# 4.15.23

Created: 2024-07-22 17:43:50 +0000 UTC

Image Digest: `sha256:e39f4b55929f54a720ca84075544920ddc9fcc1e6a627005ebfd4c3b64e5716c`

Promoted from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-07-22-104333


## Changes from 4.15.10

### Components

* Kubernetes upgraded from 1.28.8 to 1.28.11
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202404161628-0 to 415.92.202407191425-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:64262dfeeca80c273c0292a30ab88d0586a91422bcaf6a2f71998e3065b1a497`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [abf4fa96](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/abf4fa96550caf09e788b66fc06f1df802768397) `sha256:2a4f6b0d4831da2bf2761941c29dee2fe0ef59684ec7db971f25f4c0750ddd15`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [be4888d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/be4888d3dc176b9801364981fbb34d831f6d6ffe) `sha256:71ea9c4fafad2ca680d3e3f405e03f3912df9e70155177fd63ac24b6ec783444`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:721228fb1b63646c29ff48e0534f4e73daa2351689f87b67270b5a196950935b`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [d3ba04c3](https://github.com/openshift/cluster-api-provider-alibaba/commit/d3ba04c35e77e4e937aa9b7b4d069753cd514335) `sha256:e2f1d30c6d33af0ed57a6b0050f51d0866e92f2f6ef148dee55e6745f7a6d9a2`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [0129b1e3](https://github.com/openshift/machine-api-provider-aws/commit/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382) `sha256:ea09b93b31d240e13ac875d1f5bac3ff3e05c7e7cd5804c48ce195b17bf3b898`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [dcb7e1c7](https://github.com/openshift/azure-disk-csi-driver/commit/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) `sha256:23e9665345abbc40c3310e98f28ed47f5bebee42fda424394aa29c2f186763a6`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [160cf624](https://github.com/openshift/azure-disk-csi-driver-operator/commit/160cf624a88f500de7a1f79e6dd9384bb7d17842) `sha256:242778115fa86bd80d91c4bf3420e565701f3df9a4a61041da12d6b02f477ad9`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [2c8c33d8](https://github.com/openshift/machine-api-provider-azure/commit/2c8c33d88e4098aaa7f57082e084d8cd1b10f152) `sha256:313b16a9e605c8d576680a2fcb1c93cc4f3765dc220e13bd530ec23965584b9b`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [73a72cc8](https://github.com/openshift/cluster-api-provider-baremetal/commit/73a72cc821224eb7ad0fad25d3bcc8272658238b) `sha256:b1c9eb70e4b431e79f9e81cfd57d8e4f142696157f3f42ae2302c06025ad2f4f`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [fdce2d08](https://github.com/openshift/cluster-baremetal-operator/commit/fdce2d0892e255240ff760e91fa8a738ae4a7556) `sha256:9bb68b5ef2b6e20c18dbebf895d76d1ee713c95d45af234aa5c73b5b00c8a057`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0849c462](https://github.com/openshift/cluster-bootstrap/commit/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) `sha256:25570d99b75b4cd40951f8b5d0383b28ca3e6209e221524d6fad329292e9dd0e`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [0e5dbd06](https://github.com/openshift/cluster-capi-operator/commit/0e5dbd062fd689a198943b9f63983552ae4fcba2) `sha256:9945792645ee9f0b49194795d8709aaa493d7bb4c7f6d6474748c42deb5c55fc`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [128d8e08](https://github.com/openshift/cluster-api-operator/commit/128d8e08c48e2002c416e84d0dec816bf5999c7e) `sha256:cbf0384ecd1738cc54cb80b7b8a44af7e450f07f8a22c68fc2f3f2fd7a454e70`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [ee8cf525](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) `sha256:969eb0dcc6e70edc732e4a603c3a4470f4493ee2c4e189d5079115fa5ff2d2ba`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [f054dfaf](https://github.com/openshift/cluster-kube-scheduler-operator/commit/f054dfaf189b43b262c11ef7f97038c79592c796) `sha256:9ae1a7ded5726f01a9f009a61eb29c02bec4c9ccbd962f5c4e54ef8ab68947c7`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [3a6b6ae6](https://github.com/openshift/cluster-machine-approver/commit/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba) `sha256:25e17afae0fe9bf2ef3878797211486ce7c9ff028564d8e12a43bec95e748dbc`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a7ba8987](https://github.com/openshift/cluster-olm-operator/commit/a7ba89874970cd10765e1d0753405e32fb357d84) `sha256:9596cd9c51cfc383fd379019d87a88b07a2844769d9db17b3433ed806f10f9f2`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:aadd9211c798a43861958aea4492e118f042af5fd718f6195d46ce41d3739db1`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc48f315](https://github.com/openshift/cluster-policy-controller/commit/cc48f3152213bfe6e42fdd82f760246e862d208f) `sha256:584eb21c57df9b2e533d69c52c340871078ccb74eb57b7bc3650a333ade072fd`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [bf845b5b](https://github.com/openshift/cluster-samples-operator/commit/bf845b5b1b077c3a73de00b77da2c499e13371e4) `sha256:34e7887cb82cc4a233624388b6a8de5466f395a77745133c578f2c5e50361fd4`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [be6ba5b0](https://github.com/openshift/cluster-update-keys/commit/be6ba5b0acee8970345b5259025506a04562ad37) `sha256:395845c8318aa48e8edde7c7ab95a55a39a2c5aeded823187566d1138261ca30`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [617398f5](https://github.com/openshift/configmap-reload/commit/617398f581faadbad2c7ded993bfa3169a87b6ab) `sha256:7239d36a955455aa7f4ceab2701e4177577433e62091cf6d9541e911a57f1a35`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [401d3507](https://github.com/openshift/containernetworking-plugins/commit/401d35070f2d1d4db3f08ffe183b8262754b7287) `sha256:7c4bf6d26ca092bad24c41cf68ef4f584046315310292c9bdacd52e5c7a15c95`
* [coredns](https://github.com/openshift/coredns) git [22f950ea](https://github.com/openshift/coredns/commit/22f950eae53fcba187c2303ac4f1a8305b6c1c8a) `sha256:ddf3ba9c13bde66e020550989d333bb23616fa9832253228a53760faa1f9c09a`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [2fc4a7cc](https://github.com/openshift/csi-driver-manila-operator/commit/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7) `sha256:fd526741cfda570f5e6162b97af600a6d6d290ef96520d807aeea9f14dabcb4e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d032dc10](https://github.com/openshift/csi-driver-nfs/commit/d032dc1050b58a965e6bb9f923baef6d3c95538e) `sha256:ba6d2864488ecc223006ac52ca8533da3791786ab0401541346a573748de1975`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:b33a1f2687dbfcd1cdfd31b60c46f6cc07ee3dbb88fa8780b852c4fe864742e5`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [8d017b7f](https://github.com/openshift/csi-driver-shared-resource-operator/commit/8d017b7f19f0226dfd4fc7933271939c550d180f) `sha256:a82f63e910192a4232a99ec3d232299ff4f248be7b010287326302d6b313b679`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:32daccaec434b7b1b074b907b1edb076271b1ec0c087a166672066267f01f8cf`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f806f266](https://github.com/openshift/csi-external-attacher/commit/f806f266600fbc0db4d072e4d041fc80e28deee7) `sha256:c5b90b613fb7b538875a2635cc15ac016fcedd8d5774f480078dd57300a64cd5`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [ce5a1a33](https://github.com/openshift/csi-external-provisioner/commit/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) `sha256:53fb4d4cc05c77af143882adbe7ee28d9db8d4f89f674d521f43263e3dc73f7e`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [3b4236d3](https://github.com/openshift/csi-external-resizer/commit/3b4236d382e4593ca41ecc6f394775be467b1a0d) `sha256:b846796ce3a0021a7fa7d1f71d05f38190fbf4cb7553d03c8d14487463af1b2a`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:013b2033191bb80d90091e2bfabc74b622079bfe1ac89497b55edb72f10d3996`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [240bb8c0](https://github.com/openshift/csi-livenessprobe/commit/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) `sha256:905d1323d71756b365ecc9baef924244dd360b720ab79a4f5d28de5bee74d891`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9005584e](https://github.com/openshift/csi-node-driver-registrar/commit/9005584ee45c4d3158e383870aafa5d78a03b141) `sha256:cf3cde68b9a6be5c385e1844cc91fb516039939e59374258e6c5b6f5e0aec097`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:1e429b53a3513c051ad709efaac42a698753af98ddc879cbf8aeccc80a6e9419`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:bc11a21cd3ebf8bc755b87822912915d8ea6e9a46e348461e3aeed6ffd11fd64`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7a448c2e](https://github.com/openshift/driver-toolkit/commit/7a448c2ee026c772e293dd344da587493c859f82) `sha256:6281053cb7bc6d9d85cc2cf892509c8ecffe8ae48ff4aa62428cc64061e0ee57`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [39ea8ee1](https://github.com/openshift/egress-router-cni/commit/39ea8ee1d8299b9052be76bd4b50c79d731c9e38) `sha256:9fd0a16bd248f6559698991e24892fc6279acc6e29de179e5da0850b555b2bd8`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [b15daaf5](https://github.com/openshift/machine-api-provider-gcp/commit/b15daaf5836910277b7154a006800505f018aa5a) `sha256:3841e9187c47bbaf895feea6335e19604fd9041a96e04e13b46b2df27ac47151`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [856ee3e2](https://github.com/openshift/gcp-pd-csi-driver/commit/856ee3e23802cd341619cc4fc3181cf6ebbbd548) `sha256:7fd6209c269d108689b6e461ff9b584c125442796765ff26725da9a2a1a64ac3`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [3b91ee31](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/3b91ee310c8a7394ceb2d4de6a51dd18a3800312) `sha256:7cad3ac91ca53663fbda6ce9a0d8c2d6ba479d5d6a79a598c31fccce8d02be35`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [19e64d5c](https://github.com/openshift/cloud-provider-ibm/commit/19e64d5c78656c7c91cbec310ca312cbe92f60f0) `sha256:fbb57542c980ab6ebca393e8f931155da940f888a1313536ce617d76e1c5135b`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [34fb6252](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/34fb625247f6743637b0ef0c5767e000e0ec1e65) `sha256:37942bbc0fe8125554473db871011cd6eadb040be4822bc80d4bfe7f1ae748cd`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [6b0b8ea7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1) `sha256:b37fc556b0fdafaabce431c9b58685b36079edd6b602c3609d63c527aaf21d36`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:5406f7380ddf7afbc8803a1494a3977ffee46c34905c7a53c57a5eb65a388fed`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [47200021](https://github.com/openshift/ironic-static-ip-manager/commit/472000211344be4a5e9581820e94895144cf2bfc) `sha256:74a1f47d7d6e7477ca4b8d284ffb0fb320a3975f3806f6850ff816114b6e1dbb`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [da16e560](https://github.com/openshift/k8s-prometheus-adapter/commit/da16e56001ae274021794aef7926d77ccd96dab5) `sha256:947638b01b760211df4132998589fc1f433e44e35690b831a23e17c1d5cac985`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:2ebc3976bfaaafa2a9428604748374086c09d264dcbc8a506e0c56898e09e8d6`
* [kube-proxy](https://github.com/openshift/sdn) git [71a6f28d](https://github.com/openshift/sdn/commit/71a6f28d69f77953d104219cee344a70f7cbede1) `sha256:e2eeffe2932d7c94aa1e1f6d876af46c558ce2ff57c3acc6d4831fd860d5e7d0`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [e8e8c84b](https://github.com/openshift/kube-rbac-proxy/commit/e8e8c84bcc6d4419970726f3028df4b178c0b1c9) `sha256:0bf40df05a3599b6ef8706e78bb1914b9f988946543a685449110aaf8b59e8bc`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [037b59c2](https://github.com/openshift/kube-state-metrics/commit/037b59c265454c599dfb0829a856e14b1ab07896) `sha256:983a0686fdcd6419aacda29dec3f068a9cd8cf1ee0d874329aba21a5c958e7f1`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [e8749689](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/e8749689edb8e7fea42eca5f2b67c3187192cdeb) `sha256:5fbeea861b0beb365183ad7fef88cbb481212652dc21c394d1fe579dadfa05a1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [dbaf9ea1](https://github.com/openshift/cloud-provider-kubevirt/commit/dbaf9ea1edd5a953606a80cb45f723c934a73ded) `sha256:757d10097b45ca84458191ecd777452bea32240ae5105170b7cc0c86d058795b`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [d3bdbce4](https://github.com/openshift/kubevirt-csi-driver/commit/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3) `sha256:6d41bc11b72abb159ed9d1239a0e8d875ebfce8aa7ffc80a973d5b0900d5f446`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [1e096cdf](https://github.com/openshift/cluster-api-provider-libvirt/commit/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a) `sha256:ecef7103adc6cdc4252c44a725dd2567468a9381ca84497b3fc6121b0b3da542`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [97d87657](https://github.com/openshift/image-customization-controller/commit/97d87657caab4323f82f9d0958e6d30fc8fd1846) `sha256:0a860bb709e247e660633ff144da58c7280b82ade1cbc5eb2828dd2e2570539c`
* machine-os-content `sha256:7508a8d749d529dec05bcfcce7ff27d03e52c3b5d9c86e16de562f8d5eaf5be7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e9c920f](https://github.com/openshift/machine-os-images/commit/9e9c920f985a375536e8d4caafd2d7ed579e27f3) `sha256:084be34b228a38bfa8b1cdece883a07be6e20b11191a8eb2b20e54b5d8ce8f53`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:1e4fa534e3f027967529879ca4e107aca3b0b1fe0fcec3d82d88083c983b12bd`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:7476f5675e9d5ecfc82907d8a59388394e0e00a6703b8544c3543f2727de7c51`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [a5b755b5](https://github.com/openshift/route-override-cni/commit/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5) `sha256:780cb9d69f4bd53eedfff58a79d1aed0dc3516027dcd1c1afe872cf14d0b86f3`
* [must-gather](https://github.com/openshift/must-gather) git [47335065](https://github.com/openshift/must-gather/commit/47335065cc7137ec098567b06d21f742669b4200) `sha256:d018a02c1d2229618f3046518a2fdc9267791488ce701c3b9fad660b73989fc9`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:cf2c31c9a651713252744abf359a1a4c255c8a36a89d75b8c3ee30020bbe7ac9`
* [network-tools](https://github.com/openshift/network-tools) git [17536c8d](https://github.com/openshift/network-tools/commit/17536c8dff76d50efb604187ba763020bd084771) `sha256:8e56d1107a0e8fa3ac77a0f35de9de76d4adbf59e9c8ac8b551a756cbb22f2e6`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33fb22c1](https://github.com/openshift/cloud-provider-nutanix/commit/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d) `sha256:d869874e5397aa28c9ef52a3bc78cac44b8a9f85ef7120fad84858fc009d653a`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [f02b1a28](https://github.com/openshift/machine-api-provider-nutanix/commit/f02b1a28d89ea69c614995163874ca1eff4f4aaf) `sha256:cd30714fc30e858857013d2d18dd7fb03796b0daef38cd87f6e55eb33aef1b92`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [241a88c4](https://github.com/openshift/oauth-proxy/commit/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e) `sha256:868d5d947be8cc90be2ec4bd830ba683b8acd165ea327ed9bd21fe2c0173d3b4`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [2724be3e](https://github.com/openshift/operator-framework-catalogd/commit/2724be3ed7a0205241c33c26d92d33f3d246662c) `sha256:9b714f570c210c3f4ee01e01bc96c6333270190900af991669bd48fc9d6fc4b3`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [e2906934](https://github.com/openshift/operator-framework-operator-controller/commit/e2906934f5051bb0f80ccdd0091e5ffd85addaff) `sha256:13fbf4efe0f117d86d50326c910d6504c162019b4aff1c8162635590b8d5545c`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [5b09cd44](https://github.com/openshift/operator-framework-rukpak/commit/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) `sha256:37f5a75571ec883074e522e0e07fe2a1b858929430d3437ed08cf42132fdfd7d`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1915f645](https://github.com/openshift/openshift-state-metrics/commit/1915f64591a18c11138d10c00c50b3f5cff632ce) `sha256:b1daae4fb745e9e9a92c2ca308f7769ea03f6a0b57d220b35e5d96503bd28cdf`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:5f6fd9b94baa591d9171204c0454d0927a42002e51cbf7e9f1a6f66dbe6c097f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [b8d25ad6](https://github.com/openshift/ovirt-csi-driver/commit/b8d25ad6d140a198e96527b46a9dbde65aae41ce) `sha256:34aae2eb092bc40945133b8301c7507719b756a30379e2e6de7d2b4f68d57e86`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [e9b0fa23](https://github.com/openshift/ovirt-csi-driver-operator/commit/e9b0fa233d75a97e6d29106265938b42bc16d677) `sha256:efdd5d2de40e15cbe1d6d5575765e5a3fa53837ddcfeebeededa9cfd1366d1f8`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:e42889c23664c856505a00cc7fdd554488a3c89c6858173ae9af08707944c67e`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [a3729dcb](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) `sha256:819505fda89669232cdf0ca0063f94791fdd2a6a0fc9228dae9a0249ccf1b73c`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [521b80df](https://github.com/openshift/cloud-provider-powervs/commit/521b80dfc284a1ca0c6e112ac7bf7b504c786d88) `sha256:f79186204789a0b886bd613c66209ce14460bd3f9a6473e53ef2fc14dffa2ee0`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [07e8f8b8](https://github.com/openshift/machine-api-provider-powervs/commit/07e8f8b81748d52cf596082b8102134e954137ba) `sha256:208841f7e834a0fc5f9e9e12f91a30339b60370b97426767499263e05e79b061`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f3f1f5d1](https://github.com/openshift/prom-label-proxy/commit/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) `sha256:87e52b7cdab6f063821039c253b43f5fd79ccc0dd1f06b474109e18b192e7e77`
* [prometheus](https://github.com/openshift/prometheus) git [6828e446](https://github.com/openshift/prometheus/commit/6828e4464c45f239a89c7965233c2fef49c6b1fb) `sha256:e02d24aedbd70be337b047ad7373a1aa92cd61d2c7bf45b639ce2a2af06e35f2`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [870ade52](https://github.com/openshift/prometheus-alertmanager/commit/870ade52a6097bc55cec29c1a9cc028967c5d23c) `sha256:cd85b92a80708659c0b64aea8c5391e8c02308834dee4be14df3d1021e2f04a1`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:78d32a069d055a514dcaf2ae7234f48386575e1dac7e2827d327770508c2d0f4`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [aed837c3](https://github.com/openshift/node_exporter/commit/aed837c322b6eb54d88956acada07b5b390b5c25) `sha256:b9f933551913f37134bc6e08589d41fb68e095c2688d47c2d3733c955b57ea1e`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:7547062de0dfc282496b76fd99f02179a01e125a0e35bde2a48014fb0dba97e7`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:bb4c5f50fa1f13cd9829cd922a8422163ffc796fe9706532a1d0ee93d9f1654a`
* rhel-coreos `sha256:b1c45a47ffeaad41f434352f657fd22dd1a4460ff54806326bbebca725294f84`
* rhel-coreos-extensions `sha256:bf34700dd98facb0bdcdd534e1806e8017907e1f8b087fea52f5255ee60d0de5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [c5cc7a73](https://github.com/openshift/route-controller-manager/commit/c5cc7a73705e4086759e2a36811b055b7716def4) `sha256:0b9424592f413ed0985f2303f7f491abcd1b7f1af960e99e231cdd3a8aa06dbd`
* [sdn](https://github.com/openshift/sdn) git [71a6f28d](https://github.com/openshift/sdn/commit/71a6f28d69f77953d104219cee344a70f7cbede1) `sha256:287a187b5b10c5160b6ce6ee3c2e17c3dba2453e92c97ff333c24046ea628352`
* [thanos](https://github.com/openshift/thanos) git [66161ad4](https://github.com/openshift/thanos/commit/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) `sha256:915ae4b0ae5a537000a7ffda43763052e7acaf591dce7087f8f90be17aaa1d9f`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [d2af6982](https://github.com/openshift/cloud-provider-vsphere/commit/d2af698277d7dbbd020f8b05b1c319e1bbb1eeae) `sha256:596b1e0f6783680fe30cea7814e6a36b17da6f4f311b0629e1c92c1a1312593f`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e0d46570](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e0d46570a06caff3439b410b9c9f75cb383a3d2d) `sha256:e950b37927544b5dc0c18c215b464a18ba6b2cfa655d7c55da7470ebc3f209f9`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/833fd90a6dc4d0707f5ffca18e9b288e260346c1)

* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6381) [#6381](https://github.com/openshift/assisted-service/pull/6381)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) [#6245](https://github.com/openshift/assisted-service/pull/6245)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) [#6217](https://github.com/openshift/assisted-service/pull/6217)
* 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) [#6211](https://github.com/openshift/assisted-service/pull/6211)
* Revert "MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)" (#6208) [#6194](https://github.com/openshift/assisted-service/pull/6194)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d2b745b0344238599419e94b8ff1f569bf574903...833fd90a6dc4d0707f5ffca18e9b288e260346c1)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/1b61dd77ff111b546f786365dccb70d1714cb9b5)

* [OCPBUGS-35894](https://issues.redhat.com/browse/OCPBUGS-35894): Fix race to mark node Joined (#859) [#859](https://github.com/openshift/assisted-installer/pull/859)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#851) [#851](https://github.com/openshift/assisted-installer/pull/851)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) [#833](https://github.com/openshift/assisted-installer/pull/833)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6a9ab5a59c71468f0814a4ad523dccdea288ea28...1b61dd77ff111b546f786365dccb70d1714cb9b5)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af)

* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#718) [#718](https://github.com/openshift/assisted-installer-agent/pull/718)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) [#704](https://github.com/openshift/assisted-installer-agent/pull/704)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/cf64d955a3aabbb4b3d853db5a8d3cde34972592...1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/698a4035d9e6fad1478db37c3156fdd56c00f65e)

* [OCPBUGS-31953](https://issues.redhat.com/browse/OCPBUGS-31953): Bump golang.org/x/net to v0.23.0 [#51](https://github.com/openshift/apiserver-network-proxy/pull/51)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/dc30b80c9931de88a841eb0677dadbd1d63c27a6...698a4035d9e6fad1478db37c3156fdd56c00f65e)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/1e5e25da5ea2a115b84f6ec2ba695d5a244149de)

* [OCPBUGS-31954](https://issues.redhat.com/browse/OCPBUGS-31954): update for CVE-2023-45288 [release-4.15] [#81](https://github.com/openshift/cloud-provider-aws/pull/81)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Updates build-rpm.sh to set release to build time [#76](https://github.com/openshift/cloud-provider-aws/pull/76)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/2e3cca19638cae3066cba27608ed61c284b4d529...1e5e25da5ea2a115b84f6ec2ba695d5a244149de)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/51e7a81c40ab6d384e9b643dd6d2c97a417d1634)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#511](https://github.com/openshift/cluster-api-provider-aws/pull/511)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/52e9ec7c69a3c5f6d7a81452c51e3e29f198c66b...51e7a81c40ab6d384e9b643dd6d2c97a417d1634)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7043c1cca6e17dd3c90006140f6361cf0e776d69)

* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): UPSTREAM: 1919: Add reserved-volume-attachments [#263](https://github.com/openshift/aws-ebs-csi-driver/pull/263)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b692edb1bcad959162c5c62969c13f85d0266fa2...7043c1cca6e17dd3c90006140f6361cf0e776d69)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2a2b9dd109ba9d4abce11411c96787b21887f929)

* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): Explicitly reserve 1 attachment for the root disk [#222](https://github.com/openshift/csi-operator/pull/222)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9d82b974f71149d8ad0cdb5b872973413ece656a...2a2b9dd109ba9d4abce11411c96787b21887f929)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/13385034ec9a843a6b40f8b3aec9966ada785115)

* [OCPBUGS-32886](https://issues.redhat.com/browse/OCPBUGS-32886): Upgrade go-jose module to 2.6.3 [#188](https://github.com/openshift/aws-pod-identity-webhook/pull/188)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a63743aff1004f4834b347812833834ba508c27b...13385034ec9a843a6b40f8b3aec9966ada785115)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d799a261f70bbdf546d911f5f8b59e2c324bd16)

