123](https://github.com/openshift/network-tools/pull/123)
* [OCPBUGS-31699](https://issues.redhat.com/browse/OCPBUGS-31699): replace wireshark with wireshark-cli [#116](https://github.com/openshift/network-tools/pull/116)
* NO-JIRA:Add sdn-team-bot [#115](https://github.com/openshift/network-tools/pull/115)
* NO-JIRA:Fix bug list formatting in verbose mode and remove metal lb component [#114](https://github.com/openshift/network-tools/pull/114)
* NO-JIRA: add total and external rows + misc fixes [#113](https://github.com/openshift/network-tools/pull/113)
* NO-JIRA: Remove SAST,ART,backport bugs from bug count & show them separately [#112](https://github.com/openshift/network-tools/pull/112)
* NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional [#101](https://github.com/openshift/network-tools/pull/101)
* [OCPBUGS-26490](https://issues.redhat.com/browse/OCPBUGS-26490): Updating ose-network-tools-container image to be consistent with ART [#108](https://github.com/openshift/network-tools/pull/108)
* NO-JIRA: jira-scripts: disable flavio [#111](https://github.com/openshift/network-tools/pull/111)
* NO-JIRA: Update docs after adding a new command. [#110](https://github.com/openshift/network-tools/pull/110)
* [SDN-4194](https://issues.redhat.com/browse/SDN-4194): Add a script to find OVN perf problems [#107](https://github.com/openshift/network-tools/pull/107)
* [OCPBUGS-25040](https://issues.redhat.com/browse/OCPBUGS-25040): Updating ose-network-tools-container image to be consistent with ART [#105](https://github.com/openshift/network-tools/pull/105)
* NO-JIRA: Adding bcc to the container [#104](https://github.com/openshift/network-tools/pull/104)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Update OVS flows counter to work for cookies with leading 0. [#103](https://github.com/openshift/network-tools/pull/103)
* [OCPBUGS-24385](https://issues.redhat.com/browse/OCPBUGS-24385): Align status and assignee between jira and github [#100](https://github.com/openshift/network-tools/pull/100)
* [OCPBUGS-24276](https://issues.redhat.com/browse/OCPBUGS-24276): Add "networking / network-tools" to list of components [#102](https://github.com/openshift/network-tools/pull/102)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Fix error when nbdb and sbdb leader are located on different nodes [#99](https://github.com/openshift/network-tools/pull/99)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Add flow counter script for ACLs [#98](https://github.com/openshift/network-tools/pull/98)
* [SDN-4182](https://issues.redhat.com/browse/SDN-4182): Script cleanup + track ovnk upstream issues in jira [#97](https://github.com/openshift/network-tools/pull/97)
* [OCPBUGS-22166](https://issues.redhat.com/browse/OCPBUGS-22166): Move commands to the function to avoid them being executed on -h. [#93](https://github.com/openshift/network-tools/pull/93)
* Update docs to use image-streams instead of quay image [#91](https://github.com/openshift/network-tools/pull/91)
* jira-scripts: Add Zenghui, remove Vic [#90](https://github.com/openshift/network-tools/pull/90)
* Add Flavio as approver [#89](https://github.com/openshift/network-tools/pull/89)
* [SDN-3904](https://issues.redhat.com/browse/SDN-3904): Update scripts in network-tools to reflect the changes in IC model [#86](https://github.com/openshift/network-tools/pull/86)
* [SDN-4047](https://issues.redhat.com/browse/SDN-4047): Migrate bug-dispath query scripts [#88](https://github.com/openshift/network-tools/pull/88)
* [OCPBUGS-19292](https://issues.redhat.com/browse/OCPBUGS-19292): Updating ose-network-tools images to be consistent with ART [#87](https://github.com/openshift/network-tools/pull/87)
* [Full changelog](https://github.com/openshift/network-tools/compare/e79d8173c5628065da85425bc7e4cb1d94f3c919...39eca100c0978fb59234e21bf549b130914616ac)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/c9bbc44c0200c8061506c465d0eb3c97fe94e197)
* [OCPCLOUD-2418](https://issues.redhat.com/browse/OCPCLOUD-2418): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (b009266) into main [#21](https://github.com/openshift/cloud-provider-nutanix/pull/21)
* [OCPBUGS-22623](https://issues.redhat.com/browse/OCPBUGS-22623): Bumps otehttp to v0.44.0 [#29](https://github.com/openshift/cloud-provider-nutanix/pull/29)
* [OCPBUGS-25629](https://issues.redhat.com/browse/OCPBUGS-25629): Add Snyk file to exclude vendor directory on scan [#26](https://github.com/openshift/cloud-provider-nutanix/pull/26)
* [OCPBUGS-24101](https://issues.redhat.com/browse/OCPBUGS-24101): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART [#23](https://github.com/openshift/cloud-provider-nutanix/pull/23)
* NO-JIRA: Add .ci-operator.yaml file [#24](https://github.com/openshift/cloud-provider-nutanix/pull/24)
* Update OWNERS [#22](https://github.com/openshift/cloud-provider-nutanix/pull/22)
* [OCPCLOUD-2182](https://issues.redhat.com/browse/OCPCLOUD-2182): Update to match K8s v1.28 dependencies [#20](https://github.com/openshift/cloud-provider-nutanix/pull/20)
* [OCPBUGS-19165](https://issues.redhat.com/browse/OCPBUGS-19165): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#19](https://github.com/openshift/cloud-provider-nutanix/pull/19)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...c9bbc44c0200c8061506c465d0eb3c97fe94e197)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/f053e5a0ee58d20066efff8db01578785ea83dad)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#73](https://github.com/openshift/machine-api-provider-nutanix/pull/73)
* [OCPBUGS-27390](https://issues.redhat.com/browse/OCPBUGS-27390): IPI install fails on Nutanix when using DHCP [#66](https://github.com/openshift/machine-api-provider-nutanix/pull/66)
* [OCPBUGS-27874](https://issues.redhat.com/browse/OCPBUGS-27874): Update Snyk file to exclude other vendor folders [#65](https://github.com/openshift/machine-api-provider-nutanix/pull/65)
* [OCPCLOUD-2425](https://issues.redhat.com/browse/OCPCLOUD-2425): Rebase to k8s 129 [#64](https://github.com/openshift/machine-api-provider-nutanix/pull/64)
* [OCPBUGS-26184](https://issues.redhat.com/browse/OCPBUGS-26184): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/machine-api-provider-nutanix/pull/63)
* [OCPBUGS-24949](https://issues.redhat.com/browse/OCPBUGS-24949): Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-nutanix/pull/58)
* Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-nutanix/pull/57)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains. [#56](https://github.com/openshift/machine-api-provider-nutanix/pull/56)
* Update OWNERS [#55](https://github.com/openshift/machine-api-provider-nutanix/pull/55)
* [OCPCLOUD-2189](https://issues.redhat.com/browse/OCPCLOUD-2189): Update to match K8s v1.28 dependencies [#54](https://github.com/openshift/machine-api-provider-nutanix/pull/54)
* [OCPBUGS-19208](https://issues.redhat.com/browse/OCPBUGS-19208): Updating ose-nutanix-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-nutanix/pull/51)
* [OCPBUGS-5969](https://issues.redhat.com/browse/OCPBUGS-5969): machine stuck in Provisioning and machineset scale/delete not work [#52](https://github.com/openshift/machine-api-provider-nutanix/pull/52)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6f50b1ac83fa493cdaa38fb0a05804882333172b...f053e5a0ee58d20066efff8db01578785ea83dad)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/fa1f097c2800b06b3b56537651294d023762a4eb)
* NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig [#111](https://github.com/openshift/oauth-apiserver/pull/111)
* [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#108](https://github.com/openshift/oauth-apiserver/pull/108)
* NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness [#106](https://github.com/openshift/oauth-apiserver/pull/106)
* NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration [#105](https://github.com/openshift/oauth-apiserver/pull/105)
* [OCPBUGS-29176](https://issues.redhat.com/browse/OCPBUGS-29176): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/oauth-apiserver/pull/101)
* [OCPBUGS-28658](https://issues.redhat.com/browse/OCPBUGS-28658): bump k8s.io and others (master) [#98](https://github.com/openshift/oauth-apiserver/pull/98)
* [OCPBUGS-24954](https://issues.redhat.com/browse/OCPBUGS-24954): Updating ose-oauth-apiserver-container image to be consistent with ART [#94](https://github.com/openshift/oauth-apiserver/pull/94)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#95](https://github.com/openshift/oauth-apiserver/pull/95)
* [OCPBUGS-19214](https://issues.redhat.com/browse/OCPBUGS-19214): Updating ose-oauth-apiserver images to be consistent with ART [#90](https://github.com/openshift/oauth-apiserver/pull/90)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/8f5c90c74205a45787960a3bec1f12929a391471...fa1f097c2800b06b3b56537651294d023762a4eb)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/30f8012482023689655252dc2af2f17fe6a09253)
* [OCPBUGS-24791](https://issues.redhat.com/browse/OCPBUGS-24791): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#270](https://github.com/openshift/oauth-proxy/pull/270)
* [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266)
* [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/a4a2f270a57af830508e8cef52d4c8d4f4dfba76...30f8012482023689655252dc2af2f17fe6a09253)
### [oauth-server](https://github.com/openshift/oauth-server/tree/3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
* [OCPBUGS-35374](https://issues.redhat.com/browse/OCPBUGS-35374): p/o/handlers - fix nil-pointer, if ResStatus is nil [#152](https://github.com/openshift/oauth-server/pull/152)
* NO-JIRA: bump go-jose to a newer version [#147](https://github.com/openshift/oauth-server/pull/147)
* [OCPBUGS-32331](https://issues.redhat.com/browse/OCPBUGS-32331): Updating oauth-server-container image to be consistent with ART for 4.16 [#145](https://github.com/openshift/oauth-server/pull/145)
* [OCPBUGS-24987](https://issues.redhat.com/browse/OCPBUGS-24987), [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#142](https://github.com/openshift/oauth-server/pull/142)
* [OCPBUGS-21671](https://issues.redhat.com/browse/OCPBUGS-21671): go.mod: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/oauth-server/pull/137)
* [Full changelog](https://github.com/openshift/oauth-server/compare/35f4739f342a5838fe6ceaf7a459c78f3777166d...3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7c0889f4bd343ccaaba5f33b7b861db29b1e5e49)
* [OCPBUGS-33775](https://issues.redhat.com/browse/OCPBUGS-33775): Do not generate idms & itms if nothing has been mirrored (#871) [#871](https://github.com/openshift/oc-mirror/pull/871)
* [CLID-122](https://issues.redhat.com/browse/CLID-122): upgrades distribution/distribution for a released version (#864) (#868) [#864](https://github.com/openshift/oc-mirror/pull/864)
* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#863) [#863](https://github.com/openshift/oc-mirror/pull/863)
* [OCPBUGS-33081](https://issues.redhat.com/browse/OCPBUGS-33081): Skip images that don't follow standards, semver and naming (#861) [#861](https://github.com/openshift/oc-mirror/pull/861)
* [OCPBUGS-33196](https://issues.redhat.com/browse/OCPBUGS-33196): skip images with both tag and digest (#853) [#853](https://github.com/openshift/oc-mirror/pull/853)
* [OCPBUGS-31608](https://issues.redhat.com/browse/OCPBUGS-31608): Fix IDMS/ITMS generated source repository in case of empty namespace (#850) [#850](https://github.com/openshift/oc-mirror/pull/850)
* [OCPBUGS-31858](https://issues.redhat.com/browse/OCPBUGS-31858): CLID-97: Provide a way to skip failing images (#854) [#854](https://github.com/openshift/oc-mirror/pull/854)
* [OCPBUGS-31622](https://issues.redhat.com/browse/OCPBUGS-31622): Fix operator related image has empty reference (#851) [#851](https://github.com/openshift/oc-mirror/pull/851)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) [#852](https://github.com/openshift/oc-mirror/pull/852)
* [OCPBUGS-32547](https://issues.redhat.com/browse/OCPBUGS-32547): Fix delete generation for mirror to mirror flow (#848) [#848](https://github.com/openshift/oc-mirror/pull/848)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 - 2 (#847) [#847](https://github.com/openshift/oc-mirror/pull/847)
* Fix golint errors (#845) [#845](https://github.com/openshift/oc-mirror/pull/845)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 (#844) [#844](https://github.com/openshift/oc-mirror/pull/844)
* [OCPBUGS-33098](https://issues.redhat.com/browse/OCPBUGS-33098): feat: generates a file with errors during mirroring (#843) [#843](https://github.com/openshift/oc-mirror/pull/843)
* [OCPBUGS-31092](https://issues.redhat.com/browse/OCPBUGS-31092): Fix archive tar file size to respect the archiveSize setting when mirror with V2 format (#842) [#842](https://github.com/openshift/oc-mirror/pull/842)
* [OCPBUGS-31083](https://issues.redhat.com/browse/OCPBUGS-31083): Fix help for --strict-archive flag (#841) [#841](https://github.com/openshift/oc-mirror/pull/841)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix graph image mirroring during MirrorToDisk (#840) [#840](https://github.com/openshift/oc-mirror/pull/840)
* [CLID-63](https://issues.redhat.com/browse/CLID-63): moves pkg dir to internal dir (#839) [#839](https://github.com/openshift/oc-mirror/pull/839)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix TlsVerify always set to false (#838) [#838](https://github.com/openshift/oc-mirror/pull/838)
* [CLID-80](https://issues.redhat.com/browse/CLID-80): changes README.md (#837) [#837](https://github.com/openshift/oc-mirror/pull/837)
* Exit if release is unsigned (#834) [#834](https://github.com/openshift/oc-mirror/pull/834)
* OCPBUGS-23479 (#835) [#835](https://github.com/openshift/oc-mirror/pull/835)
* [CLID-81](https://issues.redhat.com/browse/CLID-81): refines v2 --help (#836) [#836](https://github.com/openshift/oc-mirror/pull/836)
* CLID5: Create API v2alpha1 for oc-mirror v2 TP (#830) [#830](https://github.com/openshift/oc-mirror/pull/830)
* [CLID-19](https://issues.redhat.com/browse/CLID-19): Replace the prepare subcommand by dry-run flag (#829) [#829](https://github.com/openshift/oc-mirror/pull/829)
* CLID-95 removes the concurrency and adds a progress bar on batch pkg (#832) [#832](https://github.com/openshift/oc-mirror/pull/832)
* [CLID-53](https://issues.redhat.com/browse/CLID-53): Introduce env var to provide OCP release signature verification key (#831) [#831](https://github.com/openshift/oc-mirror/pull/831)
* [CLID-35](https://issues.redhat.com/browse/CLID-35): introduce filtering operators by selecting specific bundles (#824) [#824](https://github.com/openshift/oc-mirror/pull/824)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024), [OCPBUGS-31529](https://issues.redhat.com/browse/OCPBUGS-31529), [OCPBUGS-31530](https://issues.redhat.com/browse/OCPBUGS-31530): Remove creationTimestamp from the generated yaml catalogSource (#826) [#826](https://github.com/openshift/oc-mirror/pull/826)
* [CLID-46](https://issues.redhat.com/browse/CLID-46), [CLID-47](https://issues.redhat.com/browse/CLID-47): Use of TargetCatalog and TargetTag on all catalogs (#827) [#827](https://github.com/openshift/oc-mirror/pull/827)
* [CLID-20](https://issues.redhat.com/browse/CLID-20): feat: Delete functionality for v2 enclave support (#812) [#812](https://github.com/openshift/oc-mirror/pull/812)
* [CLID-85](https://issues.redhat.com/browse/CLID-85): Change string replacement in registry config to use templates (#828) [#828](https://github.com/openshift/oc-mirror/pull/828)
* [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#815) [#815](https://github.com/openshift/oc-mirror/pull/815)
* Bump version to include v5.11.0 of go-git (#821) [#821](https://github.com/openshift/oc-mirror/pull/821)
* [CLID-54](https://issues.redhat.com/browse/CLID-54): Mirror to mirror workflow (#811) [#811](https://github.com/openshift/oc-mirror/pull/811)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024): Ommit icon from catalogSource if empty (#816) [#816](https://github.com/openshift/oc-mirror/pull/816)
* [OCPBUGS-31344](https://issues.redhat.com/browse/OCPBUGS-31344): fix: issue when different versions of the same operator catalog (#820) [#820](https://github.com/openshift/oc-mirror/pull/820)
* [OCPBUGS-31084](https://issues.redhat.com/browse/OCPBUGS-31084): feat: changes the code to have retro-compatible version command with v1 (#817) [#817](https://github.com/openshift/oc-mirror/pull/817)
* [CLID-8](https://issues.redhat.com/browse/CLID-8): Initial E2E test (#798) [#798](https://github.com/openshift/oc-mirror/pull/798)
* [OCPBUGS-19853](https://issues.redhat.com/browse/OCPBUGS-19853): improve support for multiarch (#813) [#813](https://github.com/openshift/oc-mirror/pull/813)
* [CLID-17](https://issues.redhat.com/browse/CLID-17): feat: docker v2s2 manifest list (fat manifest) / oci image index implementation (#810) [#810](https://github.com/openshift/oc-mirror/pull/810)
* [CLID-70](https://issues.redhat.com/browse/CLID-70): fix: issue when mirroring multiple catalogs (#807) [#807](https://github.com/openshift/oc-mirror/pull/807)
* [CLID-67](https://issues.redhat.com/browse/CLID-67): feat: adds --v1 flag to redirect to legacy code (#806) [#806](https://github.com/openshift/oc-mirror/pull/806)
* [CLID-27](https://issues.redhat.com/browse/CLID-27): Update to include oci (disk based layout) for v2 (#800) [#800](https://github.com/openshift/oc-mirror/pull/800)
* changes to support pulling charts from URL (#723) [#723](https://github.com/openshift/oc-mirror/pull/723)
* [CLID-9](https://issues.redhat.com/browse/CLID-9): feat: hide unnecessary flags (#801) [#801](https://github.com/openshift/oc-mirror/pull/801)
* [CLID-7](https://issues.redhat.com/browse/CLID-7): feat: load operator catalog using LoadFS (#799) [#799](https://github.com/openshift/oc-mirror/pull/799)
* [CLID-24](https://issues.redhat.com/browse/CLID-24), [CLID-9](https://issues.redhat.com/browse/CLID-9): Support incremental mirroring using archives by date (#795) [#795](https://github.com/openshift/oc-mirror/pull/795)
* [CLID-21](https://issues.redhat.com/browse/CLID-21), [CLID-22](https://issues.redhat.com/browse/CLID-22), [CLID-9](https://issues.redhat.com/browse/CLID-9): Respect archive max size (#789) [#789](https://github.com/openshift/oc-mirror/pull/789)
* Fix documentation diagram (#792) [#792](https://github.com/openshift/oc-mirror/pull/792)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): feat: operator catalog filtering on v2 (#787) [#787](https://github.com/openshift/oc-mirror/pull/787)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate CatalogSource files (#784) [#784](https://github.com/openshift/oc-mirror/pull/784)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate ITMS along with IDMS (#781) [#781](https://github.com/openshift/oc-mirror/pull/781)
* [CLID-30](https://issues.redhat.com/browse/CLID-30): Update overall code coverage in v2 (#783) [#783](https://github.com/openshift/oc-mirror/pull/783)
* Make EnclaveSupport a DevPreview (#788) [#788](https://github.com/openshift/oc-mirror/pull/788)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: adds 2 new scenarios (#785) [#785](https://github.com/openshift/oc-mirror/pull/785)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: add 3 new scenarios for catalog filtering (#782) [#782](https://github.com/openshift/oc-mirror/pull/782)
* [OCPBUGS-26513](https://issues.redhat.com/browse/OCPBUGS-26513): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) [#772](https://github.com/openshift/oc-mirror/pull/772)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): Add study results in docs (#778) [#778](https://github.com/openshift/oc-mirror/pull/778)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both binaries for rhel8 and rhel9 (#767) [#767](https://github.com/openshift/oc-mirror/pull/767)
* Add documentation for enclave support (#771) [#771](https://github.com/openshift/oc-mirror/pull/771)
* [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#773) [#773](https://github.com/openshift/oc-mirror/pull/773)
