# 4.15.0-rc.2

Created: 2024-01-12 19:43:20 +0000 UTC

Image Digest: `sha256:baed442e1faf17a500b0f0952ecbcfad66e03074c33fb4f08fa95f49bd8fc4ff`

Promoted from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-01-10-101042


## Changes from 4.15.0-rc.0

### Components

* Kubernetes upgraded from 1.28.4 to 1.28.5
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202312132107-0 to 415.92.202401100144-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:b5316b7b985416b78241c33652967e572c13507bcdfed753765cfdd6a305f3a3`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [bbe9ffce](https://github.com/openshift/driver-toolkit/commit/bbe9ffce3797fc0d9d4efcb2677867f43ce69e97) `sha256:a2c973f608ffe97aa7a2d7c399dbbe87747f31790ddc60eeb043a8d59ee93af7`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:15fba169c3272e5f0bce5765bfcb85450f8099f6a58cac9193dd66c1fd101f1c`
* machine-os-content `sha256:ae4c914f922a3a07a535c602af9101f9930da0d6c01df4cce95870fe2a5962d5`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e9c920f](https://github.com/openshift/machine-os-images/commit/9e9c920f985a375536e8d4caafd2d7ed579e27f3) `sha256:40de53e8da473d9e8d149a24769f159030a2ed60058333ed034d7f4c9981e94d`
* [network-tools](https://github.com/openshift/network-tools) git [be5b7d06](https://github.com/openshift/network-tools/commit/be5b7d060d18980e4f54204e5023615d3cd52dae) `sha256:1015264773167bce2ef877753d0724d907ea1d6aacc11630e391b2f673d22a7c`
* rhel-coreos `sha256:21d42dc4bd44efff426433e53e1b2925148e5c6d501dbf5bc97ffbdc905c3102`
* rhel-coreos-extensions `sha256:f9c1f1bdf12a0507b8214f45781dd4d0c79a0574da5acd5510e0139335d6a5a9`


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/abf4fa96550caf09e788b66fc06f1df802768397)

* [OCPBUGS-23697](https://issues.redhat.com/browse/OCPBUGS-23697): Add Snyk file to exclude vendor directory on scan [#48](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/48)
* [OCPBUGS-21984](https://issues.redhat.com/browse/OCPBUGS-21984): Bump golang.org/x/net to v0.19.0 [#41](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/41)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/2fc6d7574cc3b7ef60e8aa3dc23d1446055b65fa...abf4fa96550caf09e788b66fc06f1df802768397)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/41b367ae3bb6de9292539c0ecd98c81c5edc8294)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#82](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/82)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#76](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/76)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/7dcd358c0d9124ed376666fdfc047e3629f18bed...41b367ae3bb6de9292539c0ecd98c81c5edc8294)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/d3ba04c35e77e4e937aa9b7b4d069753cd514335)

* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#47](https://github.com/openshift/cluster-api-provider-alibaba/pull/47)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/3da1e37cb91389c8c6422e8f76d19a1a95a38a79...d3ba04c35e77e4e937aa9b7b4d069753cd514335)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/dc30b80c9931de88a841eb0677dadbd1d63c27a6)

* [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f0caebbab59ca8e8907f3eb8eb48f15c2a341228...dc30b80c9931de88a841eb0677dadbd1d63c27a6)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/b692edb1bcad959162c5c62969c13f85d0266fa2)

* [OCPBUGS-25824](https://issues.redhat.com/browse/OCPBUGS-25824): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#253](https://github.com/openshift/aws-ebs-csi-driver/pull/253)
* [OCPBUGS-25601](https://issues.redhat.com/browse/OCPBUGS-25601): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#251](https://github.com/openshift/aws-ebs-csi-driver/pull/251)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/1839695cf9794ccccbb01c7f0f71f74ad5d1a92a...b692edb1bcad959162c5c62969c13f85d0266fa2)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/f258bd0bf4e0ed13d6f555962d594818bd756f2d)

* [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93)
* [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#90](https://github.com/openshift/csi-operator/pull/90)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#82](https://github.com/openshift/csi-operator/pull/82)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ecbf3c7611115479504a78e85fe1b65c36777841...f258bd0bf4e0ed13d6f555962d594818bd756f2d)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)