* [OCPBUGS-33127](https://issues.redhat.com/browse/OCPBUGS-33127): Improvements to client timeouts to prevent hangs [#118](https://github.com/openshift/cloud-provider-azure/pull/118)
* [OCPBUGS-33092](https://issues.redhat.com/browse/OCPBUGS-33092): Bump otelgrpc [#117](https://github.com/openshift/cloud-provider-azure/pull/117)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update acr-credential-provider.spec [#115](https://github.com/openshift/cloud-provider-azure/pull/115)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/fa16de46a13376ca9d84e212aebc49be1bbb7371...0d799a261f70bbdf546d911f5f8b59e2c324bd16)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/44832d2da09778d7ff4d2413c9e10852f330a55d)

* [OCPBUGS-36024](https://issues.redhat.com/browse/OCPBUGS-36024): Update go-retryablehttp to v0.7.7 [#311](https://github.com/openshift/cluster-api-provider-azure/pull/311)
* [OCPBUGS-29502](https://issues.redhat.com/browse/OCPBUGS-29502): Bump helm to v3.14.4 [#303](https://github.com/openshift/cluster-api-provider-azure/pull/303)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/84ef752bcb274d97ccf57c0b61b1c7a8800c7aee...44832d2da09778d7ff4d2413c9e10852f330a55d)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/dc463da48b275ba9a6fd7afc22a555f2b12c9ae4)

* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): Rebase v1.29.5 for OCP 4.15 [#65](https://github.com/openshift/azure-file-csi-driver/pull/65)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/364d90d4dd15bfbe15835b0427c8c7d8f1100fb9...dc463da48b275ba9a6fd7afc22a555f2b12c9ae4)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/367c4e45899033f7fb7494c0004b83157b6723aa)

* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): add token audience for Azure File [#103](https://github.com/openshift/azure-file-csi-driver-operator/pull/103)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/1c6294a4815b076ea3932c4bed4510043d738504...367c4e45899033f7fb7494c0004b83157b6723aa)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1)

* [OCPBUGS-32895](https://issues.redhat.com/browse/OCPBUGS-32895): Upgrade go-jose module to 2.6.3 [#17](https://github.com/openshift/azure-workload-identity/pull/17)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1...2333b7fae0592ae26d77cbac49ce23e7fbaa00b1)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/c48f860a629c7b720d8e7192e3a1fc72a1f637a2)

* [OCPBUGS-37067](https://issues.redhat.com/browse/OCPBUGS-37067): update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 [#8746](https://github.com/openshift/installer/pull/8746)
* [OCPBUGS-33354](https://issues.redhat.com/browse/OCPBUGS-33354), [OCPBUGS-33402](https://issues.redhat.com/browse/OCPBUGS-33402): Use assisted-image-service for ignition editing [#8635](https://github.com/openshift/installer/pull/8635)
* : OCPBUGS-36400: PowerVS: add ibmcloud plugins [#8687](https://github.com/openshift/installer/pull/8687)
* [OCPBUGS-36225](https://issues.redhat.com/browse/OCPBUGS-36225): Make vSphere default ResourcePool formatting not contain double slash. [#8664](https://github.com/openshift/installer/pull/8664)
* [OCPBUGS-35131](https://issues.redhat.com/browse/OCPBUGS-35131), [OCPBUGS-35141](https://issues.redhat.com/browse/OCPBUGS-35141), [OCPBUGS-35144](https://issues.redhat.com/browse/OCPBUGS-35144): [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 [#8646](https://github.com/openshift/installer/pull/8646)
* [OCPBUGS-35359](https://issues.redhat.com/browse/OCPBUGS-35359): GCP: Prevent cluster installation with mismatched worker assets and worker replicas [#8581](https://github.com/openshift/installer/pull/8581)
* [OCPBUGS-35502](https://issues.redhat.com/browse/OCPBUGS-35502): [release-4.15] azure: bump profile used for network [#8607](https://github.com/openshift/installer/pull/8607)
* [OCPBUGS-35586](https://issues.redhat.com/browse/OCPBUGS-35586): [release-4.15] bump github.com/containers/image for CVE fix [#8621](https://github.com/openshift/installer/pull/8621)
* [OCPBUGS-31387](https://issues.redhat.com/browse/OCPBUGS-31387): If host is offline or disconnected don't check ver [#8208](https://github.com/openshift/installer/pull/8208)
* [OCPBUGS-35355](https://issues.redhat.com/browse/OCPBUGS-35355): baremetal: Don't always enable provisioning-interface.service [#8580](https://github.com/openshift/installer/pull/8580)
* [OCPBUGS-35032](https://issues.redhat.com/browse/OCPBUGS-35032): [release-4.15] aws: terraform: add spot instance support for masters [#8540](https://github.com/openshift/installer/pull/8540)
* [OCPBUGS-35059](https://issues.redhat.com/browse/OCPBUGS-35059): images: change libvirt-installer base [#8550](https://github.com/openshift/installer/pull/8550)
* [OCPBUGS-33672](https://issues.redhat.com/browse/OCPBUGS-33672): add quota support to ca-west-1 [#8412](https://github.com/openshift/installer/pull/8412)
* [OCPBUGS-33454](https://issues.redhat.com/browse/OCPBUGS-33454): go.mod: bump aws-sdk-go for ca-west-1 support [#8381](https://github.com/openshift/installer/pull/8381)
* [OCPBUGS-33205](https://issues.redhat.com/browse/OCPBUGS-33205): Gcp bootstraping release 4.15 [#8339](https://github.com/openshift/installer/pull/8339)
* [OCPBUGS-33542](https://issues.redhat.com/browse/OCPBUGS-33542): images: do not force terraform-providers to be statically linked [#8392](https://github.com/openshift/installer/pull/8392)
* [OCPBUGS-29929](https://issues.redhat.com/browse/OCPBUGS-29929): GCP Destroy cleanup correct zones/records [#8062](https://github.com/openshift/installer/pull/8062)
* [OCPBUGS-32383](https://issues.redhat.com/browse/OCPBUGS-32383): sdk/aws: add ssh security group rule for compute [#8282](https://github.com/openshift/installer/pull/8282)
* [OCPBUGS-32690](https://issues.redhat.com/browse/OCPBUGS-32690): AWS: bump CCO for permission fix [#8302](https://github.com/openshift/installer/pull/8302)
* [OCPBUGS-32264](https://issues.redhat.com/browse/OCPBUGS-32264): always save serial logs if they were gathered [#8274](https://github.com/openshift/installer/pull/8274)
* [OCPBUGS-30944](https://issues.redhat.com/browse/OCPBUGS-30944): Don't run libvirt validations in agent installer [#8167](https://github.com/openshift/installer/pull/8167)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#8285](https://github.com/openshift/installer/pull/8285)
* [OCPBUGS-32259](https://issues.redhat.com/browse/OCPBUGS-32259): escape '%' in proxy settings [#8272](https://github.com/openshift/installer/pull/8272)
* [OCPBUGS-32355](https://issues.redhat.com/browse/OCPBUGS-32355): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8277](https://github.com/openshift/installer/pull/8277)
* [Full changelog](https://github.com/openshift/installer/compare/24a827900e76d8f9c79122307415b47a4921bbd7...c48f860a629c7b720d8e7192e3a1fc72a1f637a2)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/226e1df22266320dc9dafb89820c024aa910e6ea)

* [OCPBUGS-34682](https://issues.redhat.com/browse/OCPBUGS-34682): PreprovisioningImage should not be created on poweroff [#358](https://github.com/openshift/baremetal-operator/pull/358)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c17023eb3546d24d0529cdb4b7db96fc9ce288a7...226e1df22266320dc9dafb89820c024aa910e6ea)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/3eeb109b8c8d2d6de7cfb65a52ad2f99f3d08a1c)

* [OCPBUGS-35543](https://issues.redhat.com/browse/OCPBUGS-35543): Add support for OVN HostCidrs annotation [#319](https://github.com/openshift/baremetal-runtimecfg/pull/319)
* [OCPBUGS-32024](https://issues.redhat.com/browse/OCPBUGS-32024): Decrease log level when detecting node IP [#304](https://github.com/openshift/baremetal-runtimecfg/pull/304)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6f83b6f752ce27c6f997f2d0706b3a79b84aa763...3eeb109b8c8d2d6de7cfb65a52ad2f99f3d08a1c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1e41aa3e007fc60af9edfc77be1c610205943f4a)

* [OCPBUGS-36329](https://issues.redhat.com/browse/OCPBUGS-36329): Set required-scc annotation to privileged for node debug pods [#1818](https://github.com/openshift/oc/pull/1818)
* [OCPBUGS-35201](https://issues.redhat.com/browse/OCPBUGS-35201): Bump joelanford/ignore to bump go-git to 5.11.0 [#1798](https://github.com/openshift/oc/pull/1798)
* [OCPBUGS-32840](https://issues.redhat.com/browse/OCPBUGS-32840): Bump go-jose indirect reference to 2.6.3 [#1749](https://github.com/openshift/oc/pull/1749)
* [OCPBUGS-31879](https://issues.redhat.com/browse/OCPBUGS-31879): Add OIDC specific certificate authority bundle flag [#1730](https://github.com/openshift/oc/pull/1730)
* [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Remove some of newapp unit tests relying on external deprecated images [#1726](https://github.com/openshift/oc/pull/1726)
* [Full changelog](https://github.com/openshift/oc/compare/62c4d45a976deb18194a7b9eb853a8c40b10f4b8...1e41aa3e007fc60af9edfc77be1c610205943f4a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/f8455caf79e095355f39a2335a655eda4958cd84)

* [OCPBUGS-36030](https://issues.redhat.com/browse/OCPBUGS-36030): IBM/go-sdk-core update to v5.17.4 [#720](https://github.com/openshift/cloud-credential-operator/pull/720)
* [OCPBUGS-36291](https://issues.redhat.com/browse/OCPBUGS-36291): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#709](https://github.com/openshift/cloud-credential-operator/pull/709)
* [OCPBUGS-32900](https://issues.redhat.com/browse/OCPBUGS-32900): Upgrade go-jose module to 2.6.3 [#696](https://github.com/openshift/cloud-credential-operator/pull/696)
* [OCPBUGS-31924](https://issues.redhat.com/browse/OCPBUGS-31924): aws: remove non-existent permission [#691](https://github.com/openshift/cloud-credential-operator/pull/691)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/06a42948bf78b104e03a51bb5a555b6819db1b0a...f8455caf79e095355f39a2335a655eda4958cd84)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/6864da0642026d6004df171539fa9fd5bcb6c2df)

* [OCPBUGS-33780](https://issues.redhat.com/browse/OCPBUGS-33780): Avoid panic when looking up attachedOutboundRule.ID in azure [#145](https://github.com/openshift/cloud-network-config-controller/pull/145)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/10b62349e96f3349a7ce670eb9a8723071b00bd5...6864da0642026d6004df171539fa9fd5bcb6c2df)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)

* [OCPBUGS-34795](https://issues.redhat.com/browse/OCPBUGS-34795): set required-scc for openshift workloads [#675](https://github.com/openshift/cluster-authentication-operator/pull/675)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/52a7d25ade22ddcf791bf6488504e3f7ef3ae770...7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/387453a02dcaf134f7bf499071548ca970de0e50)

* [OCPBUGS-33885](https://issues.redhat.com/browse/OCPBUGS-33885): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#301](https://github.com/openshift/kubernetes-autoscaler/pull/301)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/05ff8c92b0723b7c5dfde3b0899fd73e5fce985e...387453a02dcaf134f7bf499071548ca970de0e50)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/1ba1af3d6df9a0805baa126ee0abb98ee47bb2e4)