* Fix to ensure operator not found error exits with correct status (#770) [#770](https://github.com/openshift/oc-mirror/pull/770)
* Fix to ensure tar sequence is ignored using --skip-pruning (#760) [#760](https://github.com/openshift/oc-mirror/pull/760)
* Updating oc-mirror-plugin-container image to be consistent with ART (#763) [#763](https://github.com/openshift/oc-mirror/pull/763)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-21865](https://issues.redhat.com/browse/OCPBUGS-21865): Honor IncludeChannel.MaxVersion when mirroring differentially (#761) [#761](https://github.com/openshift/oc-mirror/pull/761)
* [OCPBUGS-24357](https://issues.redhat.com/browse/OCPBUGS-24357): Move logs folder under workingDir (#750) [#750](https://github.com/openshift/oc-mirror/pull/750)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#753) [#753](https://github.com/openshift/oc-mirror/pull/753)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): - oc-mirror on RHEL9 Host with FIPS enabled (#751) [#751](https://github.com/openshift/oc-mirror/pull/751)
* Add generation of updateService.yaml (#746) [#746](https://github.com/openshift/oc-mirror/pull/746)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#752) [#752](https://github.com/openshift/oc-mirror/pull/752)
* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#748) [#748](https://github.com/openshift/oc-mirror/pull/748)
* Make A.Guidi approver on oc-mirror (#755) [#755](https://github.com/openshift/oc-mirror/pull/755)
* Fix default port for V2 'prepare' subcommand (#747) [#747](https://github.com/openshift/oc-mirror/pull/747)
* Adding release payload signatures to graph-data container (#742) [#742](https://github.com/openshift/oc-mirror/pull/742)
* [OCPBUGS-23339](https://issues.redhat.com/browse/OCPBUGS-23339): fix IDMS custom resource name (#743) [#743](https://github.com/openshift/oc-mirror/pull/743)
* remove unnecessary print statement (#745) [#745](https://github.com/openshift/oc-mirror/pull/745)
* [OCPBUGS-23309](https://issues.redhat.com/browse/OCPBUGS-23309): Do not panic if port chosen to run local cache is already bound (#744) [#744](https://github.com/openshift/oc-mirror/pull/744)
* [CFE-994](https://issues.redhat.com/browse/CFE-994): cache location separate of working-dir (#741) [#741](https://github.com/openshift/oc-mirror/pull/741)
* Integrate Unarchive process to DiskToMirror workflow (#740) [#740](https://github.com/openshift/oc-mirror/pull/740)
* [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-991](https://issues.redhat.com/browse/CFE-991): archive generation at the end of MirrorToDisk workflow (#739) [#739](https://github.com/openshift/oc-mirror/pull/739)
* [CFE-981](https://issues.redhat.com/browse/CFE-981): Create UnArchiver interface and implementation (#738) [#738](https://github.com/openshift/oc-mirror/pull/738)
* [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-980](https://issues.redhat.com/browse/CFE-980): Introduce Archiver interface and its implementation MirrorArchiver (#734) [#734](https://github.com/openshift/oc-mirror/pull/734)
* feat: history file reader and writer (#736) [#736](https://github.com/openshift/oc-mirror/pull/736)
* skipping prune failure if manifest not found (#733) [#733](https://github.com/openshift/oc-mirror/pull/733)
* Package ioutil is deprecated as of Go 1.16 (#731) [#731](https://github.com/openshift/oc-mirror/pull/731)
* [CFE-977](https://issues.redhat.com/browse/CFE-977): Implementation of a blob gatherer for images in the local cache (#732) [#732](https://github.com/openshift/oc-mirror/pull/732)
* refactorings (#728) [#728](https://github.com/openshift/oc-mirror/pull/728)
* Fix --from being set to default value in mirrorToDisk workflow (#727) [#727](https://github.com/openshift/oc-mirror/pull/727)
* [OCPBUGS-22947](https://issues.redhat.com/browse/OCPBUGS-22947): Should not generate graph with prepare subcommand (#725) [#725](https://github.com/openshift/oc-mirror/pull/725)
* Cancel community office hours: none for the moment (#726) [#726](https://github.com/openshift/oc-mirror/pull/726)
* [CFE-965](https://issues.redhat.com/browse/CFE-965): [V2] Enable signature verification (#709) [#709](https://github.com/openshift/oc-mirror/pull/709)
* [CFE-971](https://issues.redhat.com/browse/CFE-971): Generate OSUS graph image - uses go-containerregistry implementation (#722) [#722](https://github.com/openshift/oc-mirror/pull/722)
* Pr template change (#719) [#719](https://github.com/openshift/oc-mirror/pull/719)
* [CFE-899](https://issues.redhat.com/browse/CFE-899), [CFE-958](https://issues.redhat.com/browse/CFE-958): feat: removes the registry dns (#718) [#718](https://github.com/openshift/oc-mirror/pull/718)
* Remove Dockerfile.integration - not used - reduce confusion (#716) [#716](https://github.com/openshift/oc-mirror/pull/716)
* [OCPBUGS-21864](https://issues.redhat.com/browse/OCPBUGS-21864): fix: CVE-2023-39325 and CVE-2023-44487 (#712) [#712](https://github.com/openshift/oc-mirror/pull/712)
* Introduce subcommand `prepare` (#702) [#702](https://github.com/openshift/oc-mirror/pull/702)
* Initial implementation of IDMS generation (#707) [#707](https://github.com/openshift/oc-mirror/pull/707)
* Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) [#704](https://github.com/openshift/oc-mirror/pull/704)
* [CFE-935](https://issues.redhat.com/browse/CFE-935): [V2] Implement a release collector relying on local registry as storage (#690) [#690](https://github.com/openshift/oc-mirror/pull/690)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) [#697](https://github.com/openshift/oc-mirror/pull/697)
* [CFE-956](https://issues.redhat.com/browse/CFE-956): feat: adds tags on the related images (#695) [#695](https://github.com/openshift/oc-mirror/pull/695)
* Updating oc-mirror-plugin images to be consistent with ART (#698) [#698](https://github.com/openshift/oc-mirror/pull/698)
* Update list updates CLI documentation (#687) [#687](https://github.com/openshift/oc-mirror/pull/687)
* [CFE-906](https://issues.redhat.com/browse/CFE-906): [V2]Enclave support - Separate log file for local storage (#686) [#686](https://github.com/openshift/oc-mirror/pull/686)
* [CFE-955](https://issues.redhat.com/browse/CFE-955): changes owner file (#694) [#694](https://github.com/openshift/oc-mirror/pull/694)
* [CFE-897](https://issues.redhat.com/browse/CFE-897), [CFE-907](https://issues.redhat.com/browse/CFE-907): feat: add code to call v2 from v1 (#692) [#692](https://github.com/openshift/oc-mirror/pull/692)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a0733c17322f96d14f9158604fe74f1bfecc4a53...7c0889f4bd343ccaaba5f33b7b861db29b1e5e49)
### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/79975a511e1d31a09ef9b3b9e01262c8c69ff633)
* [OCPBUGS-31286](https://issues.redhat.com/browse/OCPBUGS-31286): Updating ose-olm-catalogd-container image to be consistent with ART for 4.16 [#48](https://github.com/openshift/operator-framework-catalogd/pull/48)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#47](https://github.com/openshift/operator-framework-catalogd/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-catalogd/pull/46)
* [OCPBUGS-29453](https://issues.redhat.com/browse/OCPBUGS-29453): UPSTREAM: 231: make garbage collection a runnable [#42](https://github.com/openshift/operator-framework-catalogd/pull/42)
* NO-ISSUE: Remove ncdc from OWNERS [#41](https://github.com/openshift/operator-framework-catalogd/pull/41)
* NO-ISSUE: Synchronize From Upstream Repositories [#38](https://github.com/openshift/operator-framework-catalogd/pull/38)
* [OCPBUGS-25172](https://issues.redhat.com/browse/OCPBUGS-25172): Updating ose-olm-catalogd-container image to be consistent with ART [#37](https://github.com/openshift/operator-framework-catalogd/pull/37)
* NO-JIRA: add tmshort to approvers [#34](https://github.com/openshift/operator-framework-catalogd/pull/34)
* [OCPBUGS-24806](https://issues.redhat.com/browse/OCPBUGS-24806): Updating ose-olm-catalogd-container image to be consistent with ART [#36](https://github.com/openshift/operator-framework-catalogd/pull/36)
* NO-ISSUE: Synchronize From Upstream Repositories [#33](https://github.com/openshift/operator-framework-catalogd/pull/33)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#35](https://github.com/openshift/operator-framework-catalogd/pull/35)
* [OPRUN-3079](https://issues.redhat.com/browse/OPRUN-3079): UPSTREAM: <carry>: Drop commitchecker [#32](https://github.com/openshift/operator-framework-catalogd/pull/32)
* Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-catalogd/pull/31)
* [OCPBUGS-20517](https://issues.redhat.com/browse/OCPBUGS-20517): UPSTREAM: <drop>: Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197) [#29](https://github.com/openshift/operator-framework-catalogd/pull/29)
* [OCPBUGS-19117](https://issues.redhat.com/browse/OCPBUGS-19117): UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART [#28](https://github.com/openshift/operator-framework-catalogd/pull/28)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/a333cb0b558abf8d9f8da0eccd5618d767629050...79975a511e1d31a09ef9b3b9e01262c8c69ff633)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/80b8649cf7a57098d03eff0d155531cf63728f41)
* NO-ISSUE: Synchronize From Upstream Repositories [#102](https://github.com/openshift/operator-framework-operator-controller/pull/102)
* NO-ISSUE: Synchronize From Upstream Repositories [#101](https://github.com/openshift/operator-framework-operator-controller/pull/101)
* NO-ISSUE: Synchronize From Upstream Repositories [#99](https://github.com/openshift/operator-framework-operator-controller/pull/99)
* [OCPBUGS-31459](https://issues.redhat.com/browse/OCPBUGS-31459): Synchronize From Upstream Repositories [#97](https://github.com/openshift/operator-framework-operator-controller/pull/97)
* [OPRUN-3268](https://issues.redhat.com/browse/OPRUN-3268): Add pointer to tooling README for downstreaming info [#94](https://github.com/openshift/operator-framework-operator-controller/pull/94)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#89](https://github.com/openshift/operator-framework-operator-controller/pull/89)
* NO-ISSUE: Synchronize From Upstream Repositories [#92](https://github.com/openshift/operator-framework-operator-controller/pull/92)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#91](https://github.com/openshift/operator-framework-operator-controller/pull/91)
* NO-ISSUE: Synchronize From Upstream Repositories [#90](https://github.com/openshift/operator-framework-operator-controller/pull/90)
* NO-ISSUE: Synchronize From Upstream Repositories [#88](https://github.com/openshift/operator-framework-operator-controller/pull/88)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#86](https://github.com/openshift/operator-framework-operator-controller/pull/86)
* NO-ISSUE: Synchronize From Upstream Repositories [#87](https://github.com/openshift/operator-framework-operator-controller/pull/87)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-operator-controller/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-operator-controller/pull/83)
* NO-ISSUE: Synchronize From Upstream Repositories [#82](https://github.com/openshift/operator-framework-operator-controller/pull/82)
* NO-ISSUE: Synchronize From Upstream Repositories [#81](https://github.com/openshift/operator-framework-operator-controller/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-operator-controller/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#79](https://github.com/openshift/operator-framework-operator-controller/pull/79)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-operator-controller/pull/78)
* NO-ISSUE: Synchronize From Upstream Repositories [#77](https://github.com/openshift/operator-framework-operator-controller/pull/77)
* NO-ISSUE: Synchronize From Upstream Repositories [#76](https://github.com/openshift/operator-framework-operator-controller/pull/76)
* NO-ISSUE: Synchronize From Upstream Repositories [#75](https://github.com/openshift/operator-framework-operator-controller/pull/75)
* NO-ISSUE: Synchronize From Upstream Repositories [#74](https://github.com/openshift/operator-framework-operator-controller/pull/74)
* NO-ISSUE: Synchronize From Upstream Repositories [#73](https://github.com/openshift/operator-framework-operator-controller/pull/73)
* NO-ISSUE: Synchronize From Upstream Repositories [#72](https://github.com/openshift/operator-framework-operator-controller/pull/72)
* NO-ISSUE: Synchronize From Upstream Repositories [#70](https://github.com/openshift/operator-framework-operator-controller/pull/70)
* NO-ISSUE: Synchronize From Upstream Repositories [#67](https://github.com/openshift/operator-framework-operator-controller/pull/67)
* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-operator-controller/pull/66)
* NO-ISSUE: Synchronize From Upstream Repositories [#65](https://github.com/openshift/operator-framework-operator-controller/pull/65)
* NO-ISSUE: Synchronize From Upstream Repositories [#64](https://github.com/openshift/operator-framework-operator-controller/pull/64)
* NO-ISSUE: Synchronize From Upstream Repositories [#63](https://github.com/openshift/operator-framework-operator-controller/pull/63)
* NO-ISSUE: Synchronize From Upstream Repositories [#62](https://github.com/openshift/operator-framework-operator-controller/pull/62)
* NO-ISSUE: Synchronize From Upstream Repositories [#61](https://github.com/openshift/operator-framework-operator-controller/pull/61)
* NO-ISSUE: Synchronize From Upstream Repositories [#60](https://github.com/openshift/operator-framework-operator-controller/pull/60)
* NO-ISSUE: Synchronize From Upstream Repositories [#59](https://github.com/openshift/operator-framework-operator-controller/pull/59)
* [OCPBUGS-24795](https://issues.redhat.com/browse/OCPBUGS-24795): Updating ose-olm-operator-controller-container image to be consistent with ART [#51](https://github.com/openshift/operator-framework-operator-controller/pull/51)
* NO-ISSUE: Synchronize From Upstream Repositories [#56](https://github.com/openshift/operator-framework-operator-controller/pull/56)
* NO-ISSUE: Synchronize From Upstream Repositories [#55](https://github.com/openshift/operator-framework-operator-controller/pull/55)
* NO-ISSUE: Synchronize From Upstream Repositories [#54](https://github.com/openshift/operator-framework-operator-controller/pull/54)
* NO-ISSUE: Synchronize From Upstream Repositories [#53](https://github.com/openshift/operator-framework-operator-controller/pull/53)
* NO-ISSUE: Synchronize From Upstream Repositories [#50](https://github.com/openshift/operator-framework-operator-controller/pull/50)
* NO-ISSUE: Synchronize From Upstream Repositories [#49](https://github.com/openshift/operator-framework-operator-controller/pull/49)
* NO-ISSUE: Synchronize From Upstream Repositories [#48](https://github.com/openshift/operator-framework-operator-controller/pull/48)
* NO-ISSUE: Synchronize From Upstream Repositories [#47](https://github.com/openshift/operator-framework-operator-controller/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-operator-controller/pull/46)
* NO-ISSUE: Synchronize From Upstream Repositories [#41](https://github.com/openshift/operator-framework-operator-controller/pull/41)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#44](https://github.com/openshift/operator-framework-operator-controller/pull/44)
* [OPRUN-3081](https://issues.redhat.com/browse/OPRUN-3081): UPSTREAM: <carry>: Drop commitchecker [#37](https://github.com/openshift/operator-framework-operator-controller/pull/37)
* [OPRUN-3075](https://issues.redhat.com/browse/OPRUN-3075): Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-operator-controller/pull/31)
* [OCPBUGS-20505](https://issues.redhat.com/browse/OCPBUGS-20505): Bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/operator-framework-operator-controller/pull/28)
* [OCPBUGS-19096](https://issues.redhat.com/browse/OCPBUGS-19096): UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART [#27](https://github.com/openshift/operator-framework-operator-controller/pull/27)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/fb6fb278d987faacb4da17b96a109da261fbb962...80b8649cf7a57098d03eff0d155531cf63728f41)
### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-rukpak/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-rukpak/pull/83)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#82](https://github.com/openshift/operator-framework-rukpak/pull/82)
* [OCPBUGS-31278](https://issues.redhat.com/browse/OCPBUGS-31278): Updating ose-olm-rukpak-container image to be consistent with ART for 4.16 [#81](https://github.com/openshift/operator-framework-rukpak/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-rukpak/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-rukpak/pull/78)
* NO-ISSUE: UPSTREAM: <carry>: Remove ncdc from OWNERS [#74](https://github.com/openshift/operator-framework-rukpak/pull/74)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): Synchronize From Upstream Repositories [#69](https://github.com/openshift/operator-framework-rukpak/pull/69)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): UPSTREAM: revert "UPSTREAM: <carry>: Update go-git to v5.11.0" [#71](https://github.com/openshift/operator-framework-rukpak/pull/71)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): [Upstream]: <carry>: Update go-git to v5.11.0 [#70](https://github.com/openshift/operator-framework-rukpak/pull/70)
* [OCPBUGS-25535](https://issues.redhat.com/browse/OCPBUGS-25535): Updating ose-olm-rukpak-container image to be consistent with ART [#68](https://github.com/openshift/operator-framework-rukpak/pull/68)
* [OCPBUGS-24825](https://issues.redhat.com/browse/OCPBUGS-24825): Updating ose-olm-rukpak-container image to be consistent with ART [#67](https://github.com/openshift/operator-framework-rukpak/pull/67)
* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-rukpak/pull/66)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#57](https://github.com/openshift/operator-framework-rukpak/pull/57)
* [OPRUN-3080](https://issues.redhat.com/browse/OPRUN-3080): UPSTREAM: <carry>: Drop commitchecker [#51](https://github.com/openshift/operator-framework-rukpak/pull/51)
* [OPRUN-3078](https://issues.redhat.com/browse/OPRUN-3078): Update to Upstream v0.15.0 [#50](https://github.com/openshift/operator-framework-rukpak/pull/50)
* Update to Upstream v0.14.0 [#44](https://github.com/openshift/operator-framework-rukpak/pull/44)
* [OCPBUGS-20506](https://issues.redhat.com/browse/OCPBUGS-20506): Bump golang.org/x/net from 0.15.0 to 0.17.0 [#36](https://github.com/openshift/operator-framework-rukpak/pull/36)
* [OCPBUGS-19167](https://issues.redhat.com/browse/OCPBUGS-19167): UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART [#35](https://github.com/openshift/operator-framework-rukpak/pull/35)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/2287fb27f4e930e84e83f3c915fa605e8e653c4b...282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6b5184128103eaad64d7b00f0d1de9b7c3597112)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): Bump library-go [#434](https://github.com/openshift/openshift-apiserver/pull/434)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): Bump openshift/api for Route API godoc fix [#433](https://github.com/openshift/openshift-apiserver/pull/433)
* [CFE-885](https://issues.redhat.com/browse/CFE-885): Feature route external certificate validation [#407](https://github.com/openshift/openshift-apiserver/pull/407)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): remove unauthenticated group from any cluster role binding [#423](https://github.com/openshift/openshift-apiserver/pull/423)
* [OCPBUGS-31957](https://issues.redhat.com/browse/OCPBUGS-31957): Bump golang/x/net to v0.23.0 [#427](https://github.com/openshift/openshift-apiserver/pull/427)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): make GarbageCollection supported for ClusterResourceQuotas as it is backed by a CRD [#405](https://github.com/openshift/openshift-apiserver/pull/405)
