# 4.16.24
Created: 2024-11-22 05:12:03 +0000 UTC
Image Digest: `sha256:6a653700eaae84e648f428c009de6aa6c9a3196600554947886083cf5280ed07`
## Changes from 4.15.39
### Components
* Kubectl 1.29.7
* Kubernetes upgraded from 1.28.14 to 1.29.10
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202411201723-0 to 416.94.202411201433-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| DisableKubeletCloudCredentialProviders
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled
(Changed)| Enabled
(Changed) |
| AdminNetworkPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| MetricsServer
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| VSphereControlPlaneMachineSet
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| VSphereStaticIPs
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| BareMetalLoadBalancer
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallNutanix
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallOpenStack
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallVSphere
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| HardwareSpeed
(3 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| KMSv1
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NetworkDiagnosticsConfig
(6 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereDriverConfiguration
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GatewayAPI
(0 tests)| Disabled| Disabled| Enabled
(New)| Enabled
(New)| Disabled
(Changed)| Disabled
(Changed) |
| ExternalOIDC
(0 tests)| Enabled
(New)| | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ChunkSizeMiB
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallAzure
(0 tests)| | | | | | |
| ClusterAPIInstallGCP
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIInstallIBMCloud
(0 tests)| | | | | | |
| ClusterAPIInstallPowerVS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| EtcdBackendQuota
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| Example
(1 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ImagePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| InsightsConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| InsightsOnDemandDataGather
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MetricsCollectionProfiles
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NewOLM
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NodeDisruptionPolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PinnedImages
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PlatformOperators
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenNodeBinding
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenNodeBindingValidation
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ServiceAccountTokenPodNodeInfo
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| TranslateStreamCloseWebsocketRequests
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| UpgradeStatus
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenters
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VolumeGroupSnapshot
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:108df481a035b1eb81705e14b1b228b873c7edcba810c4b94431dd08b4386c86`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [47d243b5](https://github.com/openshift/azure-kubernetes-kms/commit/47d243b5a993fd0817eecf89a6d7896a3c911ecb) `sha256:a0c2edea5d84ad5e7f4f3937eb1fe0f4f9587840be62989c7033feedbbe32133`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [73b4123c](https://github.com/openshift/containernetworking-plugins/commit/73b4123cc75abd22af8dc3b429836be2bea45fd5) `sha256:517d419e2c1ad35d1ba33f5db9da3c18cc4d19d5cf37608d8b4789000153294b`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:1afbe32ccfa003816bfa821c04fdbbee2c2175b8fc85af800443ab365e2de037`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [d718c4c5](https://github.com/openshift/operator-framework-olm/commit/d718c4c564975f3d4fac468987c4424691201790) `sha256:596c089a059d891268e068da5b46a6349ff163b579ea502fe3edf5dfb872210a`
### Removed images
* alibaba-cloud-csi-driver
* alibaba-disk-csi-driver-operator
* cluster-platform-operators-manager
* ibm-vpc-node-label-updater
* machine-os-content
### Rebuilt images without code change
* rhel-coreos `sha256:81a132168128d804d4882de84b279ee282ac516bb33a58a6b0a964f3a5452571`
* rhel-coreos-extensions `sha256:b877cfd9581072df601266cf9e2d1ff9e87d990cefd64f15c5085c261c0ca343`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7ae324d5a15d0bc1abd0cae5a577db6adf38218a)
* [OCPBUGS-43021](https://issues.redhat.com/browse/OCPBUGS-43021): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) [#6893](https://github.com/openshift/assisted-service/pull/6893)
* [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) [#6752](https://github.com/openshift/assisted-service/pull/6752)
* [OCPBUGS-31727](https://issues.redhat.com/browse/OCPBUGS-31727): Invalid Pull-Secret when using password which contains a colon character (#6362) [#6362](https://github.com/openshift/assisted-service/pull/6362)
* [MGMT-17850](https://issues.redhat.com/browse/MGMT-17850): Bump k8s.io modules to v0.29 (#6345) (#6372) [#6345](https://github.com/openshift/assisted-service/pull/6345)
* [OCPBUGS-34278](https://issues.redhat.com/browse/OCPBUGS-34278): Don't use the statically linked installer if FIPS is enabled (#6357) [#6357](https://github.com/openshift/assisted-service/pull/6357)
* Use openshift-install binary for releases >= 4.16 (#6304) [#6304](https://github.com/openshift/assisted-service/pull/6304)
* [MGMT-17775](https://issues.redhat.com/browse/MGMT-17775): Ensure that patch manifest filenames are consistent and correct (#6289) [#6289](https://github.com/openshift/assisted-service/pull/6289)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure that we improve error messages for mirror registry tagged images (#6266) [#6266](https://github.com/openshift/assisted-service/pull/6266)
* [MGMT-17764](https://issues.redhat.com/browse/MGMT-17764): Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) [#6276](https://github.com/openshift/assisted-service/pull/6276)
* NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) [#6255](https://github.com/openshift/assisted-service/pull/6255)
* Revert "MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)" (#6268) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure releaseImage is not tag based when mirror registry enabled. (#6260) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17523](https://issues.redhat.com/browse/MGMT-17523): Fail when OS images CPU architecture is missing instead of giving it default value (#6256) [#6256](https://github.com/openshift/assisted-service/pull/6256)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) [#6259](https://github.com/openshift/assisted-service/pull/6259)
* [OCPBUGS-31733](https://issues.redhat.com/browse/OCPBUGS-31733): Remove CPMS manifest for vsphere platform (#6239) [#6239](https://github.com/openshift/assisted-service/pull/6239)
* NO-ISSUE: Bump OCP versions: 4.16 (#6254) [#6254](https://github.com/openshift/assisted-service/pull/6254)
* [MGMT-17697](https://issues.redhat.com/browse/MGMT-17697): Change L3 connectivity to use connected addresses instead of majority groups (#6252) [#6252](https://github.com/openshift/assisted-service/pull/6252)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) [#6250](https://github.com/openshift/assisted-service/pull/6250)
* NO-ISSUE: Fix hypershift destroy in CI test script (#6246) [#6246](https://github.com/openshift/assisted-service/pull/6246)
* Move to rhel9, decouple from cli image (#5792) [#5792](https://github.com/openshift/assisted-service/pull/5792)
* [MGMT-17413](https://issues.redhat.com/browse/MGMT-17413): Change pull secret validation on register/update cluster/infraenv to run only against the required images (#6158) [#6158](https://github.com/openshift/assisted-service/pull/6158)
* NO-ISSUE: Update OKD images to 4.16 (#6231) [#6231](https://github.com/openshift/assisted-service/pull/6231)
* Update RHTAP references (#6181) [#6181](https://github.com/openshift/assisted-service/pull/6181)
* [MGMT-17620](https://issues.redhat.com/browse/MGMT-17620): Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) [#6227](https://github.com/openshift/assisted-service/pull/6227)
* OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) [#6212](https://github.com/openshift/assisted-service/pull/6212)
* NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) [#6209](https://github.com/openshift/assisted-service/pull/6209)
* [MGMT-17558](https://issues.redhat.com/browse/MGMT-17558): Allow installation on iSCSI volume (#6218) [#6218](https://github.com/openshift/assisted-service/pull/6218)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* [MGMT-17503](https://issues.redhat.com/browse/MGMT-17503): Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) [#6184](https://github.com/openshift/assisted-service/pull/6184)
* [MGMT-17365](https://issues.redhat.com/browse/MGMT-17365): Add support for setting agent labels in BMH as annotations (#6124) [#6124](https://github.com/openshift/assisted-service/pull/6124)
* [MGMT-17313](https://issues.redhat.com/browse/MGMT-17313): Create day 2 BMH and Machine for control plane nodes (#6142) [#6142](https://github.com/openshift/assisted-service/pull/6142)
* [MGMT-17513](https://issues.redhat.com/browse/MGMT-17513): Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) [#6185](https://github.com/openshift/assisted-service/pull/6185)
* [MGMT-17468](https://issues.redhat.com/browse/MGMT-17468): Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) [#6190](https://github.com/openshift/assisted-service/pull/6190)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) [#6176](https://github.com/openshift/assisted-service/pull/6176)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) [#6199](https://github.com/openshift/assisted-service/pull/6199)
* [MGMT-17414](https://issues.redhat.com/browse/MGMT-17414): Adding new requirements for LVM on 4.16 (#6165) [#6165](https://github.com/openshift/assisted-service/pull/6165)
* [MGMT-17181](https://issues.redhat.com/browse/MGMT-17181): Add a LocalClusterImportController (#6079) [#6079](https://github.com/openshift/assisted-service/pull/6079)
* NO-ISSUE: Prevent false positive host connectivity (#6162) [#6162](https://github.com/openshift/assisted-service/pull/6162)
* [MGMT-17489](https://issues.redhat.com/browse/MGMT-17489): Fix disconnected capi tests (#6163) [#6163](https://github.com/openshift/assisted-service/pull/6163)
* Update RHTAP references (#6148) [#6148](https://github.com/openshift/assisted-service/pull/6148)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) [#6157](https://github.com/openshift/assisted-service/pull/6157)
* [MGMT-17438](https://issues.redhat.com/browse/MGMT-17438): bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) [#6150](https://github.com/openshift/assisted-service/pull/6150)
* NO-ISSUE: replace minio quay.io image repository (#6151) [#6151](https://github.com/openshift/assisted-service/pull/6151)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) [#6149](https://github.com/openshift/assisted-service/pull/6149)
* NO-ISSUE: Add doc for iPXE HTTP (#6146) [#6146](https://github.com/openshift/assisted-service/pull/6146)
* Revert "MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)" (#6139) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* [MGMT-17369](https://issues.redhat.com/browse/MGMT-17369): Add multi-arch release images to as well when setting only_latest=true in .../openshift-versions (#6119) [#6119](https://github.com/openshift/assisted-service/pull/6119)
* [MGMT-17361](https://issues.redhat.com/browse/MGMT-17361): Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) [#6115](https://github.com/openshift/assisted-service/pull/6115)
* [MGMT-17367](https://issues.redhat.com/browse/MGMT-17367): Use ICSP in install-config for older OCP releases (#6125) [#6125](https://github.com/openshift/assisted-service/pull/6125)
* Update RHTAP references (#6117) [#6117](https://github.com/openshift/assisted-service/pull/6117)
* NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) [#6118](https://github.com/openshift/assisted-service/pull/6118)
* [MGMT-17354](https://issues.redhat.com/browse/MGMT-17354): Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) [#6113](https://github.com/openshift/assisted-service/pull/6113)
* NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) [#6116](https://github.com/openshift/assisted-service/pull/6116)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) [#6114](https://github.com/openshift/assisted-service/pull/6114)
* NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) [#6111](https://github.com/openshift/assisted-service/pull/6111)
* [MGMT-17328](https://issues.redhat.com/browse/MGMT-17328): OCI should be tech preview for OCP 4.14 (#6104) [#6104](https://github.com/openshift/assisted-service/pull/6104)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 (#6054) [#6054](https://github.com/openshift/assisted-service/pull/6054)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) [#6109](https://github.com/openshift/assisted-service/pull/6109)
* NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) [#6110](https://github.com/openshift/assisted-service/pull/6110)
* [MGMT-16263](https://issues.redhat.com/browse/MGMT-16263): Enable usage of custom OCP release images when we create cluster (#6025) [#6025](https://github.com/openshift/assisted-service/pull/6025)
* [MGMT-17241](https://issues.redhat.com/browse/MGMT-17241): [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) [#6092](https://github.com/openshift/assisted-service/pull/6092)
* Update RHTAP references (#6103) [#6103](https://github.com/openshift/assisted-service/pull/6103)
* [MGMT-16002](https://issues.redhat.com/browse/MGMT-16002): Accept *yml.patch* and *yaml.patch* extensions (#6070) [#6070](https://github.com/openshift/assisted-service/pull/6070)
* [MGMT-17080](https://issues.redhat.com/browse/MGMT-17080): enable infrastructure operator when MCE and storage operators are selected (#6037) [#6037](https://github.com/openshift/assisted-service/pull/6037)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#6099) [#6099](https://github.com/openshift/assisted-service/pull/6099)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) [#6098](https://github.com/openshift/assisted-service/pull/6098)
* Update RHTAP references (#6086) [#6086](https://github.com/openshift/assisted-service/pull/6086)
* Allow in-progress clusters to be deleted in more cases (#6061) [#6061](https://github.com/openshift/assisted-service/pull/6061)
* [MGMT-17266](https://issues.redhat.com/browse/MGMT-17266): Add OCP 4.16 images (#6091) [#6091](https://github.com/openshift/assisted-service/pull/6091)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) [#6090](https://github.com/openshift/assisted-service/pull/6090)
* [MGMT-17196](https://issues.redhat.com/browse/MGMT-17196): Fix none existens of static MAC adr. in case of (#6087) [#6087](https://github.com/openshift/assisted-service/pull/6087)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Update configure command to handle multiple HostConfigs (#6062) [#6062](https://github.com/openshift/assisted-service/pull/6062)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) [#6085](https://github.com/openshift/assisted-service/pull/6085)
* [MGMT-16813](https://issues.redhat.com/browse/MGMT-16813): Prioritize finding release image with exact CPU architecture (#6066) [#6066](https://github.com/openshift/assisted-service/pull/6066)
* NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) [#6083](https://github.com/openshift/assisted-service/pull/6083)
* Update RHTAP references (#6020) [#6020](https://github.com/openshift/assisted-service/pull/6020)
* Use `client_id` instead of `clientId` (#6076) [#6076](https://github.com/openshift/assisted-service/pull/6076)
* Protect must gather versions cache with mutex (#6078) [#6078](https://github.com/openshift/assisted-service/pull/6078)
* NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) [#6060](https://github.com/openshift/assisted-service/pull/6060)
* [MGMT-16759](https://issues.redhat.com/browse/MGMT-16759): Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) [#6051](https://github.com/openshift/assisted-service/pull/6051)
* use multi payload with ABI (#6000) [#6000](https://github.com/openshift/assisted-service/pull/6000)
* [MGMT-14380](https://issues.redhat.com/browse/MGMT-14380): ODF explicit type of disk error (#6072) [#6072](https://github.com/openshift/assisted-service/pull/6072)
* NO-ISSUE: Bump OCP versions: 4.14 (#6069) [#6069](https://github.com/openshift/assisted-service/pull/6069)
* NO-ISSUE: Bump OCP versions: 4.13 (#6063) [#6063](https://github.com/openshift/assisted-service/pull/6063)
* [MGMT-17106](https://issues.redhat.com/browse/MGMT-17106): Disable ironic vlan creation when static networking config is present (#6055) [#6055](https://github.com/openshift/assisted-service/pull/6055)
* NO-ISSUE: Bump OCP versions: 4.12 (#6056) [#6056](https://github.com/openshift/assisted-service/pull/6056)
* Use all cluster networks to determine IP family for ironic (#6048) [#6048](https://github.com/openshift/assisted-service/pull/6048)
* NO-ISSUE: Bump OCP versions: 4.14 (#6050) [#6050](https://github.com/openshift/assisted-service/pull/6050)
* NO-ISSUE: Bump OCP versions: 4.15 (#6043) [#6043](https://github.com/openshift/assisted-service/pull/6043)