* [OCPBUGS-31947](https://issues.redhat.com/browse/OCPBUGS-31947): Update x/net to v0.24.0 [#319](https://github.com/openshift/cluster-autoscaler-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/d90c9299f6699cb26c0598af26cc8f791f8c4f28...1ba1af3d6df9a0805baa126ee0abb98ee47bb2e4)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2053e13cb0fda9188e9b685db83c1e1f492e6efa)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#206](https://github.com/openshift/cluster-api/pull/206)
* [OCPBUGS-33200](https://issues.redhat.com/browse/OCPBUGS-33200): Bump protobuf to v1.33.0 [#204](https://github.com/openshift/cluster-api/pull/204)
* [Full changelog](https://github.com/openshift/cluster-api/compare/932dc9b2858c53811f4a346f6a4b90ede870da88...2053e13cb0fda9188e9b685db83c1e1f492e6efa)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/f92ff8fe0ea217ec314abe3506a2bc396760cdab)

* [OCPBUGS-33547](https://issues.redhat.com/browse/OCPBUGS-33547): update azure and ash tolerations on node manager [#343](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/343)
* Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC [#339](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/339)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a125bc59fe576ad165c800badd90a93aba99c154...f92ff8fe0ea217ec314abe3506a2bc396760cdab)


### [cluster-config-api](https://github.com/openshift/api/tree/6eb7973a3a45d41a8157d5629c2b3b025dfe799c)

* [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Ingress - add connect timeout to tuning options [#1937](https://github.com/openshift/api/pull/1937)
* [OCPBUGS-35214](https://issues.redhat.com/browse/OCPBUGS-35214): [Release 4-15] Add transit switch config to 4.15 [#1872](https://github.com/openshift/api/pull/1872)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add UnservableInFutureVersions route status condition type [#1751](https://github.com/openshift/api/pull/1751)
* [Full changelog](https://github.com/openshift/api/compare/4511c790cc60bf2a0393c34739cf9e71d1648b39...6eb7973a3a45d41a8157d5629c2b3b025dfe799c)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)

* [OCPBUGS-36151](https://issues.redhat.com/browse/OCPBUGS-36151): Set required-scc for openshift workloads [#420](https://github.com/openshift/cluster-config-operator/pull/420)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/ceadbc115582047a3836a62e488f9692e336c71b...0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/603c1bcc1574dc9119ca03ef04c91a8c350877d2)

* [OCPBUGS-34971](https://issues.redhat.com/browse/OCPBUGS-34971): Add unreadyNodeGracePeriod for allowing brief node hiccups [#299](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/299)
* [OCPBUGS-35496](https://issues.redhat.com/browse/OCPBUGS-35496): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#308](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/308)
* [OCPBUGS-35255](https://issues.redhat.com/browse/OCPBUGS-35255): Improved debugging of API listing errors [#301](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/301)
* [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec [#290](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/290)
* [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. [#289](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/289)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/673e7da36cad22402065e2952b4e06aff0cb9c99...603c1bcc1574dc9119ca03ef04c91a8c350877d2)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/65dbb12b710b7126f662f5f7f2d8272f9f6868cc)

* [OCPBUGS-36377](https://issues.redhat.com/browse/OCPBUGS-36377): Set required-scc for openshift workloads [#211](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/211)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/87d7080a91e9247c9fde6c3e2d9e222c23df541e...65dbb12b710b7126f662f5f7f2d8272f9f6868cc)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/49290d7db2194df73dfaeb1e719580dabf166690)

* [OCPBUGS-32093](https://issues.redhat.com/browse/OCPBUGS-32093): Add RBAC related to featuregates to fix hypershift upgrade [#407](https://github.com/openshift/cluster-dns-operator/pull/407)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002...49290d7db2194df73dfaeb1e719580dabf166690)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b72a596d1f588da8eca821f28f286dfd609691d1)

* [OCPBUGS-33564](https://issues.redhat.com/browse/OCPBUGS-33564): return errors in wait-for-ceo [#1261](https://github.com/openshift/cluster-etcd-operator/pull/1261)
* [OCPBUGS-32952](https://issues.redhat.com/browse/OCPBUGS-32952): remove etcd-health-probe log [#1257](https://github.com/openshift/cluster-etcd-operator/pull/1257)
* [OCPBUGS-31942](https://issues.redhat.com/browse/OCPBUGS-31942): update golang x net [#1253](https://github.com/openshift/cluster-etcd-operator/pull/1253)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2d52772e63a9acab4abc27f30701bd214ea20ba2...b72a596d1f588da8eca821f28f286dfd609691d1)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/8740a71e7cf43de2b0ed1db3d7ba324a4588ec67)

* [OCPBUGS-36036](https://issues.redhat.com/browse/OCPBUGS-36036): go.*,vendor: bump go-retryablehttp [#1068](https://github.com/openshift/cluster-image-registry-operator/pull/1068)
* [OCPBUGS-34571](https://issues.redhat.com/browse/OCPBUGS-34571): azure-path-fix: get client secret from k8s secret [#1049](https://github.com/openshift/cluster-image-registry-operator/pull/1049)
* [OCPBUGS-34539](https://issues.redhat.com/browse/OCPBUGS-34539): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1048](https://github.com/openshift/cluster-image-registry-operator/pull/1048)
* [OCPBUGS-33208](https://issues.redhat.com/browse/OCPBUGS-33208): azurepathfix: check if platform status is nil before accessing it [#1031](https://github.com/openshift/cluster-image-registry-operator/pull/1031)
* [OCPBUGS-32396](https://issues.redhat.com/browse/OCPBUGS-32396): azure-path-fix: support auth via account key (without clientID) [#1022](https://github.com/openshift/cluster-image-registry-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/6c63738679041b32bdb630ab9402d5e07413e6fa...8740a71e7cf43de2b0ed1db3d7ba324a4588ec67)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0928822bf67774af6798b218bff54ff5d14594cd)

* [OCPBUGS-36466](https://issues.redhat.com/browse/OCPBUGS-36466): Allow operator to update Route spec.subdomain [#1100](https://github.com/openshift/cluster-ingress-operator/pull/1100)
* [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Implement connect timeout tuning option [#1097](https://github.com/openshift/cluster-ingress-operator/pull/1097)
* [OCPBUGS-36279](https://issues.redhat.com/browse/OCPBUGS-36279): Add Regexp Anchor to TestAll [#1096](https://github.com/openshift/cluster-ingress-operator/pull/1096)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Prevent upgrades for SHA1 default cert and SHA1 route certs [#1014](https://github.com/openshift/cluster-ingress-operator/pull/1014)
* [OCPBUGS-35028](https://issues.redhat.com/browse/OCPBUGS-35028): internalServiceChanged: Fix target port logic [#1081](https://github.com/openshift/cluster-ingress-operator/pull/1081)
* [OCPBUGS-34887](https://issues.redhat.com/browse/OCPBUGS-34887): TestHostNetworkPortBinding: Delete t.Parallel() [#1075](https://github.com/openshift/cluster-ingress-operator/pull/1075)
* [OCPBUGS-34252](https://issues.redhat.com/browse/OCPBUGS-34252): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1058](https://github.com/openshift/cluster-ingress-operator/pull/1058)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/0106cb99b340a2f266a88700b4250f11457ffb05...0928822bf67774af6798b218bff54ff5d14594cd)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/62a9eff944bfbdc1b4e79332fe4d8ae2df053c8c)

* [OCPBUGS-35832](https://issues.redhat.com/browse/OCPBUGS-35832): add SNO control plane high cpu usage alert [#1706](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1706)
* [OCPBUGS-29361](https://issues.redhat.com/browse/OCPBUGS-29361): operator: stop removing kube-apiserver-slos asset [#1643](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1643)
* [OCPBUGS-34492](https://issues.redhat.com/browse/OCPBUGS-34492): Create one-shot migrations for the flowcontrol group. [#1692](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1692)
* [OCPBUGS-33697](https://issues.redhat.com/browse/OCPBUGS-33697): add a controller that reconciles SCCs' volumes [#1679](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1679)
* [OCPBUGS-33277](https://issues.redhat.com/browse/OCPBUGS-33277): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1672](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1672)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f5c5a609fa5e318379ceb86d346122814dc81762...62a9eff944bfbdc1b4e79332fe4d8ae2df053c8c)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e76cea5f52bd5a125d051c6a0da4127a4dae6700)

* [OCPBUGS-36322](https://issues.redhat.com/browse/OCPBUGS-36322): Set required-scc for openshift workloads [#112](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/112)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/37015e879a7ef647d7a953edea902d67e2ae91a7...e76cea5f52bd5a125d051c6a0da4127a4dae6700)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e5027e07235611e01542964c2ae34fe78bd7dc85)

* [OCPBUGS-37194](https://issues.redhat.com/browse/OCPBUGS-37194): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2413](https://github.com/openshift/cluster-monitoring-operator/pull/2413)
* [OCPBUGS-36312](https://issues.redhat.com/browse/OCPBUGS-36312): inject trusted CA bundle into UWM Alertmanager [#2400](https://github.com/openshift/cluster-monitoring-operator/pull/2400)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Ipsec state backport [#2384](https://github.com/openshift/cluster-monitoring-operator/pull/2384)
* [OCPBUGS-33512](https://issues.redhat.com/browse/OCPBUGS-33512): fix Thanos ruler alert generator url [#2343](https://github.com/openshift/cluster-monitoring-operator/pull/2343)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/00d04f5da7e32672bac56330acba9434046275af...e5027e07235611e01542964c2ae34fe78bd7dc85)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/3a06784187564c89dffbc0dd9378fb4feaa03005)

* [OCPBUGS-34809](https://issues.redhat.com/browse/OCPBUGS-34809): Ensure that the node-identity webhook address contains colons for IPv6 [#2396](https://github.com/openshift/cluster-network-operator/pull/2396)
* [OCPBUGS-36347](https://issues.redhat.com/browse/OCPBUGS-36347): Create the configmap mtu if not found [#2426](https://github.com/openshift/cluster-network-operator/pull/2426)
* [OCPBUGS-36499](https://issues.redhat.com/browse/OCPBUGS-36499): [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) [#2375](https://github.com/openshift/cluster-network-operator/pull/2375)
* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): update whereabouts crd [#2427](https://github.com/openshift/cluster-network-operator/pull/2427)
* [OCPBUGS-32989](https://issues.redhat.com/browse/OCPBUGS-32989): Add conditions for ignored-namespaces [#2379](https://github.com/openshift/cluster-network-operator/pull/2379)
* [OCPBUGS-29739](https://issues.redhat.com/browse/OCPBUGS-29739): Run dhcp-daemon pods as system-node-critical priority [#2283](https://github.com/openshift/cluster-network-operator/pull/2283)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Add ipsec state metric [#2389](https://github.com/openshift/cluster-network-operator/pull/2389)
* [OCPBUGS-32515](https://issues.redhat.com/browse/OCPBUGS-32515): Fix wait logic for IPsec certificate signing request [#2348](https://github.com/openshift/cluster-network-operator/pull/2348)
* [OCPBUGS-29092](https://issues.redhat.com/browse/OCPBUGS-29092): Add probes to node-network-identity [#2253](https://github.com/openshift/cluster-network-operator/pull/2253)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a62442bbb2ee777e3715f57af6dd87f333e0e20a...3a06784187564c89dffbc0dd9378fb4feaa03005)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/57de920ca72f1e06cb78b8df3baeace1f4e64657)

* [OCPBUGS-36355](https://issues.redhat.com/browse/OCPBUGS-36355): Backport fix for OCPBUGS-30647 (#1095) [#1095](https://github.com/openshift/cluster-node-tuning-operator/pull/1095)
* [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1066) [#1066](https://github.com/openshift/cluster-node-tuning-operator/pull/1066)
* Add a '.snyk' to silence static code analysis warnings (#1001) [#1001](https://github.com/openshift/cluster-node-tuning-operator/pull/1001)
* fix extra-reboot on upgrade with paused mcp worker (#1049) [#1049](https://github.com/openshift/cluster-node-tuning-operator/pull/1049)
* fix rendering extra ctrcfgs (#975) [#975](https://github.com/openshift/cluster-node-tuning-operator/pull/975)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes  (#1012) (#1043) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/23d472a67cbc11202031058500ee2c918e600517...57de920ca72f1e06cb78b8df3baeace1f4e64657)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/078c81f6e3e39675e8b1edd864e1ddf72472bb73)