* [CFE-1048](https://issues.redhat.com/browse/CFE-1048): Bump Kubernetes to 1.29.2 [#425](https://github.com/openshift/openshift-apiserver/pull/425)
* NO-ISSUE: go mod tidy && go mod vendor [#420](https://github.com/openshift/openshift-apiserver/pull/420)
* [OCPBUGS-30279](https://issues.redhat.com/browse/OCPBUGS-30279): vendor upgrade runtime-utils [#419](https://github.com/openshift/openshift-apiserver/pull/419)
* [OCPBUGS-27927](https://issues.redhat.com/browse/OCPBUGS-27927): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 [#415](https://github.com/openshift/openshift-apiserver/pull/415)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#410](https://github.com/openshift/openshift-apiserver/pull/410)
* [OCPBUGS-24895](https://issues.redhat.com/browse/OCPBUGS-24895): Updating ose-openshift-apiserver-container image to be consistent with ART [#409](https://github.com/openshift/openshift-apiserver/pull/409)
* [API-1644](https://issues.redhat.com/browse/API-1644): add serviceaccount/patch to pull secret controller role [#408](https://github.com/openshift/openshift-apiserver/pull/408)
* [OCPBUGS-21735](https://issues.redhat.com/browse/OCPBUGS-21735): Enable HTTP/2 CVE mitigation [#396](https://github.com/openshift/openshift-apiserver/pull/396)
* [OCPBUGS-19145](https://issues.redhat.com/browse/OCPBUGS-19145): Updating ose-openshift-apiserver images to be consistent with ART [#390](https://github.com/openshift/openshift-apiserver/pull/390)
* [API-1644](https://issues.redhat.com/browse/API-1644): add TokenRequest to pull-secret controller's cluster role [#403](https://github.com/openshift/openshift-apiserver/pull/403)
* Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled [#395](https://github.com/openshift/openshift-apiserver/pull/395)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): remove image pruner cluster role creation [#391](https://github.com/openshift/openshift-apiserver/pull/391)
* [OCPBUGS-16514](https://issues.redhat.com/browse/OCPBUGS-16514): use import mode to manifest cache key [#386](https://github.com/openshift/openshift-apiserver/pull/386)
* [OCPBUGS-17674](https://issues.redhat.com/browse/OCPBUGS-17674): pkg/image: avoid unnecessary service lookups when registry is removed [#387](https://github.com/openshift/openshift-apiserver/pull/387)
* [OCPBUGS-5823](https://issues.redhat.com/browse/OCPBUGS-5823): remove unused service-ca roles [#388](https://github.com/openshift/openshift-apiserver/pull/388)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f41d636587a25e25f397c3af8322dd3babf2dd9a...6b5184128103eaad64d7b00f0d1de9b7c3597112)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc)
* [OCPBUGS-34825](https://issues.redhat.com/browse/OCPBUGS-34825): Whitelists lower-case proxy envs to pod proxydefaults [#314](https://github.com/openshift/openshift-controller-manager/pull/314)
* [OCPBUGS-33893](https://issues.redhat.com/browse/OCPBUGS-33893): openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets [#309](https://github.com/openshift/openshift-controller-manager/pull/309)
* [OCPBUGS-33876](https://issues.redhat.com/browse/OCPBUGS-33876): filter delete events [#308](https://github.com/openshift/openshift-controller-manager/pull/308)
* [OCPBUGS-33600](https://issues.redhat.com/browse/OCPBUGS-33600): revert revert and fix for hypershift [#305](https://github.com/openshift/openshift-controller-manager/pull/305)
* Revert #288 "API-1644: Use bound service account tokens when generating pull secrets" [#304](https://github.com/openshift/openshift-controller-manager/pull/304)
* [API-1644](https://issues.redhat.com/browse/API-1644): Use bound service account tokens when generating pull secrets [#288](https://github.com/openshift/openshift-controller-manager/pull/288)
* [OCPBUGS-33241](https://issues.redhat.com/browse/OCPBUGS-33241): panic in image trigger controller [#302](https://github.com/openshift/openshift-controller-manager/pull/302)
* [OCPBUGS-30688](https://issues.redhat.com/browse/OCPBUGS-30688): bump go-jose to fix CVE-2024-28176 [#297](https://github.com/openshift/openshift-controller-manager/pull/297)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds roleBinding controllers to the controllerInitializers [#296](https://github.com/openshift/openshift-controller-manager/pull/296)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade [#300](https://github.com/openshift/openshift-controller-manager/pull/300)
* [TRT-1632](https://issues.redhat.com/browse/TRT-1632): Revert #298 "OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade." [#301](https://github.com/openshift/openshift-controller-manager/pull/301)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade. [#298](https://github.com/openshift/openshift-controller-manager/pull/298)
* [OCPBUGS-31213](https://issues.redhat.com/browse/OCPBUGS-31213): Unable to look up the service account secrets for build [#292](https://github.com/openshift/openshift-controller-manager/pull/292)
* [BUILD-725](https://issues.redhat.com/browse/BUILD-725): Adds build & deployer controller [#289](https://github.com/openshift/openshift-controller-manager/pull/289)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps otelgrpc version & dependencies [#293](https://github.com/openshift/openshift-controller-manager/pull/293)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#290](https://github.com/openshift/openshift-controller-manager/pull/290)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#283](https://github.com/openshift/openshift-controller-manager/pull/283)
* [OCPBUGS-28665](https://issues.redhat.com/browse/OCPBUGS-28665): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#284](https://github.com/openshift/openshift-controller-manager/pull/284)
* [OCPBUGS-22471](https://issues.redhat.com/browse/OCPBUGS-22471): Mitigate CVE-2023-30551 (rekor) [#280](https://github.com/openshift/openshift-controller-manager/pull/280)
* [API-1651](https://issues.redhat.com/browse/API-1651): Create separate controllers for default service accounts [#272](https://github.com/openshift/openshift-controller-manager/pull/272)
* [API-1652](https://issues.redhat.com/browse/API-1652): bump go.mod go to 1.20 [#267](https://github.com/openshift/openshift-controller-manager/pull/267)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-openshift-controller-manager images to be consistent with ART [#273](https://github.com/openshift/openshift-controller-manager/pull/273)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable Build and DeploymentConfig Informers if their caps are disabled [#270](https://github.com/openshift/openshift-controller-manager/pull/270)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/27209ef14fcfca236ddba24ac7289bb3d01be8e6...1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/59b8a0ffc0a472e819e0c30911201c34c85a4684)
* [OCPBUGS-24878](https://issues.redhat.com/browse/OCPBUGS-24878): Updating openshift-state-metrics-container image to be consistent with ART [#112](https://github.com/openshift/openshift-state-metrics/pull/112)
* [MON-3530](https://issues.redhat.com/browse/MON-3530): Update OWNERS [#110](https://github.com/openshift/openshift-state-metrics/pull/110)
* [OCPBUGS-23649](https://issues.redhat.com/browse/OCPBUGS-23649): bump dependencies [#109](https://github.com/openshift/openshift-state-metrics/pull/109)
* [OCPBUGS-21754](https://issues.redhat.com/browse/OCPBUGS-21754): bump `x/net` to v0.17.0 [#103](https://github.com/openshift/openshift-state-metrics/pull/103)
* Update Dockerfile to remove the maintainer tag [#98](https://github.com/openshift/openshift-state-metrics/pull/98)
* [OCPBUGS-19120](https://issues.redhat.com/browse/OCPBUGS-19120): Updating openshift-state-metrics images to be consistent with ART [#102](https://github.com/openshift/openshift-state-metrics/pull/102)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...59b8a0ffc0a472e819e0c30911201c34c85a4684)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6eb4b8220a63a6f9fef9b3779aaf015247697713)
* [OCPBUGS-34882](https://issues.redhat.com/browse/OCPBUGS-34882): Correct out-of-bounds check [#171](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/171)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#166](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/166)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healtcheck for node-registrar [#161](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/161)
* [OCPBUGS-30951](https://issues.redhat.com/browse/OCPBUGS-30951): Relax requirement to enable topology [#164](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/164)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#159](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/159)
* [OCPBUGS-28937](https://issues.redhat.com/browse/OCPBUGS-28937): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 [#160](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/160)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#158](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/158)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#155](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/155)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#152](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/152)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#151](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/151)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#150](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/150)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#149](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/149)
* [OCPBUGS-24844](https://issues.redhat.com/browse/OCPBUGS-24844): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#145](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/145)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#146](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/146)
* [STOR-1281](https://issues.redhat.com/browse/STOR-1281): Make Cinder CSI Driver Topology feature configurable [#127](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/127)
* [OCPBUGS-23878](https://issues.redhat.com/browse/OCPBUGS-23878): OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#141](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/141)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#143](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/143)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129)
* [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133)
* [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/f6a713964aaa4e10be1df1d759d5bbef95a10ff7...6eb4b8220a63a6f9fef9b3779aaf015247697713)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/fb930638853b159a2e428e6200bd67a64a37295b)
* [OCPBUGS-34158](https://issues.redhat.com/browse/OCPBUGS-34158): Failure to get bootstrap is non-fatal [#115](https://github.com/openshift/machine-api-provider-openstack/pull/115)
* [OCPBUGS-34155](https://issues.redhat.com/browse/OCPBUGS-34155): Fix panic deleting Machine in ERROR state [#114](https://github.com/openshift/machine-api-provider-openstack/pull/114)
* [OCPBUGS-30855](https://issues.redhat.com/browse/OCPBUGS-30855): Ensure portSecurity is correctly set in the Port [#107](https://github.com/openshift/machine-api-provider-openstack/pull/107)
* [OCPBUGS-24904](https://issues.redhat.com/browse/OCPBUGS-24904): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#100](https://github.com/openshift/machine-api-provider-openstack/pull/100)
* [OSASINFRA-3368](https://issues.redhat.com/browse/OSASINFRA-3368): Revendor CAPO [#103](https://github.com/openshift/machine-api-provider-openstack/pull/103)
* NO-JIRA: Stop setting logtostderr flag and rely on defaults [#102](https://github.com/openshift/machine-api-provider-openstack/pull/102)
* NO-JIRA: Add snyk configuration file [#101](https://github.com/openshift/machine-api-provider-openstack/pull/101)
* [OCPBUGS-24097](https://issues.redhat.com/browse/OCPBUGS-24097): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#99](https://github.com/openshift/machine-api-provider-openstack/pull/99)
* [OCPBUGS-23668](https://issues.redhat.com/browse/OCPBUGS-23668): Bump Kubernetes dependencies [#97](https://github.com/openshift/machine-api-provider-openstack/pull/97)
* [OCPBUGS-23913](https://issues.redhat.com/browse/OCPBUGS-23913): Fix nil pointer exception when deleting machines without a root volume [#98](https://github.com/openshift/machine-api-provider-openstack/pull/98)
* [OSASINFRA-3297](https://issues.redhat.com/browse/OSASINFRA-3297): Remove unnecessary retrieval of Network ID [#96](https://github.com/openshift/machine-api-provider-openstack/pull/96)
* [OCPBUGS-16597](https://issues.redhat.com/browse/OCPBUGS-16597): Don't build InstanceSpec during delete operations [#90](https://github.com/openshift/machine-api-provider-openstack/pull/90)
* NO-JIRA: Misc linter fixes [#94](https://github.com/openshift/machine-api-provider-openstack/pull/94)
* [OSASINFRA-3283](https://issues.redhat.com/browse/OSASINFRA-3283): convert: add missing port profile [#93](https://github.com/openshift/machine-api-provider-openstack/pull/93)
* [OSASINFRA-3243](https://issues.redhat.com/browse/OSASINFRA-3243): add ephemeral storage support [#88](https://github.com/openshift/machine-api-provider-openstack/pull/88)
* [OCPBUGS-22319](https://issues.redhat.com/browse/OCPBUGS-22319): fix MachineToInstanceSpec when SG are nil [#91](https://github.com/openshift/machine-api-provider-openstack/pull/91)
* [OSASINFRA-3272](https://issues.redhat.com/browse/OSASINFRA-3272): Move to CAPO v1alpha7 [#87](https://github.com/openshift/machine-api-provider-openstack/pull/87)
* [OCPBUGS-22069](https://issues.redhat.com/browse/OCPBUGS-22069): Update dependencies [#89](https://github.com/openshift/machine-api-provider-openstack/pull/89)
* [OCPBUGS-19156](https://issues.redhat.com/browse/OCPBUGS-19156): Updating ose-machine-api-provider-openstack images to be consistent with ART [#84](https://github.com/openshift/machine-api-provider-openstack/pull/84)
* Remove unnecessary print [#79](https://github.com/openshift/machine-api-provider-openstack/pull/79)
* Update OWNERS [#83](https://github.com/openshift/machine-api-provider-openstack/pull/83)
* make: Remove irrelevant/broken targets [#82](https://github.com/openshift/machine-api-provider-openstack/pull/82)
* Bug OCPBUGS-4629: Set controller's SyncPeriod to 1 hour [#59](https://github.com/openshift/machine-api-provider-openstack/pull/59)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/51f8e4d69014bfa7a8815662ab0117b6505a6e29...fb930638853b159a2e428e6200bd67a64a37295b)
### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1aacee6a78ceac7acd5aa03647933e550d66a12c)
* [OCPBUGS-35219](https://issues.redhat.com/browse/OCPBUGS-35219): Unblock CI [#767](https://github.com/openshift/operator-framework-olm/pull/767)
* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-olm/pull/741)
* NO-ISSUE: Synchronize From Upstream Repositories [#739](https://github.com/openshift/operator-framework-olm/pull/739)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#703](https://github.com/openshift/operator-framework-olm/pull/703)
* [OCPBUGS-31073](https://issues.redhat.com/browse/OCPBUGS-31073): Synchronize From Upstream Repositories [#737](https://github.com/openshift/operator-framework-olm/pull/737)
* NO-ISSUE: Synchronize From Upstream Repositories [#735](https://github.com/openshift/operator-framework-olm/pull/735)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#733](https://github.com/openshift/operator-framework-olm/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#734](https://github.com/openshift/operator-framework-olm/pull/734)
* NO-ISSUE: Synchronize From Upstream Repositories [#732](https://github.com/openshift/operator-framework-olm/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#729](https://github.com/openshift/operator-framework-olm/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#727](https://github.com/openshift/operator-framework-olm/pull/727)
* NO-ISSUE: Synchronize From Upstream Repositories [#723](https://github.com/openshift/operator-framework-olm/pull/723)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-olm/pull/722)
* [OCPBUGS-31080](https://issues.redhat.com/browse/OCPBUGS-31080), [OCPBUGS-31438](https://issues.redhat.com/browse/OCPBUGS-31438): Manual downstream sync [#719](https://github.com/openshift/operator-framework-olm/pull/719)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#720](https://github.com/openshift/operator-framework-olm/pull/720)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): rename from 'clis' to 'tools' [#718](https://github.com/openshift/operator-framework-olm/pull/718)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#700](https://github.com/openshift/operator-framework-olm/pull/700)
* NO-ISSUE: Synchronize From Upstream Repositories [#717](https://github.com/openshift/operator-framework-olm/pull/717)
* NO-ISSUE: Synchronize From Upstream Repositories [#716](https://github.com/openshift/operator-framework-olm/pull/716)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): image just as a cli source for mirror publishing [#713](https://github.com/openshift/operator-framework-olm/pull/713)
* NO-ISSUE: Semver lastedge error (#1169) [sync] [#714](https://github.com/openshift/operator-framework-olm/pull/714)
* [OCPBUGS-25019](https://issues.redhat.com/browse/OCPBUGS-25019): building rhel8/rhel9/static clis in payload image [#704](https://github.com/openshift/operator-framework-olm/pull/704)
* [OCPBUGS-30132](https://issues.redhat.com/browse/OCPBUGS-30132): Synchronize From Upstream Repositories [#709](https://github.com/openshift/operator-framework-olm/pull/709)
* [OCPBUGS-23744](https://issues.redhat.com/browse/OCPBUGS-23744): Wait for required RBAC before creating packageserver CSV [#708](https://github.com/openshift/operator-framework-olm/pull/708)
* NO-ISSUE: Synchronize From Upstream Repositories [#706](https://github.com/openshift/operator-framework-olm/pull/706)
* NO-ISSUE: Synchronize From Upstream Repositories [#702](https://github.com/openshift/operator-framework-olm/pull/702)
* NO-ISSUE: Synchronize From Upstream Repositories [#701](https://github.com/openshift/operator-framework-olm/pull/701)
* NO-ISSUE: Synchronize From Upstream Repositories [#695](https://github.com/openshift/operator-framework-olm/pull/695)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#697](https://github.com/openshift/operator-framework-olm/pull/697)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-olm/pull/693)
* NO-ISSUE: Synchronize From Upstream Repositories [#687](https://github.com/openshift/operator-framework-olm/pull/687)
* NO-ISSUE: Remove ncdc from OWNERS #68 [#681](https://github.com/openshift/operator-framework-olm/pull/681)
* [OCPBUGS-24587](https://issues.redhat.com/browse/OCPBUGS-24587), [OCPBUGS-28744](https://issues.redhat.com/browse/OCPBUGS-28744): Synchronize From Upstream Repositories [#679](https://github.com/openshift/operator-framework-olm/pull/679)
* NO-ISSUE: Synchronize From Upstream Repositories [#678](https://github.com/openshift/operator-framework-olm/pull/678)
* NO-ISSUE: Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-olm/pull/676)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-olm/pull/667)
* [OCPBUGS-27140](https://issues.redhat.com/browse/OCPBUGS-27140): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 [#658](https://github.com/openshift/operator-framework-olm/pull/658)
* [OCPBUGS-25989](https://issues.redhat.com/browse/OCPBUGS-25989): Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-olm/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-olm/pull/659)
* [OCPBUGS-25262](https://issues.redhat.com/browse/OCPBUGS-25262): Updating operator-registry-container image to be consistent with ART for 4.16 [#657](https://github.com/openshift/operator-framework-olm/pull/657)
* [OCPBUGS-24526](https://issues.redhat.com/browse/OCPBUGS-24526), [OPRUN-3182](https://issues.redhat.com/browse/OPRUN-3182): Sync with upstream [#654](https://github.com/openshift/operator-framework-olm/pull/654)