* [MGMT-17095](https://issues.redhat.com/browse/MGMT-17095): Disable local cluster import (#6040) [#6040](https://github.com/openshift/assisted-service/pull/6040)
* [MGMT-16620](https://issues.redhat.com/browse/MGMT-16620): Update OCP 4.15 release images to GA (#6035) [#6035](https://github.com/openshift/assisted-service/pull/6035)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13 (#6038) [#6038](https://github.com/openshift/assisted-service/pull/6038)
* [MGMT-17008](https://issues.redhat.com/browse/MGMT-17008): fix lvm host requirement (#6021) [#6021](https://github.com/openshift/assisted-service/pull/6021)
* NO-ISSUE: Bump OCP versions: 4.14 (#6032) [#6032](https://github.com/openshift/assisted-service/pull/6032)
* [MGMT-16882](https://issues.redhat.com/browse/MGMT-16882): Update operator bundle channel to 2.11 (#6023) [#6023](https://github.com/openshift/assisted-service/pull/6023)
* NO-ISSUE: Halt OpenShift release syncer in SaaS until actual usage of this release images will be merged (#6027) [#6027](https://github.com/openshift/assisted-service/pull/6027)
* [MGMT-16262](https://issues.redhat.com/browse/MGMT-16262): Create a utility that fetches current OCP releases from OpenShift API and updates DB (#5916) [#5916](https://github.com/openshift/assisted-service/pull/5916)
* NO-ISSUE: Bump OCP versions: 4.15 (#6019) [#6019](https://github.com/openshift/assisted-service/pull/6019)
* [OCPBUGS-29772](https://issues.redhat.com/browse/OCPBUGS-29772): All nodes fail to become managed when installConfigOverrides defined (#6010) [#6010](https://github.com/openshift/assisted-service/pull/6010)
* NO-ISSUE: fixing lvm requirement message (#6009) [#6009](https://github.com/openshift/assisted-service/pull/6009)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* Update RHTAP references (#6014) [#6014](https://github.com/openshift/assisted-service/pull/6014)
* Update RHTAP references (#6012) [#6012](https://github.com/openshift/assisted-service/pull/6012)
* NO-ISSUE: Add environment variable ENABLE_SKIP_MCO_REBOOT to openshift/template.yaml (#6013) [#6013](https://github.com/openshift/assisted-service/pull/6013)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Add command to import cluster for agent-based-installer (#6004) [#6004](https://github.com/openshift/assisted-service/pull/6004)
* Update RHTAP references (#5999) [#5999](https://github.com/openshift/assisted-service/pull/5999)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14 (#6006) [#6006](https://github.com/openshift/assisted-service/pull/6006)
* [MGMT-16926](https://issues.redhat.com/browse/MGMT-16926): fix validation bug + allow CNV and LVM multi node (#5998) [#5998](https://github.com/openshift/assisted-service/pull/5998)
* [MGMT-4458](https://issues.redhat.com/browse/MGMT-4458): Remove status change from old CompleteInstallation API (#5981) [#5981](https://github.com/openshift/assisted-service/pull/5981)
* [MGMT-16716](https://issues.redhat.com/browse/MGMT-16716): (Also MGMT-16737), Operators CNV, MCE should be disabled when platform Nutanix is selected, operator CNV should be disabled when platform VSphere is selected (#5991) [#5991](https://github.com/openshift/assisted-service/pull/5991)
* NO-ISSUE: Bump OCP versions: 4.15 (#5995) [#5995](https://github.com/openshift/assisted-service/pull/5995)
* Update RHTAP references (#5993) [#5993](https://github.com/openshift/assisted-service/pull/5993)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13 (#5990) [#5990](https://github.com/openshift/assisted-service/pull/5990)
* NO-ISSUE: Fix subsystem test for invalid nmstate config error message (#5988) [#5988](https://github.com/openshift/assisted-service/pull/5988)
* Update RHTAP references (#5980) [#5980](https://github.com/openshift/assisted-service/pull/5980)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix validation for LVM multinode (#5898) [#5898](https://github.com/openshift/assisted-service/pull/5898)
* [MGMT-16690](https://issues.redhat.com/browse/MGMT-16690): Add API to AgentServiceConfig CRD to allow pass of headers and query params to image service (#5933) [#5933](https://github.com/openshift/assisted-service/pull/5933)
* [MGMT-16588](https://issues.redhat.com/browse/MGMT-16588): Adding host with incompatible platform to day2 cluster should fail (#5946) [#5946](https://github.com/openshift/assisted-service/pull/5946)
* [MGMT-16625](https://issues.redhat.com/browse/MGMT-16625): Make host connection timeout soft (#5911) [#5911](https://github.com/openshift/assisted-service/pull/5911)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Use new ignition endpoint HTTP headers when requesting Ignition (#5934) [#5934](https://github.com/openshift/assisted-service/pull/5934)
* NO-ISSUE: Bump OCP versions: 4.12, 4.11 (#5971) [#5971](https://github.com/openshift/assisted-service/pull/5971)
* [MGMT-16523](https://issues.redhat.com/browse/MGMT-16523): Set ABI deployment type for on-prem data collection (#5967) [#5967](https://github.com/openshift/assisted-service/pull/5967)
* NO-ISSUE: Change bare metal host CRD name to a non-uuid format as it is forbidden (#5972) [#5972](https://github.com/openshift/assisted-service/pull/5972)
* [MGMT-16704](https://issues.redhat.com/browse/MGMT-16704): Add organization capability to control soft timeouts (#5935) [#5935](https://github.com/openshift/assisted-service/pull/5935)
* [MGMT-16684](https://issues.redhat.com/browse/MGMT-16684): Make OLM finalizing stages behave as soft timeouts even if soft timeouts are not enabled (#5928) [#5928](https://github.com/openshift/assisted-service/pull/5928)
* [MGMT-16791](https://issues.redhat.com/browse/MGMT-16791): disable VipAUtoAllocation for 4.15 and above (#5959) [#5959](https://github.com/openshift/assisted-service/pull/5959)
* Update RHTAP references (#5965) [#5965](https://github.com/openshift/assisted-service/pull/5965)
* NO-ISSUE: fix for subsystem HTTP registry (#5964) [#5964](https://github.com/openshift/assisted-service/pull/5964)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5963) [#5963](https://github.com/openshift/assisted-service/pull/5963)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#5951) [#5951](https://github.com/openshift/assisted-service/pull/5951)
* [MGMT-16721](https://issues.redhat.com/browse/MGMT-16721): Handle luks == nil and luks.Clevis == nil (#5940) [#5940](https://github.com/openshift/assisted-service/pull/5940)
* Update RHTAP references (#5956) [#5956](https://github.com/openshift/assisted-service/pull/5956)
* Update RHTAP references (#5950) [#5950](https://github.com/openshift/assisted-service/pull/5950)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Add Ignition Endpoint Headers to Host and Agent APIs (#5931) [#5931](https://github.com/openshift/assisted-service/pull/5931)
* NO-ISSUE: Bump gorm.io/gorm from 1.25.5 to 1.25.7 (#5954) [#5954](https://github.com/openshift/assisted-service/pull/5954)
* Update RHTAP references (#5949) [#5949](https://github.com/openshift/assisted-service/pull/5949)
* NO-ISSUE: Bump OCP versions: 4.15 (#5947) [#5947](https://github.com/openshift/assisted-service/pull/5947)
* [MGMT-16757](https://issues.redhat.com/browse/MGMT-16757): CNV should be disabled when select platform vSphere (#5945) [#5945](https://github.com/openshift/assisted-service/pull/5945)
* NO-ISSUE: Fix CI gather script for baremetal operator (#5932) [#5932](https://github.com/openshift/assisted-service/pull/5932)
* NO-ISSUE: Bump OCP versions: 4.13 (#5944) [#5944](https://github.com/openshift/assisted-service/pull/5944)
* [MGMT-16739](https://issues.redhat.com/browse/MGMT-16739): CNV and MCE should be disabled when select platform Nutanix (#5941) [#5941](https://github.com/openshift/assisted-service/pull/5941)
* Update RHTAP references (#5943) [#5943](https://github.com/openshift/assisted-service/pull/5943)
* NO-ISSUE: Bump OCP versions: 4.12 (#5939) [#5939](https://github.com/openshift/assisted-service/pull/5939)
* [MGMT-16603](https://issues.redhat.com/browse/MGMT-16603): Allow setting agent cluster reference via BHM (#5893) [#5893](https://github.com/openshift/assisted-service/pull/5893)
* [MGMT-16612](https://issues.redhat.com/browse/MGMT-16612): notify when host updates status (#5930) [#5930](https://github.com/openshift/assisted-service/pull/5930)
* [MGMT-16521](https://issues.redhat.com/browse/MGMT-16521): Identify Operator-based Deployment Data (#5906) [#5906](https://github.com/openshift/assisted-service/pull/5906)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var for On-Prem Data Deployment Type (#5874) [#5874](https://github.com/openshift/assisted-service/pull/5874)
* [MGMT-16508](https://issues.redhat.com/browse/MGMT-16508): Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. (#5884) [#5884](https://github.com/openshift/assisted-service/pull/5884)
* NO-ISSUE: Bump OCP versions: 4.15 (#5929) [#5929](https://github.com/openshift/assisted-service/pull/5929)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#5913) [#5913](https://github.com/openshift/assisted-service/pull/5913)
* NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) [#5919](https://github.com/openshift/assisted-service/pull/5919)
* [MGMT-16660](https://issues.redhat.com/browse/MGMT-16660): OCI is tech-preview from OCP 4.15 (#5920) [#5920](https://github.com/openshift/assisted-service/pull/5920)
* [OCPBUGS-27376](https://issues.redhat.com/browse/OCPBUGS-27376): Allow domain names starting with a number (#5914) [#5914](https://github.com/openshift/assisted-service/pull/5914)
* NO-ISSUE: Bump OCP versions: 4.14 (#5915) [#5915](https://github.com/openshift/assisted-service/pull/5915)
* Update RHTAP references (#5899) [#5899](https://github.com/openshift/assisted-service/pull/5899)
* NO-ISSUE: migrate rhtap init step to v0.2 (#5908) [#5908](https://github.com/openshift/assisted-service/pull/5908)
* [MGMT-16208](https://issues.redhat.com/browse/MGMT-16208): Add controller stages to assisted service (#5880) [#5880](https://github.com/openshift/assisted-service/pull/5880)
* NO-ISSUE: Bump OCP versions: 4.15 (#5907) [#5907](https://github.com/openshift/assisted-service/pull/5907)
* NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) [#5903](https://github.com/openshift/assisted-service/pull/5903)
* NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) [#5902](https://github.com/openshift/assisted-service/pull/5902)
* NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) [#5904](https://github.com/openshift/assisted-service/pull/5904)
* NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) [#5901](https://github.com/openshift/assisted-service/pull/5901)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) [#5897](https://github.com/openshift/assisted-service/pull/5897)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides (#5868) [#5868](https://github.com/openshift/assisted-service/pull/5868)
* NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) [#5896](https://github.com/openshift/assisted-service/pull/5896)
* NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) [#5895](https://github.com/openshift/assisted-service/pull/5895)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Add request headers to api_vip_connectivity check request (#5870) [#5870](https://github.com/openshift/assisted-service/pull/5870)
* NO-ISSUE: Use latest hypershift image in CI gather (#5886) [#5886](https://github.com/openshift/assisted-service/pull/5886)
* NO-ISSUE remove filanov from approves (#5888) [#5888](https://github.com/openshift/assisted-service/pull/5888)
* NO-ISSUE: Bump OCP versions: 4.15 (#5887) [#5887](https://github.com/openshift/assisted-service/pull/5887)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): allow lvms on multi node (#5871) [#5871](https://github.com/openshift/assisted-service/pull/5871)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) [#5875](https://github.com/openshift/assisted-service/pull/5875)
* NO-ISSUE: testing go1.20 in all packages (#5850) [#5850](https://github.com/openshift/assisted-service/pull/5850)
* [MGMT-16371](https://issues.redhat.com/browse/MGMT-16371): Fix additionial kargs in case of DHCP (#5818) [#5818](https://github.com/openshift/assisted-service/pull/5818)
* Removes unused assistedservice CRD (#5830) [#5830](https://github.com/openshift/assisted-service/pull/5830)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5861) [#5861](https://github.com/openshift/assisted-service/pull/5861)
* [MGMT-16505](https://issues.redhat.com/browse/MGMT-16505): Huge amount of "Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>" in cluster events (#5872) [#5872](https://github.com/openshift/assisted-service/pull/5872)
* [MGMT-16330](https://issues.redhat.com/browse/MGMT-16330): disable SDN for 4.15 and above (#5833) [#5833](https://github.com/openshift/assisted-service/pull/5833)
* NO-ISSUE: Bump OCP versions: 4.15, 4.12, 4.13 (#5867) [#5867](https://github.com/openshift/assisted-service/pull/5867)
* NO-ISSUE: Bump OCP versions: 4.14 (#5863) [#5863](https://github.com/openshift/assisted-service/pull/5863)
* [MGMT-16241](https://issues.redhat.com/browse/MGMT-16241): Ensure that LastInstallationPreparationStatus is reset on cluster install. (#5811) [#5811](https://github.com/openshift/assisted-service/pull/5811)
* wqNO-ISSUE: Fix for subsystem test that fails locally. (#5859) [#5859](https://github.com/openshift/assisted-service/pull/5859)
* [MGMT-16452](https://issues.redhat.com/browse/MGMT-16452): Change MCE subscription to use the default channel (#5843) [#5843](https://github.com/openshift/assisted-service/pull/5843)
* [OCPBUGS-25434](https://issues.redhat.com/browse/OCPBUGS-25434): handle NMStateConfig deletion (#5844) [#5844](https://github.com/openshift/assisted-service/pull/5844)
* [MGMT-16404](https://issues.redhat.com/browse/MGMT-16404): Add soft timeouts capability to host stage timeouts (#5817) [#5817](https://github.com/openshift/assisted-service/pull/5817)
* [MGMT-16216](https://issues.redhat.com/browse/MGMT-16216): Bump requests package (#5836) [#5836](https://github.com/openshift/assisted-service/pull/5836)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix images used for disconnected CAPI test (#5832) [#5832](https://github.com/openshift/assisted-service/pull/5832)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix issue validating pre-release versions were failing (#5837) [#5837](https://github.com/openshift/assisted-service/pull/5837)
* [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5822) [#5822](https://github.com/openshift/assisted-service/pull/5822)
* [MGMT-16373](https://issues.redhat.com/browse/MGMT-16373): KubeAPI - Ensure that ISO type is full-iso when cpuarchitecture is S390x (#5825) [#5825](https://github.com/openshift/assisted-service/pull/5825)
* chore(deps): update rhtap references (#5782) [#5782](https://github.com/openshift/assisted-service/pull/5782)
* [MGMT-16428](https://issues.redhat.com/browse/MGMT-16428): create migration from oci to external platform type (#5829) [#5829](https://github.com/openshift/assisted-service/pull/5829)
* NO-ISSUE: enable lateset lso for 4.15 ztp (#5805) [#5805](https://github.com/openshift/assisted-service/pull/5805)
* NO-ISSUE: Bump OCP versions: 4.15 (#5824) [#5824](https://github.com/openshift/assisted-service/pull/5824)
* Compare normalized infraenv and preprov image architectures (#5816) [#5816](https://github.com/openshift/assisted-service/pull/5816)
* [MGMT-15886](https://issues.redhat.com/browse/MGMT-15886): Fix domain validation (#5801) [#5801](https://github.com/openshift/assisted-service/pull/5801)
* [MGMT-15691](https://issues.redhat.com/browse/MGMT-15691): Remove platform type oci (#5787) [#5787](https://github.com/openshift/assisted-service/pull/5787)
* [MGMT-14633](https://issues.redhat.com/browse/MGMT-14633): Include manifest information in the log download (#5777) [#5777](https://github.com/openshift/assisted-service/pull/5777)
* [MGMT-16355](https://issues.redhat.com/browse/MGMT-16355): API changes for soft timeouts (#5780) [#5780](https://github.com/openshift/assisted-service/pull/5780)
* NO-ISSUE: Bump OCP versions: 4.11 (#5813) [#5813](https://github.com/openshift/assisted-service/pull/5813)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5808) [#5808](https://github.com/openshift/assisted-service/pull/5808)
* [MGMT-14159](https://issues.redhat.com/browse/MGMT-14159): Use imageDigestSources in install-config instead of imageContentSources (#5799) [#5799](https://github.com/openshift/assisted-service/pull/5799)
* MGMT-16157 move db transactions to new format (#5806) [#5806](https://github.com/openshift/assisted-service/pull/5806)
* MGMT-16157 Remove recover usage from DB transactions (#5795) [#5795](https://github.com/openshift/assisted-service/pull/5795)
* NO-ISSUE: Bump OCP versions: 4.15 (#5796) [#5796](https://github.com/openshift/assisted-service/pull/5796)
* NO-ISSUE: fix golangci-lint failing to be pulled (#5790) [#5790](https://github.com/openshift/assisted-service/pull/5790)
* [Full changelog](https://github.com/openshift/assisted-service/compare/59ec11581b77fb1e03e153f7399ccc2e97e8c0bf...7ae324d5a15d0bc1abd0cae5a577db6adf38218a)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0c46e5179d0bb5a1818df3dcff160059dc8060bd)
* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#914) [#914](https://github.com/openshift/assisted-installer/pull/914)
* [OCPBUGS-43025](https://issues.redhat.com/browse/OCPBUGS-43025): Pick up latest CVE changes by bumping service (#920) [#920](https://github.com/openshift/assisted-installer/pull/920)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) [#906](https://github.com/openshift/assisted-installer/pull/906)