* [OCPBUGS-36150](https://issues.redhat.com/browse/OCPBUGS-36150): Set required-scc for openshift workloads [#581](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/581)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/74013916aadbe6a18ac06e93c0ff72e8735a9668...078c81f6e3e39675e8b1edd864e1ddf72472bb73)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/45d342cb8ecde4e2fe51ceb613827fb3d219b8a0)

* [OCPBUGS-36152](https://issues.redhat.com/browse/OCPBUGS-36152): Set required-scc for openshift workloads [#361](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/361)
* [OCPBUGS-31708](https://issues.redhat.com/browse/OCPBUGS-31708): Update opentelemetry dependency 415 [#342](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/342)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e9845aab67730c8b6b9225d0a27f082b8640b139...45d342cb8ecde4e2fe51ceb613827fb3d219b8a0)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98)

* [OCPBUGS-36374](https://issues.redhat.com/browse/OCPBUGS-36374): Set required-scc for openshift workloads [#484](https://github.com/openshift/cluster-storage-operator/pull/484)
* [OCPBUGS-33466](https://issues.redhat.com/browse/OCPBUGS-33466): Fix problem-detector proxy setting [#471](https://github.com/openshift/cluster-storage-operator/pull/471)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1a2443a7fe8a00597f8c19382fb8ce617943029c...4c2b89d6a00e5a0c300b61dbad2a9e289c404e98)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cb586f43f568a6d156933fcda4486fc310a25806)

* [OCPBUGS-36817](https://issues.redhat.com/browse/OCPBUGS-36817): Set required-scc for openshift workloads [#1068](https://github.com/openshift/cluster-version-operator/pull/1068)
* [OCPBUGS-33984](https://issues.redhat.com/browse/OCPBUGS-33984): Add admin-gate for OCP 4.16 [#1049](https://github.com/openshift/cluster-version-operator/pull/1049)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/705f11a24965df33c4c3ae69147c0215e2109208...cb586f43f568a6d156933fcda4486fc310a25806)


### [console](https://github.com/openshift/console/tree/11a52c943627822d9223b8e377d1ad5995d88874)

* [OCPBUGS-34477](https://issues.redhat.com/browse/OCPBUGS-34477): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13897](https://github.com/openshift/console/pull/13897)
* [OCPBUGS-36971](https://issues.redhat.com/browse/OCPBUGS-36971): ensure correct API version for OperandDetails [#14058](https://github.com/openshift/console/pull/14058)
* [OCPBUGS-34912](https://issues.redhat.com/browse/OCPBUGS-34912): Improve Pipeline list page performance [#13929](https://github.com/openshift/console/pull/13929)
* [OCPBUGS-33642](https://issues.redhat.com/browse/OCPBUGS-33642): Patch PF dynamic module parser to exclude 'next' modules [#13849](https://github.com/openshift/console/pull/13849)
* [OCPBUGS-32501](https://issues.redhat.com/browse/OCPBUGS-32501): Pipeline details page Metrics tab crashed due to no custom data [#13781](https://github.com/openshift/console/pull/13781)
* [OCPBUGS-34478](https://issues.redhat.com/browse/OCPBUGS-34478): UI inconsistency in topology when application grouping is collapsed [#13898](https://github.com/openshift/console/pull/13898)
* [OCPBUGS-34350](https://issues.redhat.com/browse/OCPBUGS-34350): Create Serverless form does not create BuildConfig [#13891](https://github.com/openshift/console/pull/13891)
* [OCPBUGS-32029](https://issues.redhat.com/browse/OCPBUGS-32029): Use UserInfo username field when logging out as kubeadmin [#13748](https://github.com/openshift/console/pull/13748)
* [OCPBUGS-30208](https://issues.redhat.com/browse/OCPBUGS-30208): Fix asynccache bugs [#13807](https://github.com/openshift/console/pull/13807)
* [OCPBUGS-33838](https://issues.redhat.com/browse/OCPBUGS-33838): TaskRuns should not be fetched for Failed PLR's [#13863](https://github.com/openshift/console/pull/13863)
* [OCPBUGS-34703](https://issues.redhat.com/browse/OCPBUGS-34703): fix bug where textarea is not resizable [#13913](https://github.com/openshift/console/pull/13913)
* Revert "OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters" [#13905](https://github.com/openshift/console/pull/13905)
* [OCPBUGS-33263](https://issues.redhat.com/browse/OCPBUGS-33263): Pipeline list page is crashed when navigating from Search page [#13819](https://github.com/openshift/console/pull/13819)
* [OCPBUGS-33166](https://issues.redhat.com/browse/OCPBUGS-33166): Fix NAD always on default namespace [#13865](https://github.com/openshift/console/pull/13865)
* [OCPBUGS-31863](https://issues.redhat.com/browse/OCPBUGS-31863): make sure folder is encapsulated with quotas [#13737](https://github.com/openshift/console/pull/13737)
* [OCPBUGS-33506](https://issues.redhat.com/browse/OCPBUGS-33506): Fix Pipeline details page with when expression using CEL expression [#13835](https://github.com/openshift/console/pull/13835)
* [OCPBUGS-32505](https://issues.redhat.com/browse/OCPBUGS-32505): Add visual connector between VMs and non VMs workloads [#13782](https://github.com/openshift/console/pull/13782)
* [OCPBUGS-33548](https://issues.redhat.com/browse/OCPBUGS-33548): restrict Masthead logo to max-height [#13839](https://github.com/openshift/console/pull/13839)
* [OCPBUGS-32497](https://issues.redhat.com/browse/OCPBUGS-32497): Improve Create serverless function error message [#13778](https://github.com/openshift/console/pull/13778)
* [OCPBUGS-33191](https://issues.redhat.com/browse/OCPBUGS-33191): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13810](https://github.com/openshift/console/pull/13810)
* [OCPBUGS-33058](https://issues.redhat.com/browse/OCPBUGS-33058): fix issues with Edit Route form [#13800](https://github.com/openshift/console/pull/13800)
* [OCPBUGS-32187](https://issues.redhat.com/browse/OCPBUGS-32187): Add flag to hide Output tab contributed by pipelines-plugin [#13756](https://github.com/openshift/console/pull/13756)
* [OCPBUGS-32716](https://issues.redhat.com/browse/OCPBUGS-32716): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13788](https://github.com/openshift/console/pull/13788)
* [OCPBUGS-32506](https://issues.redhat.com/browse/OCPBUGS-32506): setting correct image trigger annotation [#13783](https://github.com/openshift/console/pull/13783)
* [OCPBUGS-32933](https://issues.redhat.com/browse/OCPBUGS-32933): change OperatorHub filter FIPS Mode to Designed for FIPS [#13796](https://github.com/openshift/console/pull/13796)
* [OCPBUGS-31799](https://issues.redhat.com/browse/OCPBUGS-31799): Improve PipelineRun list view performance [#13731](https://github.com/openshift/console/pull/13731)
* [OCPBUGS-32796](https://issues.redhat.com/browse/OCPBUGS-32796): auth: fix OIDC logging out [#13793](https://github.com/openshift/console/pull/13793)
* [OCPBUGS-31445](https://issues.redhat.com/browse/OCPBUGS-31445): Upgrade Pipeline trigger resources to v1beta1 [#13704](https://github.com/openshift/console/pull/13704)
* [OCPBUGS-31045](https://issues.redhat.com/browse/OCPBUGS-31045): fix for execute inline markdown syntax issue [#13681](https://github.com/openshift/console/pull/13681)
* [OCPBUGS-32518](https://issues.redhat.com/browse/OCPBUGS-32518): Add warning about service binding operator will not be supported from 4.15 [#13784](https://github.com/openshift/console/pull/13784)
* [OCPBUGS-32391](https://issues.redhat.com/browse/OCPBUGS-32391): Routes created by devfiles do not always use HTTPS [#13771](https://github.com/openshift/console/pull/13771)
* [OCPBUGS-32340](https://issues.redhat.com/browse/OCPBUGS-32340): Increased max nodes limit to 200 in topology page [#13767](https://github.com/openshift/console/pull/13767)
* [OCPBUGS-32399](https://issues.redhat.com/browse/OCPBUGS-32399): Update devfile library to v2.2.2 [#13762](https://github.com/openshift/console/pull/13762)
* [OCPBUGS-32156](https://issues.redhat.com/browse/OCPBUGS-32156): TaskRun status is not displayed near the name [#13752](https://github.com/openshift/console/pull/13752)
* [OCPBUGS-31806](https://issues.redhat.com/browse/OCPBUGS-31806): Use bearer-token for local dev with auth [#13732](https://github.com/openshift/console/pull/13732)
* [Full changelog](https://github.com/openshift/console/compare/c1ff638267321608b72eeb9a54cde374182c93b4...11a52c943627822d9223b8e377d1ad5995d88874)


### [console-operator](https://github.com/openshift/console-operator/tree/94e41901dc8ee1578bf5f3dd6c74280bcae6c987)

* [OCPBUGS-31520](https://issues.redhat.com/browse/OCPBUGS-31520): oidc: synchronize the CM with a CA to trust the issuer, if configured [#881](https://github.com/openshift/console-operator/pull/881)
* [OCPBUGS-33720](https://issues.redhat.com/browse/OCPBUGS-33720): Add missing return statement to fix crash in healthcheck controller [#903](https://github.com/openshift/console-operator/pull/903)
* [OCPBUGS-31499](https://issues.redhat.com/browse/OCPBUGS-31499): Update RHDH QuickStarts and add CR examples [#880](https://github.com/openshift/console-operator/pull/880)
* [Full changelog](https://github.com/openshift/console-operator/compare/8c6ba1527878f057461930a939207628d303a4a6...94e41901dc8ee1578bf5f3dd6c74280bcae6c987)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/d85d23f2a68264f90ba4df99152f39701baabfff)

* [OCPBUGS-32246](https://issues.redhat.com/browse/OCPBUGS-32246): Remove enforcement of IPv6 LB as internal [#277](https://github.com/openshift/cloud-provider-openstack/pull/277)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1bec5942cd0651a3c2f7114368591f334952ceda...d85d23f2a68264f90ba4df99152f39701baabfff)


### [docker-builder](https://github.com/openshift/builder/tree/b98fb65efa75a8fbd8eefe70dbbf9decd65395a5)

* [OCPBUGS-32845](https://issues.redhat.com/browse/OCPBUGS-32845): bump go-jose to fix CVE-2024-28180 [#396](https://github.com/openshift/builder/pull/396)
* [Full changelog](https://github.com/openshift/builder/compare/67918658ae7d34e4f9472acba5150bfb3726f70d...b98fb65efa75a8fbd8eefe70dbbf9decd65395a5)


### [docker-registry](https://github.com/openshift/image-registry/tree/b9de67d83c9f850ed42317495b7b340109b3c9ac)

* [OCPBUGS-36287](https://issues.redhat.com/browse/OCPBUGS-36287): use SelfSubjectReview to obtain user info #406 [#406](https://github.com/openshift/image-registry/pull/406)
* [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): vendor: bump aws-sdk-go to support ca-west-1 [#396](https://github.com/openshift/image-registry/pull/396)
* [Full changelog](https://github.com/openshift/image-registry/compare/340eda0bfc9a86254d7f0f37cd6a5320779ecf81...b9de67d83c9f850ed42317495b7b340109b3c9ac)


### [etcd](https://github.com/openshift/etcd/tree/a7005ef1eae85eec6c59411860538169cea182fd)

* [OCPBUGS-32768](https://issues.redhat.com/browse/OCPBUGS-32768): Revert "OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15" [#264](https://github.com/openshift/etcd/pull/264)
* [Full changelog](https://github.com/openshift/etcd/compare/23e5492c2e174ac502ff6113957069da5a12dbf0...a7005ef1eae85eec6c59411860538169cea182fd)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/fc50272ac32348a96455688c470bf256b1042825)

* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update gcr-credential-provider.spec [#60](https://github.com/openshift/cloud-provider-gcp/pull/60)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/11c3aa8334a3d087187ace1f7d8ee3c2ce22434b...fc50272ac32348a96455688c470bf256b1042825)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/bad54034ed075b24ee8962661e78cfbd84a7dd0a)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#225](https://github.com/openshift/cluster-api-provider-gcp/pull/225)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/2c6bfd8150806c5ef16191f0aef86b7e74190a29...bad54034ed075b24ee8962661e78cfbd84a7dd0a)