* [OCPBUGS-25768](https://issues.redhat.com/browse/OCPBUGS-25768): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#72](https://github.com/openshift/azure-disk-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/54d5a305fb616adc1ac5aa7900df434cac0a94d3...dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/160cf624a88f500de7a1f79e6dd9384bb7d17842)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#121](https://github.com/openshift/azure-disk-csi-driver-operator/pull/121)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#114](https://github.com/openshift/azure-disk-csi-driver-operator/pull/114)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/7a2a0554c41b989f18ac80141abfa6546746465a...160cf624a88f500de7a1f79e6dd9384bb7d17842)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/364d90d4dd15bfbe15835b0427c8c7d8f1100fb9)

* [OCPBUGS-25697](https://issues.redhat.com/browse/OCPBUGS-25697): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#50](https://github.com/openshift/azure-file-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/18c0abf7c11cb2bd8df97b912bbb01009eb25c04...364d90d4dd15bfbe15835b0427c8c7d8f1100fb9)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/1c6294a4815b076ea3932c4bed4510043d738504)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#95](https://github.com/openshift/azure-file-csi-driver-operator/pull/95)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#89](https://github.com/openshift/azure-file-csi-driver-operator/pull/89)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/c5978307a9da8e5d2f489d499c258dabbc892172...1c6294a4815b076ea3932c4bed4510043d738504)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)

* [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2872dbac3b8ceee33490d974c979d309d266521d...1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/c20bcb355061fc9055992b18cca08683511b676c)

* [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883)
* [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868)
* [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863)
* [OCPBUGS-24679](https://issues.redhat.com/browse/OCPBUGS-24679): Modify the terraform variables to support Nutanix Failure Domains [#7813](https://github.com/openshift/installer/pull/7813)
* [OCPBUGS-25463](https://issues.redhat.com/browse/OCPBUGS-25463): IBMCloud: Set IBM TF visibility based on URLs [#7844](https://github.com/openshift/installer/pull/7844)
* [Full changelog](https://github.com/openshift/installer/compare/6ebbadc72d550a4a20df6c77f868b488e3fbfd02...c20bcb355061fc9055992b18cca08683511b676c)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/d90c9299f6699cb26c0598af26cc8f791f8c4f28)

* [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/b9d95b9a418d3678d77008faff53b1052b23c62a...d90c9299f6699cb26c0598af26cc8f791f8c4f28)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e)

* [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/68b3168fbb4a1e5ce19e2233ee05f5a53db20f51...0849c462de13b9a5765b9a8c882acb9e6e8bf39e)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/fc98dca3226e7ed5667e03284d685a190fd82811)

* [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c0448925b8dda2493032379953105e923a416c88...fc98dca3226e7ed5667e03284d685a190fd82811)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/51fb8a64880a81d94c83643bc73cd8b3a9986dff)

* [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320)
* [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ac7b0ea83f3968daad19e9088460f71c600a3e67...51fb8a64880a81d94c83643bc73cd8b3a9986dff)


### [cluster-config-api](https://github.com/openshift/api/tree/44756aa368798f4feea1bdc047e6df13174e88d9)

* [OCPBUGS-26441](https://issues.redhat.com/browse/OCPBUGS-26441): disable psa [#1717](https://github.com/openshift/api/pull/1717)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1705](https://github.com/openshift/api/pull/1705)
* [Full changelog](https://github.com/openshift/api/compare/7cca8a108d7b6b13001564420688f4e06a6dd320...44756aa368798f4feea1bdc047e6df13174e88d9)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)

* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b8c175340dcc27ec1b7bff3da69ac9d52af6592a...9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0fcdb4f22df3e1fa151815c31fec47cb4b676238)

* [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984)
* [OCPBUGS-25460](https://issues.redhat.com/browse/OCPBUGS-25460): add private endpoint permissions to Azure credentials request [#978](https://github.com/openshift/cluster-image-registry-operator/pull/978)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/08f42a978799bf7a6427d8cd98ecfb2b69a80720...0fcdb4f22df3e1fa151815c31fec47cb4b676238)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a9c35df9c83f45eea69090311a4ade770be932a6)