* [OCPBUGS-24994](https://issues.redhat.com/browse/OCPBUGS-24994): Updating operator-lifecycle-manager-container image to be consistent with ART [#631](https://github.com/openshift/operator-framework-olm/pull/631)
* NO-ISSUE: Synchronize From Upstream Repositories [#650](https://github.com/openshift/operator-framework-olm/pull/650)
* NO-ISSUE: Synchronize From Upstream Repositories [#646](https://github.com/openshift/operator-framework-olm/pull/646)
* [OCPBUGS-25673](https://issues.redhat.com/browse/OCPBUGS-25673): NO-ISSUE: Synchronize From Upstream Repositories [#641](https://github.com/openshift/operator-framework-olm/pull/641)
* NO-ISSUE: Synchronize From Upstream Repositories [#627](https://github.com/openshift/operator-framework-olm/pull/627)
* NO-ISSUE: Update verified directories for microshift-manifests [#638](https://github.com/openshift/operator-framework-olm/pull/638)
* [OCPBUGS-25339](https://issues.redhat.com/browse/OCPBUGS-25339): [CARRY] Fix panic issue when annotations map is nil [#634](https://github.com/openshift/operator-framework-olm/pull/634)
* [OCPBUGS-24942](https://issues.redhat.com/browse/OCPBUGS-24942): Updating operator-registry-container image to be consistent with ART [#630](https://github.com/openshift/operator-framework-olm/pull/630)
* [API-1674](https://issues.redhat.com/browse/API-1674): Add ownership annotations to new and existing olm-managed secrets [#626](https://github.com/openshift/operator-framework-olm/pull/626)
* NO-ISSUE: Synchronize From Upstream Repositories [#625](https://github.com/openshift/operator-framework-olm/pull/625)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests fixes [#622](https://github.com/openshift/operator-framework-olm/pull/622)
* NO-ISSUE: scripts: remove legacy bumping implementations [#613](https://github.com/openshift/operator-framework-olm/pull/613)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests remove collection-profiles cronjob from kustomization [#615](https://github.com/openshift/operator-framework-olm/pull/615)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests: Ignore "*.removed.yaml" files in kustomization.yaml [#610](https://github.com/openshift/operator-framework-olm/pull/610)
* [OPECO-3066](https://issues.redhat.com/browse/OPECO-3066): Synchronize From Upstream Repositories [#612](https://github.com/openshift/operator-framework-olm/pull/612)
* NO-ISSUE: Synchronize From Upstream Repositories [#609](https://github.com/openshift/operator-framework-olm/pull/609)
* Synchronize From Upstream Repositories [#606](https://github.com/openshift/operator-framework-olm/pull/606)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Generate OLM microshift manifests [#604](https://github.com/openshift/operator-framework-olm/pull/604)
* [OCPBUGS-17041](https://issues.redhat.com/browse/OCPBUGS-17041): Release Leader Election on Manager Exit [#556](https://github.com/openshift/operator-framework-olm/pull/556)
* [OPRUN-3106](https://issues.redhat.com/browse/OPRUN-3106): skuznets/bump vendor ii [#600](https://github.com/openshift/operator-framework-olm/pull/600)
* NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602)
* Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581)
* scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599)
* Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597)
* [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596)
* [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595)
* [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592)
* [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565)
* Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588)
* [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585)
* scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593)
* scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580)
* Sync script: handle multi commit merges [#578](https://github.com/openshift/operator-framework-olm/pull/578)
* Sync 2023 10 05 no steve [#579](https://github.com/openshift/operator-framework-olm/pull/579)
* scripts/bumper: exit when there's nothing to do [#569](https://github.com/openshift/operator-framework-olm/pull/569)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551)
* [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563)
* Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567)
* [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564)
* [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/1b4a1b637f387ac05fd78c02c8cdca34e8d7051d...1aacee6a78ceac7acd5aa03647933e550d66a12c)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
* [OCPBUGS-24971](https://issues.redhat.com/browse/OCPBUGS-24971): bump golang to 1.21 [#560](https://github.com/operator-framework/operator-marketplace/pull/560)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#561](https://github.com/operator-framework/operator-marketplace/pull/561)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#559](https://github.com/operator-framework/operator-marketplace/pull/559)
* [OCPBUGS-29575](https://issues.redhat.com/browse/OCPBUGS-29575): Apply hypershift cluster-profile for ibm-cloud-managed [#556](https://github.com/operator-framework/operator-marketplace/pull/556)
* [OPECO-3031](https://issues.redhat.com/browse/OPECO-3031): Update community index to 4.16 [#558](https://github.com/operator-framework/operator-marketplace/pull/558)
* synching dco policy across v0 repos [#557](https://github.com/operator-framework/operator-marketplace/pull/557)
* [OPECO-3029](https://issues.redhat.com/browse/OPECO-3029): Update image tag to 4.16 for all indexes except community-operators [#555](https://github.com/operator-framework/operator-marketplace/pull/555)
* Delete deploy dir [#529](https://github.com/operator-framework/operator-marketplace/pull/529)
* [OPRUN-3130](https://issues.redhat.com/browse/OPRUN-3130): use content extraction in default catalog sources [#540](https://github.com/operator-framework/operator-marketplace/pull/540)
* [OCPBUGS-19710](https://issues.redhat.com/browse/OCPBUGS-19710): Update image tag to 4.15 for all but community operators [#541](https://github.com/operator-framework/operator-marketplace/pull/541)
* [OCPBUGS-21592](https://issues.redhat.com/browse/OCPBUGS-21592): [release-4.15] bump golang.org/x/net to 0.17.0 [#546](https://github.com/operator-framework/operator-marketplace/pull/546)
* Update image tag to 4.15 for community operators [#534](https://github.com/operator-framework/operator-marketplace/pull/534)
* [OCPBUGS-19230](https://issues.redhat.com/browse/OCPBUGS-19230): Updating marketplace-operator images to be consistent with ART [#539](https://github.com/operator-framework/operator-marketplace/pull/539)
* Dockerfile: Align OKD and OCP [#531](https://github.com/operator-framework/operator-marketplace/pull/531)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9...7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/1db726a940d5ec150fd185a215f1368990653082)
* [OCPBUGS-24868](https://issues.redhat.com/browse/OCPBUGS-24868): Updating ose-ovirt-csi-driver-container image to be consistent with ART [#132](https://github.com/openshift/ovirt-csi-driver/pull/132)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...1db726a940d5ec150fd185a215f1368990653082)
### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/ac852f3eb077c877e998fee0359534349d07c604)
* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.16 [#130](https://github.com/openshift/ovirt-csi-driver-operator/pull/130)
* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART [#129](https://github.com/openshift/ovirt-csi-driver-operator/pull/129)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/ovirt-csi-driver-operator/pull/125)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/2fa33aa7f05da8640a8695372364f2367febd12a...ac852f3eb077c877e998fee0359534349d07c604)
### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/abb91c84083dd139780921673da64fa5cd13bccb)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/cluster-api-provider-ovirt/pull/177)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART [#176](https://github.com/openshift/cluster-api-provider-ovirt/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47...abb91c84083dd139780921673da64fa5cd13bccb)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d90fa545e17a27bdf253fa820a1d7552e3079465)
* [OCPBUGS-34402](https://issues.redhat.com/browse/OCPBUGS-34402): [release-4.16] dns: fix deadlock in case of error [#2181](https://github.com/openshift/ovn-kubernetes/pull/2181)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2174](https://github.com/openshift/ovn-kubernetes/pull/2174)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Downstream Merge 16th May 2024 [#2171](https://github.com/openshift/ovn-kubernetes/pull/2171)
* [OCPBUGS-30224](https://issues.redhat.com/browse/OCPBUGS-30224), [OCPBUGS-33328](https://issues.redhat.com/browse/OCPBUGS-33328), [SDN-4388](https://issues.redhat.com/browse/SDN-4388): [DownstreamMerge] 10 may 2024 [#2162](https://github.com/openshift/ovn-kubernetes/pull/2162)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Downstream Merge May 2nd 2024 [#2152](https://github.com/openshift/ovn-kubernetes/pull/2152)
* [OCPBUGS-32925](https://issues.redhat.com/browse/OCPBUGS-32925), [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985): Dockerfile: Bump OVS to 3.3.0-2 [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142)
* [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419), [OCPBUGS-32461](https://issues.redhat.com/browse/OCPBUGS-32461), [SDN-4243](https://issues.redhat.com/browse/SDN-4243): Downstream Merge 22nd April 2024 [#2136](https://github.com/openshift/ovn-kubernetes/pull/2136)
* [SDN-4458](https://issues.redhat.com/browse/SDN-4458): Do per-pod MCS/metadata blocking with nftables rather than iptables [#1946](https://github.com/openshift/ovn-kubernetes/pull/1946)
* [SDN-4606](https://issues.redhat.com/browse/SDN-4606), [SDN-4688](https://issues.redhat.com/browse/SDN-4688): Downstream Merge April 18th 2024 [#2132](https://github.com/openshift/ovn-kubernetes/pull/2132)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419): [DownstreamMerge] 4-16-24 [#2129](https://github.com/openshift/ovn-kubernetes/pull/2129)
* [SDN-4403](https://issues.redhat.com/browse/SDN-4403): Downstream merge 20240415 [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889), [OCPBUGS-29952](https://issues.redhat.com/browse/OCPBUGS-29952), [SDN-3931](https://issues.redhat.com/browse/SDN-3931): Downstream merge 12 04 24 [#2120](https://github.com/openshift/ovn-kubernetes/pull/2120)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093), [OCPBUGS-29511](https://issues.redhat.com/browse/OCPBUGS-29511), [SDN-4157](https://issues.redhat.com/browse/SDN-4157): [DownstreamMerge] 4 April 2024 [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157): DownstreamMerge 25th march 2024 [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100)
* [OCPBUGS-31557](https://issues.redhat.com/browse/OCPBUGS-31557): Revert "Remove unnecessary rhel8 build layer" [#2104](https://github.com/openshift/ovn-kubernetes/pull/2104)
* [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089)
* [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081)
* [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066)
* [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063)
* [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057)
* [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051)
* [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048)
* [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038)
* [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027)
* [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995)
* [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979)
* [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010)
* [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978)
* [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000)
* [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980)
* [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990)
* [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986)
* [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976)
* [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965)
* [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962)
* [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958)
* [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952)
* [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702)
* [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884)
* [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931)
* [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923)
* [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919)
* [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917)
* [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911)
* [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907)
* [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887)
* [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895)
* Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897)
* [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883)
* [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bdc67edd064afc3519c4780f43c1c3837cd4143f...d90fa545e17a27bdf253fa820a1d7552e3079465)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/730a473cf60d5de4d4543ea71ff5f3c6c1010980)
* [MULTIARCH-4631](https://issues.redhat.com/browse/MULTIARCH-4631): Rebase with upstream: go modules updates [#78](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/78)
* [MULTIARCH-4581](https://issues.redhat.com/browse/MULTIARCH-4581): Rebase with upstream: go modules updates [#77](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/77)
* [OCPBUGS-30530](https://issues.redhat.com/browse/OCPBUGS-30530): fix govul with protobuf [#76](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/76)
* [MULTIARCH-4363](https://issues.redhat.com/browse/MULTIARCH-4363): Rebase with upstream: go modules updates [#75](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/75)
* [MULTIARCH-4092](https://issues.redhat.com/browse/MULTIARCH-4092): Rebase with upstream: v0.6.0 release [#74](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/74)
* [OCPBUGS-25513](https://issues.redhat.com/browse/OCPBUGS-25513): CVE-2023-48795 Update crypto lib [#73](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/73)
* [MULTIARCH-4059](https://issues.redhat.com/browse/MULTIARCH-4059): Rebase with upstream: Fix snyk code issue: Path Traversal [#69](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/69)
* [MULTIARCH-4058](https://issues.redhat.com/browse/MULTIARCH-4058): Rebase with upstream: go modules updates [#67](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/67)
* [OCPBUGS-24950](https://issues.redhat.com/browse/OCPBUGS-24950): Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#68](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/68)
* Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#66](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/66)
* [MULTIARCH-4027](https://issues.redhat.com/browse/MULTIARCH-4027): Rebase with upstream: Kubernetes Improper Input Validation vulnerability [#65](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/65)
* [MULTIARCH-4022](https://issues.redhat.com/browse/MULTIARCH-4022): Rebase with upstream: v0.5.1 changes [#63](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/63)
* [MULTIARCH-3987](https://issues.redhat.com/browse/MULTIARCH-3987): synk: ignore vendor dir [#57](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/57)
* Rebase with upstream: v0.5.0 changes [#56](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/56)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/49)
* Updating ose-powervs-block-csi-driver images to be consistent with ART [#47](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/47)
* cherry-pick: Improve delete device failure logs in driver node [#46](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/46)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/ceacf8b4308cf0c00c18952f7dbcdc112efdbb46...730a473cf60d5de4d4543ea71ff5f3c6c1010980)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#70](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/70)
* [OCPBUGS-28738](https://issues.redhat.com/browse/OCPBUGS-28738): Fix 4.16 SAST scan issues for ose-powervs-block-csi-driver-operator-container [#68](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/68)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node-registrar healtcheck [#67](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/67)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#65](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/65)
* [OCPBUGS-28933](https://issues.redhat.com/browse/OCPBUGS-28933): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#66](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/66)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#64](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/64)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#63](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/63)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#57](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/57)
* [OCPBUGS-25710](https://issues.redhat.com/browse/OCPBUGS-25710): snyk: ignore vendor dir [#50](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/50)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#55](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/55)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#54](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/54)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#53](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/53)
* UPSTREAM <drop>: OCPBUGS-23628: SAST Scan detected vulnerability in go.uber.org/zap [#52](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/52)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#51](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/51)
* [OCPBUGS-22628](https://issues.redhat.com/browse/OCPBUGS-22628): Bump otelhttp to >= v0.44.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/49)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#47](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/47)
* Update OWNERS add yussufsh [#43](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/43)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/39)
* Updating ose-powervs-block-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/38)
* Update the powervs-csi-node to use nodeSelector for ppc64le [#37](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/37)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7436369afce33811e543b13fcbea8d1e1ff65502...9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/87386cd444b4b9fe745d0198ab959ccedb5e318a)
* [MULTIARCH-4610](https://issues.redhat.com/browse/MULTIARCH-4610): UPSTREAM: <carry>: Override service endpoints [#65](https://github.com/openshift/cloud-provider-powervs/pull/65)
* [OCPBUGS-30531](https://issues.redhat.com/browse/OCPBUGS-30531): fix govul with protobuf [#64](https://github.com/openshift/cloud-provider-powervs/pull/64)
* [OCPBUGS-25013](https://issues.redhat.com/browse/OCPBUGS-25013): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-powervs/pull/62)
* [OCPBUGS-22629](https://issues.redhat.com/browse/OCPBUGS-22629): Bump otelhttp to >= v0.44.0 [#58](https://github.com/openshift/cloud-provider-powervs/pull/58)
* [OCPBUGS-24170](https://issues.redhat.com/browse/OCPBUGS-24170): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-powervs/pull/61)
* [MULTIARCH-4036](https://issues.redhat.com/browse/MULTIARCH-4036): Manual rebase of upstream release 1.28 on 28-11-2023 [#60](https://github.com/openshift/cloud-provider-powervs/pull/60)
* [MULTIARCH-3989](https://issues.redhat.com/browse/MULTIARCH-3989): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#50](https://github.com/openshift/cloud-provider-powervs/pull/50)
* [MULTIARCH-3997](https://issues.redhat.com/browse/MULTIARCH-3997): Support to use service instance name in config [#49](https://github.com/openshift/cloud-provider-powervs/pull/49)