### [haproxy-router](https://github.com/openshift/router/tree/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3)

* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Upgrade Validation plugin for SHA1 certs [#585](https://github.com/openshift/router/pull/585)
* [OCPBUGS-32977](https://issues.redhat.com/browse/OCPBUGS-32977): Count active services before setting weight to 1 [#586](https://github.com/openshift/router/pull/586)
* [OCPBUGS-32693](https://issues.redhat.com/browse/OCPBUGS-32693): Reject routes with MD5 certs [#584](https://github.com/openshift/router/pull/584)
* [OCPBUGS-32435](https://issues.redhat.com/browse/OCPBUGS-32435): Introduce 'idle-close-on-response' option for frontends [#579](https://github.com/openshift/router/pull/579)
* [OCPBUGS-31544](https://issues.redhat.com/browse/OCPBUGS-31544): Properly handle rewrite-target annotation [#569](https://github.com/openshift/router/pull/569)
* [Full changelog](https://github.com/openshift/router/compare/b7001137f832d02d4ed68cba27fe3001ff523fa6...dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/add48d0c4f679a95d1c06d80a00be54644bbdeaf)

* [OCPBUGS-35552](https://issues.redhat.com/browse/OCPBUGS-35552): Bump to Kubernetes v1.28.11 [#1994](https://github.com/openshift/kubernetes/pull/1994)
* [OCPBUGS-33711](https://issues.redhat.com/browse/OCPBUGS-33711): Bump to Kubernetes v1.28.10 [#1969](https://github.com/openshift/kubernetes/pull/1969)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#1962](https://github.com/openshift/kubernetes/pull/1962)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): UPSTREAM: <carry>: bump structured-merge-diff [#1893](https://github.com/openshift/kubernetes/pull/1893)
* [OCPBUGS-32299](https://issues.redhat.com/browse/OCPBUGS-32299): Bump  to k8s 1.28.9 [#1946](https://github.com/openshift/kubernetes/pull/1946)
* [Full changelog](https://github.com/openshift/kubernetes/compare/897457758819e01219db3268c4cad88b3c221c4c...add48d0c4f679a95d1c06d80a00be54644bbdeaf)


### [hypershift](https://github.com/openshift/hypershift/tree/7727cc2e73f07fda61fd2db4c287b1c9e0f21057)

* [OCPBUGS-37266](https://issues.redhat.com/browse/OCPBUGS-37266): extract rhel9 MCO binaries for rhel8 based MCO images [#4385](https://github.com/openshift/hypershift/pull/4385)
* [OCPBUGS-36606](https://issues.redhat.com/browse/OCPBUGS-36606): enable audit log for oauth-openshift [#4320](https://github.com/openshift/hypershift/pull/4320)
* [HOSTEDCP-1714](https://issues.redhat.com/browse/HOSTEDCP-1714): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 [#4178](https://github.com/openshift/hypershift/pull/4178)
* [OCPBUGS-35736](https://issues.redhat.com/browse/OCPBUGS-35736): Complete KAS migration to none endpoint reconciler type [#4228](https://github.com/openshift/hypershift/pull/4228)
* [OCPBUGS-35935](https://issues.redhat.com/browse/OCPBUGS-35935): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4265](https://github.com/openshift/hypershift/pull/4265)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4259](https://github.com/openshift/hypershift/pull/4259)
* [OCPBUGS-35714](https://issues.redhat.com/browse/OCPBUGS-35714): Generate default worker security group rules based on machineCIDR [#4266](https://github.com/openshift/hypershift/pull/4266)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4252](https://github.com/openshift/hypershift/pull/4252)
* [OCPBUGS-32404](https://issues.redhat.com/browse/OCPBUGS-32404): Fix failure to create a second hostedcluster in the same namespace [#3907](https://github.com/openshift/hypershift/pull/3907)
* NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) [#4246](https://github.com/openshift/hypershift/pull/4246)
* NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4231](https://github.com/openshift/hypershift/pull/4231)
* chore(deps): update konflux references to 2be7c9c (release-4.15) [#4224](https://github.com/openshift/hypershift/pull/4224)
* [OCPBUGS-34580](https://issues.redhat.com/browse/OCPBUGS-34580): Add TrustedBundles to OAS container [#4211](https://github.com/openshift/hypershift/pull/4211)
* NO-JIRA: hack: make the e2e script generic [#4199](https://github.com/openshift/hypershift/pull/4199)
* [OCPBUGS-33627](https://issues.redhat.com/browse/OCPBUGS-33627): Restrict image registry overrides to control plane components [#4131](https://github.com/openshift/hypershift/pull/4131)
* [OCPBUGS-34156](https://issues.redhat.com/browse/OCPBUGS-34156): fix router on 4.14 y-stream upgrade [#4077](https://github.com/openshift/hypershift/pull/4077)
* [OCPBUGS-35002](https://issues.redhat.com/browse/OCPBUGS-35002): [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller [#4162](https://github.com/openshift/hypershift/pull/4162)
* NO-JIRA: Update Konflux references to 1025001 (release-4.15) [#4180](https://github.com/openshift/hypershift/pull/4180)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4167](https://github.com/openshift/hypershift/pull/4167)
* [OCPBUGS-34997](https://issues.redhat.com/browse/OCPBUGS-34997): add AWS STS URL to OIDC provider audiences [#4157](https://github.com/openshift/hypershift/pull/4157)
* [OCPBUGS-35074](https://issues.redhat.com/browse/OCPBUGS-35074): Fix disconnected metadata inspection for nodepool [#4175](https://github.com/openshift/hypershift/pull/4175)
* [HOSTEDCP-1708](https://issues.redhat.com/browse/HOSTEDCP-1708): remove liveness and readiness probes that use the metrics [#4128](https://github.com/openshift/hypershift/pull/4128)
* [OCPBUGS-34423](https://issues.redhat.com/browse/OCPBUGS-34423): Fixed audit-logs sigterm failing to terminate gracefully [#4089](https://github.com/openshift/hypershift/pull/4089)
* [OCPBUGS-33526](https://issues.redhat.com/browse/OCPBUGS-33526): Disable DNS resolving for CNO [#4148](https://github.com/openshift/hypershift/pull/4148)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak cipher [#4156](https://github.com/openshift/hypershift/pull/4156)
* [OCPBUGS-34510](https://issues.redhat.com/browse/OCPBUGS-34510): Reconcile KAS endpoints and endpoint slice [#4097](https://github.com/openshift/hypershift/pull/4097)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4151](https://github.com/openshift/hypershift/pull/4151)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4120](https://github.com/openshift/hypershift/pull/4120)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4072](https://github.com/openshift/hypershift/pull/4072)
* [OCPBUGS-33510](https://issues.redhat.com/browse/OCPBUGS-33510): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4014](https://github.com/openshift/hypershift/pull/4014)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) [#4064](https://github.com/openshift/hypershift/pull/4064)
* NO-JIRA: Remove CLI inspection of release image [#4056](https://github.com/openshift/hypershift/pull/4056)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#4032](https://github.com/openshift/hypershift/pull/4032)
* NO-JIRA: Update RHTAP references (release-4.15) [#4041](https://github.com/openshift/hypershift/pull/4041)
* [OCPBUGS-33118](https://issues.redhat.com/browse/OCPBUGS-33118): Recycler-pod image now points to the OCP Payload reference [#3963](https://github.com/openshift/hypershift/pull/3963)
* [OCPBUGS-32220](https://issues.redhat.com/browse/OCPBUGS-32220): Fix disconnected metadata inspection [#3881](https://github.com/openshift/hypershift/pull/3881)
* NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) [#4030](https://github.com/openshift/hypershift/pull/4030)
* [OCPBUGS-33117](https://issues.redhat.com/browse/OCPBUGS-33117): Reconcile over ICSP/IDMS [#3962](https://github.com/openshift/hypershift/pull/3962)
* NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) [#4022](https://github.com/openshift/hypershift/pull/4022)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4017](https://github.com/openshift/hypershift/pull/4017)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support hypershift-operator scoping for hostedclusters [#3998](https://github.com/openshift/hypershift/pull/3998)
* Revert "[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable" [#3939](https://github.com/openshift/hypershift/pull/3939)
* [OCPBUGS-33207](https://issues.redhat.com/browse/OCPBUGS-33207): Remove kube-scheduler readiness probe [#3955](https://github.com/openshift/hypershift/pull/3955)
* NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) [#3989](https://github.com/openshift/hypershift/pull/3989)
* [OCPBUGS-25858](https://issues.redhat.com/browse/OCPBUGS-25858): Improve description for agent APIServerAddress CLI flag [#3977](https://github.com/openshift/hypershift/pull/3977)
* [OCPBUGS-33224](https://issues.redhat.com/browse/OCPBUGS-33224): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3976](https://github.com/openshift/hypershift/pull/3976)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3982](https://github.com/openshift/hypershift/pull/3982)
* [OCPBUGS-31747](https://issues.redhat.com/browse/OCPBUGS-31747): update desired image even when HCP doesn't exist yet [#3839](https://github.com/openshift/hypershift/pull/3839)
* NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) [#3974](https://github.com/openshift/hypershift/pull/3974)
* [OCPBUGS-32229](https://issues.redhat.com/browse/OCPBUGS-32229): disable autoscaler when no nodepool require it [#3884](https://github.com/openshift/hypershift/pull/3884)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3967](https://github.com/openshift/hypershift/pull/3967)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3957](https://github.com/openshift/hypershift/pull/3957)
* [OCPBUGS-31826](https://issues.redhat.com/browse/OCPBUGS-31826): use dnsPolicy: Default for konnectivity-agent in data plane [#3845](https://github.com/openshift/hypershift/pull/3845)
* NO-JIRA: Update RHTAP references (release-4.15) [#3935](https://github.com/openshift/hypershift/pull/3935)
* [OCPBUGS-32715](https://issues.redhat.com/browse/OCPBUGS-32715): Fix OLM intilization args [#3923](https://github.com/openshift/hypershift/pull/3923)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation [#3908](https://github.com/openshift/hypershift/pull/3908)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3921](https://github.com/openshift/hypershift/pull/3921)
* [OCPBUGS-32164](https://issues.redhat.com/browse/OCPBUGS-32164): Fix ICSP and IDMS inclusion as registriesOverrides [#3870](https://github.com/openshift/hypershift/pull/3870)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3904](https://github.com/openshift/hypershift/pull/3904)
* [OCPBUGS-30280](https://issues.redhat.com/browse/OCPBUGS-30280): Switch to use service endpoint for Konnectivity [#3692](https://github.com/openshift/hypershift/pull/3692)
* [OCPBUGS-32191](https://issues.redhat.com/browse/OCPBUGS-32191): Kas disable audit cherry pick release 4.15 [#3875](https://github.com/openshift/hypershift/pull/3875)
* [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): Add new permission required in CAPA [#3861](https://github.com/openshift/hypershift/pull/3861)
* [Full changelog](https://github.com/openshift/hypershift/compare/aa5642aada236362b5d6c77e7d013ed60051c662...7727cc2e73f07fda61fd2db4c287b1c9e0f21057)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d)

* [OCPBUGS-36066](https://issues.redhat.com/browse/OCPBUGS-36066): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#72](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ce7f53cdf24173b0625b9263ef38a8ed956adcd2...81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/df0f1f6443e23009afbafe88b22d9b3440dff4b8)

* [OCPBUGS-36072](https://issues.redhat.com/browse/OCPBUGS-36072): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#121](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/121)
* [OCPBUGS-33641](https://issues.redhat.com/browse/OCPBUGS-33641): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#116](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/116)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/516264a98d130f9f2a03b20acf33dcc1b556e6a8...df0f1f6443e23009afbafe88b22d9b3440dff4b8)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/5d72ced58e4ff3c4d4ad02f181578755dfa0312a)