* [OCPBUGS-18761](https://issues.redhat.com/browse/OCPBUGS-18761): revert dev cert rotation in 4.15 [#1598](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1598)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/03c5a03d1bd0a952655aa180bd2708802e8cc1a4...a9c35df9c83f45eea69090311a4ade770be932a6)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/097921fbf0741446d0f4297a71f0765dfcd7eeea)

* [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/4c6b685796e38a41debaa5a6d810f65291bc89b7...097921fbf0741446d0f4297a71f0765dfcd7eeea)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/37015e879a7ef647d7a953edea902d67e2ae91a7)

* [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7...37015e879a7ef647d7a953edea902d67e2ae91a7)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e04826eb2a14e0cdf51ea399b35444a93dfed0ff)

* [OCPBUGS-25322](https://issues.redhat.com/browse/OCPBUGS-25322): go.mod: bump prometheus-operator to v0.70.0 [#2201](https://github.com/openshift/cluster-monitoring-operator/pull/2201)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9cf7e00b4f6ad9c7cea904ef1b3261b9651976fb...e04826eb2a14e0cdf51ea399b35444a93dfed0ff)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/46c093451347d31a7461cd2c116db85587da9c6f)

* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167)
* [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181)
* [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Set enable-multi-external-gateway flag in ovnkube.conf [#2158](https://github.com/openshift/cluster-network-operator/pull/2158)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/371583742c06f2c99d28c33f3fd13942598381b2...46c093451347d31a7461cd2c116db85587da9c6f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b4be0464700b4597bab8f7f083d116d357caa841)

* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897)
* [OCPBUGS-25596](https://issues.redhat.com/browse/OCPBUGS-25596): Make MC names deterministic (#888) [#888](https://github.com/openshift/cluster-node-tuning-operator/pull/888)
* [OCPBUGS-25552](https://issues.redhat.com/browse/OCPBUGS-25552): rps: fix mask update for SR-IOV devices (#886) [#886](https://github.com/openshift/cluster-node-tuning-operator/pull/886)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/6fb389c8a78df013b026d7ed204a0368c052c7b0...b4be0464700b4597bab8f7f083d116d357caa841)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a7ba89874970cd10765e1d0753405e32fb357d84)

* [OCPBUGS-25399](https://issues.redhat.com/browse/OCPBUGS-25399): [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#40](https://github.com/openshift/cluster-olm-operator/pull/40)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/807652f2ed11bdaa832f330d004834412c1e3fd3...a7ba89874970cd10765e1d0753405e32fb357d84)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)

* [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/bb83e65273bd75c5916a0c26307557f9354dec1a...3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/5ae83b0e51342ca99c242c6993efc1e8c01ef17e)

* [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013)
* [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007)
* [OCPBUGS-25690](https://issues.redhat.com/browse/OCPBUGS-25690): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1008](https://github.com/openshift/cluster-version-operator/pull/1008)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ebe0f346451dbb4464902c286ff25449a41355da...5ae83b0e51342ca99c242c6993efc1e8c01ef17e)


### [console](https://github.com/openshift/console/tree/f391957d34874041bb876c0b6ce06c9af8513ef9)

* [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433)
* [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465)
* [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479)
* [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484)
* [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463)
* [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461)
* [OCPBUGS-25707](https://issues.redhat.com/browse/OCPBUGS-25707): fix Observe tab in Topology overview [#13462](https://github.com/openshift/console/pull/13462)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13447](https://github.com/openshift/console/pull/13447)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Only show VPAs that are associated with the selected namespace [#13426](https://github.com/openshift/console/pull/13426)
* [OCPBUGS-25324](https://issues.redhat.com/browse/OCPBUGS-25324): fix preferredTab selection on Pipelines page [#13443](https://github.com/openshift/console/pull/13443)
* [OCPBUGS-24680](https://issues.redhat.com/browse/OCPBUGS-24680): Backport Add support for Azure Workload Identity / Federated Identity [#13428](https://github.com/openshift/console/pull/13428)
* [Full changelog](https://github.com/openshift/console/compare/1e468ccfc6993e57d4e85627015e9fa5c4747e4d...f391957d34874041bb876c0b6ce06c9af8513ef9)