* [OCPBUGS-36779](https://issues.redhat.com/browse/OCPBUGS-36779): Reload host inventory on conflict (#881) [#881](https://github.com/openshift/assisted-installer/pull/881)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#850) [#850](https://github.com/openshift/assisted-installer/pull/850)
* [OCPBUGS-32105](https://issues.redhat.com/browse/OCPBUGS-32105): Fix race to mark node Joined (#823) [#823](https://github.com/openshift/assisted-installer/pull/823)
* NO-ISSUE: Bump github.com/onsi/gomega (#841) [#841](https://github.com/openshift/assisted-installer/pull/841)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Moving disk operations to new repo (#840) [#840](https://github.com/openshift/assisted-installer/pull/840)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) [#818](https://github.com/openshift/assisted-installer/pull/818)
* Move to rhel9, decouple from cli image (#760) [#760](https://github.com/openshift/assisted-installer/pull/760)
* NO-ISSUE: Decouple inventoryClient from ops (#811) [#811](https://github.com/openshift/assisted-installer/pull/811)
* NO-ISSUE: Decouple inventoryClient from ops (#810) [#810](https://github.com/openshift/assisted-installer/pull/810)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) [#809](https://github.com/openshift/assisted-installer/pull/809)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#806) [#806](https://github.com/openshift/assisted-installer/pull/806)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Wipe installation disk on IBI (#808) [#808](https://github.com/openshift/assisted-installer/pull/808)
* [MGMT-17384](https://issues.redhat.com/browse/MGMT-17384): Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) [#807](https://github.com/openshift/assisted-installer/pull/807)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#803) [#803](https://github.com/openshift/assisted-installer/pull/803)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#802) [#802](https://github.com/openshift/assisted-installer/pull/802)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) [#801](https://github.com/openshift/assisted-installer/pull/801)
* [OCPBUGS-30056](https://issues.redhat.com/browse/OCPBUGS-30056): RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) [#800](https://github.com/openshift/assisted-installer/pull/800)
* [MGMT-16993](https://issues.redhat.com/browse/MGMT-16993): [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) [#798](https://github.com/openshift/assisted-installer/pull/798)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) [#799](https://github.com/openshift/assisted-installer/pull/799)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) [#797](https://github.com/openshift/assisted-installer/pull/797)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#788) [#788](https://github.com/openshift/assisted-installer/pull/788)
* [MGMT-16966](https://issues.redhat.com/browse/MGMT-16966): Problem creating extra partition on main disk in 4.15+ (#787) [#787](https://github.com/openshift/assisted-installer/pull/787)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) [#786](https://github.com/openshift/assisted-installer/pull/786)
* [MGMT-16211](https://issues.redhat.com/browse/MGMT-16211): Remove all timeouts from controller (#779) [#779](https://github.com/openshift/assisted-installer/pull/779)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere credentials are provided. (#778) [#778](https://github.com/openshift/assisted-installer/pull/778)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) [#781](https://github.com/openshift/assisted-installer/pull/781)
* NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) [#780](https://github.com/openshift/assisted-installer/pull/780)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#776) [#776](https://github.com/openshift/assisted-installer/pull/776)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) [#772](https://github.com/openshift/assisted-installer/pull/772)
* NO-ISSUE remove filanov from approves (#773) [#773](https://github.com/openshift/assisted-installer/pull/773)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#770) [#770](https://github.com/openshift/assisted-installer/pull/770)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) [#769](https://github.com/openshift/assisted-installer/pull/769)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#768) [#768](https://github.com/openshift/assisted-installer/pull/768)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) [#766](https://github.com/openshift/assisted-installer/pull/766)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) [#762](https://github.com/openshift/assisted-installer/pull/762)
* [MGMT-16266](https://issues.redhat.com/browse/MGMT-16266): Indication event showing how often host has been rebooted missing on some nodes (#757) [#757](https://github.com/openshift/assisted-installer/pull/757)
* NO-ISSUE: fix golangci-lint failing to be pulled (#758) [#758](https://github.com/openshift/assisted-installer/pull/758)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/fde2b2eace2f7ceaedc1ac63f0da77f21cfd78f7...0c46e5179d0bb5a1818df3dcff160059dc8060bd)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b121e87848721deee183a0d7bcc04bd5010eca38)
* [OCPBUGS-43028](https://issues.redhat.com/browse/OCPBUGS-43028): Pick up latest CVE changes by bumping service (#804) [#804](https://github.com/openshift/assisted-installer-agent/pull/804)
* [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#717) [#717](https://github.com/openshift/assisted-installer-agent/pull/717)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) [#637](https://github.com/openshift/assisted-installer-agent/pull/637)
* NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) [#710](https://github.com/openshift/assisted-installer-agent/pull/710)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) [#690](https://github.com/openshift/assisted-installer-agent/pull/690)
* [OCPBUGS-31423](https://issues.redhat.com/browse/OCPBUGS-31423): Try to pull installer image before installing (#679) [#679](https://github.com/openshift/assisted-installer-agent/pull/679)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) [#683](https://github.com/openshift/assisted-installer-agent/pull/683)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#676) [#676](https://github.com/openshift/assisted-installer-agent/pull/676)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) [#678](https://github.com/openshift/assisted-installer-agent/pull/678)
* NO-ISSUE: subsystem test failing due image format version (#677) [#677](https://github.com/openshift/assisted-installer-agent/pull/677)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) [#672](https://github.com/openshift/assisted-installer-agent/pull/672)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#673) [#673](https://github.com/openshift/assisted-installer-agent/pull/673)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) [#670](https://github.com/openshift/assisted-installer-agent/pull/670)
* [MGMT-16459](https://issues.redhat.com/browse/MGMT-16459): [STG] Cluster 4.15.0-rc.0 with HTTP Proxy failed on timeout due the failed to StartContainer for etcd with CrashLoopBackOff (#664) [#664](https://github.com/openshift/assisted-installer-agent/pull/664)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#656) [#656](https://github.com/openshift/assisted-installer-agent/pull/656)
* [CVE-2023](https://issues.redhat.com/browse/CVE-2023): 49568 and CVE-2023-49569 both detail vulnerabilities in versions of https://github.com/go-git/go-git less than version v5.11 Presently assisted-installer depends on this library due to the following dependency chain. (#655) [#655](https://github.com/openshift/assisted-installer-agent/pull/655)
* [MULTIARCH-4089](https://issues.redhat.com/browse/MULTIARCH-4089): Fix LPAR handling (#649) [#649](https://github.com/openshift/assisted-installer-agent/pull/649)
* NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) [#653](https://github.com/openshift/assisted-installer-agent/pull/653)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#652) [#652](https://github.com/openshift/assisted-installer-agent/pull/652)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Use updated api_vip connectivity check API (#648) [#648](https://github.com/openshift/assisted-installer-agent/pull/648)
* NO-ISSUE remove filanov from approves (#647) [#647](https://github.com/openshift/assisted-installer-agent/pull/647)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#644) [#644](https://github.com/openshift/assisted-installer-agent/pull/644)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#643) [#643](https://github.com/openshift/assisted-installer-agent/pull/643)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#642) [#642](https://github.com/openshift/assisted-installer-agent/pull/642)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#638) [#638](https://github.com/openshift/assisted-installer-agent/pull/638)
* NO-ISSUE: fix golangci-lint failing to be pulled (#636) [#636](https://github.com/openshift/assisted-installer-agent/pull/636)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/366295f2cba23d0e7e1a61b384e226f707ff56a6...b121e87848721deee183a0d7bcc04bd5010eca38)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/6e6bb40d95bd966eb6b152e66c5b91794806c4bc)
* [OCPBUGS-24960](https://issues.redhat.com/browse/OCPBUGS-24960): Updating ose-agent-installer-utils-container image to be consistent with ART [#32](https://github.com/openshift/agent-installer-utils/pull/32)
* NO-ISSUE: Tidy up Dockerfiles [#33](https://github.com/openshift/agent-installer-utils/pull/33)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/33b7d855fdebd24a972f32dafafd29e40b117e46...6e6bb40d95bd966eb6b152e66c5b91794806c4bc)
### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/97e8335e2f0bc9ee48fe04f2c19820b557035d37)
* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/abf4fa96550caf09e788b66fc06f1df802768397...97e8335e2f0bc9ee48fe04f2c19820b557035d37)
### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/064d4624c74d417dd31cf1c173c00c3fa98ffade)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#50](https://github.com/openshift/cluster-api-provider-alibaba/pull/50)
* [OCPBUGS-25571](https://issues.redhat.com/browse/OCPBUGS-25571): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#49](https://github.com/openshift/cluster-api-provider-alibaba/pull/49)
* [OCPBUGS-24945](https://issues.redhat.com/browse/OCPBUGS-24945): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#48](https://github.com/openshift/cluster-api-provider-alibaba/pull/48)
* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#46](https://github.com/openshift/cluster-api-provider-alibaba/pull/46)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7...064d4624c74d417dd31cf1c173c00c3fa98ffade)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/ca81b6a32aff6ccb327f6889ec89c01afedd8efd)
* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#59](https://github.com/openshift/apiserver-network-proxy/pull/59)
* [OCPBUGS-31716](https://issues.redhat.com/browse/OCPBUGS-31716): Bump golang.org/x/net to v0.23.0 [#50](https://github.com/openshift/apiserver-network-proxy/pull/50)
* [OCPBUGS-27932](https://issues.redhat.com/browse/OCPBUGS-27932): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 [#47](https://github.com/openshift/apiserver-network-proxy/pull/47)
* [OCPBUGS-25004](https://issues.redhat.com/browse/OCPBUGS-25004): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#46](https://github.com/openshift/apiserver-network-proxy/pull/46)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/adccbd5c16daecfe861fa530acdcbba5ec682a3a...ca81b6a32aff6ccb327f6889ec89c01afedd8efd)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/a53e9def2e60eecd390575b59c85d54c5412ecd3)
* [OCPBUGS-31968](https://issues.redhat.com/browse/OCPBUGS-31968): update for CVE-2023-45288 [release-4.16] [#82](https://github.com/openshift/cloud-provider-aws/pull/82)
* [OCPBUGS-34046](https://issues.redhat.com/browse/OCPBUGS-34046): Ensure that addresses are added in network device index order [#88](https://github.com/openshift/cloud-provider-aws/pull/88)
* [OCPBUGS-8213](https://issues.redhat.com/browse/OCPBUGS-8213): Ensure removal of security group rules on deleting load balancers [#57](https://github.com/openshift/cloud-provider-aws/pull/57)
* [OCPBUGS-30466](https://issues.redhat.com/browse/OCPBUGS-30466): Update google.golang.org/protobuf to v1.33.0 [#79](https://github.com/openshift/cloud-provider-aws/pull/79)
* [OCPBUGS-27879](https://issues.redhat.com/browse/OCPBUGS-27879): Add snyk exclusion file [#78](https://github.com/openshift/cloud-provider-aws/pull/78)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): Updates build-rpm.sh to set release to build time [#75](https://github.com/openshift/cloud-provider-aws/pull/75)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#74](https://github.com/openshift/cloud-provider-aws/pull/74)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): UPSTREAM: <carry>: Removes escaping from `pwd` in rpm build script [#69](https://github.com/openshift/cloud-provider-aws/pull/69)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Updates rpm build script [#68](https://github.com/openshift/cloud-provider-aws/pull/68)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): ecr-credential-provider RPM CI builds [#65](https://github.com/openshift/cloud-provider-aws/pull/65)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Installs ecr-credential-provider to /usr/libexec [#66](https://github.com/openshift/cloud-provider-aws/pull/66)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Adds ecr-credential-provider specfile [#63](https://github.com/openshift/cloud-provider-aws/pull/63)
* [OCPBUGS-22542](https://issues.redhat.com/browse/OCPBUGS-22542), [OCPBUGS-26061](https://issues.redhat.com/browse/OCPBUGS-26061), [OCPCLOUD-2423](https://issues.redhat.com/browse/OCPCLOUD-2423): Merge https://github.com/kubernetes/cloud-provider-aws:master (65e4f1a) into master [#53](https://github.com/openshift/cloud-provider-aws/pull/53)
* [OCPBUGS-24959](https://issues.redhat.com/browse/OCPBUGS-24959): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-aws/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c...a53e9def2e60eecd390575b59c85d54c5412ecd3)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/60d797bea7418e10ec26ae1ccef4e42249705b6c)
* [OCPBUGS-44234](https://issues.redhat.com/browse/OCPBUGS-44234): [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#531](https://github.com/openshift/cluster-api-provider-aws/pull/531)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#510](https://github.com/openshift/cluster-api-provider-aws/pull/510)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master [#507](https://github.com/openshift/cluster-api-provider-aws/pull/507)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master [#502](https://github.com/openshift/cluster-api-provider-aws/pull/502)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#503](https://github.com/openshift/cluster-api-provider-aws/pull/503)
* [OCPBUGS-25565](https://issues.redhat.com/browse/OCPBUGS-25565), [OCPCLOUD-2441](https://issues.redhat.com/browse/OCPCLOUD-2441): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master [#499](https://github.com/openshift/cluster-api-provider-aws/pull/499)
* [OCPBUGS-27871](https://issues.redhat.com/browse/OCPBUGS-27871): Update snyk exclusion file [#498](https://github.com/openshift/cluster-api-provider-aws/pull/498)
* [OCPBUGS-26181](https://issues.redhat.com/browse/OCPBUGS-26181): Add Snyk file to exclude vendor directory on scan [#495](https://github.com/openshift/cluster-api-provider-aws/pull/495)
* [OCPBUGS-24928](https://issues.redhat.com/browse/OCPBUGS-24928): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#488](https://github.com/openshift/cluster-api-provider-aws/pull/488)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master [#487](https://github.com/openshift/cluster-api-provider-aws/pull/487)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/7f00d2cde7a40b8438c5e0d5e64a4d15a035883a...60d797bea7418e10ec26ae1ccef4e42249705b6c)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/1d29a74ab7cde7424cac99261b90f23dc7a2fc21)
* [OCPBUGS-31101](https://issues.redhat.com/browse/OCPBUGS-31101): UPSTREAM: 1966: Add missing instances to instance store volumes table [#261](https://github.com/openshift/aws-ebs-csi-driver/pull/261)
* [OCPBUGS-30468](https://issues.redhat.com/browse/OCPBUGS-30468): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#259](https://github.com/openshift/aws-ebs-csi-driver/pull/259)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): UPSTREAM: 1919: Add reserved-volume-attachments [#260](https://github.com/openshift/aws-ebs-csi-driver/pull/260)
* [STOR-1575](https://issues.redhat.com/browse/STOR-1575): Rebase to v1.26.1 for OCP 4.16 [#257](https://github.com/openshift/aws-ebs-csi-driver/pull/257)
* [OCPBUGS-25500](https://issues.redhat.com/browse/OCPBUGS-25500): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#252](https://github.com/openshift/aws-ebs-csi-driver/pull/252)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#248](https://github.com/openshift/aws-ebs-csi-driver/pull/248)