* [OCPBUGS-21763](https://issues.redhat.com/browse/OCPBUGS-21763): CVE-2023-39325 - Update net dependencies - 4.15 [#44](https://github.com/openshift/cloud-provider-powervs/pull/44)
* [OCPBUGS-19272](https://issues.redhat.com/browse/OCPBUGS-19272): Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-powervs/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/32c1028ecf58851eb1270f47351a4423ba081c3b...87386cd444b4b9fe745d0198ab959ccedb5e318a)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1)
* [OCPBUGS-27881](https://issues.redhat.com/browse/OCPBUGS-27881): Update Snyk file to exclude other vendor folders [#74](https://github.com/openshift/machine-api-provider-powervs/pull/74)
* [MULTIARCH-4104](https://issues.redhat.com/browse/MULTIARCH-4104): Update go and k8s versions [#73](https://github.com/openshift/machine-api-provider-powervs/pull/73)
* [MULTIARCH-4066](https://issues.redhat.com/browse/MULTIARCH-4066): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#71](https://github.com/openshift/machine-api-provider-powervs/pull/71)
* [OCPBUGS-25555](https://issues.redhat.com/browse/OCPBUGS-25555): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#70](https://github.com/openshift/machine-api-provider-powervs/pull/70)
* [OCPBUGS-25047](https://issues.redhat.com/browse/OCPBUGS-25047): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#68](https://github.com/openshift/machine-api-provider-powervs/pull/68)
* [OCPBUGS-24894](https://issues.redhat.com/browse/OCPBUGS-24894): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#67](https://github.com/openshift/machine-api-provider-powervs/pull/67)
* [OCPBUGS-24089](https://issues.redhat.com/browse/OCPBUGS-24089): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#66](https://github.com/openshift/machine-api-provider-powervs/pull/66)
* NO-ISSUE: snyk code scan exclude vendor directory [#60](https://github.com/openshift/machine-api-provider-powervs/pull/60)
* Fix nil nextURL [#59](https://github.com/openshift/machine-api-provider-powervs/pull/59)
* [OCPBUGS-21878](https://issues.redhat.com/browse/OCPBUGS-21878): CVE-2023-44487 - Bump golang.org/x/net to v0.17.0 - 4.15 [#53](https://github.com/openshift/machine-api-provider-powervs/pull/53)
* Update dependencies and use k8 1.28 [#52](https://github.com/openshift/machine-api-provider-powervs/pull/52)
* [OCPBUGS-19144](https://issues.redhat.com/browse/OCPBUGS-19144): Updating ose-powervs-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-powervs/pull/51)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/1a957dae3a7c9c36752b4869854a90e6b88eaf7e...6b57e6c1bf0ee22bd0d51fde1249209c53da07d1)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)
* [OCPBUGS-29980](https://issues.redhat.com/browse/OCPBUGS-29980): Updating prom-label-proxy-container image to be consistent with ART for 4.16 [#365](https://github.com/openshift/prom-label-proxy/pull/365)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): add machine424 and rexagod to OWNERS [#358](https://github.com/openshift/prom-label-proxy/pull/358)
* [MON-3698](https://issues.redhat.com/browse/MON-3698): Update to upstream prom-label-proxy 0.8.1 [#363](https://github.com/openshift/prom-label-proxy/pull/363)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Bump openshift/prom-label-proxy to v0.8.0 [#362](https://github.com/openshift/prom-label-proxy/pull/362)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#361](https://github.com/openshift/prom-label-proxy/pull/361)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#360](https://github.com/openshift/prom-label-proxy/pull/360)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#359](https://github.com/openshift/prom-label-proxy/pull/359)
* [OCPBUGS-18854](https://issues.redhat.com/browse/OCPBUGS-18854): Updating prom-label-proxy images to be consistent with ART [#357](https://github.com/openshift/prom-label-proxy/pull/357)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)
### [prometheus](https://github.com/openshift/prometheus/tree/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#202](https://github.com/openshift/prometheus/pull/202)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#201](https://github.com/openshift/prometheus/pull/201)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#200](https://github.com/openshift/prometheus/pull/200)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#199](https://github.com/openshift/prometheus/pull/199)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.51.1 [#198](https://github.com/openshift/prometheus/pull/198)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.50.1 [#196](https://github.com/openshift/prometheus/pull/196)
* [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188)
* [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187)
* [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186)
* [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185)
* Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181)
* Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180)
* Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179)
* [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173)
* update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172)
* Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169)
* [Full changelog](https://github.com/openshift/prometheus/compare/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd...69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/e9aea929f309f412678fdf1064e1f74db3ba08b4)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): Dockerfile.ocp: use common-build target [#91](https://github.com/openshift/prometheus-alertmanager/pull/91)
* [OCPBUGS-29969](https://issues.redhat.com/browse/OCPBUGS-29969): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.16 [#88](https://github.com/openshift/prometheus-alertmanager/pull/88)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#86](https://github.com/openshift/prometheus-alertmanager/pull/86)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#85](https://github.com/openshift/prometheus-alertmanager/pull/85)
* [OCPBUGS-21771](https://issues.redhat.com/browse/OCPBUGS-21771): Bump golang.org/x/net to v0.17.0 [#79](https://github.com/openshift/prometheus-alertmanager/pull/79)
* Bump openshift/prometheus-alertmanager to v0.26.0 [#78](https://github.com/openshift/prometheus-alertmanager/pull/78)
* update OWNERS file [#77](https://github.com/openshift/prometheus-alertmanager/pull/77)
* Bump v0.26.0 [#76](https://github.com/openshift/prometheus-alertmanager/pull/76)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-alertmanager images to be consistent with ART [#75](https://github.com/openshift/prometheus-alertmanager/pull/75)
* [OCPBUGS-18250](https://issues.redhat.com/browse/OCPBUGS-18250): Update alertmanager to 0.25.1 [#74](https://github.com/openshift/prometheus-alertmanager/pull/74)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...e9aea929f309f412678fdf1064e1f74db3ba08b4)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/8bf4750af765730dc423213516245c7b0679e352)
* [MON-3838](https://issues.redhat.com/browse/MON-3838): Bump openshift/prometheus-operator to v0.73.2 [#286](https://github.com/openshift/prometheus-operator/pull/286)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Bump openshift/prometheus-operator to v0.73.1 [#285](https://github.com/openshift/prometheus-operator/pull/285)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Bump openshift/prometheus-operator to v0.73.0 [#284](https://github.com/openshift/prometheus-operator/pull/284)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281)
* [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277)
* [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271)
* [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269)
* [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270)
* [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265)
* [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263)
* [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260)
* [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258)
* [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259)
* [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256)
* [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255)
* [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246)
* update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245)
* [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242)
* [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244)
* [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243)
* : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a4b845a7ae4e1ffb62eae963406481f1c3456bfe...8bf4750af765730dc423213516245c7b0679e352)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)
* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#145](https://github.com/openshift/node_exporter/pull/145)
* [OCPBUGS-20151](https://issues.redhat.com/browse/OCPBUGS-20151): [CHERRY PICK FROM UPSTREAM]: Take optional attributes into account for fibre_channel metrics [#144](https://github.com/openshift/node_exporter/pull/144)
* [OCPBUGS-29976](https://issues.redhat.com/browse/OCPBUGS-29976): golang-github-prometheus-node_exporter-container image… [#142](https://github.com/openshift/node_exporter/pull/142)
* [OCPBUGS-24722](https://issues.redhat.com/browse/OCPBUGS-24722): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART [#140](https://github.com/openshift/node_exporter/pull/140)
* [MON-3502](https://issues.redhat.com/browse/MON-3502): [bot] Bump openshift/node_exporter to v1.7.0 [#139](https://github.com/openshift/node_exporter/pull/139)
* [OCPBUGS-21635](https://issues.redhat.com/browse/OCPBUGS-21635): upgrade golang.org/x/net v0.17.0 [#133](https://github.com/openshift/node_exporter/pull/133)
* update OWNERS file [#132](https://github.com/openshift/node_exporter/pull/132)
* [OCPBUGS-18850](https://issues.redhat.com/browse/OCPBUGS-18850): Updating golang-github-prometheus-node_exporter images to be consistent with ART [#131](https://github.com/openshift/node_exporter/pull/131)
* [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/3112b458983c6fca6f77d5a945fb0026186dace6)
* [OCPBUGS-30048](https://issues.redhat.com/browse/OCPBUGS-30048): Fix OWNERS file to reflect the correct team [#41](https://github.com/openshift/route-controller-manager/pull/41)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#38](https://github.com/openshift/route-controller-manager/pull/38)
* [OCPBUGS-26088](https://issues.redhat.com/browse/OCPBUGS-26088): Add .snyk file to exclude vendor and ignore unit tests [#37](https://github.com/openshift/route-controller-manager/pull/37)
* [OCPBUGS-24839](https://issues.redhat.com/browse/OCPBUGS-24839): Updating ose-route-controller-manager-container image to be consistent with ART [#36](https://github.com/openshift/route-controller-manager/pull/36)
* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include ingress's namespace in ingress without class metric [#35](https://github.com/openshift/route-controller-manager/pull/35)
* go.mod: remove replaces [#33](https://github.com/openshift/route-controller-manager/pull/33)
* [OCPBUGS-21823](https://issues.redhat.com/browse/OCPBUGS-21823): bump(k8s,openshift) to address CVE-2023-44487 [#32](https://github.com/openshift/route-controller-manager/pull/32)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#31](https://github.com/openshift/route-controller-manager/pull/31)
* [OCPBUGS-19202](https://issues.redhat.com/browse/OCPBUGS-19202): Updating ose-route-controller-manager images to be consistent with ART [#30](https://github.com/openshift/route-controller-manager/pull/30)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e...3112b458983c6fca6f77d5a945fb0026186dace6)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/538c7b98a689e573b61e1abb1cb649da470c5fac)
* [OCPBUGS-24916](https://issues.redhat.com/browse/OCPBUGS-24916): Bump to rhel9 [#240](https://github.com/openshift/service-ca-operator/pull/240)
* [OCPBUGS-29583](https://issues.redhat.com/browse/OCPBUGS-29583): Apply hypershift cluster-profile for ibm-cloud-managed [#234](https://github.com/openshift/service-ca-operator/pull/234)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#235](https://github.com/openshift/service-ca-operator/pull/235)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#230](https://github.com/openshift/service-ca-operator/pull/230)
* [API-1673](https://issues.redhat.com/browse/API-1673): Add description annotations to service CA secret and configmap [#225](https://github.com/openshift/service-ca-operator/pull/225)
* add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220)
* [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223)
* [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221)
* [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/3c3f82f7112ee4b5656e5c554f9887acdf881175...538c7b98a689e573b61e1abb1cb649da470c5fac)
### [telemeter](https://github.com/openshift/telemeter/tree/6ab43e488013b2383d594b3a8837e3800ce01c04)
* [RHOBS-1036](https://issues.redhat.com/browse/RHOBS-1036): Harden integration tests [#529](https://github.com/openshift/telemeter/pull/529)
* [MON-3819](https://issues.redhat.com/browse/MON-3819): Update tools go 1.21 [#526](https://github.com/openshift/telemeter/pull/526)
* [MON-3737](https://issues.redhat.com/browse/MON-3737): Update binaries to new version [#525](https://github.com/openshift/telemeter/pull/525)
* [OCPBUGS-30724](https://issues.redhat.com/browse/OCPBUGS-30724): CVE-2024-28180 bump go-jose to v3.0.3 [#524](https://github.com/openshift/telemeter/pull/524)
* [OCPBUGS-30832](https://issues.redhat.com/browse/OCPBUGS-30832): bump Go 1.21 [#521](https://github.com/openshift/telemeter/pull/521)
* [OCPBUGS-30544](https://issues.redhat.com/browse/OCPBUGS-30544): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#516](https://github.com/openshift/telemeter/pull/516)
* [MON-3175](https://issues.redhat.com/browse/MON-3175): README.md: update deprecated link [#512](https://github.com/openshift/telemeter/pull/512)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): remove obsolete targets from Makefile [#513](https://github.com/openshift/telemeter/pull/513)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Updating telemeter-container image to be consistent with ART [#497](https://github.com/openshift/telemeter/pull/497)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Force kill jobs after integration v2 test finish [#514](https://github.com/openshift/telemeter/pull/514)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): chore: bump dependencies [#511](https://github.com/openshift/telemeter/pull/511)
* [RHOBS-995](https://issues.redhat.com/browse/RHOBS-995): Simplify cluster:capacity_effective_cpu_cores, add tests [#506](https://github.com/openshift/telemeter/pull/506)
* [MON-3708](https://issues.redhat.com/browse/MON-3708): fix test/integration.sh [#509](https://github.com/openshift/telemeter/pull/509)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): fix join issue in cluster:capacity_effective_cpu_cores [#505](https://github.com/openshift/telemeter/pull/505)
* [OCPBUGS-16397](https://issues.redhat.com/browse/OCPBUGS-16397): update nutanix filter [#504](https://github.com/openshift/telemeter/pull/504)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Removing newlines from the jsonnet configuration for the recording rules.libsonnet [#503](https://github.com/openshift/telemeter/pull/503)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Add rule for effective CPU cores for subscription usage purposes [#501](https://github.com/openshift/telemeter/pull/501)
* [RHOBS-956](https://issues.redhat.com/browse/RHOBS-956): Rename subscription_labels to ocm_subscription [#495](https://github.com/openshift/telemeter/pull/495)
* [OCPBUGS-22744](https://issues.redhat.com/browse/OCPBUGS-22744): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#493](https://github.com/openshift/telemeter/pull/493)
* rhelemeter: Parse org and cn with regex [#492](https://github.com/openshift/telemeter/pull/492)
* rhelemeter: Validation of incoming metrics [#491](https://github.com/openshift/telemeter/pull/491)
* add `machine424` and `rexagod` to OWNERS [#478](https://github.com/openshift/telemeter/pull/478)
* Bump golang 1.20 [#490](https://github.com/openshift/telemeter/pull/490)
* [OCPBUGS-21636](https://issues.redhat.com/browse/OCPBUGS-21636): Bump golang.org/x/net to v0.17.0 [#483](https://github.com/openshift/telemeter/pull/483)
* Server: Add support for shipping traces to an otel collector [#482](https://github.com/openshift/telemeter/pull/482)
* rhelemeter: support client info file in jsonnet [#481](https://github.com/openshift/telemeter/pull/481)
* [OCPBUGS-19248](https://issues.redhat.com/browse/OCPBUGS-19248): Updating telemeter images to be consistent with ART [#480](https://github.com/openshift/telemeter/pull/480)
* Fix: handle authorization server 403 responses [#479](https://github.com/openshift/telemeter/pull/479)
* [RHOBS-870](https://issues.redhat.com/browse/RHOBS-870): Improve logging [#477](https://github.com/openshift/telemeter/pull/477)
* [RHOBS-855](https://issues.redhat.com/browse/RHOBS-855): rhelemeter: Read client info/data from request [#476](https://github.com/openshift/telemeter/pull/476)
* [Full changelog](https://github.com/openshift/telemeter/compare/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9...6ab43e488013b2383d594b3a8837e3800ce01c04)
### [tests](https://github.com/openshift/origin/tree/3bb691e0fe54cd503f884a80e9211e318a7d8090)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Add a "limit" exception for iptables-alerter [#28859](https://github.com/openshift/origin/pull/28859)
* [OCPBUGS-34500](https://issues.redhat.com/browse/OCPBUGS-34500): add manual etcd signer cert rotation e2e test [#28830](https://github.com/openshift/origin/pull/28830)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#28831](https://github.com/openshift/origin/pull/28831)
* NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens [#28810](https://github.com/openshift/origin/pull/28810)
* [STOR-1838](https://issues.redhat.com/browse/STOR-1838): add test for vsphere driver snapshot configuration [#28717](https://github.com/openshift/origin/pull/28717)
* [OCPEDGE-1101](https://issues.redhat.com/browse/OCPEDGE-1101): skip etcd test for hardware speed on sno [#28800](https://github.com/openshift/origin/pull/28800)
* [SPLAT-1439](https://issues.redhat.com/browse/SPLAT-1439): Ignore edge workers when listing nodes [#28584](https://github.com/openshift/origin/pull/28584)
* NO-ISSUE: Automated - Update synthetic test data [#28795](https://github.com/openshift/origin/pull/28795)
* NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) [#28803](https://github.com/openshift/origin/pull/28803)
* [USHIFT-3143](https://issues.redhat.com/browse/USHIFT-3143): Skip metrics and adjust termination message policy monitor tests [#28799](https://github.com/openshift/origin/pull/28799)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): Pass namespace in function checkHostnameReady for monitortest [#28794](https://github.com/openshift/origin/pull/28794)
* [ETCD-488](https://issues.redhat.com/browse/ETCD-488): Fix feature gate for etcd profiles e2e test [#28782](https://github.com/openshift/origin/pull/28782)
* [OCPBUGS-31919](https://issues.redhat.com/browse/OCPBUGS-31919): Use proper pull-secret for getting openshift-tests image [#28764](https://github.com/openshift/origin/pull/28764)
* [OCPBUGS-33378](https://issues.redhat.com/browse/OCPBUGS-33378): Verify Build Webhooks on Upgrade [#28783](https://github.com/openshift/origin/pull/28783)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Increase IPsec timeout parameters [#28779](https://github.com/openshift/origin/pull/28779)
* [USHIFT-3142](https://issues.redhat.com/browse/USHIFT-3142): Automatically exclude FeatureGate tagged tests [#28786](https://github.com/openshift/origin/pull/28786)