### [console-operator](https://github.com/openshift/console-operator/tree/f5c3f83cc2bc9325d135044eaa8c039189c36dee)

* [OCPBUGS-24104](https://issues.redhat.com/browse/OCPBUGS-24104): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#818](https://github.com/openshift/console-operator/pull/818)
* [Full changelog](https://github.com/openshift/console-operator/compare/b6b184bcc2ebf1caf7b765fc432c41a199723310...f5c3f83cc2bc9325d135044eaa8c039189c36dee)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#221](https://github.com/openshift/csi-driver-manila-operator/pull/221)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#216](https://github.com/openshift/csi-driver-manila-operator/pull/216)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/37d697a57f7247ca71a512d63e99f7c60b2fac93...2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87)

* [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3aafbf6ead2d717ebbf09574bbddf9c76447dea8...ce5a1a33fadf10bba0c90510c09dfc879dcfec87)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/090cd57847b98aebe42ecd5091c3a626eb870022)

* [OCPBUGS-25521](https://issues.redhat.com/browse/OCPBUGS-25521): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#134](https://github.com/openshift/csi-external-snapshotter/pull/134)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/202f48ebffc01cb6cce720875b538d7d739844aa...090cd57847b98aebe42ecd5091c3a626eb870022)


### [etcd](https://github.com/openshift/etcd/tree/5acb4f3078adbea40d050365ac5294229e574c67)

* [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232)
* [Full changelog](https://github.com/openshift/etcd/compare/969d7afab8258b4610569d001e9a06b677acd021...5acb4f3078adbea40d050365ac5294229e574c67)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/118209dfa2ee7ce8acea2872db4544068aa9e1a1)

* [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56)
* [OCPBUGS-25808](https://issues.redhat.com/browse/OCPBUGS-25808): Add Snyk file to exclude vendor directory on scan [#55](https://github.com/openshift/cloud-provider-gcp/pull/55)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/a216255f56bca52ea33c2fd84ca3833101a2ecc1...118209dfa2ee7ce8acea2872db4544068aa9e1a1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6d63f90dee8893565fbc6083376fe3c5e616b284)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#108](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/108)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#102](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/102)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/cbba3c771e8eab300c5bf0a64e5191fe918d7184...6d63f90dee8893565fbc6083376fe3c5e616b284)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b400f2077ca1e5191282c53a64bd650209a430af)

* [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843)
* [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7aa0a745c4363fdecb2b5afc69a8a647471d8651...b400f2077ca1e5191282c53a64bd650209a430af)


### [hypershift](https://github.com/openshift/hypershift/tree/3ab6c267bf4512f67fd5d10d868effaa73256032)

* [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379)
* [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376)
* [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321)
* [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336)
* NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 [#3338](https://github.com/openshift/hypershift/pull/3338)
* [Full changelog](https://github.com/openshift/hypershift/compare/c575cf677f7885f41d43bc1479489644e2de0cf7...3ab6c267bf4512f67fd5d10d868effaa73256032)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/516264a98d130f9f2a03b20acf33dcc1b556e6a8)

* [OCPBUGS-25604](https://issues.redhat.com/browse/OCPBUGS-25604): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#103](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/103)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#99](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/52f179cc012dcf70375ad558fbec812b5ae7a3c8...516264a98d130f9f2a03b20acf33dcc1b556e6a8)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7c4b63bcc763c822155f3dc8f890792409d8d1cd)

* [OCPBUGS-23685](https://issues.redhat.com/browse/OCPBUGS-23685): Add Snyk file to exclude vendor directory on scan [#72](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/72)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/fa2ba9fce081b6bba923383d3296503ecc5ebc33...7c4b63bcc763c822155f3dc8f890792409d8d1cd)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66)

* Updating ose-insights-operator-container image to be consistent with ART (#884) [#884](https://github.com/openshift/insights-operator/pull/884)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2e6175fd72ddec0f4efbae17d7424c3e076f079c...ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66)