* [OCPBUGS-25549](https://issues.redhat.com/browse/OCPBUGS-25549): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#250](https://github.com/openshift/aws-ebs-csi-driver/pull/250)
* [OCPBUGS-25197](https://issues.redhat.com/browse/OCPBUGS-25197): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#249](https://github.com/openshift/aws-ebs-csi-driver/pull/249)
* [OCPBUGS-25126](https://issues.redhat.com/browse/OCPBUGS-25126): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#247](https://github.com/openshift/aws-ebs-csi-driver/pull/247)
* [OCPBUGS-24867](https://issues.redhat.com/browse/OCPBUGS-24867): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#246](https://github.com/openshift/aws-ebs-csi-driver/pull/246)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/7043c1cca6e17dd3c90006140f6361cf0e776d69...1d29a74ab7cde7424cac99261b90f23dc7a2fc21)
### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2a2b9dd109ba9d4abce11411c96787b21887f929...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/61d60f6ca20443df434456c2f3eeba859634e6a2)
* [OCPBUGS-28325](https://issues.redhat.com/browse/OCPBUGS-28325): add an extra vendor exclude to snyk config [#100](https://github.com/openshift/machine-api-provider-aws/pull/100)
* [OCPCLOUD-2429](https://issues.redhat.com/browse/OCPCLOUD-2429): Rebase k8s to 1.29 and update dependencies [#99](https://github.com/openshift/machine-api-provider-aws/pull/99)
* [OCPBUGS-26187](https://issues.redhat.com/browse/OCPBUGS-26187): Add Snyk file to exclude vendor directory on scan [#98](https://github.com/openshift/machine-api-provider-aws/pull/98)
* [OCPBUGS-24934](https://issues.redhat.com/browse/OCPBUGS-24934): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#94](https://github.com/openshift/machine-api-provider-aws/pull/94)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382...61d60f6ca20443df434456c2f3eeba859634e6a2)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/746491a64a4efc04132ceb641cee52c2ead3facd)
* [OCPBUGS-30711](https://issues.redhat.com/browse/OCPBUGS-30711): Upgrade go-jose module to 4.0.1 [#187](https://github.com/openshift/aws-pod-identity-webhook/pull/187)
* [OCPBUGS-25588](https://issues.redhat.com/browse/OCPBUGS-25588): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#183](https://github.com/openshift/aws-pod-identity-webhook/pull/183)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#181](https://github.com/openshift/aws-pod-identity-webhook/pull/181)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#180](https://github.com/openshift/aws-pod-identity-webhook/pull/180)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/13385034ec9a843a6b40f8b3aec9966ada785115...746491a64a4efc04132ceb641cee52c2ead3facd)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0e9553295ecd02d6ef0aff19dfc1dfe680993112)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Improvements to client timeouts to prevent hangs [#116](https://github.com/openshift/cloud-provider-azure/pull/116)
* [OCPBUGS-28244](https://issues.redhat.com/browse/OCPBUGS-28244): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (de765cc) into master [#104](https://github.com/openshift/cloud-provider-azure/pull/104)
* [OCPBUGS-26124](https://issues.redhat.com/browse/OCPBUGS-26124), [OCPBUGS-27861](https://issues.redhat.com/browse/OCPBUGS-27861): update snyk file [#107](https://github.com/openshift/cloud-provider-azure/pull/107)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Remove concurrent-service-syncs limitation [#106](https://github.com/openshift/cloud-provider-azure/pull/106)
* [OCPCLOUD-2460](https://issues.redhat.com/browse/OCPCLOUD-2460): Adds acr-credential-provider spec file and build script [#105](https://github.com/openshift/cloud-provider-azure/pull/105)
* [OCPBUGS-26115](https://issues.redhat.com/browse/OCPBUGS-26115): Add Snyk file to exclude vendor directory on scan [#103](https://github.com/openshift/cloud-provider-azure/pull/103)
* [OCPBUGS-22556](https://issues.redhat.com/browse/OCPBUGS-22556), [OCPCLOUD-2422](https://issues.redhat.com/browse/OCPCLOUD-2422): Update to kubernetes v1.29 [#88](https://github.com/openshift/cloud-provider-azure/pull/88)
* [OCPBUGS-25590](https://issues.redhat.com/browse/OCPBUGS-25590): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#102](https://github.com/openshift/cloud-provider-azure/pull/102)
* [OCPBUGS-25589](https://issues.redhat.com/browse/OCPBUGS-25589): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#101](https://github.com/openshift/cloud-provider-azure/pull/101)
* [OCPBUGS-25005](https://issues.redhat.com/browse/OCPBUGS-25005): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#100](https://github.com/openshift/cloud-provider-azure/pull/100)
* [OCPBUGS-25003](https://issues.redhat.com/browse/OCPBUGS-25003): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#99](https://github.com/openshift/cloud-provider-azure/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0d799a261f70bbdf546d911f5f8b59e2c324bd16...0e9553295ecd02d6ef0aff19dfc1dfe680993112)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/a81e3b31948468d76ac744bbbb74b0c423fc969e)
* [OCPBUGS-36025](https://issues.redhat.com/browse/OCPBUGS-36025): Update go-retryablehttp to v0.7.7 [#310](https://github.com/openshift/cluster-api-provider-azure/pull/310)
* [OCPBUGS-33083](https://issues.redhat.com/browse/OCPBUGS-33083): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.5 (1f08b9d) into master [#302](https://github.com/openshift/cluster-api-provider-azure/pull/302)
* [OCPBUGS-27450](https://issues.redhat.com/browse/OCPBUGS-27450): add a snyk configuration file [#299](https://github.com/openshift/cluster-api-provider-azure/pull/299)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.0 (7ee3a6a) into master [#298](https://github.com/openshift/cluster-api-provider-azure/pull/298)
* [OCPCLOUD-2443](https://issues.redhat.com/browse/OCPCLOUD-2443): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.12.1 (f32b78b) into master [#297](https://github.com/openshift/cluster-api-provider-azure/pull/297)
* [OCPBUGS-25626](https://issues.redhat.com/browse/OCPBUGS-25626): Add Snyk file to exclude vendor directory on scan [#295](https://github.com/openshift/cluster-api-provider-azure/pull/295)
* [OCPBUGS-24896](https://issues.redhat.com/browse/OCPBUGS-24896): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#293](https://github.com/openshift/cluster-api-provider-azure/pull/293)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/44832d2da09778d7ff4d2413c9e10852f330a55d...a81e3b31948468d76ac744bbbb74b0c423fc969e)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6b55f6fb004454f743aa0f2e1d96010396be4c45)
* [OCPBUGS-30475](https://issues.redhat.com/browse/OCPBUGS-30475): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#78](https://github.com/openshift/azure-disk-csi-driver/pull/78)
* [STOR-1579](https://issues.redhat.com/browse/STOR-1579): Rebase v1.29.3 [#75](https://github.com/openshift/azure-disk-csi-driver/pull/75)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#74](https://github.com/openshift/azure-disk-csi-driver/pull/74)
* [OCPBUGS-25503](https://issues.redhat.com/browse/OCPBUGS-25503): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#71](https://github.com/openshift/azure-disk-csi-driver/pull/71)
* [OCPBUGS-18701](https://issues.redhat.com/browse/OCPBUGS-18701): UPSTREAM: 1904, UPSTREAM: 1917, UPSTREAM: 1955: Update disk number table [#49](https://github.com/openshift/azure-disk-csi-driver/pull/49)
* [OCPBUGS-25569](https://issues.redhat.com/browse/OCPBUGS-25569): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#70](https://github.com/openshift/azure-disk-csi-driver/pull/70)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#69](https://github.com/openshift/azure-disk-csi-driver/pull/69)
* [OCPBUGS-22559](https://issues.redhat.com/browse/OCPBUGS-22559): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#66](https://github.com/openshift/azure-disk-csi-driver/pull/66)
* [OCPBUGS-25050](https://issues.redhat.com/browse/OCPBUGS-25050): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#67](https://github.com/openshift/azure-disk-csi-driver/pull/67)
* [OCPBUGS-24938](https://issues.redhat.com/browse/OCPBUGS-24938): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#65](https://github.com/openshift/azure-disk-csi-driver/pull/65)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d...6b55f6fb004454f743aa0f2e1d96010396be4c45)
### [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/160cf624a88f500de7a1f79e6dd9384bb7d17842...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/7a36778add73d12eb08ff6be357d8d351af651a7)
* [OCPBUGS-39145](https://issues.redhat.com/browse/OCPBUGS-39145): bump mount-utils to treat ENODEV error as corrupted mount [#76](https://github.com/openshift/azure-file-csi-driver/pull/76)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): Rebase v1.29.5 for OCP 4.16 [#64](https://github.com/openshift/azure-file-csi-driver/pull/64)
* [OCPBUGS-32046](https://issues.redhat.com/browse/OCPBUGS-32046): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#60](https://github.com/openshift/azure-file-csi-driver/pull/60)
* [OCPBUGS-31869](https://issues.redhat.com/browse/OCPBUGS-31869): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#59](https://github.com/openshift/azure-file-csi-driver/pull/59)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): use azcopy base image to build driver [#56](https://github.com/openshift/azure-file-csi-driver/pull/56)
* [OCPBUGS-30476](https://issues.redhat.com/browse/OCPBUGS-30476): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#57](https://github.com/openshift/azure-file-csi-driver/pull/57)
* [STOR-1586](https://issues.redhat.com/browse/STOR-1586): Rebase v1.29.3 [#54](https://github.com/openshift/azure-file-csi-driver/pull/54)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#52](https://github.com/openshift/azure-file-csi-driver/pull/52)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#47](https://github.com/openshift/azure-file-csi-driver/pull/47)
* [OCPBUGS-25504](https://issues.redhat.com/browse/OCPBUGS-25504): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#49](https://github.com/openshift/azure-file-csi-driver/pull/49)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): UPSTREAM: <drop>: Regenerate go.mod with go 1.21 [#48](https://github.com/openshift/azure-file-csi-driver/pull/48)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#46](https://github.com/openshift/azure-file-csi-driver/pull/46)
* [OCPBUGS-24874](https://issues.redhat.com/browse/OCPBUGS-24874): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#45](https://github.com/openshift/azure-file-csi-driver/pull/45)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/bcf919dc0467f84192758155aac4976df5054da6...7a36778add73d12eb08ff6be357d8d351af651a7)
### [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/367c4e45899033f7fb7494c0004b83157b6723aa...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/e4e11505b645e2af8eb28c5dc353c41a6740db00)
* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#111](https://github.com/openshift/machine-api-provider-azure/pull/111)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Remove startupScript vmextension lookup [#102](https://github.com/openshift/machine-api-provider-azure/pull/102)
* [OCPBUGS-28309](https://issues.redhat.com/browse/OCPBUGS-28309): add an extra vendor exclude to snyk config [#99](https://github.com/openshift/machine-api-provider-azure/pull/99)
* [OCPBUGS-25940](https://issues.redhat.com/browse/OCPBUGS-25940): Don't create availability set when using spot instances [#91](https://github.com/openshift/machine-api-provider-azure/pull/91)
* [OCPCLOUD-2428](https://issues.redhat.com/browse/OCPCLOUD-2428): Rebase k8s to 1.29 and update dependencies [#94](https://github.com/openshift/machine-api-provider-azure/pull/94)
* [OCPBUGS-26122](https://issues.redhat.com/browse/OCPBUGS-26122): Add Snyk file to exclude vendor directory on scan [#92](https://github.com/openshift/machine-api-provider-azure/pull/92)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Improving performance of creating VMs in Azure [#87](https://github.com/openshift/machine-api-provider-azure/pull/87)
* [OCPBUGS-25591](https://issues.redhat.com/browse/OCPBUGS-25591): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#90](https://github.com/openshift/machine-api-provider-azure/pull/90)
* [OCPBUGS-25008](https://issues.redhat.com/browse/OCPBUGS-25008): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#88](https://github.com/openshift/machine-api-provider-azure/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/615b457bcfa1a40e7900585154952aac8194bed4...e4e11505b645e2af8eb28c5dc353c41a6740db00)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/4aca092a13f62e48c700a910e8f3f0f228a7d822)
* [OCPBUGS-31283](https://issues.redhat.com/browse/OCPBUGS-31283): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#16](https://github.com/openshift/azure-workload-identity/pull/16)
* [OCPBUGS-30712](https://issues.redhat.com/browse/OCPBUGS-30712): Update to go-jose v4.0.1 [#15](https://github.com/openshift/azure-workload-identity/pull/15)
* [OCPBUGS-26203](https://issues.redhat.com/browse/OCPBUGS-26203): Upgrade golang/x/net for CVE-2023-39325 (main) [#12](https://github.com/openshift/azure-workload-identity/pull/12)
* [OCPBUGS-25777](https://issues.redhat.com/browse/OCPBUGS-25777): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#11](https://github.com/openshift/azure-workload-identity/pull/11)
* [OCPBUGS-25543](https://issues.redhat.com/browse/OCPBUGS-25543): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#10](https://github.com/openshift/azure-workload-identity/pull/10)
* [OCPBUGS-24854](https://issues.redhat.com/browse/OCPBUGS-24854): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#8](https://github.com/openshift/azure-workload-identity/pull/8)
* NO-JIRA: UPSTREAM: <carry> Update OWNERS [#9](https://github.com/openshift/azure-workload-identity/pull/9)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1...4aca092a13f62e48c700a910e8f3f0f228a7d822)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)
* [OCPBUGS-44348](https://issues.redhat.com/browse/OCPBUGS-44348): Cherrypick oci ccm fix to 4.16 [#9188](https://github.com/openshift/installer/pull/9188)
* [OCPBUGS-43967](https://issues.redhat.com/browse/OCPBUGS-43967): Revendor assisted service external platform oci [#9150](https://github.com/openshift/installer/pull/9150)
* [OCPBUGS-38930](https://issues.redhat.com/browse/OCPBUGS-38930): import failure when esxi config is not the same in the cluster [#8898](https://github.com/openshift/installer/pull/8898)
* [OCPBUGS-36290](https://issues.redhat.com/browse/OCPBUGS-36290): IBMCloud: Ignore failed VPC regions [#8674](https://github.com/openshift/installer/pull/8674)
* [OCPBUGS-41885](https://issues.redhat.com/browse/OCPBUGS-41885): vSphere - If template is defined skip downloading [#8999](https://github.com/openshift/installer/pull/8999)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 [#9158](https://github.com/openshift/installer/pull/9158)
* [OCPBUGS-43476](https://issues.redhat.com/browse/OCPBUGS-43476): IBMCloud: Handle pagination for subnets [#9102](https://github.com/openshift/installer/pull/9102)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 [#9132](https://github.com/openshift/installer/pull/9132)
* [OCPBUGS-42014](https://issues.redhat.com/browse/OCPBUGS-42014): Update terraform provider for google [#9077](https://github.com/openshift/installer/pull/9077)
* [OCPBUGS-38732](https://issues.redhat.com/browse/OCPBUGS-38732): vsphere, if secureboot is enabled, disable it in the template [#8904](https://github.com/openshift/installer/pull/8904)
* [OCPBUGS-39415](https://issues.redhat.com/browse/OCPBUGS-39415): OpenStack: Install CI dependencies from rpm [#8995](https://github.com/openshift/installer/pull/8995)
* [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971)
* [OCPBUGS-38687](https://issues.redhat.com/browse/OCPBUGS-38687): only allow a single network in failure domain topology [#8875](https://github.com/openshift/installer/pull/8875)
* [OCPBUGS-42062](https://issues.redhat.com/browse/OCPBUGS-42062): OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 [#9036](https://github.com/openshift/installer/pull/9036)
* [OCPBUGS-42012](https://issues.redhat.com/browse/OCPBUGS-42012): Systemd Fails to Parse Multiline EC Keys [#9037](https://github.com/openshift/installer/pull/9037)
* [OCPBUGS-41845](https://issues.redhat.com/browse/OCPBUGS-41845): Bump extract-machine-os timout to 20m [#8997](https://github.com/openshift/installer/pull/8997)
* [OCPBUGS-38964](https://issues.redhat.com/browse/OCPBUGS-38964): IngressController subnet selection in AWS [#8910](https://github.com/openshift/installer/pull/8910)
* [OCPBUGS-42138](https://issues.redhat.com/browse/OCPBUGS-42138): add tested instance type for IBMCloud [#9031](https://github.com/openshift/installer/pull/9031)
* [OCPBUGS-39287](https://issues.redhat.com/browse/OCPBUGS-39287): Fix var_files syntax to work on older version of ansible [#8936](https://github.com/openshift/installer/pull/8936)
* [OCPBUGS-41929](https://issues.redhat.com/browse/OCPBUGS-41929): Add AWS c7g,m7g,r8g to tested instance types [#9009](https://github.com/openshift/installer/pull/9009)