* [USHIFT-3133](https://issues.redhat.com/browse/USHIFT-3133): Skip cloud provider disruption monitors for MicroShift [#28767](https://github.com/openshift/origin/pull/28767)
* NO-JIRA: enforce termination policy [#28777](https://github.com/openshift/origin/pull/28777)
* [TRT-1656](https://issues.redhat.com/browse/TRT-1656): Revert #28750 "OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks" [#28781](https://github.com/openshift/origin/pull/28781)
* [SDN-4783](https://issues.redhat.com/browse/SDN-4783): Add e2e tests for NetworkDiagnosticsConfig featuregate [#28719](https://github.com/openshift/origin/pull/28719)
* [API-1783](https://issues.redhat.com/browse/API-1783): Update etcd test data for 1.30 release [#28770](https://github.com/openshift/origin/pull/28770)
* NO-JIRA: verify tls artifacts [#28772](https://github.com/openshift/origin/pull/28772)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#28771](https://github.com/openshift/origin/pull/28771)
* [OCPEDGE-812](https://issues.redhat.com/browse/OCPEDGE-812): feat: add tests for cpu limits on workload partitioning [#28752](https://github.com/openshift/origin/pull/28752)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28739](https://github.com/openshift/origin/pull/28739)
* [MON-3513](https://issues.redhat.com/browse/MON-3513): Add availability test for Metrics API [#28737](https://github.com/openshift/origin/pull/28737)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Add IPsec e2e tests [#28658](https://github.com/openshift/origin/pull/28658)
* [OCPBUGS-33041](https://issues.redhat.com/browse/OCPBUGS-33041): Add RoleBinding for BuildConfig Webhooks [#28750](https://github.com/openshift/origin/pull/28750)
* [OCPBUGS-33317](https://issues.redhat.com/browse/OCPBUGS-33317): use tokenrequest api [#28769](https://github.com/openshift/origin/pull/28769)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): allow for some errors checking namespace delete [#28761](https://github.com/openshift/origin/pull/28761)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Add test for UpgradeValidation contention [#28710](https://github.com/openshift/origin/pull/28710)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): test/extended/router/http2: Use unique certs [#28757](https://github.com/openshift/origin/pull/28757)
* [OCPBUGS-33125](https://issues.redhat.com/browse/OCPBUGS-33125): Allow flexible rhel in tests [#28755](https://github.com/openshift/origin/pull/28755)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): feat: add buffer interval for SNO pathological events [#28709](https://github.com/openshift/origin/pull/28709)
* NO-JIRA: Adjust the method of get the apiServer [#28756](https://github.com/openshift/origin/pull/28756)
* NO-ISSUE: Automated - Update synthetic test data [#28744](https://github.com/openshift/origin/pull/28744)
* [TRT-1610](https://issues.redhat.com/browse/TRT-1610): Intervals, move over to new schema, finally... [#28727](https://github.com/openshift/origin/pull/28727)
* Revert "TRT-1625: Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering"" [#28748](https://github.com/openshift/origin/pull/28748)
* NO-JIRA: bump library-go [#28711](https://github.com/openshift/origin/pull/28711)
* NO-JIRA: Use bound prometheus-k8s API tokens [#28655](https://github.com/openshift/origin/pull/28655)
* [TRT-1625](https://issues.redhat.com/browse/TRT-1625): Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering" [#28747](https://github.com/openshift/origin/pull/28747)
* [OCPBUGS-32923](https://issues.redhat.com/browse/OCPBUGS-32923): Fix allowed firing alerts not triggering [#28741](https://github.com/openshift/origin/pull/28741)
* [TRT-1618](https://issues.redhat.com/browse/TRT-1618): Allow Upgradeable:False with OpenShiftSDN [#28738](https://github.com/openshift/origin/pull/28738)
* [ETCD-588](https://issues.redhat.com/browse/ETCD-588): Add e2e test for hardware speed profiles feature [#28726](https://github.com/openshift/origin/pull/28726)
* [OCPBUGS-32477](https://issues.redhat.com/browse/OCPBUGS-32477): Also rely on oomkilled exit code 137 in build test [#28725](https://github.com/openshift/origin/pull/28725)
* [OCPBUGS-32293](https://issues.redhat.com/browse/OCPBUGS-32293): Use In-Tree Template for Jenkins [#28732](https://github.com/openshift/origin/pull/28732)
* [OCPBUGS-31589](https://issues.redhat.com/browse/OCPBUGS-31589): e2e: use bound API token for prometheus-k8s SA [#28679](https://github.com/openshift/origin/pull/28679)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): Remove `system:anonymous` test cases [#28686](https://github.com/openshift/origin/pull/28686)
* NO-JIRA: Drop unused images and OWNERS files [#28736](https://github.com/openshift/origin/pull/28736)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#28733](https://github.com/openshift/origin/pull/28733)
* NO-JIRA: bump openshift/kubernetes [#28712](https://github.com/openshift/origin/pull/28712)
* NO-JIRA: Create autodl file for per user resource request audit entries [#28715](https://github.com/openshift/origin/pull/28715)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28728](https://github.com/openshift/origin/pull/28728)
* NO-JIRA: Record Kube event first/last timestamp in the resulting intervals [#28722](https://github.com/openshift/origin/pull/28722)
* [OCPBUGS-32484](https://issues.redhat.com/browse/OCPBUGS-32484): chart template: limit tooltip width to first word [#27965](https://github.com/openshift/origin/pull/27965)
* [OCPBUGS-31030](https://issues.redhat.com/browse/OCPBUGS-31030), [OCPBUGS-31032](https://issues.redhat.com/browse/OCPBUGS-31032): Reduce deploymentconfig test 3GBi memory size to reasonable [#28680](https://github.com/openshift/origin/pull/28680)
* NO-ISSUE: Automated - Update synthetic test data [#28723](https://github.com/openshift/origin/pull/28723)
* [OCPBUGS-32485](https://issues.redhat.com/browse/OCPBUGS-32485): upkeep: update test pinned workloads [#28704](https://github.com/openshift/origin/pull/28704)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use cli image, as the scratch image [#28695](https://github.com/openshift/origin/pull/28695)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Complete removal of non-structured locator/message use [#28663](https://github.com/openshift/origin/pull/28663)
* [OCPBUGS-32320](https://issues.redhat.com/browse/OCPBUGS-32320): revert: removing static pod skip for crio check [#28708](https://github.com/openshift/origin/pull/28708)
* Revert "OCPBUGS-28230: enforce termination message policy on all platform pods" [#28721](https://github.com/openshift/origin/pull/28721)
* [OCPBUGS-31860](https://issues.redhat.com/browse/OCPBUGS-31860): ppc64le without python-cinder [#28692](https://github.com/openshift/origin/pull/28692)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28547](https://github.com/openshift/origin/pull/28547)
* NO-JIRA: Unskip volume populator tests that were disabled in the test suite [#28475](https://github.com/openshift/origin/pull/28475)
* [USHIFT-2985](https://issues.redhat.com/browse/USHIFT-2985): Fix MicroShift crash and router tests skipping [#28716](https://github.com/openshift/origin/pull/28716)
* NO-JIRA: Remove test dir OWNERS file, rely on top-level instead [#28714](https://github.com/openshift/origin/pull/28714)
* NO-JIRA: split the per-user summary to include verbs for resources [#28705](https://github.com/openshift/origin/pull/28705)
* NO-JIRA: add to the operator list [#28703](https://github.com/openshift/origin/pull/28703)
* NO-ISSUE: Automated - Update synthetic test data [#28701](https://github.com/openshift/origin/pull/28701)
* NO-JIRA: need to make manifest dir to place content [#28700](https://github.com/openshift/origin/pull/28700)
* NO-JIRA: Record tests by feature [#28694](https://github.com/openshift/origin/pull/28694)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): Add debug logging for SLB monitortest cleanup [#28697](https://github.com/openshift/origin/pull/28697)
* [SO-121](https://issues.redhat.com/browse/SO-121): Samples Release, fix test cases [#28685](https://github.com/openshift/origin/pull/28685)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Reapply #28589 [#28660](https://github.com/openshift/origin/pull/28660)
* no-jira: Ignore alerts on CustomNoUpgrade clusters [#28678](https://github.com/openshift/origin/pull/28678)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28672](https://github.com/openshift/origin/pull/28672)
* NO-ISSUE: automated update synthetic test data [#28693](https://github.com/openshift/origin/pull/28693)
* NO-JIRA: add service accounts to resourcewatcher [#28689](https://github.com/openshift/origin/pull/28689)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use must-gather image in build multi-stage [#28687](https://github.com/openshift/origin/pull/28687)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Begin removing use of the legacy locator on intervals [#28597](https://github.com/openshift/origin/pull/28597)
* [OCPBUGS-31513](https://issues.redhat.com/browse/OCPBUGS-31513): feat: update regex for rt kernel version match [#28665](https://github.com/openshift/origin/pull/28665)
* [OCPBUGS-31492](https://issues.redhat.com/browse/OCPBUGS-31492): Add a test that will fail on over 10k etcd took too long messages [#28674](https://github.com/openshift/origin/pull/28674)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Use centos7 tag instead of latest for cmd images tests [#28675](https://github.com/openshift/origin/pull/28675)
* [OCPBUGS-30267](https://issues.redhat.com/browse/OCPBUGS-30267): Clarify a misleading message in patho event failures [#28667](https://github.com/openshift/origin/pull/28667)
* NO-JIRA: add conditional execution of featuregated tests [#28670](https://github.com/openshift/origin/pull/28670)
* [TRT-1494](https://issues.redhat.com/browse/TRT-1494): Add monitortest for cloud function on azure [#28582](https://github.com/openshift/origin/pull/28582)
* [OSD-21709](https://issues.redhat.com/browse/OSD-21709): Add temporary exceptions for managed services alerts [#28669](https://github.com/openshift/origin/pull/28669)
* [TRT-1559](https://issues.redhat.com/browse/TRT-1559): Remove two sets of logs to bring build-log.txt size down [#28654](https://github.com/openshift/origin/pull/28654)
* NO-JIRA: Add skip condition for Cluster-CSI-Snapshot-Controller-Operator feature [#28635](https://github.com/openshift/origin/pull/28635)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Add monitortest for cloud function on aws [#28581](https://github.com/openshift/origin/pull/28581)
* NO-JIRA: add simple test for server side apply to demonstrate field clearing [#28491](https://github.com/openshift/origin/pull/28491)
* [OCPBUGS-31074](https://issues.redhat.com/browse/OCPBUGS-31074): fix: add check for static container [#28662](https://github.com/openshift/origin/pull/28662)
* [TRT-1567](https://issues.redhat.com/browse/TRT-1567): Revert #28589 "AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads" [#28659](https://github.com/openshift/origin/pull/28659)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Add a monitor test to check the existence of required-scc annotation in platform workloads [#28589](https://github.com/openshift/origin/pull/28589)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Check idling annotation in services not endpoints [#28619](https://github.com/openshift/origin/pull/28619)
* [OCPBUGS-30604](https://issues.redhat.com/browse/OCPBUGS-30604): fix panic on non-standard node-role labels [#28650](https://github.com/openshift/origin/pull/28650)
* [TRT-1557](https://issues.redhat.com/browse/TRT-1557): Align three unknown tests to kube-apiserver [#28649](https://github.com/openshift/origin/pull/28649)
* [MULTIARCH-4352](https://issues.redhat.com/browse/MULTIARCH-4352): Censor private key from pod dump logs [#28638](https://github.com/openshift/origin/pull/28638)
* trt-1538: additional timeout bumps [#28644](https://github.com/openshift/origin/pull/28644)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update skipUnlessMachineAPIOperator function [#28625](https://github.com/openshift/origin/pull/28625)
* trt-1538: Bump context timeout to 20 minutes [#28641](https://github.com/openshift/origin/pull/28641)
* trt-1538: Wait for monitor resources cleanup [#28626](https://github.com/openshift/origin/pull/28626)
* [OCPNODE-2099](https://issues.redhat.com/browse/OCPNODE-2099): add kube-rbac-proxy-crio toleration change [#28636](https://github.com/openshift/origin/pull/28636)
* [OCPBUGS-29028](https://issues.redhat.com/browse/OCPBUGS-29028): Add function back to execute commands via pod [#28621](https://github.com/openshift/origin/pull/28621)
* NO-ISSUE: Automated - Update synthetic test data [#28600](https://github.com/openshift/origin/pull/28600)
* [OCPBUGS-27323](https://issues.redhat.com/browse/OCPBUGS-27323): Skip tests for image-registry operator with single replica [#28605](https://github.com/openshift/origin/pull/28605)
* NO-JIRA: Handle release info output streams separately [#28631](https://github.com/openshift/origin/pull/28631)
* [TRT-1539](https://issues.redhat.com/browse/TRT-1539): Do not let loki alerts fail tests [#28627](https://github.com/openshift/origin/pull/28627)
* Delete unneeded stale owners file, defer to top level owners [#28624](https://github.com/openshift/origin/pull/28624)
* [MULTIARCH-4160](https://issues.redhat.com/browse/MULTIARCH-4160): Stop using the DetermineFromRelease function [#28598](https://github.com/openshift/origin/pull/28598)
* trt-1530: specify deployment id for unique log names [#28613](https://github.com/openshift/origin/pull/28613)
* [TRT-1506](https://issues.redhat.com/browse/TRT-1506): Restore the tests looking for excess single-second disruptions [#28592](https://github.com/openshift/origin/pull/28592)
* [OCPBUGS-29858](https://issues.redhat.com/browse/OCPBUGS-29858): Only extract node role from properly formatted node-role label [#28585](https://github.com/openshift/origin/pull/28585)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update control plane machine set test [#28602](https://github.com/openshift/origin/pull/28602)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Re-introduce the GCP liveness endpoint test [#28608](https://github.com/openshift/origin/pull/28608)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28604](https://github.com/openshift/origin/pull/28604)
* NO-JIRA: Pass tail flag in adm node-logs to reduce log size [#28607](https://github.com/openshift/origin/pull/28607)
* NO-JIRA: Remove bare node-logs test to reduce logs size [#28606](https://github.com/openshift/origin/pull/28606)
* [TRT-1522](https://issues.redhat.com/browse/TRT-1522): Revert #28594 "TRT-1476: Re-introduce the GCP liveness endpoint test" [#28603](https://github.com/openshift/origin/pull/28603)
* [TRT-1501](https://issues.redhat.com/browse/TRT-1501): Add debug logging for decoding cluster provider [#28593](https://github.com/openshift/origin/pull/28593)
* [TRT-1515](https://issues.redhat.com/browse/TRT-1515): Revert #28587 "NO-JIRA: bump golang to 1.21 and to latest o/k master " [#28601](https://github.com/openshift/origin/pull/28601)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Re-introduce the GCP liveness endpoint test [#28594](https://github.com/openshift/origin/pull/28594)
* [OCPBUGS-29493](https://issues.redhat.com/browse/OCPBUGS-29493): fix: updated unit test to look for topology not node count [#28595](https://github.com/openshift/origin/pull/28595)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28587](https://github.com/openshift/origin/pull/28587)
* [TRT-1499](https://issues.redhat.com/browse/TRT-1499): Revert #28571 gcp-network-liveness until gcp resources are whitelisted [#28586](https://github.com/openshift/origin/pull/28586)
* [TRT-1477](https://issues.redhat.com/browse/TRT-1477): update IP for new gcp LB [#28583](https://github.com/openshift/origin/pull/28583)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router: HAProxy 2.8 Compatibility Enhancements for h2spec tests [#28514](https://github.com/openshift/origin/pull/28514)
* [TRT-1445](https://issues.redhat.com/browse/TRT-1445): Monitor test hangs during interrupt handling [#28580](https://github.com/openshift/origin/pull/28580)
* [TRT-1491](https://issues.redhat.com/browse/TRT-1491): Reorder interval groups to place most important/brief info higher up [#28576](https://github.com/openshift/origin/pull/28576)
* NO-JIRA: enforce only stable CRD versions accessible by default [#28570](https://github.com/openshift/origin/pull/28570)
* [SPLAT-1427](https://issues.redhat.com/browse/SPLAT-1427): fix/sig-net: ignoring edge when listing worker nodes [#28486](https://github.com/openshift/origin/pull/28486)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Add monitortest for cloud function on gcp [#28571](https://github.com/openshift/origin/pull/28571)
* [OCPBUGS-28662](https://issues.redhat.com/browse/OCPBUGS-28662): Replace 'coreydaley' with 'sayan-biswas' [#28564](https://github.com/openshift/origin/pull/28564)
* [OCPBUGS-23115](https://issues.redhat.com/browse/OCPBUGS-23115): Test builds with subscription content [#28560](https://github.com/openshift/origin/pull/28560)
* [TRT-1452](https://issues.redhat.com/browse/TRT-1452): Separate excessive Back-off restarting tests via namespace [#28543](https://github.com/openshift/origin/pull/28543)
* NO-JIRA: fix the static pod lifecycle failure test for more revisions [#28553](https://github.com/openshift/origin/pull/28553)
* [OCPNODE-2029](https://issues.redhat.com/browse/OCPNODE-2029): migrate crio metrics to https [#28536](https://github.com/openshift/origin/pull/28536)
* [TRT-1480](https://issues.redhat.com/browse/TRT-1480): Fix disruption analysis on /payload jobs [#28568](https://github.com/openshift/origin/pull/28568)
* [TRT-965](https://issues.redhat.com/browse/TRT-965): Add disruption to the risk analysis spyglass panel [#28558](https://github.com/openshift/origin/pull/28558)
* NO-JIRA: Skip external cloud provider test for HyperShift clusters [#28562](https://github.com/openshift/origin/pull/28562)
* [MON-3449](https://issues.redhat.com/browse/MON-3449): Ensure monitoring statefulsets are not recreated after upgr… [#28361](https://github.com/openshift/origin/pull/28361)
* NO-JIRA: techpreview can install unstable CRDs [#28532](https://github.com/openshift/origin/pull/28532)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): replace curl calls by net/http [#28546](https://github.com/openshift/origin/pull/28546)
* [MON-3693](https://issues.redhat.com/browse/MON-3693): Adding slashpai and machine424 to Prometheus owners [#28552](https://github.com/openshift/origin/pull/28552)
* [OCPBUGS-27892](https://issues.redhat.com/browse/OCPBUGS-27892): fix panic in service-poller [#28544](https://github.com/openshift/origin/pull/28544)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28538](https://github.com/openshift/origin/pull/28538)
* NO-JIRA: remove unnecessary setup code from monitor [#28534](https://github.com/openshift/origin/pull/28534)
* trt-1141: bump timeout values [#28527](https://github.com/openshift/origin/pull/28527)
* NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… [#28542](https://github.com/openshift/origin/pull/28542)
* [OCPBUGS-27465](https://issues.redhat.com/browse/OCPBUGS-27465): Do not assume there is just a single kubelet systemd service [#28529](https://github.com/openshift/origin/pull/28529)
* [OCPBUGS-27502](https://issues.redhat.com/browse/OCPBUGS-27502): collect certs on disk: set pause image [#28541](https://github.com/openshift/origin/pull/28541)
* NO-ISSUE: Automated - Update synthetic test data [#28537](https://github.com/openshift/origin/pull/28537)
* [OCPBUGS-27210](https://issues.redhat.com/browse/OCPBUGS-27210): Restore HTTP/2 tests in test/extended/router [#28540](https://github.com/openshift/origin/pull/28540)
* [OCPBUGS-20487](https://issues.redhat.com/browse/OCPBUGS-20487): update egressFWTestE2E image which contains ping binary [#28408](https://github.com/openshift/origin/pull/28408)