* [OCPBUGS-36012](https://issues.redhat.com/browse/OCPBUGS-36012): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#41](https://github.com/openshift/ibm-vpc-node-label-updater/pull/41)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/e1a0adca08158691dd1e5b1a834741ceea6a6f8b...5d72ced58e4ff3c4d4ad02f181578755dfa0312a)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7d3c4268c3b103c3b912d4fe559c68321d8753de)

* manifests: set required-scc for openshift workloads (#967) [#967](https://github.com/openshift/insights-operator/pull/967)
* [OCPBUGS-35882](https://issues.redhat.com/browse/OCPBUGS-35882): properly encode the URL for the advisor links (#958) [#958](https://github.com/openshift/insights-operator/pull/958)
* [OCPBUGS-35865](https://issues.redhat.com/browse/OCPBUGS-35865): Collect aggregated Prometheus Alertmanager instances (#950) [#950](https://github.com/openshift/insights-operator/pull/950)
* [OCPBUGS-32702](https://issues.redhat.com/browse/OCPBUGS-32702): anonymization - externalIP can be nil (#931) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31946](https://issues.redhat.com/browse/OCPBUGS-31946): bump golang.org/x/net version (#925) [#925](https://github.com/openshift/insights-operator/pull/925)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a6923466398b283a68b78fad9b1f2c5ccf9eaded...7d3c4268c3b103c3b912d4fe559c68321d8753de)


### [ironic](https://github.com/openshift/ironic-image/tree/ea6d00548f4b23699d277656e6e0af3e71e45783)

* [OCPBUGS-37113](https://issues.redhat.com/browse/OCPBUGS-37113): Update eventlet version [#523](https://github.com/openshift/ironic-image/pull/523)
* Bug OCPBUGS-33736: Disable installation of .pyc files through pip [#511](https://github.com/openshift/ironic-image/pull/511)
* [OCPBUGS-32365](https://issues.redhat.com/browse/OCPBUGS-32365): [4.15] Remove unused prometheus exporter [#485](https://github.com/openshift/ironic-image/pull/485)
* [OCPBUGS-32351](https://issues.redhat.com/browse/OCPBUGS-32351): [4.15] Update to include fixes for ironic servicing feature [#479](https://github.com/openshift/ironic-image/pull/479)
* [OCPBUGS-32389](https://issues.redhat.com/browse/OCPBUGS-32389): Use unix sockets by default for reverse proxy communication [#474](https://github.com/openshift/ironic-image/pull/474)
* [OCPBUGS-31686](https://issues.redhat.com/browse/OCPBUGS-31686), [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802), [OCPBUGS-31830](https://issues.redhat.com/browse/OCPBUGS-31830): [4.15] install ironic projects from source [#470](https://github.com/openshift/ironic-image/pull/470)
* [Full changelog](https://github.com/openshift/ironic-image/compare/ff44e3e6fcbf9c3b8e42a82721e0758bf93b2777...ea6d00548f4b23699d277656e6e0af3e71e45783)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4f8c828af122ab56ba97ba02467e3c306e8bfd1d)

* [OCPBUGS-33133](https://issues.redhat.com/browse/OCPBUGS-33133): update ironic-lib with latest fixes [#131](https://github.com/openshift/ironic-agent-image/pull/131)
* [OCPBUGS-32173](https://issues.redhat.com/browse/OCPBUGS-32173): [4.15] Fix name in setup.cfg [#123](https://github.com/openshift/ironic-agent-image/pull/123)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add makefile [#126](https://github.com/openshift/ironic-agent-image/pull/126)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Install ironic-python-agent from source [#125](https://github.com/openshift/ironic-agent-image/pull/125)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/3c7c7448f6009555b9d27fce5962483721b39c6d...4f8c828af122ab56ba97ba02467e3c306e8bfd1d)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/27f169500584b0909270d1775f5da295bc212e3e)

* [OCPBUGS-30413](https://issues.redhat.com/browse/OCPBUGS-30413): update unit tests in egress/dns-proxy [#168](https://github.com/openshift/images/pull/168)
* [Full changelog](https://github.com/openshift/images/compare/5d1de7f1b00d8517ba5c4b5b635fc60b954f2bff...27f169500584b0909270d1775f5da295bc212e3e)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/ad9fdfd5640f166da06ad96aa34f8fcc4c19f6f6)

* [OCPBUGS-31949](https://issues.redhat.com/browse/OCPBUGS-31949): Update x/net to v0.24.0 [#1231](https://github.com/openshift/machine-api-operator/pull/1231)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/cca4fabc5ed37c6d3ee14019f8191655ab73cc6f...ad9fdfd5640f166da06ad96aa34f8fcc4c19f6f6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b730129374d90da5a32235fd104fba6385f4b3a9)

* [OCPBUGS-36863](https://issues.redhat.com/browse/OCPBUGS-36863): Copy RHEL9 binaries used in HCP [#4476](https://github.com/openshift/machine-config-operator/pull/4476)
* [OCPBUGS-35220](https://issues.redhat.com/browse/OCPBUGS-35220): Check both ready and health ingress endpoints [#4398](https://github.com/openshift/machine-config-operator/pull/4398)
* [OCPBUGS-30139](https://issues.redhat.com/browse/OCPBUGS-30139): [release-4.15] Use NM's dns-change event for resolv.conf [#4220](https://github.com/openshift/machine-config-operator/pull/4220)
* [OCPBUGS-36769](https://issues.redhat.com/browse/OCPBUGS-36769): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4461](https://github.com/openshift/machine-config-operator/pull/4461)
* [OCPBUGS-36550](https://issues.redhat.com/browse/OCPBUGS-36550): MCD-pull: run after network-online.target in Azure [#4454](https://github.com/openshift/machine-config-operator/pull/4454)
* [OCPBUGS-27436](https://issues.redhat.com/browse/OCPBUGS-27436): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4431](https://github.com/openshift/machine-config-operator/pull/4431)
* [OCPBUGS-36258](https://issues.redhat.com/browse/OCPBUGS-36258): daemon/update: disable systemd unit before overwriting [#4441](https://github.com/openshift/machine-config-operator/pull/4441)
* [OCPBUGS-32092](https://issues.redhat.com/browse/OCPBUGS-32092): Decrease logs of haproxy [#4313](https://github.com/openshift/machine-config-operator/pull/4313)
* [OCPBUGS-35010](https://issues.redhat.com/browse/OCPBUGS-35010): set required-scc for openshift workloads [#4393](https://github.com/openshift/machine-config-operator/pull/4393)
* [OCPBUGS-31461](https://issues.redhat.com/browse/OCPBUGS-31461): Remove weights from ingress check script [#4290](https://github.com/openshift/machine-config-operator/pull/4290)
* [OCPBUGS-33847](https://issues.redhat.com/browse/OCPBUGS-33847): If multiple hostnames are returned, use the first one for the Node name [#4373](https://github.com/openshift/machine-config-operator/pull/4373)
* [OCPBUGS-20152](https://issues.redhat.com/browse/OCPBUGS-20152): Don't error if the certs.d dir doesn't exist yet [#4358](https://github.com/openshift/machine-config-operator/pull/4358)
* [OCPBUGS-32922](https://issues.redhat.com/browse/OCPBUGS-32922): [release-4.15] add cluster fleet evaluation support to mco [#4334](https://github.com/openshift/machine-config-operator/pull/4334)
* [OCPBUGS-28926](https://issues.redhat.com/browse/OCPBUGS-28926): [4.15] crio: update pids limit to be -1 [#4163](https://github.com/openshift/machine-config-operator/pull/4163)
* [OCPBUGS-28545](https://issues.redhat.com/browse/OCPBUGS-28545): Delete state files on reboot only [#4311](https://github.com/openshift/machine-config-operator/pull/4311)
* [OCPBUGS-31820](https://issues.redhat.com/browse/OCPBUGS-31820): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4309](https://github.com/openshift/machine-config-operator/pull/4309)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/42c78fa578f813bdcf59f30a919d021d7db0bc82...b730129374d90da5a32235fd104fba6385f4b3a9)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/53c186206d94508b2aec4c5af5e112b79d5f67d1)

* [OU-417](https://issues.redhat.com/browse/OU-417): throw an error when a custom datasource is not found [#118](https://github.com/openshift/monitoring-plugin/pull/118)
* [OU-415](https://issues.redhat.com/browse/OU-415): Add datasource parameter to handle metrics from custom datasources [#116](https://github.com/openshift/monitoring-plugin/pull/116)
* [OCPBUGS-32097](https://issues.redhat.com/browse/OCPBUGS-32097): make createdBy mandatory and auto fill with the current user [#115](https://github.com/openshift/monitoring-plugin/pull/115)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/e8f7503dc57f4d3ab146b119f2a95e4261636aef...53c186206d94508b2aec4c5af5e112b79d5f67d1)


### [multus-cni](https://github.com/openshift/multus-cni/tree/05497ad135c629de9b4ffb0a13fb91d58a335d25)

* [OCPBUGS-35047](https://issues.redhat.com/browse/OCPBUGS-35047): Update owners file [#240](https://github.com/openshift/multus-cni/pull/240)
* [OCPBUGS-35258](https://issues.redhat.com/browse/OCPBUGS-35258): Thick plugin should not wait for API readiness on CNI DEL [#242](https://github.com/openshift/multus-cni/pull/242)
* [OCPBUGS-33477](https://issues.redhat.com/browse/OCPBUGS-33477): Fix CNI cache update function to prevent nil access [#234](https://github.com/openshift/multus-cni/pull/234)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c9b9d67151be0a551fdab4d3575ea5bb6676ec8b...05497ad135c629de9b4ffb0a13fb91d58a335d25)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/8cb2e1072bb7f595fa36748b3d9fc578c341c30e)

* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): [release-4.15] Return previous IP allocation for add cmd [#295](https://github.com/openshift/whereabouts-cni/pull/295)
* [OCPBUGS-35081](https://issues.redhat.com/browse/OCPBUGS-35081): [release-4.15] Use IP to identify orphaned allocation to be deleted [#288](https://github.com/openshift/whereabouts-cni/pull/288)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2edc45fe57cc6c861f8014fdc514ca03442fde17...8cb2e1072bb7f595fa36748b3d9fc578c341c30e)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9e21740225af47318a9ed6d03c2eb9ee2aaea883)

* Correct 4.16 owners file (#99) [#99](https://github.com/openshift/network-metrics-daemon/pull/99)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/0288f3620532f481ce258f5169b42a67b7f9a0cb...9e21740225af47318a9ed6d03c2eb9ee2aaea883)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb)

* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#114](https://github.com/openshift/oauth-apiserver/pull/114)
* [OCPBUGS-31951](https://issues.redhat.com/browse/OCPBUGS-31951): bump x/net to 0.24.0 [#109](https://github.com/openshift/oauth-apiserver/pull/109)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/34756b67ae1ce1307d07bd1834579de1e4b47f17...0e158441dbfdf232d7fea50b7c4eae3023d2cdbb)


### [oauth-server](https://github.com/openshift/oauth-server/tree/c055dbb9a84e04575ade106e9a43cc638a8aeaef)

* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#148](https://github.com/openshift/oauth-server/pull/148)
* [Full changelog](https://github.com/openshift/oauth-server/compare/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5...c055dbb9a84e04575ade106e9a43cc638a8aeaef)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91f573c771182f7fd4a2d3513ed49562dee6b38)

* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#866) [#866](https://github.com/openshift/oc-mirror/pull/866)
* [OCPBUGS-33575](https://issues.redhat.com/browse/OCPBUGS-33575): Change default behavior to not rebuild catalogs for V1 (#849) [#849](https://github.com/openshift/oc-mirror/pull/849)
* [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#846) [#846](https://github.com/openshift/oc-mirror/pull/846)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/85c8f6fe1a8fcf06741773d64a7551dc208482fb...e91f573c771182f7fd4a2d3513ed49562dee6b38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/08f4c422eed5d9584799244c0d9755708686c0c8)

* [OCPBUGS-32444](https://issues.redhat.com/browse/OCPBUGS-32444): Bump golang/x/net to v0.23.0 [#428](https://github.com/openshift/openshift-apiserver/pull/428)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Bump openshift/api to get updated docs for UnservableInFutureVersions [#436](https://github.com/openshift/openshift-apiserver/pull/436)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3fcf512c9e830870a3b55499cc0556f4f85d8e68...08f4c422eed5d9584799244c0d9755708686c0c8)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/104b9ece0feb24da89fa6b87d90d60dd27fce813)