* [OCPBUGS-36855](https://issues.redhat.com/browse/OCPBUGS-36855): Openstack UPI - Reintroduce unique resource names. [#8724](https://github.com/openshift/installer/pull/8724)
* [OCPBUGS-39082](https://issues.redhat.com/browse/OCPBUGS-39082): incorrect folder gen, workaround govmomi vm folder path bug [#8912](https://github.com/openshift/installer/pull/8912)
* [OCPBUGS-39496](https://issues.redhat.com/browse/OCPBUGS-39496): capi/aws/byo-vpc/multi-cidr: fix group rules [#8953](https://github.com/openshift/installer/pull/8953)
* [OCPBUGS-36861](https://issues.redhat.com/browse/OCPBUGS-36861): Updates GCP terraform worker role [#8939](https://github.com/openshift/installer/pull/8939)
* [OCPBUGS-38956](https://issues.redhat.com/browse/OCPBUGS-38956): failed to install Nutanix OCP 4.16 cluster with DHCP [#8905](https://github.com/openshift/installer/pull/8905)
* [OCPBUGS-38822](https://issues.redhat.com/browse/OCPBUGS-38822): upstream capv bug causes session timeout [#8891](https://github.com/openshift/installer/pull/8891)
* [OCPBUGS-39468](https://issues.redhat.com/browse/OCPBUGS-39468): Enable TLS for virtual media in initial ironic deployment [#8955](https://github.com/openshift/installer/pull/8955)
* [OCPBUGS-37606](https://issues.redhat.com/browse/OCPBUGS-37606): vSphere validation fails if dc is in a folder [#8777](https://github.com/openshift/installer/pull/8777)
* [OCPBUGS-39206](https://issues.redhat.com/browse/OCPBUGS-39206): Update GCP Disk Types 4.16 [#8920](https://github.com/openshift/installer/pull/8920)
* [OCPBUGS-39087](https://issues.redhat.com/browse/OCPBUGS-39087): aws: validate public-only subnets configs [#8913](https://github.com/openshift/installer/pull/8913)
* [OCPBUGS-38821](https://issues.redhat.com/browse/OCPBUGS-38821): [release-4.16] Azure: Disable shared key access when using a managed identity [#8855](https://github.com/openshift/installer/pull/8855)
* [OCPBUGS-38302](https://issues.redhat.com/browse/OCPBUGS-38302): upi/aws: update lambda runtime python version [#8897](https://github.com/openshift/installer/pull/8897)
* [OCPBUGS-38826](https://issues.redhat.com/browse/OCPBUGS-38826): aws: add support for clusters with public-only subnets [#8892](https://github.com/openshift/installer/pull/8892)
* [OCPBUGS-38517](https://issues.redhat.com/browse/OCPBUGS-38517): [release-4.16] capi/aws: bump provider for instance register fix [#8848](https://github.com/openshift/installer/pull/8848)
* [OCPBUGS-38196](https://issues.redhat.com/browse/OCPBUGS-38196): Remove timed context for gcp client [#8818](https://github.com/openshift/installer/pull/8818)
* [OCPBUGS-38502](https://issues.redhat.com/browse/OCPBUGS-38502): PowerVS: Fix mad system pool [#8846](https://github.com/openshift/installer/pull/8846)
* [OCPBUGS-37838](https://issues.redhat.com/browse/OCPBUGS-37838): fix bogus analyze message when gather fails [#8794](https://github.com/openshift/installer/pull/8794)
* [OCPBUGS-37492](https://issues.redhat.com/browse/OCPBUGS-37492): openstack: Fix security group tagging [#8767](https://github.com/openshift/installer/pull/8767)
* [OCPBUGS-37607](https://issues.redhat.com/browse/OCPBUGS-37607): bootstrap gather fails in vsphere, only ipv6 address used [#8778](https://github.com/openshift/installer/pull/8778)
* [OCPBUGS-37494](https://issues.redhat.com/browse/OCPBUGS-37494): aws: do not require create permissions when BYO IAM role [#8768](https://github.com/openshift/installer/pull/8768)
* [OCPBUGS-37510](https://issues.redhat.com/browse/OCPBUGS-37510): [release-4.16] aws: bump CAPA for subnet tagging fix [#8772](https://github.com/openshift/installer/pull/8772)
* [OCPBUGS-37180](https://issues.redhat.com/browse/OCPBUGS-37180): ic: fix typo in warning message [#8769](https://github.com/openshift/installer/pull/8769)
* [OCPBUGS-36968](https://issues.redhat.com/browse/OCPBUGS-36968): [release-4.16]: capi/aws: bump provider for ingress rules fix [#8734](https://github.com/openshift/installer/pull/8734)
* [OCPBUGS-36965](https://issues.redhat.com/browse/OCPBUGS-36965): destroy/gcp: set value for DiscardLocalSsd [#8733](https://github.com/openshift/installer/pull/8733)
* [OCPBUGS-36720](https://issues.redhat.com/browse/OCPBUGS-36720): CORS-3582: capi: remove unused feature gates [#8716](https://github.com/openshift/installer/pull/8716)
* [OCPBUGS-36890](https://issues.redhat.com/browse/OCPBUGS-36890): [release-4.16] capi: start controllers after WaitGroup is created [#8726](https://github.com/openshift/installer/pull/8726)
* [OCPBUGS-36091](https://issues.redhat.com/browse/OCPBUGS-36091): [release-4.16] bump go-retryablehttp for CVE fix [#8654](https://github.com/openshift/installer/pull/8654)
* [OCPBUGS-36777](https://issues.redhat.com/browse/OCPBUGS-36777): Cleanup capi artifacts [#8719](https://github.com/openshift/installer/pull/8719)
* [OCPBUGS-36607](https://issues.redhat.com/browse/OCPBUGS-36607): aws: remove terraform configs [#8705](https://github.com/openshift/installer/pull/8705)
* [OCPBUGS-36324](https://issues.redhat.com/browse/OCPBUGS-36324): update RHCOS 4.16 bootimage metadata to 416.94.202406282145-0 [#8692](https://github.com/openshift/installer/pull/8692)
* [OCPBUGS-36447](https://issues.redhat.com/browse/OCPBUGS-36447): capi/aws: disable EKS controller in CAPA [#8694](https://github.com/openshift/installer/pull/8694)
* [OCPBUGS-36351](https://issues.redhat.com/browse/OCPBUGS-36351): vSphere - If the folder pre-exists do not tag [#8683](https://github.com/openshift/installer/pull/8683)
* [OCPBUGS-36286](https://issues.redhat.com/browse/OCPBUGS-36286): PowerVS: Add ibmcloud plugins [#8672](https://github.com/openshift/installer/pull/8672)
* [OCPBUGS-35818](https://issues.redhat.com/browse/OCPBUGS-35818): baremetal: bootstrap: bind icc to localhost [#8632](https://github.com/openshift/installer/pull/8632)
* [OCPBUGS-34457](https://issues.redhat.com/browse/OCPBUGS-34457): [release-4.16] bump envtest binaries version [#8470](https://github.com/openshift/installer/pull/8470)
* [OCPBUGS-35718](https://issues.redhat.com/browse/OCPBUGS-35718): Fix ethertype for masters service router SG creation [#8623](https://github.com/openshift/installer/pull/8623)
* [OCPBUGS-36156](https://issues.redhat.com/browse/OCPBUGS-36156): Configured logger for controller-runtime [#8657](https://github.com/openshift/installer/pull/8657)
* [OCPBUGS-36249](https://issues.redhat.com/browse/OCPBUGS-36249): capi: shutdown local controlplane as the last step [#8670](https://github.com/openshift/installer/pull/8670)
* [OCPBUGS-35470](https://issues.redhat.com/browse/OCPBUGS-35470): add machine series 'A3' and 'C3D' to 'Tested instance types for GCP' [#8614](https://github.com/openshift/installer/pull/8614)
* [OCPBUGS-35722](https://issues.redhat.com/browse/OCPBUGS-35722): Support CAPI provider custom timeouts [#8624](https://github.com/openshift/installer/pull/8624)
* [OCPBUGS-35733](https://issues.redhat.com/browse/OCPBUGS-35733): [release-4.16] remove terraform libvirt from the installer [#8626](https://github.com/openshift/installer/pull/8626)
* [OCPBUGS-35531](https://issues.redhat.com/browse/OCPBUGS-35531): For GCP, only configure kmsKeyServiceAccount if set [#8613](https://github.com/openshift/installer/pull/8613)
* [OCPBUGS-35529](https://issues.redhat.com/browse/OCPBUGS-35529): capi aws: append random string in caller ref [#8612](https://github.com/openshift/installer/pull/8612)
* [OCPBUGS-35706](https://issues.redhat.com/browse/OCPBUGS-35706): capi/aws: allow 6443 for private cluster NLB [#8622](https://github.com/openshift/installer/pull/8622)
* [OCPBUGS-35570](https://issues.redhat.com/browse/OCPBUGS-35570): capi/aws: retry SSH ingress rule removal [#8618](https://github.com/openshift/installer/pull/8618)
* [OCPBUGS-35515](https://issues.redhat.com/browse/OCPBUGS-35515): SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool [#8608](https://github.com/openshift/installer/pull/8608)
* [OCPBUGS-35493](https://issues.redhat.com/browse/OCPBUGS-35493): Validate OnHostMaintenance and ConfidentialCompute [#8606](https://github.com/openshift/installer/pull/8606)
* [OCPBUGS-35435](https://issues.redhat.com/browse/OCPBUGS-35435): vsphere - allow network selection on cluster name [#8595](https://github.com/openshift/installer/pull/8595)
* [OCPBUGS-35527](https://issues.redhat.com/browse/OCPBUGS-35527): [release-4.16] bump github.com/container/images for CVE fix [#8611](https://github.com/openshift/installer/pull/8611)
* [OCPBUGS-35471](https://issues.redhat.com/browse/OCPBUGS-35471): capi/aws: disable CAPA's TagUnmanagedNetworkResources feature gate [#8604](https://github.com/openshift/installer/pull/8604)
* [OCPBUGS-35023](https://issues.redhat.com/browse/OCPBUGS-35023): azure: bump profile used for network [#8537](https://github.com/openshift/installer/pull/8537)
* [OCPBUGS-35448](https://issues.redhat.com/browse/OCPBUGS-35448): [release-4.16] capi/aws: bump provider for fixes [#8598](https://github.com/openshift/installer/pull/8598)
* [OCPBUGS-35460](https://issues.redhat.com/browse/OCPBUGS-35460): save etcd data to its own directory [#8600](https://github.com/openshift/installer/pull/8600)
* [OCPBUGS-35384](https://issues.redhat.com/browse/OCPBUGS-35384): Add ELB V2 permission to set security groups on API server load balancer [#8589](https://github.com/openshift/installer/pull/8589)
* [OCPBUGS-35344](https://issues.redhat.com/browse/OCPBUGS-35344): baremetal: check if HardwareDetails is nil [#8579](https://github.com/openshift/installer/pull/8579)
* [OCPBUGS-35392](https://issues.redhat.com/browse/OCPBUGS-35392): aws: delete ignition bucket on bootstrap destroy [#8590](https://github.com/openshift/installer/pull/8590)
* [OCPBUGS-35383](https://issues.redhat.com/browse/OCPBUGS-35383): capi: use polling instead of exponential backoff [#8588](https://github.com/openshift/installer/pull/8588)
* [OCPBUGS-35372](https://issues.redhat.com/browse/OCPBUGS-35372): openstack: Attach a bootstrap FIP to the cluster network port [#8585](https://github.com/openshift/installer/pull/8585)
* [OCPBUGS-35323](https://issues.redhat.com/browse/OCPBUGS-35323): Add S3 permission to allow attaching S3 bucket policy [#8576](https://github.com/openshift/installer/pull/8576)
* [OCPBUGS-35379](https://issues.redhat.com/browse/OCPBUGS-35379): capi/aws: do not set proxy for masters [#8586](https://github.com/openshift/installer/pull/8586)
* [OCPBUGS-35253](https://issues.redhat.com/browse/OCPBUGS-35253): AWS remove extra tags from awsmachines for security groups and subnets [#8569](https://github.com/openshift/installer/pull/8569)
* [OCPBUGS-35235](https://issues.redhat.com/browse/OCPBUGS-35235): baremetal: Don't always enable provisioning-interface.service [#8563](https://github.com/openshift/installer/pull/8563)
* [OCPBUGS-35302](https://issues.redhat.com/browse/OCPBUGS-35302): Prevent multiple invocations on CAPI [#8571](https://github.com/openshift/installer/pull/8571)
* [OCPBUGS-35101](https://issues.redhat.com/browse/OCPBUGS-35101): [release-4.16] Add 4 new regions for PowerVS [#8533](https://github.com/openshift/installer/pull/8533)
* [OCPBUGS-35312](https://issues.redhat.com/browse/OCPBUGS-35312): capi/aws: rename `preserveBootstrapIgnition` [#8574](https://github.com/openshift/installer/pull/8574)
* [OCPBUGS-35192](https://issues.redhat.com/browse/OCPBUGS-35192): write etcd and kube-apiserver logs [#8558](https://github.com/openshift/installer/pull/8558)
* [OCPBUGS-34760](https://issues.redhat.com/browse/OCPBUGS-34760): capi/aws: fix setting custom AMI [#8520](https://github.com/openshift/installer/pull/8520)
* [OCPBUGS-35243](https://issues.redhat.com/browse/OCPBUGS-35243): capi: do not override KUBECONFIG [#8566](https://github.com/openshift/installer/pull/8566)
* [OCPBUGS-35224](https://issues.redhat.com/browse/OCPBUGS-35224): PowerVS: Destroy DHCP in ERROR state [#8561](https://github.com/openshift/installer/pull/8561)
* [OCPBUGS-35151](https://issues.redhat.com/browse/OCPBUGS-35151): wait for ip addresses to be present on machines [#8554](https://github.com/openshift/installer/pull/8554)
* [OCPBUGS-34499](https://issues.redhat.com/browse/OCPBUGS-34499): unique AWS HostedZone Caller Ref [#8476](https://github.com/openshift/installer/pull/8476)
* [OCPBUGS-35103](https://issues.redhat.com/browse/OCPBUGS-35103): OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas [#8553](https://github.com/openshift/installer/pull/8553)
* [OCPBUGS-35098](https://issues.redhat.com/browse/OCPBUGS-35098): capi/aws: add BootstrapDestroyer guard [#8552](https://github.com/openshift/installer/pull/8552)
* [OCPBUGS-35088](https://issues.redhat.com/browse/OCPBUGS-35088): PowerVS: fix AddIPToLoadBalancerPool [#8551](https://github.com/openshift/installer/pull/8551)
* [OCPBUGS-35030](https://issues.redhat.com/browse/OCPBUGS-35030): Increase timeout for bootstrap complete [#8539](https://github.com/openshift/installer/pull/8539)
* [OCPBUGS-35049](https://issues.redhat.com/browse/OCPBUGS-35049): capi/aws: don't use S3 stub for masters [#8548](https://github.com/openshift/installer/pull/8548)
* [OCPBUGS-35044](https://issues.redhat.com/browse/OCPBUGS-35044): aws: don't always require s3:Delete* permissions [#8547](https://github.com/openshift/installer/pull/8547)
* [OCPBUGS-34620](https://issues.redhat.com/browse/OCPBUGS-34620): Use infrastructure API to detect cluster topology [#8499](https://github.com/openshift/installer/pull/8499)
* [OCPBUGS-34822](https://issues.redhat.com/browse/OCPBUGS-34822): [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled [#8524](https://github.com/openshift/installer/pull/8524)
* [OCPBUGS-34976](https://issues.redhat.com/browse/OCPBUGS-34976): [release-4.16] aws: terraform: add spot instance support for masters [#8526](https://github.com/openshift/installer/pull/8526)
* [OCPBUGS-34707](https://issues.redhat.com/browse/OCPBUGS-34707): attach tag to folder,fix folder destroy [#8509](https://github.com/openshift/installer/pull/8509)
* [OCPBUGS-33794](https://issues.redhat.com/browse/OCPBUGS-33794): Make Ingress capability required for standalone OpenShift [#8528](https://github.com/openshift/installer/pull/8528)
* [OCPBUGS-34628](https://issues.redhat.com/browse/OCPBUGS-34628): tfvars: change asset's name [#8501](https://github.com/openshift/installer/pull/8501)
* [OCPBUGS-34388](https://issues.redhat.com/browse/OCPBUGS-34388): Add --dir /tmp to node-joiner-monitor.sh [#8461](https://github.com/openshift/installer/pull/8461)
* [OCPBUGS-34728](https://issues.redhat.com/browse/OCPBUGS-34728): [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix [#8506](https://github.com/openshift/installer/pull/8506)
* [OCPBUGS-34693](https://issues.redhat.com/browse/OCPBUGS-34693): update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 [#8517](https://github.com/openshift/installer/pull/8517)
* [OCPBUGS-34419](https://issues.redhat.com/browse/OCPBUGS-34419): PowerVS: update capi ibmcloud to release 0 8 0 [#8465](https://github.com/openshift/installer/pull/8465)
* [OCPBUGS-34623](https://issues.redhat.com/browse/OCPBUGS-34623), [OCPBUGS-34625](https://issues.redhat.com/browse/OCPBUGS-34625): capv - missing cores/socket,disk type [#8500](https://github.com/openshift/installer/pull/8500)
* [OCPBUGS-34427](https://issues.redhat.com/browse/OCPBUGS-34427): aws/cluster: restrict SSH on private clusters [#8467](https://github.com/openshift/installer/pull/8467)
* [OCPBUGS-34528](https://issues.redhat.com/browse/OCPBUGS-34528): Nutanix IPI install with capi failed to set bootType [#8481](https://github.com/openshift/installer/pull/8481)
* [OCPBUGS-31845](https://issues.redhat.com/browse/OCPBUGS-31845): Detect Release Image Arch in a Disconnected Env [#8490](https://github.com/openshift/installer/pull/8490)
* [OCPBUGS-33962](https://issues.redhat.com/browse/OCPBUGS-33962): [release-4.16] Remove vSphere Terraform [#8431](https://github.com/openshift/installer/pull/8431)
* [OCPBUGS-34506](https://issues.redhat.com/browse/OCPBUGS-34506): [release-4.16] bump golang-protobuf for CVE fix [#8478](https://github.com/openshift/installer/pull/8478)
* [OCPBUGS-34417](https://issues.redhat.com/browse/OCPBUGS-34417): capi/aws: don't modify BYO role's policy [#8463](https://github.com/openshift/installer/pull/8463)
* [OCPBUGS-34220](https://issues.redhat.com/browse/OCPBUGS-34220): Reintroduce CAPI-installer to 4.16 [#8451](https://github.com/openshift/installer/pull/8451)
* [OCPBUGS-33976](https://issues.redhat.com/browse/OCPBUGS-33976): Enable leader election for baremetal operator [#8435](https://github.com/openshift/installer/pull/8435)
* Trt-1674: 4.16 capi revert 1 [#8434](https://github.com/openshift/installer/pull/8434)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): [release-4.16] GA CAPI Installer [#8428](https://github.com/openshift/installer/pull/8428)
* [OCPBUGS-33668](https://issues.redhat.com/browse/OCPBUGS-33668): Changed folder name to match cluster name instead of infra-id. [#8414](https://github.com/openshift/installer/pull/8414)
* [AGENT-903](https://issues.redhat.com/browse/AGENT-903): monitor-add-nodes should only show CSRs matching node [#8376](https://github.com/openshift/installer/pull/8376)
* [CORS-3480](https://issues.redhat.com/browse/CORS-3480): aws/sdk: remove sdk provisioner [#8358](https://github.com/openshift/installer/pull/8358)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): Always collect clusterapi manifests [#8411](https://github.com/openshift/installer/pull/8411)
* [OCPBUGS-33709](https://issues.redhat.com/browse/OCPBUGS-33709): GCP mixup when using the ignition shim vs the signed url [#8342](https://github.com/openshift/installer/pull/8342)