### [ironic](https://github.com/openshift/ironic-image/tree/b320635825fcdfa9d692e3143e8ccf2fe34a8fb9)

* [OCPBUGS-24648](https://issues.redhat.com/browse/OCPBUGS-24648): Stuck deployment [#439](https://github.com/openshift/ironic-image/pull/439)
* [OCPBUGS-25606](https://issues.redhat.com/browse/OCPBUGS-25606): Relax packages requirements [#442](https://github.com/openshift/ironic-image/pull/442)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7d4b02ba6cf00f157f621cafeb6db6d8c0ea6b78...b320635825fcdfa9d692e3143e8ccf2fe34a8fb9)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/64148b197200effd71cf0227e3edbe9eb152af75)

* [OCPBUGS-25351](https://issues.redhat.com/browse/OCPBUGS-25351): 502 proxy error [#99](https://github.com/openshift/ironic-agent-image/pull/99)
* [OCPBUGS-25684](https://issues.redhat.com/browse/OCPBUGS-25684): Relax packages requirements [#102](https://github.com/openshift/ironic-agent-image/pull/102)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/84181d64a325fa3d50af49c5b655811ac846d83e...64148b197200effd71cf0227e3edbe9eb152af75)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/e8749689edb8e7fea42eca5f2b67c3187192cdeb)

* [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/95ad20fc390cd34e0e5ba5135d5048bc0f008c0d...e8749689edb8e7fea42eca5f2b67c3187192cdeb)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)

* [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272)
* [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/43b2b82069d4752609f91049d580df2756e570b9...1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2886a920caee53f77523f785d8d92c88f71f10d0)

* [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196)
* [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ffcde1ea9daa32f305d9f803e055e2b0f1144a73...2886a920caee53f77523f785d8d92c88f71f10d0)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/860ecd31f1b68d021b316a0793b6cc3eadacece1)

* [OCPBUGS-26240](https://issues.redhat.com/browse/OCPBUGS-26240): Azure Run ovs-configuration.service before dnsmasq.service [#4101](https://github.com/openshift/machine-config-operator/pull/4101)
* [OCPBUGS-25948](https://issues.redhat.com/browse/OCPBUGS-25948): kubelet: fix kubelet labels [#4090](https://github.com/openshift/machine-config-operator/pull/4090)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6457fc9a0c23702f8b0756b543a286ed4d2f9874...860ecd31f1b68d021b316a0793b6cc3eadacece1)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/54460db56c409e54dc00a2f33472ec18e0d71008)

* [OCPBUGS-25643](https://issues.redhat.com/browse/OCPBUGS-25643): On the alert details page, don't require all alert labels in URL [#89](https://github.com/openshift/monitoring-plugin/pull/89)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/95e6902c0b10278445fd4ef927ae59c09af42615...54460db56c409e54dc00a2f33472ec18e0d71008)


### [multus-cni](https://github.com/openshift/multus-cni/tree/5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)

* [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206)
* [Full changelog](https://github.com/openshift/multus-cni/compare/473da983ccafa7d14198594b498fa125cd8018df...5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/6212406b49cbcc75a01da85a67469b4872754e1d)

* Updating ose-multus-networkpolicy-container image to be consistent with ART (#44) [#44](https://github.com/openshift/multus-networkpolicy/pull/44)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/d1a8ba7a2669598f7fff0e8dfaec9369fdb3803e...6212406b49cbcc75a01da85a67469b4872754e1d)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/0288f3620532f481ce258f5169b42a67b7f9a0cb)

* Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) [#87](https://github.com/openshift/network-metrics-daemon/pull/87)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/c1b0d95b3575d02e18cee71daa6d5519bc9325f8...0288f3620532f481ce258f5169b42a67b7f9a0cb)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/97e2235691be4522814af11b425ac18acd5189f6)

* [OCPBUGS-25346](https://issues.redhat.com/browse/OCPBUGS-25346): - oc-mirror on RHEL9 Host with FIPS enabled (#764) [#764](https://github.com/openshift/oc-mirror/pull/764)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#762) [#762](https://github.com/openshift/oc-mirror/pull/762)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ce82951ae77750cc64d8486b69709a1f4c8e295a...97e2235691be4522814af11b425ac18acd5189f6)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a55daf619fc97ff5c0c0b61edd320381c943bc8f)