* NO-JIRA: Update Omer to be the SNO lead [#28451](https://github.com/openshift/origin/pull/28451)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Automated - Update synthetic test data [#28484](https://github.com/openshift/origin/pull/28484)
* NO-JIRA: Update WinC team lead [#28472](https://github.com/openshift/origin/pull/28472)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28530](https://github.com/openshift/origin/pull/28530)
* [OCPBUGS-27341](https://issues.redhat.com/browse/OCPBUGS-27341): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28480](https://github.com/openshift/origin/pull/28480)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router/http2: delete skipped tests [#28522](https://github.com/openshift/origin/pull/28522)
* NO-JIRA: Collect certs from disk [#28444](https://github.com/openshift/origin/pull/28444)
* [TRT-1370](https://issues.redhat.com/browse/TRT-1370): Track etcd leadership changes in etcd-leaders section of spyglass chart [#28441](https://github.com/openshift/origin/pull/28441)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Allow BestMatchDuration to pass even on fallback [#28526](https://github.com/openshift/origin/pull/28526)
* NO-JIRA: add kubernetes level to openshift tests image for payload [#28521](https://github.com/openshift/origin/pull/28521)
* [TRT-1441](https://issues.redhat.com/browse/TRT-1441): Stop uploading intervals to loki [#28525](https://github.com/openshift/origin/pull/28525)
* [NP-877](https://issues.redhat.com/browse/NP-877): Live migration suite e2e [#28462](https://github.com/openshift/origin/pull/28462)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Bump k8s api to v1.29.0 [#28473](https://github.com/openshift/origin/pull/28473)
* trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive [#28518](https://github.com/openshift/origin/pull/28518)
* add test to ensure all accessible-by-default apis are stable [#28467](https://github.com/openshift/origin/pull/28467)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28517](https://github.com/openshift/origin/pull/28517)
* [OCPBUGS-18577](https://issues.redhat.com/browse/OCPBUGS-18577): updated timeout to 3 seconds to account for network timing issues [#28300](https://github.com/openshift/origin/pull/28300)
* "NO-JIRA: Reduce top level origin approvers to TRT members only" [#28439](https://github.com/openshift/origin/pull/28439)
* watch the operator resources during resource watch [#28513](https://github.com/openshift/origin/pull/28513)
* add featureset into the raw-tls artifact names [#28509](https://github.com/openshift/origin/pull/28509)
* [OCPBUGS-25730](https://issues.redhat.com/browse/OCPBUGS-25730): Kuryr: Ignore Upgradeable=False on operators tests [#28478](https://github.com/openshift/origin/pull/28478)
* [OCPBUGS-26025](https://issues.redhat.com/browse/OCPBUGS-26025): Do not apply master label to make sure SNO jobs pass [#28499](https://github.com/openshift/origin/pull/28499)
* [OCPBUGS-25142](https://issues.redhat.com/browse/OCPBUGS-25142): Retry with different node port to make oc service test stable [#28495](https://github.com/openshift/origin/pull/28495)
* Refine explanation of meeting regenerate after expiry requirement [#28502](https://github.com/openshift/origin/pull/28502)
* Add README.md clarifying TLS registry purpose and processes [#28434](https://github.com/openshift/origin/pull/28434)
* [OCPBUGS-26069](https://issues.redhat.com/browse/OCPBUGS-26069): Update cluster-monitoring-operator request limits [#28498](https://github.com/openshift/origin/pull/28498)
* use the same collection options for tests so the certificate names wi… [#28497](https://github.com/openshift/origin/pull/28497)
* Update certs again [#28489](https://github.com/openshift/origin/pull/28489)
* e2e node label test to verify blocking forbidden labels [#28296](https://github.com/openshift/origin/pull/28296)
* [OCPBUGS-25943](https://issues.redhat.com/browse/OCPBUGS-25943): Adding test case for when exceed openshift.io/image-tags will ban to … [#28464](https://github.com/openshift/origin/pull/28464)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Update etcd test data for 1.29 release [#28485](https://github.com/openshift/origin/pull/28485)
* [OCPBUGS-25687](https://issues.redhat.com/browse/OCPBUGS-25687): Increase timeout for pod-network-service [#28474](https://github.com/openshift/origin/pull/28474)
* [PSAP-1210](https://issues.redhat.com/browse/PSAP-1210): Update code for automate OCPBUGS-18052 [#28382](https://github.com/openshift/origin/pull/28382)
* NO-JIRA: images: don't log entire image status on failure [#28469](https://github.com/openshift/origin/pull/28469)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: update missing ruby 3.0 ref [#28481](https://github.com/openshift/origin/pull/28481)
* [OCPBUGS-22438](https://issues.redhat.com/browse/OCPBUGS-22438): feat: add extra check for ready state on resiliency test [#28421](https://github.com/openshift/origin/pull/28421)
* [TRT-1403](https://issues.redhat.com/browse/TRT-1403): Finish porting ALL intervals to structured [#28463](https://github.com/openshift/origin/pull/28463)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: lane e2e-gcp-ovn-builds perma fail [#28471](https://github.com/openshift/origin/pull/28471)
* [NE-1477](https://issues.redhat.com/browse/NE-1477): Regenerate cert in 1024 key FIPs test to use SHA256 [#28457](https://github.com/openshift/origin/pull/28457)
* [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Add mechanism for creating flake junit for a monitor test [#28459](https://github.com/openshift/origin/pull/28459)
* NO-JIRA: Fix issue 28445 [#28446](https://github.com/openshift/origin/pull/28446)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28465](https://github.com/openshift/origin/pull/28465)
* Show how we can add new annotations using descriptions [#28461](https://github.com/openshift/origin/pull/28461)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update etcd test data for 1.29 release [#28458](https://github.com/openshift/origin/pull/28458)
* update-tls-artifacts: add AnnotationRequirement [#28460](https://github.com/openshift/origin/pull/28460)
* [OCPBUGS-25045](https://issues.redhat.com/browse/OCPBUGS-25045): Updating openshift-enterprise-tests-container image to be consistent with ART [#28452](https://github.com/openshift/origin/pull/28452)
* trt-1042: collect watch request counts [#28431](https://github.com/openshift/origin/pull/28431)
* [TRT-786](https://issues.redhat.com/browse/TRT-786): Relax the per-job disruption tests and fix bugs/improve consistency [#28453](https://github.com/openshift/origin/pull/28453)
* fix jira components to match actual jira components [#28454](https://github.com/openshift/origin/pull/28454)
* [OCPBUGS-24537](https://issues.redhat.com/browse/OCPBUGS-24537): Properly ignore kube guard probe events [#28448](https://github.com/openshift/origin/pull/28448)
* add pacevedom to the team-leads alias [#28449](https://github.com/openshift/origin/pull/28449)
* [TRT-1400](https://issues.redhat.com/browse/TRT-1400): Automated - Update synthetic test data [#28416](https://github.com/openshift/origin/pull/28416)
* [OCPBUGS-24583](https://issues.redhat.com/browse/OCPBUGS-24583): push violation regression check into the default requirement result [#28433](https://github.com/openshift/origin/pull/28433)
* OWNER_ALIASES: update CoreOS team leads [#28447](https://github.com/openshift/origin/pull/28447)
* NOJIRA: collect certificate data: use SkipHashed option [#28443](https://github.com/openshift/origin/pull/28443)
* NO-JIRA: Increase cluster-capi-operator watch count take2 [#28424](https://github.com/openshift/origin/pull/28424)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28436](https://github.com/openshift/origin/pull/28436)
* NO-JIRA: Add test case for namespaced filename in oc process [#28440](https://github.com/openshift/origin/pull/28440)
* [API-1524](https://issues.redhat.com/browse/API-1524): ignore stale condition challenge events [#28438](https://github.com/openshift/origin/pull/28438)
* [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Ignore azure interaction errors since they are not fatal for our usage [#28420](https://github.com/openshift/origin/pull/28420)
* [TRT-1347](https://issues.redhat.com/browse/TRT-1347): Add ability to indicate a monitor test was skipped [#28425](https://github.com/openshift/origin/pull/28425)
* NO JIRA: update cert data [#28437](https://github.com/openshift/origin/pull/28437)
* [OTA-362](https://issues.redhat.com/browse/OTA-362): pkg/monitortests/clusterversionoperator: Fatal unless Available=False in allow-list [#27231](https://github.com/openshift/origin/pull/27231)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update ETCD storage data for k8s 1.29 [#28435](https://github.com/openshift/origin/pull/28435)
* [OCPBUGS-24290](https://issues.redhat.com/browse/OCPBUGS-24290): cert metadata: generate jsons and markdown for missing metadata viola [#28432](https://github.com/openshift/origin/pull/28432)
* NO-JIRA: test/e2e/upgrade/monitor: --abort-at=100 requires a complete update [#28402](https://github.com/openshift/origin/pull/28402)
* eliminate the closed channel race in pod_log_streamer [#28426](https://github.com/openshift/origin/pull/28426)
* [OSASINFRA-3291](https://issues.redhat.com/browse/OSASINFRA-3291): Remove Kuryr bits [#28397](https://github.com/openshift/origin/pull/28397)
* [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): Increase cluster-capi-operator watch count [#28422](https://github.com/openshift/origin/pull/28422)
* [TRT-1329](https://issues.redhat.com/browse/TRT-1329): Refactor pathological events framework [#28399](https://github.com/openshift/origin/pull/28399)
* [SO-117](https://issues.redhat.com/browse/SO-117): Removing Ruby 2.7 UBI7-8 tests [#28418](https://github.com/openshift/origin/pull/28418)
* trt-1367: Get JobType After Collection Ends [#28415](https://github.com/openshift/origin/pull/28415)
* [TRT-1235](https://issues.redhat.com/browse/TRT-1235): Add ability to specify alerts that should never fire [#28411](https://github.com/openshift/origin/pull/28411)
* [TRT-1362](https://issues.redhat.com/browse/TRT-1362): Update disruption/alert test data and fix unit test [#28409](https://github.com/openshift/origin/pull/28409)
* make it slightly easy to produce markdown with table of contents [#28407](https://github.com/openshift/origin/pull/28407)
* update the TLS ownership files [#28394](https://github.com/openshift/origin/pull/28394)
* update cert inspect to skip the rest of proxy-CAs [#28406](https://github.com/openshift/origin/pull/28406)
* [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): test: ignore deprecation warnings in command outputs [#28404](https://github.com/openshift/origin/pull/28404)
* collect certificate data: rewrite configmap/secret names [#28405](https://github.com/openshift/origin/pull/28405)
* Certs 11 fix certs after break [#28395](https://github.com/openshift/origin/pull/28395)
* ignore stale condition challenge events [#28204](https://github.com/openshift/origin/pull/28204)
* [TRT-1274](https://issues.redhat.com/browse/TRT-1274): get azure disk metrics and create relevant intervals [#28375](https://github.com/openshift/origin/pull/28375)
* Revert "TRT-1339: Revert #28233 "ignore repeated TopologyAwareHintsDisabled events"" [#28386](https://github.com/openshift/origin/pull/28386)
* [OCPBUGS-23079](https://issues.redhat.com/browse/OCPBUGS-23079): fix: increase watch count for KubeControllerManagerOperator [#28388](https://github.com/openshift/origin/pull/28388)
* [OCPBUGS-23102](https://issues.redhat.com/browse/OCPBUGS-23102): Revert "[sig-instrumentation] tests fail due to JSON parsing error." [#28389](https://github.com/openshift/origin/pull/28389)
* [OCPBUGS-23084](https://issues.redhat.com/browse/OCPBUGS-23084): expect to not see "git clone" and not just "clone" during a test [#28352](https://github.com/openshift/origin/pull/28352)
* [TRT-1354](https://issues.redhat.com/browse/TRT-1354): Add support for intervals to have row differentiators [#28376](https://github.com/openshift/origin/pull/28376)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): [sig-instrumentation] tests fail due to JSON parsing error. [#28320](https://github.com/openshift/origin/pull/28320)
* "TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest" [#28372](https://github.com/openshift/origin/pull/28372)
* trt-1340: update run-upgrade to use ginkgorunsuiteoptions [#28380](https://github.com/openshift/origin/pull/28380)
* [TRT-1339](https://issues.redhat.com/browse/TRT-1339): Revert #28233 "ignore repeated TopologyAwareHintsDisabled events" [#28381](https://github.com/openshift/origin/pull/28381)
* trt-1344: remove msg assertion [#28379](https://github.com/openshift/origin/pull/28379)
* Add test which verifies every certificate has necessary annotations [#28305](https://github.com/openshift/origin/pull/28305)
* [OCPBUGS-19527](https://issues.redhat.com/browse/OCPBUGS-19527): retry Prometheus client creation [#28323](https://github.com/openshift/origin/pull/28323)
* [OCPBUGS-20479](https://issues.redhat.com/browse/OCPBUGS-20479): Add pod sandbox failures to e2e charts [#28366](https://github.com/openshift/origin/pull/28366)
* skip revisioned certificates in raw info [#28370](https://github.com/openshift/origin/pull/28370)
* [TRT-1340](https://issues.redhat.com/browse/TRT-1340): Increase cmd support for ExactMonitorTests and DisableMonitorTests [#28371](https://github.com/openshift/origin/pull/28371)
* [OCPBUGS-22703](https://issues.redhat.com/browse/OCPBUGS-22703): tolerate AWS edge nodes on monitor tests [#28363](https://github.com/openshift/origin/pull/28363)
* Revert "OCPBUGS-22413: Use Centos 8 Stream mysql image in tests" [#28367](https://github.com/openshift/origin/pull/28367)
* Skip FailedScheduling intervals when masters are in NodeUpdate [#28358](https://github.com/openshift/origin/pull/28358)
* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Use Centos 8 Stream mysql image in tests [#28357](https://github.com/openshift/origin/pull/28357)
* Allow the unknown alerts test to fail as it looks stable [#28345](https://github.com/openshift/origin/pull/28345)
* add hack/update-tls-ownership.sh [#28359](https://github.com/openshift/origin/pull/28359)
* Drop not-used pulledInvalidImages method [#28330](https://github.com/openshift/origin/pull/28330)
* start adding raw tls info [#28334](https://github.com/openshift/origin/pull/28334)
* Restore APIServer graceful shutdown windows [#28354](https://github.com/openshift/origin/pull/28354)
* Fix intervals mistakenly showing mass node NotReady [#28351](https://github.com/openshift/origin/pull/28351)
* Remove timelines command reprocessing intervals [#28348](https://github.com/openshift/origin/pull/28348)
* [OCPBUGS-22358](https://issues.redhat.com/browse/OCPBUGS-22358): fix: increase upper bounds for samples operator [#28353](https://github.com/openshift/origin/pull/28353)
* put back previous Interval Slice algorithm [#28344](https://github.com/openshift/origin/pull/28344)
* [OCPBUGS-22276](https://issues.redhat.com/browse/OCPBUGS-22276): Remove all docker.io images due to access denied [#28347](https://github.com/openshift/origin/pull/28347)
* Restore Node NotReady intervals [#28349](https://github.com/openshift/origin/pull/28349)
* trt-1320: update trt approvers [#28343](https://github.com/openshift/origin/pull/28343)
* Port remaining clusteroperator monitor intervals to structured [#28341](https://github.com/openshift/origin/pull/28341)
* Improvements and Additions to Alert Testing Stack [#28332](https://github.com/openshift/origin/pull/28332)
* Automated - Update synthetic test data [#28237](https://github.com/openshift/origin/pull/28237)
* prune the system CAs from proxy-ca in rawTLSInfo json [#28336](https://github.com/openshift/origin/pull/28336)
* add test tracking raw cert data [#28321](https://github.com/openshift/origin/pull/28321)
* [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Require http 1.1 or earlier when using curl [#28301](https://github.com/openshift/origin/pull/28301)
* Port Node and Pod State to Structured Intervals [#28299](https://github.com/openshift/origin/pull/28299)
* Extract the cluster operator name from Down/Degraded Alerts [#28331](https://github.com/openshift/origin/pull/28331)
* fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities [#28329](https://github.com/openshift/origin/pull/28329)
* Remove some redundant monitor tests [#28326](https://github.com/openshift/origin/pull/28326)
* [OCPVE-723](https://issues.redhat.com/browse/OCPVE-723): Add optional olm fixes [#28302](https://github.com/openshift/origin/pull/28302)
* Add debug info for interval counts and times [#28311](https://github.com/openshift/origin/pull/28311)
* [OCPBUGS-20205](https://issues.redhat.com/browse/OCPBUGS-20205): feat: added support for ImageRegistry capability [#28307](https://github.com/openshift/origin/pull/28307)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "OCPBUGS-13366: ignore repeated TopologyAwareHintsDisabled events" [#28233](https://github.com/openshift/origin/pull/28233)
* pkg/monitortests/clusterversionoperator/legacycvomonitortests: Structured condition types [#28306](https://github.com/openshift/origin/pull/28306)
* Bump watch requests for cluster-baremetal-operator [#28324](https://github.com/openshift/origin/pull/28324)
* test/extended/images: update OWNERS [#28322](https://github.com/openshift/origin/pull/28322)
* hs, kubevirt: Wait node readiness before migration [#28312](https://github.com/openshift/origin/pull/28312)
* fix for OCP-11594 to skipped on disconnected env [#28316](https://github.com/openshift/origin/pull/28316)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase total upgrade time on OVN platforms" [#28315](https://github.com/openshift/origin/pull/28315)
* trt-1271: add risk analysis for monitor junit suites [#28309](https://github.com/openshift/origin/pull/28309)
* Revert #28295 "Automating test \"check the quota after import-image with --all option\" in upstrem" [#28313](https://github.com/openshift/origin/pull/28313)
* test/extended: Consolidate hard-coded local image registry dependencies [#28308](https://github.com/openshift/origin/pull/28308)
* Limit intervals to the current phase (addresses loki upload problems) [#28294](https://github.com/openshift/origin/pull/28294)
* Fix bug with disable-monitor [#28293](https://github.com/openshift/origin/pull/28293)
* Remove bug-related annotations [#28298](https://github.com/openshift/origin/pull/28298)
* [OPNET-330](https://issues.redhat.com/browse/OPNET-330): fix DualStackIPv6Primary [#28292](https://github.com/openshift/origin/pull/28292)
* Automating test "check the quota after import-image with --all option" in upstrem [#28295](https://github.com/openshift/origin/pull/28295)
* Properly default --from-repository in run-monitor [#28285](https://github.com/openshift/origin/pull/28285)
* [OCPBUGS-19909](https://issues.redhat.com/browse/OCPBUGS-19909): Updating parameters for build timing PushImage test [#28288](https://github.com/openshift/origin/pull/28288)
* make it possible to select which monitor tests to run [#28215](https://github.com/openshift/origin/pull/28215)
* Revert "Disable EgressIP test temporarily due to OVN-K bug" [#28283](https://github.com/openshift/origin/pull/28283)
* Port the clusteroperator intervals to new structured format [#28262](https://github.com/openshift/origin/pull/28262)
* Revert "Force using mirrored images in disruption tests" [#28286](https://github.com/openshift/origin/pull/28286)
* Bump openshift/kubernetes to get vSphere fix [#28278](https://github.com/openshift/origin/pull/28278)
* Force using mirrored images in disruption tests [#28258](https://github.com/openshift/origin/pull/28258)
* kubevirt: Add live migration tests [#27980](https://github.com/openshift/origin/pull/27980)
* some monitor tests only function on disruptive tests [#28251](https://github.com/openshift/origin/pull/28251)
* wait for the service to have endpoints before starting pollers [#28242](https://github.com/openshift/origin/pull/28242)