* [CORS-3297](https://issues.redhat.com/browse/CORS-3297): Add GCP firewall rule to access bootstrap node via ssh [#8374](https://github.com/openshift/installer/pull/8374)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi-aws delete bootstrap ssh rule [#8359](https://github.com/openshift/installer/pull/8359)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): baremetal: always write masters file [#8365](https://github.com/openshift/installer/pull/8365)
* [OCPBUGS-33531](https://issues.redhat.com/browse/OCPBUGS-33531): update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 [#8409](https://github.com/openshift/installer/pull/8409)
* no-jira: Vendor api changes for tech preview with capg [#8407](https://github.com/openshift/installer/pull/8407)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure ignite control plane machines [#8126](https://github.com/openshift/installer/pull/8126)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add missing permission for IPv4 pools [#8408](https://github.com/openshift/installer/pull/8408)
* [OCPBUGS-33649](https://issues.redhat.com/browse/OCPBUGS-33649): add quota support to ca-west-1 [#8406](https://github.com/openshift/installer/pull/8406)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): capi: collect generated assets in hidden dir and save into log bundle [#8387](https://github.com/openshift/installer/pull/8387)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: aarch64-related fixes [#8385](https://github.com/openshift/installer/pull/8385)
* [OCPBUGS-33610](https://issues.redhat.com/browse/OCPBUGS-33610): fix API detection, azure bootstrap disk size, and use get to verify endpoint [#8371](https://github.com/openshift/installer/pull/8371)
* no-jira: Removing unused terraform variables [#8360](https://github.com/openshift/installer/pull/8360)
* [OCPBUGS-33502](https://issues.redhat.com/browse/OCPBUGS-33502): capi/aws: fix setting IMDSv2 value [#8399](https://github.com/openshift/installer/pull/8399)
* [CORS-3516](https://issues.redhat.com/browse/CORS-3516): hack: do not execute cross-compiled binaries [#8397](https://github.com/openshift/installer/pull/8397)
* [OCPBUGS-33578](https://issues.redhat.com/browse/OCPBUGS-33578): capi/aws: fix HostedZone ID lookup [#8396](https://github.com/openshift/installer/pull/8396)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): improve bootstrap logic to wait for at least 2 apiserver instances [#8394](https://github.com/openshift/installer/pull/8394)
* [OKD-213](https://issues.redhat.com/browse/OKD-213): Reference stream-coreos instead of centos-stream-coreos-9 [#8356](https://github.com/openshift/installer/pull/8356)
* [OCPBUGS-33470](https://issues.redhat.com/browse/OCPBUGS-33470): use read/write cache on azure masters [#8380](https://github.com/openshift/installer/pull/8380)
* no-jira: AzureMachines: set disk caching to ReadWrite [#8390](https://github.com/openshift/installer/pull/8390)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): Change $@ to "$*" to fix shellcheck [#8402](https://github.com/openshift/installer/pull/8402)
* [OCPBUGS-33481](https://issues.redhat.com/browse/OCPBUGS-33481): set the node tag used by CAPG for CloudProviderConfig [#8386](https://github.com/openshift/installer/pull/8386)
* [OCPBUGS-23022](https://issues.redhat.com/browse/OCPBUGS-23022): Installer should not complain when API and API-INT are resolved. [#7701](https://github.com/openshift/installer/pull/7701)
* no-jira: vendor: capi-installer in tech preview [#8372](https://github.com/openshift/installer/pull/8372)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): capa/machines: fix zone placement for control planes [#8347](https://github.com/openshift/installer/pull/8347)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Changed vsphere CPMS to not include fields controlled by failure domains. [#8354](https://github.com/openshift/installer/pull/8354)
* [AGENT-872](https://issues.redhat.com/browse/AGENT-872): Generate JWT token [#8110](https://github.com/openshift/installer/pull/8110)
* no-jira: vSphere - update owners aliases [#8384](https://github.com/openshift/installer/pull/8384)
* [AGENT-906](https://issues.redhat.com/browse/AGENT-906): Script to run monitor-add-nodes in cluster [#8294](https://github.com/openshift/installer/pull/8294)
* [OCPBUGS-33430](https://issues.redhat.com/browse/OCPBUGS-33430): Fix CAPI installation typo [#8375](https://github.com/openshift/installer/pull/8375)
* [CORS-3471](https://issues.redhat.com/browse/CORS-3471): standalone destroy bootstrap support with capi [#8350](https://github.com/openshift/installer/pull/8350)
* [CORS-3477](https://issues.redhat.com/browse/CORS-3477): hack: build capi + providers by default [#8357](https://github.com/openshift/installer/pull/8357)
* [OCPBUGS-33189](https://issues.redhat.com/browse/OCPBUGS-33189): OCPBUGS-33006: baremetal: correct libvirt defaults [#8366](https://github.com/openshift/installer/pull/8366)
* [OCPBUGS-33157](https://issues.redhat.com/browse/OCPBUGS-33157): baremetal: pause provisioning [#8346](https://github.com/openshift/installer/pull/8346)
* NO-ISSUE: baremetal: disable bmo webhook on bootstrap [#8340](https://github.com/openshift/installer/pull/8340)
* [OCPBUGS-33240](https://issues.redhat.com/browse/OCPBUGS-33240): avoid FAT32 error messages when generating the agent ISO [#8353](https://github.com/openshift/installer/pull/8353)
* no-jira: Private domains in survey for PowerVS [#8303](https://github.com/openshift/installer/pull/8303)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images: use pre-built KAS/etcd binaries [#8343](https://github.com/openshift/installer/pull/8343)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Convert storage policy id to SpbmStoragePolicy. [#8352](https://github.com/openshift/installer/pull/8352)
* no-jira: Power VS: Refactor `InfraReady` to use metadata client [#8337](https://github.com/openshift/installer/pull/8337)
* [CORS-3466](https://issues.redhat.com/browse/CORS-3466): CAPG set instance group name [#8314](https://github.com/openshift/installer/pull/8314)
* [MULTIARCH-4633](https://issues.redhat.com/browse/MULTIARCH-4633): Power VS: Configure load balancers for the private scenario [#8331](https://github.com/openshift/installer/pull/8331)
* [OCPBUGS-26216](https://issues.redhat.com/browse/OCPBUGS-26216): Fix parameter used to disable smt for ppc64 systems [#8178](https://github.com/openshift/installer/pull/8178)
* [COS-2744](https://issues.redhat.com/browse/COS-2744): update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 [#8335](https://github.com/openshift/installer/pull/8335)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): baremetal: write masters.json file [#8336](https://github.com/openshift/installer/pull/8336)
* no-jira: azure: Add securityProfile to control plane machines [#8334](https://github.com/openshift/installer/pull/8334)
* no-jira: CAPI-Install Feature Gates per Platform [#8311](https://github.com/openshift/installer/pull/8311)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Added support for secure boot and storage policies to UPI pwsh. [#8328](https://github.com/openshift/installer/pull/8328)
* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): images: move container images to RHEL 9 [#8196](https://github.com/openshift/installer/pull/8196)
* [AGENT-864](https://issues.redhat.com/browse/AGENT-864): cleanup dnf cache after installing node-joiner reqs [#8329](https://github.com/openshift/installer/pull/8329)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: use ControlPlane.Replicas [#8322](https://github.com/openshift/installer/pull/8322)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): docs fix [#8325](https://github.com/openshift/installer/pull/8325)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: set bootstrap domain arch [#8317](https://github.com/openshift/installer/pull/8317)
* [OCPBUGS-33024](https://issues.redhat.com/browse/OCPBUGS-33024): agent: escape '%' in proxy settings [#8320](https://github.com/openshift/installer/pull/8320)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): fix oc dependency in installer images [#8326](https://github.com/openshift/installer/pull/8326)
* [OCPBUGS-29968](https://issues.redhat.com/browse/OCPBUGS-29968): Generate ZTP manifests with correct Group/Version/Kind metadata [#8068](https://github.com/openshift/installer/pull/8068)
* [CORS-3437](https://issues.redhat.com/browse/CORS-3437): infra/capi: add provisioning timeout [#8307](https://github.com/openshift/installer/pull/8307)
* [SPLAT-1596](https://issues.redhat.com/browse/SPLAT-1596): Created new function to workaround issue with Set-HardDisk. [#8315](https://github.com/openshift/installer/pull/8315)
* [CORS-3214](https://issues.redhat.com/browse/CORS-3214): capi-aws - Wavelength Zones network provisioning [#8174](https://github.com/openshift/installer/pull/8174)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): node-joiner cluster script [#8242](https://github.com/openshift/installer/pull/8242)
* [OSASINFRA-3434](https://issues.redhat.com/browse/OSASINFRA-3434): Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests [#8021](https://github.com/openshift/installer/pull/8021)
* [CORS-2893](https://issues.redhat.com/browse/CORS-2893): capi-aws: implement preserveBootstrapIgnition [#8313](https://github.com/openshift/installer/pull/8313)
* [OCPBUGS-4466](https://issues.redhat.com/browse/OCPBUGS-4466): Add check for compact-cluster install on GCP, AWS & Azure [#8226](https://github.com/openshift/installer/pull/8226)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images/altinfra: add etcd/kas binaries from containers [#8309](https://github.com/openshift/installer/pull/8309)
* [CORS-2899](https://issues.redhat.com/browse/CORS-2899): AWS/CAPI Local Zones network provisioning [#8173](https://github.com/openshift/installer/pull/8173)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: template the number of master nodes [#8316](https://github.com/openshift/installer/pull/8316)
* [OCPBUGS-32519](https://issues.redhat.com/browse/OCPBUGS-32519): Fix appliance CI jobs [#8297](https://github.com/openshift/installer/pull/8297)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): fix ec2:DisassociateAddress requirement [#8296](https://github.com/openshift/installer/pull/8296)
* [OCPBUGS-32292](https://issues.redhat.com/browse/OCPBUGS-32292): Remove deprecated replace directives [#8271](https://github.com/openshift/installer/pull/8271)
* no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 [#8310](https://github.com/openshift/installer/pull/8310)
* [CORS-3076](https://issues.redhat.com/browse/CORS-3076): azure: Add additional tags to AzureCluster [#8301](https://github.com/openshift/installer/pull/8301)
* [CORS-3294](https://issues.redhat.com/browse/CORS-3294): CAPA health check configuration for control plane ELBv2 [#8223](https://github.com/openshift/installer/pull/8223)
* [CORS-3470](https://issues.redhat.com/browse/CORS-3470): capi/aws: add custom endpoint support. [#8306](https://github.com/openshift/installer/pull/8306)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Updating CI image to include qemu-kvm [#8312](https://github.com/openshift/installer/pull/8312)
* [MULTIARCH-4616](https://issues.redhat.com/browse/MULTIARCH-4616): Power VS: Add ServiceEndpoints for endpoint overrides [#8292](https://github.com/openshift/installer/pull/8292)
* no-jira: cluster-api/aws: bump capa to latest version [#8288](https://github.com/openshift/installer/pull/8288)
* [OCPBUGS-32306](https://issues.redhat.com/browse/OCPBUGS-32306): GCP Destroy find regional and global addresses [#8275](https://github.com/openshift/installer/pull/8275)
* [OCPBUGS-32517](https://issues.redhat.com/browse/OCPBUGS-32517): Ensure worker BMH's get unpaused [#8299](https://github.com/openshift/installer/pull/8299)
* [OCPBUGS-32591](https://issues.redhat.com/browse/OCPBUGS-32591): GCP Destroy target pools fix misleading log [#8298](https://github.com/openshift/installer/pull/8298)
* [CORS-3260](https://issues.redhat.com/browse/CORS-3260): CAPI: Create GCP Internal LB [#8151](https://github.com/openshift/installer/pull/8151)
* [OCPBUGS-15845](https://issues.redhat.com/browse/OCPBUGS-15845): Check host for compatibility with target cluster config [#7566](https://github.com/openshift/installer/pull/7566)
* no-jira: bump golangci lint to 1.54.2 [#8291](https://github.com/openshift/installer/pull/8291)
* [OCPBUGS-32425](https://issues.redhat.com/browse/OCPBUGS-32425): Test for the presence of "provisioned" server [#8289](https://github.com/openshift/installer/pull/8289)
* [SPLAT-1585](https://issues.redhat.com/browse/SPLAT-1585): capv - allow no auth to vcenter [#8276](https://github.com/openshift/installer/pull/8276)
* [SPLAT-1208](https://issues.redhat.com/browse/SPLAT-1208): replace UPI terraform with powercli [#7699](https://github.com/openshift/installer/pull/7699)
* [OCPBUGS-29765](https://issues.redhat.com/browse/OCPBUGS-29765): Fills CIS or DNS CRN in Metadata, never both [#8057](https://github.com/openshift/installer/pull/8057)
* [OCPBUGS-32042](https://issues.redhat.com/browse/OCPBUGS-32042): fix usage of addtionalTrustBundle field [#8253](https://github.com/openshift/installer/pull/8253)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): Remove terraform libvirt provider [#8160](https://github.com/openshift/installer/pull/8160)
* [MULTIARCH-4549](https://issues.redhat.com/browse/MULTIARCH-4549): Logic for creating private DNS records for PowerVS CAPI [#8246](https://github.com/openshift/installer/pull/8246)
* [OCPSTRAT-915](https://issues.redhat.com/browse/OCPSTRAT-915): Nutanix capi support [#8211](https://github.com/openshift/installer/pull/8211)
* [OCPBUGS-32133](https://issues.redhat.com/browse/OCPBUGS-32133): GCP: Fixing GCP Bootstraping [#8248](https://github.com/openshift/installer/pull/8248)
* [METAL-939](https://issues.redhat.com/browse/METAL-939): baremetal: monitor bootstrap process [#8181](https://github.com/openshift/installer/pull/8181)
* no-jira: gather: replace deprecated errors package [#8280](https://github.com/openshift/installer/pull/8280)
* no-jira: azure: Update capz version to 1.14.2 [#8268](https://github.com/openshift/installer/pull/8268)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add `ec2:DisassociateAddress` permission [#8247](https://github.com/openshift/installer/pull/8247)
* [OCPBUGS-31563](https://issues.redhat.com/browse/OCPBUGS-31563): sdk/aws: add ssh security group rule for compute [#8229](https://github.com/openshift/installer/pull/8229)
* [MULTIARCH-4550](https://issues.redhat.com/browse/MULTIARCH-4550): Power VS: Use a custom resolver when publish strategy is Internal [#8243](https://github.com/openshift/installer/pull/8243)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678), [OCPBUGS-14478](https://issues.redhat.com/browse/OCPBUGS-14478): Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x [#8205](https://github.com/openshift/installer/pull/8205)
* [CORS-3050](https://issues.redhat.com/browse/CORS-3050): capi/aws: copy AMI to target region, if needed [#8157](https://github.com/openshift/installer/pull/8157)
* [SPLAT-1592](https://issues.redhat.com/browse/SPLAT-1592): bump capv to v1.9.3 [#8267](https://github.com/openshift/installer/pull/8267)
* [OCPBUGS-30774](https://issues.redhat.com/browse/OCPBUGS-30774): always save serial logs if they were gathered [#8263](https://github.com/openshift/installer/pull/8263)
* [CORS-3261](https://issues.redhat.com/browse/CORS-3261): GCP cluster api add disk encryption [#8222](https://github.com/openshift/installer/pull/8222)
* [CORS-3419](https://issues.redhat.com/browse/CORS-3419), [OCPBUGS-30941](https://issues.redhat.com/browse/OCPBUGS-30941): Include baremetal IPI in openshift-installer [#8161](https://github.com/openshift/installer/pull/8161)
* no-jira: PowerVS: Open port 10258 [#8261](https://github.com/openshift/installer/pull/8261)
* [OCPBUGS-31711](https://issues.redhat.com/browse/OCPBUGS-31711): AWS update explain docs [#8258](https://github.com/openshift/installer/pull/8258)
* [OCPBUGS-27965](https://issues.redhat.com/browse/OCPBUGS-27965): escape '%' in proxy settings [#8265](https://github.com/openshift/installer/pull/8265)
* [OCPBUGS-32174](https://issues.redhat.com/browse/OCPBUGS-32174): save correct bootstrap public IP [#8264](https://github.com/openshift/installer/pull/8264)
* [CORS-3420](https://issues.redhat.com/browse/CORS-3420): Remove libvirt platform from openshift-baremetal-install [#8244](https://github.com/openshift/installer/pull/8244)
* no-jira: capi: replace deprecated `--metrics-bind-addr` arg [#8251](https://github.com/openshift/installer/pull/8251)
* [CORS-3436](https://issues.redhat.com/browse/CORS-3436): capi: save log output to file [#8218](https://github.com/openshift/installer/pull/8218)
* no-jira: PowerVS: Add destroy Power Server subnets [#8260](https://github.com/openshift/installer/pull/8260)
* [OCPBUGS-32091](https://issues.redhat.com/browse/OCPBUGS-32091): Add Top-level Context for Create Commands [#8063](https://github.com/openshift/installer/pull/8063)
* [CORS-3063](https://issues.redhat.com/browse/CORS-3063): Support control plane disk encryption [#8124](https://github.com/openshift/installer/pull/8124)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure CAPI Ignite Bootstrap [#8255](https://github.com/openshift/installer/pull/8255)