* [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0c311d3c194446a863726f5b6d5c6abe9a2a4915...a55daf619fc97ff5c0c0b61edd320381c943bc8f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6d5e462c702b53059147af9fdb07a32d25009fd2...2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/acc3955450d75d33ea69f326ef9215f415051af4)

* [OCPBUGS-24296](https://issues.redhat.com/browse/OCPBUGS-24296): Add Snyk file to exclude vendor directory on scan [#289](https://github.com/openshift/cluster-api-provider-openstack/pull/289)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/becb40205b845f5d59ab2d1a325bdddac58cc953...acc3955450d75d33ea69f326ef9215f415051af4)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c17320571b51e06e023926aef3edfe7a8fedd2d7)

* [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648)
* [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643)
* NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8d9fd047c014877b5d3285acb8516a7494a24026...c17320571b51e06e023926aef3edfe7a8fedd2d7)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e6ba47f4986f2165c09668d97067f011caa0f4cf)

* [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* [OCPBUGS-25700](https://issues.redhat.com/browse/OCPBUGS-25700), [OCPBUGS-25701](https://issues.redhat.com/browse/OCPBUGS-25701): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1994](https://github.com/openshift/ovn-kubernetes/pull/1994)
* [OCPBUGS-24610](https://issues.redhat.com/browse/OCPBUGS-24610): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1963](https://github.com/openshift/ovn-kubernetes/pull/1963)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2c98ee245fcddadd19863ee4f7e754be8975e7f8...e6ba47f4986f2165c09668d97067f011caa0f4cf)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc)

* [OCPBUGS-25978](https://issues.redhat.com/browse/OCPBUGS-25978): Rebase with upstream: Fix snyk code issue: Path Traversal [#71](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/ecd5957d49ae71c8026e649e0b48909168408a7e...5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951)

* [OCPBUGS-25714](https://issues.redhat.com/browse/OCPBUGS-25714): snyk: ignore vendor dir [#59](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/59)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#56](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/56)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/18448617e4cdea9158ab6c388175441da52104b6...a3729dcb75a7da8c9ee7466da5de07e2f1fe5951)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/07e8f8b81748d52cf596082b8102134e954137ba)

* [OCPBUGS-26555](https://issues.redhat.com/browse/OCPBUGS-26555): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#72](https://github.com/openshift/machine-api-provider-powervs/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/c77a9bdac3cc992702191b7a01845108f0942047...07e8f8b81748d52cf596082b8102134e954137ba)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f5972cc74670c274bdc2b29d0903c4ed0432b9ca)

* [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4d3d966edaaafcae7c9d4a1aa87a67ac627a6ebd...f5972cc74670c274bdc2b29d0903c4ed0432b9ca)


### [tests](https://github.com/openshift/origin/tree/6d5063bb04e0395cc93d4c2591e5e1372d8e5119)

* [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504)
* [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506)
* [Full changelog](https://github.com/openshift/origin/compare/ecca9c7c8212677dd28aa93d328849885221fb23...6d5063bb04e0395cc93d4c2591e5e1372d8e5119)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/74481e34aa9c2ef2de0ce0289e2383a179d34b89)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/56a1741f76c7ab60751c3788245b9b77a82a43a9...74481e34aa9c2ef2de0ce0289e2383a179d34b89)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2dce299b4bf1b0f86f3f4db8ea23128bb494a2e0)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/173f7cfa062fddb8e871fb506692ffafd3175fd3...2dce299b4bf1b0f86f3f4db8ea23128bb494a2e0)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/de02a75de63c6d8afd8467afd9aff97878d8bea4)

* [OCPBUGS-25648](https://issues.redhat.com/browse/OCPBUGS-25648): Fix VPD crash when vm is not found [#149](https://github.com/openshift/vsphere-problem-detector/pull/149)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/50cd01c01db25d8c3043ef923f18019d3c8c87bf...de02a75de63c6d8afd8467afd9aff97878d8bea4)