* fix PR 28224 [#28238](https://github.com/openshift/origin/pull/28238)
* [OCPBUGS-18141](https://issues.redhat.com/browse/OCPBUGS-18141): retry query on MetricsAvailableAfterUpgradeTest setup [#28228](https://github.com/openshift/origin/pull/28228)
* Revert "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28274](https://github.com/openshift/origin/pull/28274)
* [OCPBUGS-19293](https://issues.redhat.com/browse/OCPBUGS-19293): Updating openshift-enterprise-tests images to be consistent with ART [#28264](https://github.com/openshift/origin/pull/28264)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): rteval [#28261](https://github.com/openshift/origin/pull/28261)
* add pod log streaming to monitor for etcd so we see all intervals [#28243](https://github.com/openshift/origin/pull/28243)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28231](https://github.com/openshift/origin/pull/28231)
* [AUTH-365](https://issues.redhat.com/browse/AUTH-365): add PodSecurityViolation to watched alerts [#28226](https://github.com/openshift/origin/pull/28226)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): remove exception for MultipleDefaultStorageClasses [#28042](https://github.com/openshift/origin/pull/28042)
* remove unnecessary file from cmd folder [#27979](https://github.com/openshift/origin/pull/27979)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28 [#28097](https://github.com/openshift/origin/pull/28097)
* Revert "Improvements and fixes for Loki intervals uploader" [#28268](https://github.com/openshift/origin/pull/28268)
* Adding leader election information to timeline [#28225](https://github.com/openshift/origin/pull/28225)
* Improvements and fixes for Loki intervals uploader [#28053](https://github.com/openshift/origin/pull/28053)
* Bring in updates k8s to disable networking test [#28256](https://github.com/openshift/origin/pull/28256)
* When --from-repository use built-in tests only [#28253](https://github.com/openshift/origin/pull/28253)
* [HyperShift/KubeVirt] Raise wait time between pod exec attempts [#28249](https://github.com/openshift/origin/pull/28249)
* Revert fake image injections for k8s 1.28 [#28250](https://github.com/openshift/origin/pull/28250)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28248](https://github.com/openshift/origin/pull/28248)
* [OCP-66086](https://issues.redhat.com/browse/OCP-66086): Automate PSAP NTO Prevent from stalld continually restarting [#28157](https://github.com/openshift/origin/pull/28157)
* Bug OCPBUGS-18718 Remove duplicate connection type from disruption name [#28245](https://github.com/openshift/origin/pull/28245)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): fix: add rteval to the test image [#28220](https://github.com/openshift/origin/pull/28220)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28200](https://github.com/openshift/origin/pull/28200)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Disable NetworkPolicyStatus tests [#28177](https://github.com/openshift/origin/pull/28177)
* [Full changelog](https://github.com/openshift/origin/compare/d44a62a72c314a3711a4389c9b989bb707ae2161...3bb691e0fe54cd503f884a80e9211e318a7d8090)
### [thanos](https://github.com/openshift/thanos/tree/85eee25c36702ec14b86dc3157856d2aa2634642)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#145](https://github.com/openshift/thanos/pull/145)
* [MON-3799](https://issues.redhat.com/browse/MON-3799): Bump openshift/thanos to v0.34.1 [#141](https://github.com/openshift/thanos/pull/141)
* [OCPBUGS-30537](https://issues.redhat.com/browse/OCPBUGS-30537): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#143](https://github.com/openshift/thanos/pull/143)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): Update OWNERS: move raptorsun out of reviewer [#140](https://github.com/openshift/thanos/pull/140)
* [MON-3753](https://issues.redhat.com/browse/MON-3753): Increase thanos tests timeout [#144](https://github.com/openshift/thanos/pull/144)
* [OCPBUGS-29982](https://issues.redhat.com/browse/OCPBUGS-29982): Updating ose-thanos-container image to be consistent with ART for 4.16 [#142](https://github.com/openshift/thanos/pull/142)
* [MON-3703](https://issues.redhat.com/browse/MON-3703): Bump openshift/thanos to v0.34.0 [#139](https://github.com/openshift/thanos/pull/139)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Bump openshift/thanos to v0.33.0 [#136](https://github.com/openshift/thanos/pull/136)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#135](https://github.com/openshift/thanos/pull/135)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#134](https://github.com/openshift/thanos/pull/134)
* [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131)
* Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129)
* [OCPBUGS-21630](https://issues.redhat.com/browse/OCPBUGS-21630): Bump golang.org/x/net to v0.17.0 [#123](https://github.com/openshift/thanos/pull/123)
* Bump openshift/thanos to v0.32.4 [#121](https://github.com/openshift/thanos/pull/121)
* [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120)
* [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117)
* Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118)
* update OWNERS file [#119](https://github.com/openshift/thanos/pull/119)
* Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115)
* [Full changelog](https://github.com/openshift/thanos/compare/a26712509e3f9c511926ca9d8bba3e3ea8e95ada...85eee25c36702ec14b86dc3157856d2aa2634642)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/8777b9a5ec4b34cefab7708987731a1fd224a739)
* [OCPBUGS-30538](https://issues.redhat.com/browse/OCPBUGS-30538): Bump protobuf to v1.33.0 [#67](https://github.com/openshift/cloud-provider-vsphere/pull/67)
* [OCPBUGS-27865](https://issues.redhat.com/browse/OCPBUGS-27865): Add snyk exclusion file [#63](https://github.com/openshift/cloud-provider-vsphere/pull/63)
* [OCPCLOUD-2420](https://issues.redhat.com/browse/OCPCLOUD-2420): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (46a5796) into master [#53](https://github.com/openshift/cloud-provider-vsphere/pull/53)
* [OCPBUGS-26125](https://issues.redhat.com/browse/OCPBUGS-26125): Add Snyk file to exclude vendor directory on scan [#61](https://github.com/openshift/cloud-provider-vsphere/pull/61)
* [OCPBUGS-25584](https://issues.redhat.com/browse/OCPBUGS-25584): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-vsphere/pull/60)
* [OCPBUGS-24991](https://issues.redhat.com/browse/OCPBUGS-24991): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-vsphere/pull/59)
* [OCPBUGS-24157](https://issues.redhat.com/browse/OCPBUGS-24157): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-vsphere/pull/58)
* [OCPCLOUD-2184](https://issues.redhat.com/browse/OCPCLOUD-2184): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master [#42](https://github.com/openshift/cloud-provider-vsphere/pull/42)
* Update OWNERS [#51](https://github.com/openshift/cloud-provider-vsphere/pull/51)
* [OCPBUGS-19255](https://issues.redhat.com/browse/OCPBUGS-19255): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-vsphere/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b04567f77273f6c338ece9fda29c0a65297130d5...8777b9a5ec4b34cefab7708987731a1fd224a739)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/be22f10a56a18cd94406eea442e0113d866618ea)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#37](https://github.com/openshift/cluster-api-provider-vsphere/pull/37)
* [OCPBUGS-30539](https://issues.redhat.com/browse/OCPBUGS-30539): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.3 (e50b9e2) into master [#36](https://github.com/openshift/cluster-api-provider-vsphere/pull/36)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Update manager binary path [#28](https://github.com/openshift/cluster-api-provider-vsphere/pull/28)
* [OCPBUGS-25627](https://issues.redhat.com/browse/OCPBUGS-25627): Add Snyk file to exclude vendor directory on scan [#31](https://github.com/openshift/cluster-api-provider-vsphere/pull/31)
* [OCPCLOUD-2447](https://issues.redhat.com/browse/OCPCLOUD-2447): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.0 (ea2dd15) into master [#34](https://github.com/openshift/cluster-api-provider-vsphere/pull/34)
* [OCPBUGS-25514](https://issues.redhat.com/browse/OCPBUGS-25514): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.7 (ba72420) into master [#33](https://github.com/openshift/cluster-api-provider-vsphere/pull/33)
* [OCPBUGS-24873](https://issues.redhat.com/browse/OCPBUGS-24873): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#29](https://github.com/openshift/cluster-api-provider-vsphere/pull/29)
* [OCPBUGS-24074](https://issues.redhat.com/browse/OCPBUGS-24074): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#26](https://github.com/openshift/cluster-api-provider-vsphere/pull/26)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#27](https://github.com/openshift/cluster-api-provider-vsphere/pull/27)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Add InternalDNS address to vSphereVM [#19](https://github.com/openshift/cluster-api-provider-vsphere/pull/19)
* [OCPBUGS-22152](https://issues.redhat.com/browse/OCPBUGS-22152): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.3 (ef8d014) into master [#22](https://github.com/openshift/cluster-api-provider-vsphere/pull/22)
* Update OWNERS [#21](https://github.com/openshift/cluster-api-provider-vsphere/pull/21)
* [OCPCLOUD-2219](https://issues.redhat.com/browse/OCPCLOUD-2219): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.1 (2b22dd7) into master [#18](https://github.com/openshift/cluster-api-provider-vsphere/pull/18)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-vsphere-cluster-api-controllers images to be consistent with ART [#17](https://github.com/openshift/cluster-api-provider-vsphere/pull/17)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/72e998c300e17a7ba81d4a5a7624d69b0a104603...be22f10a56a18cd94406eea442e0113d866618ea)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/3cd689f3f1ff59467885ee8ef42997eef5f81972)
* [OCPBUGS-13551](https://issues.redhat.com/browse/OCPBUGS-13551): FailedPrecondition volume does not appear staged [#88](https://github.com/openshift/vmware-vsphere-csi-driver/pull/88)
* [STOR-1698](https://issues.redhat.com/browse/STOR-1698): Fix volume provisioning when duplicate region or zone tags exist [#114](https://github.com/openshift/vmware-vsphere-csi-driver/pull/114)
* [OCPBUGS-30545](https://issues.redhat.com/browse/OCPBUGS-30545): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#115](https://github.com/openshift/vmware-vsphere-csi-driver/pull/115)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Rebase v3.1.2 [#113](https://github.com/openshift/vmware-vsphere-csi-driver/pull/113)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#112](https://github.com/openshift/vmware-vsphere-csi-driver/pull/112)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Revert "STOR-1396: Rebase to v3.1.1 for OCP 4.15" [#101](https://github.com/openshift/vmware-vsphere-csi-driver/pull/101)
* [OCPBUGS-22637](https://issues.redhat.com/browse/OCPBUGS-22637), [OCPBUGS-22648](https://issues.redhat.com/browse/OCPBUGS-22648), [OCPBUGS-23891](https://issues.redhat.com/browse/OCPBUGS-23891): Fix CVE-2023-45142 and CVE-2023-47108 [#108](https://github.com/openshift/vmware-vsphere-csi-driver/pull/108)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#105](https://github.com/openshift/vmware-vsphere-csi-driver/pull/105)
* [OCPBUGS-25516](https://issues.redhat.com/browse/OCPBUGS-25516): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#106](https://github.com/openshift/vmware-vsphere-csi-driver/pull/106)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#104](https://github.com/openshift/vmware-vsphere-csi-driver/pull/104)
* [OCPBUGS-24968](https://issues.redhat.com/browse/OCPBUGS-24968): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#103](https://github.com/openshift/vmware-vsphere-csi-driver/pull/103)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#102](https://github.com/openshift/vmware-vsphere-csi-driver/pull/102)
* [OCPBUGS-24136](https://issues.redhat.com/browse/OCPBUGS-24136): Updating vmware-vsphere-syncer-container image to be consistent with ART [#99](https://github.com/openshift/vmware-vsphere-csi-driver/pull/99)
* [OCPBUGS-24141](https://issues.redhat.com/browse/OCPBUGS-24141): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#100](https://github.com/openshift/vmware-vsphere-csi-driver/pull/100)
* [STOR-1396](https://issues.redhat.com/browse/STOR-1396): Rebase to v3.1.1 for OCP 4.15 [#97](https://github.com/openshift/vmware-vsphere-csi-driver/pull/97)
* [OCPBUGS-16550](https://issues.redhat.com/browse/OCPBUGS-16550): UPSTREAM: 2511: Bump github.com/elazarl/goproxy to fix CVE-2023-37788 [#95](https://github.com/openshift/vmware-vsphere-csi-driver/pull/95)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/vmware-vsphere-csi-driver/pull/89)
* [OCPBUGS-19220](https://issues.redhat.com/browse/OCPBUGS-19220): Updating vmware-vsphere-syncer images to be consistent with ART [#86](https://github.com/openshift/vmware-vsphere-csi-driver/pull/86)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver images to be consistent with ART [#87](https://github.com/openshift/vmware-vsphere-csi-driver/pull/87)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4598e1709f3e28f2fcd5c890df33e16ff81b7c8f...3cd689f3f1ff59467885ee8ef42997eef5f81972)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
* [OCPBUGS-24061](https://issues.redhat.com/browse/OCPBUGS-24061): Keep CSI operators progressing=true during DaemonSet rollout [#230](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/230)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#231](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/231)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/229)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): use new snapshot options from ClusterCSIDriver [#226](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/226)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Enable healthcheck for node-registrar containerPort [#220](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/220)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#221](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/221)
* [OCPBUGS-28936](https://issues.redhat.com/browse/OCPBUGS-28936): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.16 [#222](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/222)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Mark the operator as Disabled on connection error [#218](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/218)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Revert "Merge pull request #195 from gnufied/revert-192-enable-new-fe… [#212](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/212)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#213](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/213)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#217](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/217)
* [OCPBUGS-24421](https://issues.redhat.com/browse/OCPBUGS-24421): Rerun checks on reconnect [#215](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/215)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#206](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/206)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#195](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/195)
* [OCPBUGS-24838](https://issues.redhat.com/browse/OCPBUGS-24838): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART [#197](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/197)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#202](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/202)
* [OCPBUGS-23888](https://issues.redhat.com/browse/OCPBUGS-23888): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#196](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/196)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#201](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/201)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#198](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/198)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [OCPBUGS-23342](https://issues.redhat.com/browse/OCPBUGS-23342): Add dummy Progressing condition on blocked driver install [#191](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/191)
* [OCPBUGS-22476](https://issues.redhat.com/browse/OCPBUGS-22476): Explicitly degrade the cluster when conditions are not met [#183](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/183)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#190](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/190)
* [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Implement fallback to configmap when Infra object does not have vCenter [#189](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/189)
* [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Fix vsphere csi controller pods from getting constantly restarted [#187](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/187)
* [OCPBUGS-22639](https://issues.redhat.com/browse/OCPBUGS-22639): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#185](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/185)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#165](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/165)
* [OCPBUGS-22385](https://issues.redhat.com/browse/OCPBUGS-22385): disable http/2 server support in webhook [#179](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/179)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#181](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/181)
* [OCPBUGS-21826](https://issues.redhat.com/browse/OCPBUGS-21826): Warn when managment state is set to values other than Managed [#178](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/178)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#172](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/172)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART [#170](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/170)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5d5105f93e02ba0c4c07890b3db630b11d839abf...483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/d674e6d8b4b814b1544e7d2fc9177e5e0f90484b)
* [OCPBUGS-30540](https://issues.redhat.com/browse/OCPBUGS-30540): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#156](https://github.com/openshift/vsphere-problem-detector/pull/156)
* [SPLAT-1209](https://issues.redhat.com/browse/SPLAT-1209): Enhance datacenter not found to contain list of known datacenters [#154](https://github.com/openshift/vsphere-problem-detector/pull/154)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#153](https://github.com/openshift/vsphere-problem-detector/pull/153)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#152](https://github.com/openshift/vsphere-problem-detector/pull/152)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#150](https://github.com/openshift/vsphere-problem-detector/pull/150)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Check if username contains a fully qualified domain name [#143](https://github.com/openshift/vsphere-problem-detector/pull/143)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#147](https://github.com/openshift/vsphere-problem-detector/pull/147)
* [OCPBUGS-25372](https://issues.redhat.com/browse/OCPBUGS-25372): Fix VPD crash when vm is not found [#148](https://github.com/openshift/vsphere-problem-detector/pull/148)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#146](https://github.com/openshift/vsphere-problem-detector/pull/146)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#145](https://github.com/openshift/vsphere-problem-detector/pull/145)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#144](https://github.com/openshift/vsphere-problem-detector/pull/144)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/ece171d2d5b5fa417d1aece9aa80714841c35cec...d674e6d8b4b814b1544e7d2fc9177e5e0f90484b)