* [OCPBUGS-32807](https://issues.redhat.com/browse/OCPBUGS-32807), [OCPBUGS-33371](https://issues.redhat.com/browse/OCPBUGS-33371): Rollback state of managed image pull secrets after downgrade [#303](https://github.com/openshift/openshift-controller-manager/pull/303)
* [OCPBUGS-31490](https://issues.redhat.com/browse/OCPBUGS-31490): Bumps opentelemetry dependencies [#294](https://github.com/openshift/openshift-controller-manager/pull/294)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/edbf7353e21a286cac85867ec13d6cf937dd9c33...104b9ece0feb24da89fa6b87d90d60dd27fce813)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d0c24077b4e4ac1e00a6a529a814066cd9b5521c)

* [OCPBUGS-36586](https://issues.redhat.com/browse/OCPBUGS-36586): Add config map hooks [#175](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/175)
* [OCPBUGS-34927](https://issues.redhat.com/browse/OCPBUGS-34927): Correct out-of-bounds check [#172](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/172)
* [OCPBUGS-32744](https://issues.redhat.com/browse/OCPBUGS-32744): Relax requirement to enable topology [#165](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/165)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80...d0c24077b4e4ac1e00a6a529a814066cd9b5521c)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/396a09fffe401679f18e8a7db56c77bbf2dee246)

* [OCPBUGS-34665](https://issues.redhat.com/browse/OCPBUGS-34665): Failure to get bootstrap is non-fatal [#120](https://github.com/openshift/machine-api-provider-openstack/pull/120)
* [OCPBUGS-30857](https://issues.redhat.com/browse/OCPBUGS-30857): Ensure portSecurity is correctly set in the Port [#108](https://github.com/openshift/machine-api-provider-openstack/pull/108)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/43ce419f4dc7bd7edc6a8bdc676c10fd3b97e08e...396a09fffe401679f18e8a7db56c77bbf2dee246)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/28befe20a9f97db2a4a47c655b483de3197622da)

* [OCPBUGS-36451](https://issues.redhat.com/browse/OCPBUGS-36451): Can't install operator on 4.15 after uninstalling it on a prior version [#810](https://github.com/openshift/operator-framework-olm/pull/810)
* [OCPBUGS-36813](https://issues.redhat.com/browse/OCPBUGS-36813): [CARRY] perform operator apiService certificate validity checks directly [#819](https://github.com/openshift/operator-framework-olm/pull/819)
* [OCPBUGS-35305](https://issues.redhat.com/browse/OCPBUGS-35305): [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node [#779](https://github.com/openshift/operator-framework-olm/pull/779)
* [OCPBUGS-35720](https://issues.redhat.com/browse/OCPBUGS-35720): Warn and allow CRD upgrade if validation fails but webhook is specified [#789](https://github.com/openshift/operator-framework-olm/pull/789)
* [OCPBUGS-31939](https://issues.redhat.com/browse/OCPBUGS-31939), [OCPBUGS-31940](https://issues.redhat.com/browse/OCPBUGS-31940): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#747](https://github.com/openshift/operator-framework-olm/pull/747)
* [OCPBUGS-35229](https://issues.redhat.com/browse/OCPBUGS-35229): Unblock CI [#768](https://github.com/openshift/operator-framework-olm/pull/768)
* [OCPBUGS-32860](https://issues.redhat.com/browse/OCPBUGS-32860): UPSTREAM: <carry>: bump go-jose [#740](https://github.com/openshift/operator-framework-olm/pull/740)
* [OCPBUGS-32311](https://issues.redhat.com/browse/OCPBUGS-32311): [release-4.15]: Update if AlreadyExists [#736](https://github.com/openshift/operator-framework-olm/pull/736)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/764c6fed4b0f181541a5af7e9d35b1e0532a2c68...28befe20a9f97db2a4a47c655b483de3197622da)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f36a1bd8759b1d36fe81830457e0743a1f84d7b)

* [OCPBUGS-32060](https://issues.redhat.com/browse/OCPBUGS-32060): update golang.org/x/net for CVE-2023-45288 [#564](https://github.com/operator-framework/operator-marketplace/pull/564)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/53c124a3f0edfd151652e1f23c87dd39ed7646bb...3f36a1bd8759b1d36fe81830457e0743a1f84d7b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e460a139450a9319e05014005738531a12016bd2)

* [OCPBUGS-35902](https://issues.redhat.com/browse/OCPBUGS-35902): Bump ovn to 23.09.4-16 [#2216](https://github.com/openshift/ovn-kubernetes/pull/2216)
* [OCPBUGS-36382](https://issues.redhat.com/browse/OCPBUGS-36382): Handle IP fragments in SGW mode [#2215](https://github.com/openshift/ovn-kubernetes/pull/2215)
* [OCPBUGS-33619](https://issues.redhat.com/browse/OCPBUGS-33619): EgressIP: Reload certificates for the grpc heatlhcheck server [#2167](https://github.com/openshift/ovn-kubernetes/pull/2167)
* [OCPBUGS-33623](https://issues.redhat.com/browse/OCPBUGS-33623), [OCPBUGS-33624](https://issues.redhat.com/browse/OCPBUGS-33624): Improve CI signal by removing/suppressing signals [#2168](https://github.com/openshift/ovn-kubernetes/pull/2168)
* [OCPBUGS-31814](https://issues.redhat.com/browse/OCPBUGS-31814): ipv6+all protocols conntrack flush [#2131](https://github.com/openshift/ovn-kubernetes/pull/2131)
* [OCPBUGS-34404](https://issues.redhat.com/browse/OCPBUGS-34404): [release-4.15] dns: fix deadlock in case of error [#2182](https://github.com/openshift/ovn-kubernetes/pull/2182)
* [OCPBUGS-33294](https://issues.redhat.com/browse/OCPBUGS-33294): Reuse node-subnet from cache if exists [#2163](https://github.com/openshift/ovn-kubernetes/pull/2163)
* [OCPBUGS-33960](https://issues.redhat.com/browse/OCPBUGS-33960): Egressip garp fix 4.15 [#2175](https://github.com/openshift/ovn-kubernetes/pull/2175)
* [OCPBUGS-30899](https://issues.redhat.com/browse/OCPBUGS-30899): use a forked version of j-keck/arping that fixes a threading issue [#2105](https://github.com/openshift/ovn-kubernetes/pull/2105)
* [OCPBUGS-32426](https://issues.redhat.com/browse/OCPBUGS-32426): [release-4.15] Improves service iptables efficiency on start up [#2156](https://github.com/openshift/ovn-kubernetes/pull/2156)
* [Release 4.15] OCPBUGS-32986: Bump OVS [#2147](https://github.com/openshift/ovn-kubernetes/pull/2147)
* [OCPBUGS-27852](https://issues.redhat.com/browse/OCPBUGS-27852): [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2025](https://github.com/openshift/ovn-kubernetes/pull/2025)
* [OCPBUGS-29316](https://issues.redhat.com/browse/OCPBUGS-29316): [release-4.15] Ignore missing live migratable pod annotation on AddNode [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065)
* [OCPBUGS-32202](https://issues.redhat.com/browse/OCPBUGS-32202): [release-4.15] Bump OVN to 23.09.0-139 [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121)
* [OCPBUGS-33020](https://issues.redhat.com/browse/OCPBUGS-33020): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2141](https://github.com/openshift/ovn-kubernetes/pull/2141)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/feca446a2e3848f79e533bb28763b2d61074de6e...e460a139450a9319e05014005738531a12016bd2)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/2baff7a1112ede3c53d59c7a97d75da29ca58125)

* [OCPBUGS-33622](https://issues.redhat.com/browse/OCPBUGS-33622): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 [#80](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc...2baff7a1112ede3c53d59c7a97d75da29ca58125)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/19f312e96bb4e5b7da9f61ea4cab202b227a60c6)

* [OCPBUGS-34797](https://issues.redhat.com/browse/OCPBUGS-34797): set required-scc for openshift workloads [#243](https://github.com/openshift/service-ca-operator/pull/243)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f5972cc74670c274bdc2b29d0903c4ed0432b9ca...19f312e96bb4e5b7da9f61ea4cab202b227a60c6)


### [telemeter](https://github.com/openshift/telemeter/tree/14489f7dc656175e11a3ef962fcbcd113b3651a9)

* [OCPBUGS-34831](https://issues.redhat.com/browse/OCPBUGS-34831): fix issuer check during JWT authentication for 4.15 [#538](https://github.com/openshift/telemeter/pull/538)
* : OCPBUGS-35076: Release Fix CVE go-jose [#542](https://github.com/openshift/telemeter/pull/542)
* [OCPBUGS-32890](https://issues.redhat.com/browse/OCPBUGS-32890): CVE-2024-28180 bump go-jose to v3.0.3 [#531](https://github.com/openshift/telemeter/pull/531)
* [Full changelog](https://github.com/openshift/telemeter/compare/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b...14489f7dc656175e11a3ef962fcbcd113b3651a9)


### [tests](https://github.com/openshift/origin/tree/5f9656e6e2d89726de6a3259b035368541cdc735)

* #28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary [#28898](https://github.com/openshift/origin/pull/28898)
* [OCPBUGS-36724](https://issues.redhat.com/browse/OCPBUGS-36724): Removes dependency on samples operator images [#28927](https://github.com/openshift/origin/pull/28927)
* [OCPBUGS-36319](https://issues.redhat.com/browse/OCPBUGS-36319): Only look for thanos connections to platform monitoring stack [#28915](https://github.com/openshift/origin/pull/28915)
* [OCPBUGS-34949](https://issues.redhat.com/browse/OCPBUGS-34949): test/extended: skip etcd leader change check on hypershift [#28919](https://github.com/openshift/origin/pull/28919)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add test for UpgradeValidation contention [#28820](https://github.com/openshift/origin/pull/28820)
* [OCPBUGS-33368](https://issues.redhat.com/browse/OCPBUGS-33368): [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs [#28821](https://github.com/openshift/origin/pull/28821)
* #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28791](https://github.com/openshift/origin/pull/28791)
* [OCPBUGS-26520](https://issues.redhat.com/browse/OCPBUGS-26520): Kuryr: Ignore Upgradeable=False on operators tests [#28512](https://github.com/openshift/origin/pull/28512)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#28780](https://github.com/openshift/origin/pull/28780)
* [OCPBUGS-33541](https://issues.redhat.com/browse/OCPBUGS-33541): Adjust the method of get the apiServer (release-4.15) [#28762](https://github.com/openshift/origin/pull/28762)
* [OCPBUGS-33473](https://issues.redhat.com/browse/OCPBUGS-33473): [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs [#28666](https://github.com/openshift/origin/pull/28666)
* : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test [#28724](https://github.com/openshift/origin/pull/28724)
* [Full changelog](https://github.com/openshift/origin/compare/8fe25d750fb2bc0921e268883ebb6313a9429681...5f9656e6e2d89726de6a3259b035368541cdc735)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/5611168658586d68b5a92c77c07304694fc2cc64)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#38](https://github.com/openshift/cluster-api-provider-vsphere/pull/38)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/2070c131306654b67ad6c52261818833e3c70316...5611168658586d68b5a92c77c07304694fc2cc64)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b15e93bd578484c4bfb1c124fa655c451bbd1ca)

* [OCPBUGS-33604](https://issues.redhat.com/browse/OCPBUGS-33604): FailedPrecondition volume does not appear staged [#118](https://github.com/openshift/vmware-vsphere-csi-driver/pull/118)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/74481e34aa9c2ef2de0ce0289e2383a179d34b89...4b15e93bd578484c4bfb1c124fa655c451bbd1ca)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/7b68aea417c95f438e1c10e9978172c7381885c5)

* [OCPBUGS-35732](https://issues.redhat.com/browse/OCPBUGS-35732): Fix missing failure-domains [#161](https://github.com/openshift/vsphere-problem-detector/pull/161)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/de02a75de63c6d8afd8467afd9aff97878d8bea4...7b68aea417c95f438e1c10e9978172c7381885c5)