* no-jira: PowerVS: add AddIPToLoadBalancerPool [#8257](https://github.com/openshift/installer/pull/8257)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump API version to promote vSphereStaticIPs from TechPreview. [#7943](https://github.com/openshift/installer/pull/7943)
* no-jira: capi/aws: bump controller log level to debug [#8252](https://github.com/openshift/installer/pull/8252)
* [CORS-3254](https://issues.redhat.com/browse/CORS-3254): Update google.golang.org/api/cloudresourcemanager library version [#8213](https://github.com/openshift/installer/pull/8213)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Update the CI image with virt-install [#8259](https://github.com/openshift/installer/pull/8259)
* [CORS-3218](https://issues.redhat.com/browse/CORS-3218): GCP Remove the use case of users passing contents for json secret data [#8234](https://github.com/openshift/installer/pull/8234)
* [OCPBUGS-27844](https://issues.redhat.com/browse/OCPBUGS-27844): Fix task for attaching IPv6 subnet to router. [#8087](https://github.com/openshift/installer/pull/8087)
* [CORS-3270](https://issues.redhat.com/browse/CORS-3270): azure: tag installer-created LB resources [#8236](https://github.com/openshift/installer/pull/8236)
* [OCPBUGS-31813](https://issues.redhat.com/browse/OCPBUGS-31813): AWS: bump CCO for permission fix [#8233](https://github.com/openshift/installer/pull/8233)
* [CORS-3289](https://issues.redhat.com/browse/CORS-3289), [CORS-3308](https://issues.redhat.com/browse/CORS-3308), [CORS-3426](https://issues.redhat.com/browse/CORS-3426): Bump CAPA provider for various fixes [#8232](https://github.com/openshift/installer/pull/8232)
* [OCPBUGS-32041](https://issues.redhat.com/browse/OCPBUGS-32041): update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 [#8256](https://github.com/openshift/installer/pull/8256)
* no-jira: docs: Fix typos [#8245](https://github.com/openshift/installer/pull/8245)
* no-jira:PowerVS: Wait for IPs [#8239](https://github.com/openshift/installer/pull/8239)
* [CORS-3075](https://issues.redhat.com/browse/CORS-3075): Allow for installation in existing resource group [#8123](https://github.com/openshift/installer/pull/8123)
* [CORS-3446](https://issues.redhat.com/browse/CORS-3446): Add instructions for obtaining correct binary [#8230](https://github.com/openshift/installer/pull/8230)
* [AGENT-858](https://issues.redhat.com/browse/AGENT-858): Agent day2 ignition services [#8093](https://github.com/openshift/installer/pull/8093)
* [CORS-3418](https://issues.redhat.com/browse/CORS-3418): images: move installer images to static builds [#8215](https://github.com/openshift/installer/pull/8215)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capi/aws: support ignition proxy and CA bundle [#8170](https://github.com/openshift/installer/pull/8170)
* [OSASINFRA-3365](https://issues.redhat.com/browse/OSASINFRA-3365): clusterapi: Add worker asset to PreProvision [#8237](https://github.com/openshift/installer/pull/8237)
* [HIVE-2476](https://issues.redhat.com/browse/HIVE-2476): OpenStack.MachineSets(): Allow nil Replicas [#8227](https://github.com/openshift/installer/pull/8227)
* [CORS-3195](https://issues.redhat.com/browse/CORS-3195): Azure CAPI Supplemental Load Balancers [#8115](https://github.com/openshift/installer/pull/8115)
* no-jira: PowerVS: Set VPC service region [#8217](https://github.com/openshift/installer/pull/8217)
* [OCPBUGS-12890](https://issues.redhat.com/browse/OCPBUGS-12890): Create bucket, signed url and use proxy info for installs [#8056](https://github.com/openshift/installer/pull/8056)
* no-jira: PowerVS: Fix COS region and VPC subnets [#8219](https://github.com/openshift/installer/pull/8219)
* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [OCPBUGS-30641](https://issues.redhat.com/browse/OCPBUGS-30641): Enable deploy by Service ID on PowerVS [#8111](https://github.com/openshift/installer/pull/8111)
* [CORS-3288](https://issues.redhat.com/browse/CORS-3288): bump CAPA for LB scheme fix [#8114](https://github.com/openshift/installer/pull/8114)
* no-jira: machines/aws: fix subnet filter comment [#8120](https://github.com/openshift/installer/pull/8120)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: bootstrap: rename master label [#8107](https://github.com/openshift/installer/pull/8107)
* [OCPBUGS-29388](https://issues.redhat.com/browse/OCPBUGS-29388): upi: aws: fix typo in worker templates [#8112](https://github.com/openshift/installer/pull/8112)
* [OSASINFRA-3362](https://issues.redhat.com/browse/OSASINFRA-3362): Fix CAPI bootstrap deletion [#8104](https://github.com/openshift/installer/pull/8104)
* [OCPBUGS-24415](https://issues.redhat.com/browse/OCPBUGS-24415), [OCPVE-661](https://issues.redhat.com/browse/OCPVE-661): bump openshift/api version [#7546](https://github.com/openshift/installer/pull/7546)
* [MULTIARCH-4095](https://issues.redhat.com/browse/MULTIARCH-4095): Generate PowerVS machine manifests for CAPI [#8020](https://github.com/openshift/installer/pull/8020)
* [CORS-2900](https://issues.redhat.com/browse/CORS-2900): CAPI AWS IAM [#8031](https://github.com/openshift/installer/pull/8031)
* [OCPBUGS-30200](https://issues.redhat.com/browse/OCPBUGS-30200): Authn with platform-services-go-sdk for PowerVS [#8025](https://github.com/openshift/installer/pull/8025)
* [CORS-3281](https://issues.redhat.com/browse/CORS-3281): IBMCloud: initial CAPI infrastructure [#8090](https://github.com/openshift/installer/pull/8090)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): Bump CAPA Dependencies for Secondary Load Balancers [#8088](https://github.com/openshift/installer/pull/8088)
* [SPLAT-1460](https://issues.redhat.com/browse/SPLAT-1460): Make vSphere default ResourcePool formatting not contain double slash. [#8044](https://github.com/openshift/installer/pull/8044)
* [CORS-3212](https://issues.redhat.com/browse/CORS-3212): CAPG Add ignition for CAPG machines [#8027](https://github.com/openshift/installer/pull/8027)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): Remove terraform-provider-ironic [#7649](https://github.com/openshift/installer/pull/7649)
* [SPLAT-1468](https://issues.redhat.com/browse/SPLAT-1468): Added log message for import vsphere ova progress during CAPI install. [#8097](https://github.com/openshift/installer/pull/8097)
* no-jira: capi: aws: report all conflicting user tags at once [#8085](https://github.com/openshift/installer/pull/8085)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out - part 2 [#8070](https://github.com/openshift/installer/pull/8070)
* [SPLAT-1423](https://issues.redhat.com/browse/SPLAT-1423): Added static ip support to CAPI installer. [#8081](https://github.com/openshift/installer/pull/8081)
* [MULTIARCH-4159](https://issues.redhat.com/browse/MULTIARCH-4159): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8098](https://github.com/openshift/installer/pull/8098)
* [OCPBUGS-30058](https://issues.redhat.com/browse/OCPBUGS-30058): GCP: The CAPG bootstrap machine IP should be set according to the publish strategy [#8079](https://github.com/openshift/installer/pull/8079)
* [OCPBUGS-30057](https://issues.redhat.com/browse/OCPBUGS-30057): Don't auto create subnets for CAPG [#8083](https://github.com/openshift/installer/pull/8083)
* [MULTIARCH-4153](https://issues.redhat.com/browse/MULTIARCH-4153): Incorporating Eltorito Boot Loader fix for Agent [#8069](https://github.com/openshift/installer/pull/8069)
* no-jira: Missing permission from vsphere docs [#7789](https://github.com/openshift/installer/pull/7789)
* [OCPBUGS-30135](https://issues.redhat.com/browse/OCPBUGS-30135): fix "OpenShiftSDN deprecated" error message [#8092](https://github.com/openshift/installer/pull/8092)
* [CORS-3274](https://issues.redhat.com/browse/CORS-3274): GCP: add africa-south1 region to the survey as supported region [#8055](https://github.com/openshift/installer/pull/8055)
* [CORS-3251](https://issues.redhat.com/browse/CORS-3251): Create capz machine manifests [#7969](https://github.com/openshift/installer/pull/7969)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP CAPI Infra: auth with service account [#8077](https://github.com/openshift/installer/pull/8077)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Apply user defined tags on created gcp resources [#7279](https://github.com/openshift/installer/pull/7279)
* [AGENT-853](https://issues.redhat.com/browse/AGENT-853): Add ClusterInfo asset [#7997](https://github.com/openshift/installer/pull/7997)
* [SPLAT-1173](https://issues.redhat.com/browse/SPLAT-1173): Enhance vSphere Installer to use IPAddressClaims for static IP [#7501](https://github.com/openshift/installer/pull/7501)
* [CORS-3273](https://issues.redhat.com/browse/CORS-3273): capi system: don't log env vars [#8084](https://github.com/openshift/installer/pull/8084)
* [OCPBUGS-29860](https://issues.redhat.com/browse/OCPBUGS-29860): double looping of failuredomains breaks zonal [#8059](https://github.com/openshift/installer/pull/8059)
* no-jira: Remove v1alpha3 [#8061](https://github.com/openshift/installer/pull/8061)
* [OCPBUGS-30005](https://issues.redhat.com/browse/OCPBUGS-30005): remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 [#8072](https://github.com/openshift/installer/pull/8072)
* [OSASINFRA-3363](https://issues.redhat.com/browse/OSASINFRA-3363): ShiftStack CAPO integration [#7939](https://github.com/openshift/installer/pull/7939)
* [MULTIARCH-4158](https://issues.redhat.com/browse/MULTIARCH-4158): pkg/infrastructure/powervs: add initial CAPI provider [#8060](https://github.com/openshift/installer/pull/8060)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out [#8046](https://github.com/openshift/installer/pull/8046)
* [SPLAT-1459](https://issues.redhat.com/browse/SPLAT-1459): capv machines only full clone [#8042](https://github.com/openshift/installer/pull/8042)
* [OCPBUGS-29895](https://issues.redhat.com/browse/OCPBUGS-29895): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8058](https://github.com/openshift/installer/pull/8058)
* [SPLAT-1434](https://issues.redhat.com/browse/SPLAT-1434): aws: add support of BYO public ipv4 pool [#7983](https://github.com/openshift/installer/pull/7983)
* no-jira: images: libvirt: add oc to libvirt CI image [#8008](https://github.com/openshift/installer/pull/8008)
* [SPLAT-1465](https://issues.redhat.com/browse/SPLAT-1465): capv - add additional extra configs [#8054](https://github.com/openshift/installer/pull/8054)
* [SPLAT-1462](https://issues.redhat.com/browse/SPLAT-1462): capv - Remove unneeded auth env vars [#8053](https://github.com/openshift/installer/pull/8053)
* [OCPBUGS-29429](https://issues.redhat.com/browse/OCPBUGS-29429): feat: add check for SNO bootstrap condition [#8004](https://github.com/openshift/installer/pull/8004)
* Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer [#8028](https://github.com/openshift/installer/pull/8028)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP: Create DNS records and internal load balancer for CAPG Install [#8014](https://github.com/openshift/installer/pull/8014)
* [SPLAT-1198](https://issues.redhat.com/browse/SPLAT-1198): migrate vSphere installation to CAPV [#7962](https://github.com/openshift/installer/pull/7962)
* [OCPBUGS-29587](https://issues.redhat.com/browse/OCPBUGS-29587): Power VS: Fix service instance list [#8033](https://github.com/openshift/installer/pull/8033)
* [OCPBUGS-22410](https://issues.redhat.com/browse/OCPBUGS-22410): vsphere-fix convert if only provided name [#7931](https://github.com/openshift/installer/pull/7931)
* [OCPBUGS-29584](https://issues.redhat.com/browse/OCPBUGS-29584): PowerVS: handle composite_instance [#8029](https://github.com/openshift/installer/pull/8029)
* [OCPBUGS-29482](https://issues.redhat.com/browse/OCPBUGS-29482): Bump terraform-provider-ibm to v1.61.0 [#8023](https://github.com/openshift/installer/pull/8023)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): pkg/infrastructure/aws: add initial CAPI provider [#8012](https://github.com/openshift/installer/pull/8012)
* [CORS-3185](https://issues.redhat.com/browse/CORS-3185): update default release image [#7874](https://github.com/openshift/installer/pull/7874)
* [OCPBUGS-28590](https://issues.redhat.com/browse/OCPBUGS-28590): gcp: better error msg when service accnt missing [#8002](https://github.com/openshift/installer/pull/8002)
* [OCPBUGS-28203](https://issues.redhat.com/browse/OCPBUGS-28203): Power VS: Add sleep to allow workspace to configure PER [#7889](https://github.com/openshift/installer/pull/7889)
* [CORS-3220](https://issues.redhat.com/browse/CORS-3220): Initiate CAPG installation [#8011](https://github.com/openshift/installer/pull/8011)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Create the GCP cluster manifest [#7917](https://github.com/openshift/installer/pull/7917)
* [OCPBUGS-29441](https://issues.redhat.com/browse/OCPBUGS-29441): update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 [#8015](https://github.com/openshift/installer/pull/8015)
* [OCPBUGS-29425](https://issues.redhat.com/browse/OCPBUGS-29425): PowerVS Fix next start search [#8010](https://github.com/openshift/installer/pull/8010)
* Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation [#7998](https://github.com/openshift/installer/pull/7998)
* [SPLAT-1447](https://issues.redhat.com/browse/SPLAT-1447): Move MCO imports to API; update library-go, api [#8000](https://github.com/openshift/installer/pull/8000)
* NO-ISSUE: integrationt tests support for env vars substitution [#7992](https://github.com/openshift/installer/pull/7992)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7985](https://github.com/openshift/installer/pull/7985)
* [OCPBUGS-29068](https://issues.redhat.com/browse/OCPBUGS-29068): GCP: Skip validation of public and private zones for terraform vars [#7986](https://github.com/openshift/installer/pull/7986)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Copy GCP manifests within MCO bootstrap to the correct location [#7991](https://github.com/openshift/installer/pull/7991)
* [OCPBUGS-20085](https://issues.redhat.com/browse/OCPBUGS-20085): IBMCloud: Handle disk delete errors [#7515](https://github.com/openshift/installer/pull/7515)
* [OCPBUGS-28827](https://issues.redhat.com/browse/OCPBUGS-28827): do not rename boot.catalog for arm64 iso [#7972](https://github.com/openshift/installer/pull/7972)
* [OSASINFRA-3371](https://issues.redhat.com/browse/OSASINFRA-3371): Pass rhcosImage and manifests to the PreProvision hook [#7967](https://github.com/openshift/installer/pull/7967)
* [SPLAT-1387](https://issues.redhat.com/browse/SPLAT-1387): enable additional tags to be associated with vsphere machines [#7905](https://github.com/openshift/installer/pull/7905)
* [CORS-3242](https://issues.redhat.com/browse/CORS-3242): PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item [#7861](https://github.com/openshift/installer/pull/7861)
* [OPNET-357](https://issues.redhat.com/browse/OPNET-357): Populate network configuration at install-time [#7604](https://github.com/openshift/installer/pull/7604)
* [CORS-3240](https://issues.redhat.com/browse/CORS-3240): add OWNERS_ALIASES madhu-pillai [#7733](https://github.com/openshift/installer/pull/7733)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): Revert "bootkube.sh: Render kernel boot arguments for SNO" [#7979](https://github.com/openshift/installer/pull/7979)
* [CORS-3188](https://issues.redhat.com/browse/CORS-3188): Bump k8s deps [#7970](https://github.com/openshift/installer/pull/7970)
* [OCPBUGS-2135](https://issues.redhat.com/browse/OCPBUGS-2135): Include CAPG objects in uninstall filter [#7907](https://github.com/openshift/installer/pull/7907)
* [AGENT-848](https://issues.redhat.com/browse/AGENT-848): add node-joiner cli tool main [#7958](https://github.com/openshift/installer/pull/7958)
* [CORS-3207](https://issues.redhat.com/browse/CORS-3207): Generate GCP machine manifests for CAPI [#7944](https://github.com/openshift/installer/pull/7944)
* [OCPBUGS-24575](https://issues.redhat.com/browse/OCPBUGS-24575): ic: gcp: validate instance architecture [#7850](https://github.com/openshift/installer/pull/7850)
* [CORS-3196](https://issues.redhat.com/browse/CORS-3196): capg: add infrastructure components [#7968](https://github.com/openshift/installer/pull/7968)
* [CORS-3208](https://issues.redhat.com/browse/CORS-3208): Create the GCP infrastructure controller [#7940](https://github.com/openshift/installer/pull/7940)
* [OCPBUGS-27156](https://issues.redhat.com/browse/OCPBUGS-27156): GCP Destroy cleanup correct zones/records [#7932](https://github.com/openshift/installer/pull/7932)
* [OCPBUGS-27737](https://issues.redhat.com/browse/OCPBUGS-27737): aws-edge-zones preventing err before discovering [#7945](https://github.com/openshift/installer/pull/7945)
* [OCPBUGS-28708](https://issues.redhat.com/browse/OCPBUGS-28708): update tested Azure Arm64 instance type on 4.15 [#7965](https://github.com/openshift/installer/pull/7965)
* [OCPBUGS-28643](https://issues.redhat.com/browse/OCPBUGS-28643): PowerVS: Add dal12 region [#7956](https://github.com/openshift/installer/pull/7956)
* [OCPBUGS-27263](https://issues.redhat.com/browse/OCPBUGS-27263): Bump golang 1.21 [#7925](https://github.com/openshift/installer/pull/7925)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#7692](https://github.com/openshift/installer/pull/7692)
* [OCPBUGS-28705](https://issues.redhat.com/browse/OCPBUGS-28705): [azure] update tested x86 instance type on 4.15 [#7961](https://github.com/openshift/installer/pull/7961)
* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [OCPBUGS-27192](https://issues.redhat.com/browse/OCPBUGS-27192): remove retired serial NCv2 from azure tested instance type list on x86 [#7911](https://github.com/openshift/installer/pull/7911)
* no-jira: images/altinfra: allow CAPI ARG [#7891](https://github.com/openshift/installer/pull/7891)
* [OCPBUGS-25835](https://issues.redhat.com/browse/OCPBUGS-25835): Validate baremetal capability is set for baremetal platform [#7901](https://github.com/openshift/installer/pull/7901)
* no-jira: Add AWS m6a to tested instance types [#7851](https://github.com/openshift/installer/pull/7851)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Fix typo in CloudCredential validation [#7915](https://github.com/openshift/installer/pull/7915)
* [OCPBUGS-24303](https://issues.redhat.com/browse/OCPBUGS-24303): Check provided sha for agent ISO download [#7893](https://github.com/openshift/installer/pull/7893)
* [CORS-3203](https://issues.redhat.com/browse/CORS-3203): Fix `depreciated` typo [#7834](https://github.com/openshift/installer/pull/7834)
* [OCPBUGS-14257](https://issues.redhat.com/browse/OCPBUGS-14257): normalize ISO files extensions to three chars [#7896](https://github.com/openshift/installer/pull/7896)
* [OCPBUGS-26434](https://issues.redhat.com/browse/OCPBUGS-26434): Redact platform passwords in agent-gather output [#7873](https://github.com/openshift/installer/pull/7873)
* [OCPBUGS-27092](https://issues.redhat.com/browse/OCPBUGS-27092): baremetal: gather all recently refactored services [#7854](https://github.com/openshift/installer/pull/7854)
* [OCPBUGS-25996](https://issues.redhat.com/browse/OCPBUGS-25996): baremetal: correct external_http_url for v6-only BMCs [#7898](https://github.com/openshift/installer/pull/7898)
* [CORS-2950](https://issues.redhat.com/browse/CORS-2950): Remove openshift-sdn as an install-time option [#7720](https://github.com/openshift/installer/pull/7720)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Upgrade o/api to include extended network config [#7869](https://github.com/openshift/installer/pull/7869)
* [METAL-829](https://issues.redhat.com/browse/METAL-829): Set node cpu_arch from bmh [#7814](https://github.com/openshift/installer/pull/7814)
* [OCPBUGS-26399](https://issues.redhat.com/browse/OCPBUGS-26399): Support singular VIP in ACI for BareMetal [#7859](https://github.com/openshift/installer/pull/7859)
* [CORS-3190](https://issues.redhat.com/browse/CORS-3190): GCP: Add load balancer info to cluster infra [#7888](https://github.com/openshift/installer/pull/7888)
* [MULTIARCH-4072](https://issues.redhat.com/browse/MULTIARCH-4072): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7870](https://github.com/openshift/installer/pull/7870)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7884](https://github.com/openshift/installer/pull/7884)
* [OCPBUGS-25841](https://issues.redhat.com/browse/OCPBUGS-25841): preserve category name when trying to find tag category [#7876](https://github.com/openshift/installer/pull/7876)
* [ARO-4744](https://issues.redhat.com/browse/ARO-4744): Do not run platform validation on ARO [#7865](https://github.com/openshift/installer/pull/7865)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7875](https://github.com/openshift/installer/pull/7875)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): OpenStack: clarify root volume size requirements [#7698](https://github.com/openshift/installer/pull/7698)
* [OCPBUGS-26048](https://issues.redhat.com/browse/OCPBUGS-26048): Bump default channel to stable-4.16 [#7867](https://github.com/openshift/installer/pull/7867)
* [OCPBUGS-24862](https://issues.redhat.com/browse/OCPBUGS-24862): Updating ose-installer-altinfra-container image to be … [#7872](https://github.com/openshift/installer/pull/7872)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: allow clean shutdown of resources [#7864](https://github.com/openshift/installer/pull/7864)
* [OCPBUGS-24820](https://issues.redhat.com/browse/OCPBUGS-24820): Updating ose-baremetal-installer-container image to be consistent with ART [#7817](https://github.com/openshift/installer/pull/7817)
* [OCPBUGS-24814](https://issues.redhat.com/browse/OCPBUGS-24814): Updating ose-installer-container image to be consistent with ART [#7816](https://github.com/openshift/installer/pull/7816)
* [OCPBUGS-25600](https://issues.redhat.com/browse/OCPBUGS-25600): aws: validate instance arch [#7835](https://github.com/openshift/installer/pull/7835)
* [OCPBUGS-25440](https://issues.redhat.com/browse/OCPBUGS-25440): ic: aws: add iam:TagInstanceProfile permission requirement [#7843](https://github.com/openshift/installer/pull/7843)
* [OCPBUGS-25132](https://issues.redhat.com/browse/OCPBUGS-25132): Fixes for the OpensStack UPI playbooks. [#7833](https://github.com/openshift/installer/pull/7833)
* [OCPBUGS-24853](https://issues.redhat.com/browse/OCPBUGS-24853): Updating ose-installer-artifacts-container image to be consistent with ART [#7818](https://github.com/openshift/installer/pull/7818)
* [OCPBUGS-19054](https://issues.redhat.com/browse/OCPBUGS-19054): Warn that FeatureSet is not supported [#7825](https://github.com/openshift/installer/pull/7825)
* [CORS-2315](https://issues.redhat.com/browse/CORS-2315): GCP: Skip populating Private/Public Zones within DNS manifest [#7846](https://github.com/openshift/installer/pull/7846)
* no-jira: build: drop vsphereprivate build workaround [#7847](https://github.com/openshift/installer/pull/7847)
* [CORS-2870](https://issues.redhat.com/browse/CORS-2870): build: only rebuild terraform providers if needed [#7688](https://github.com/openshift/installer/pull/7688)
* [OCPBUGS-24473](https://issues.redhat.com/browse/OCPBUGS-24473): IBMCloud: Set IBM TF visibility based on URLs [#7805](https://github.com/openshift/installer/pull/7805)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): GCP: Update DNSType within GCP PlatformStatus based on `UserProvisionedDNS` [#7837](https://github.com/openshift/installer/pull/7837)
* [OCPBUGS-24241](https://issues.redhat.com/browse/OCPBUGS-24241): Pin openstack.cloud version. [#7821](https://github.com/openshift/installer/pull/7821)
* Revert "OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer" [#7651](https://github.com/openshift/installer/pull/7651)
* no-jira: Revert "Merge pull request #7823 from patrickdillon/build-capi-altinfra" [#7828](https://github.com/openshift/installer/pull/7828)
* [OCPBUGS-19303](https://issues.redhat.com/browse/OCPBUGS-19303): Changed OKD/FCOS workaround to also support Agent-based Installer [#7484](https://github.com/openshift/installer/pull/7484)
* [OCPBUGS-25191](https://issues.redhat.com/browse/OCPBUGS-25191): ic: azure: fix retrieving marketplace image [#7826](https://github.com/openshift/installer/pull/7826)
* [OCPBUGS-24995](https://issues.redhat.com/browse/OCPBUGS-24995): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7822](https://github.com/openshift/installer/pull/7822)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): images/altinfra: enable CAPI builds [#7823](https://github.com/openshift/installer/pull/7823)
* [CORS-3003](https://issues.redhat.com/browse/CORS-3003): [ibmcloud] add key-protect plugin in ibmcloud cli [#7811](https://github.com/openshift/installer/pull/7811)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Support installing OpenShift via Cluster API [#7807](https://github.com/openshift/installer/pull/7807)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Modify the terraform variables to support Nutanix Failure Domains [#7806](https://github.com/openshift/installer/pull/7806)
* [Full changelog](https://github.com/openshift/installer/compare/4caaa383b8dfa4853d1962a966a430da27417423...dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/11ba601fbca58557176fcc67ffe8d7d64b697a4a)
* [OCPBUGS-30477](https://issues.redhat.com/browse/OCPBUGS-30477): Bump golang-protobuf version [#213](https://github.com/openshift/cluster-api-provider-baremetal/pull/213)
* [OCPBUGS-28835](https://issues.redhat.com/browse/OCPBUGS-28835): Extend metal3remediation aggregation role [#209](https://github.com/openshift/cluster-api-provider-baremetal/pull/209)
* [OCPBUGS-25561](https://issues.redhat.com/browse/OCPBUGS-25561): Updating baremetal-machine-controller-container image to be consistent with ART [#208](https://github.com/openshift/cluster-api-provider-baremetal/pull/208)
* [OCPBUGS-25159](https://issues.redhat.com/browse/OCPBUGS-25159): Updating baremetal-machine-controller-container image to be consistent with ART [#207](https://github.com/openshift/cluster-api-provider-baremetal/pull/207)
* [OCPBUGS-24919](https://issues.redhat.com/browse/OCPBUGS-24919): Updating baremetal-machine-controller-container image to be consistent with ART [#206](https://github.com/openshift/cluster-api-provider-baremetal/pull/206)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/73a72cc821224eb7ad0fad25d3bcc8272658238b...11ba601fbca58557176fcc67ffe8d7d64b697a4a)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/ae55a7053373827ad4b1aff6dceae5f077ce90e5)
* [OCPBUGS-39490](https://issues.redhat.com/browse/OCPBUGS-39490): Disallow fetching secrets from namespaces different from the host's one [#378](https://github.com/openshift/baremetal-operator/pull/378)
* [OCPBUGS-38938](https://issues.redhat.com/browse/OCPBUGS-38938): [OCP] Ability to disable agent power off after deployment [#372](https://github.com/openshift/baremetal-operator/pull/372)
* [OCPBUGS-37765](https://issues.redhat.com/browse/OCPBUGS-37765): HostFirmwareComponents doesn't show the new firmware information in Status Components [#355](https://github.com/openshift/baremetal-operator/pull/355)
* [OCPBUGS-37262](https://issues.redhat.com/browse/OCPBUGS-37262): fix(redfish): set correct idrac-redfish management interface [#366](https://github.com/openshift/baremetal-operator/pull/366)
* [OCPBUGS-36673](https://issues.redhat.com/browse/OCPBUGS-36673): [4.16] Firmware Update causes BMH to get stuck in Preparing [#363](https://github.com/openshift/baremetal-operator/pull/363)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Merge upstream [#354](https://github.com/openshift/baremetal-operator/pull/354)
* NO-ISSUE: Revert "downstream-only: Disable webhooks" [#335](https://github.com/openshift/baremetal-operator/pull/335)
* [OCPBUGS-33048](https://issues.redhat.com/browse/OCPBUGS-33048): PreprovisioningImage should not be created on poweroff [#349](https://github.com/openshift/baremetal-operator/pull/349)
* NO-ISSUE: Sync upstream April 29 [#348](https://github.com/openshift/baremetal-operator/pull/348)
* NO-ISSUE: Merge upstream [#347](https://github.com/openshift/baremetal-operator/pull/347)
* NO-ISSUE: Sync with upstream [#344](https://github.com/openshift/baremetal-operator/pull/344)
* NO-ISSUE: Merge upstream [#340](https://github.com/openshift/baremetal-operator/pull/340)
* NO-ISSUE: Update OWNERS [#339](https://github.com/openshift/baremetal-operator/pull/339)
* [METAL-866](https://issues.redhat.com/browse/METAL-866): Merge upstream [#336](https://github.com/openshift/baremetal-operator/pull/336)
* NO-ISSUE: Merge upstream (2024.02.02) [#330](https://github.com/openshift/baremetal-operator/pull/330)
* [OCPBUGS-27825](https://issues.redhat.com/browse/OCPBUGS-27825): Merge upstream [#329](https://github.com/openshift/baremetal-operator/pull/329)
* [OCPBUGS-25567](https://issues.redhat.com/browse/OCPBUGS-25567): Updating ose-baremetal-operator-container image to be consistent with ART [#328](https://github.com/openshift/baremetal-operator/pull/328)
* [OCPBUGS-24935](https://issues.redhat.com/browse/OCPBUGS-24935): Updating ose-baremetal-operator-container image to be consistent with ART [#327](https://github.com/openshift/baremetal-operator/pull/327)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/62a7d56e20785c3f4cf02cb2511270a7aa32deea...ae55a7053373827ad4b1aff6dceae5f077ce90e5)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/f55a330f8139ef660b3f60b735ef77538f7b9cbe)
* [OCPBUGS-35891](https://issues.redhat.com/browse/OCPBUGS-35891): Change mechanism of debug flag [#323](https://github.com/openshift/baremetal-runtimecfg/pull/323)
* [OCPBUGS-35743](https://issues.redhat.com/browse/OCPBUGS-35743): Fix handling of ELB Node IP detection [#320](https://github.com/openshift/baremetal-runtimecfg/pull/320)
* [OCPBUGS-35486](https://issues.redhat.com/browse/OCPBUGS-35486): Add support for OVN HostCidrs annotation [#318](https://github.com/openshift/baremetal-runtimecfg/pull/318)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix generation of DNSUpstreams on cloud platforms [#308](https://github.com/openshift/baremetal-runtimecfg/pull/308)
* NO-ISSUE: Fix wrong golang version, bump to 1.21 [#311](https://github.com/openshift/baremetal-runtimecfg/pull/311)
* Revert "OCPBUGS-32348: Make log level configurable" [#310](https://github.com/openshift/baremetal-runtimecfg/pull/310)
* [OCPBUGS-32348](https://issues.redhat.com/browse/OCPBUGS-32348): Make log level configurable [#305](https://github.com/openshift/baremetal-runtimecfg/pull/305)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Do not add VRRP config to Node on Cloud Platforms [#303](https://github.com/openshift/baremetal-runtimecfg/pull/303)
* [OCPBUGS-29931](https://issues.redhat.com/browse/OCPBUGS-29931): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 [#300](https://github.com/openshift/baremetal-runtimecfg/pull/300)
* [OCPBUGS-29919](https://issues.redhat.com/browse/OCPBUGS-29919): Decrease log level when detecting node IP [#301](https://github.com/openshift/baremetal-runtimecfg/pull/301)
* [OCPBUGS-29095](https://issues.redhat.com/browse/OCPBUGS-29095): Ignore egress IP when selecting Node IP [#298](https://github.com/openshift/baremetal-runtimecfg/pull/298)
* [OCPBUGS-24865](https://issues.redhat.com/browse/OCPBUGS-24865): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#291](https://github.com/openshift/baremetal-runtimecfg/pull/291)
* NO-ISSUE: Upgrade k8s api and client-go deps [#297](https://github.com/openshift/baremetal-runtimecfg/pull/297)
* [OCPBUGS-26765](https://issues.redhat.com/browse/OCPBUGS-26765): Add .snyk file to ignore vendor and test files [#292](https://github.com/openshift/baremetal-runtimecfg/pull/292)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c...f55a330f8139ef660b3f60b735ef77538f7b9cbe)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cf533b548154f7f2e828a44864477bbbb881692d)
* [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891)
* [OCPBUGS-39341](https://issues.redhat.com/browse/OCPBUGS-39341): Ignore pruning when deployment points to replicationcontroller [#1862](https://github.com/openshift/oc/pull/1862)
* [OCPBUGS-37853](https://issues.redhat.com/browse/OCPBUGS-37853): Revert "OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command" [#1839](https://github.com/openshift/oc/pull/1839)
* [OCPBUGS-31639](https://issues.redhat.com/browse/OCPBUGS-31639): Bump k8s dependencies to 1.29.7 [#1824](https://github.com/openshift/oc/pull/1824)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): pkg/cli/admin/upgrade/rollback: Drop this command [#1820](https://github.com/openshift/oc/pull/1820)
* [OCPBUGS-36328](https://issues.redhat.com/browse/OCPBUGS-36328): Set required-scc annotation to privileged for node debug pods [#1816](https://github.com/openshift/oc/pull/1816)
* [OCPBUGS-36379](https://issues.redhat.com/browse/OCPBUGS-36379): bump(k8s)=1.29.6 [#1810](https://github.com/openshift/oc/pull/1810)
* [OCPBUGS-35924](https://issues.redhat.com/browse/OCPBUGS-35924): `upgrade status`: control plane completion estimate [#1804](https://github.com/openshift/oc/pull/1804)
* [OCPBUGS-34886](https://issues.redhat.com/browse/OCPBUGS-34886): Hardcode resource groups/kinds for now [#1796](https://github.com/openshift/oc/pull/1796)
* [OCPBUGS-33917](https://issues.redhat.com/browse/OCPBUGS-33917): add alert data to upgrade health in oc adm upgrade status [#1794](https://github.com/openshift/oc/pull/1794)
* [OCPBUGS-33975](https://issues.redhat.com/browse/OCPBUGS-33975): pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK [#1776](https://github.com/openshift/oc/pull/1776)
* [OCPBUGS-34406](https://issues.redhat.com/browse/OCPBUGS-34406): Simplify output when not updating [#1781](https://github.com/openshift/oc/pull/1781)
* [OCPBUGS-33918](https://issues.redhat.com/browse/OCPBUGS-33918): `adm update status`: Show information about the upgrade target version [#1772](https://github.com/openshift/oc/pull/1772)
* [OCPBUGS-33916](https://issues.redhat.com/browse/OCPBUGS-33916): Add s390x based oc into extraction target [#1770](https://github.com/openshift/oc/pull/1770)
* [OCPNODE-2281](https://issues.redhat.com/browse/OCPNODE-2281): Support multiple icsps in migrate icsp [#1751](https://github.com/openshift/oc/pull/1751)
* [OCPNODE-2282](https://issues.redhat.com/browse/OCPNODE-2282): Support multiple ImageDigestMirrorSet objects in the th… [#1756](https://github.com/openshift/oc/pull/1756)
* [OTA-1275](https://issues.redhat.com/browse/OTA-1275): cli/admin/release/git: use optimized git flags [#1754](https://github.com/openshift/oc/pull/1754)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Switch cli image to RHEL9 base image [#1752](https://github.com/openshift/oc/pull/1752)
* [OTA-1154](https://issues.redhat.com/browse/OTA-1154): pkg/cli/admin/upgrade/status: Drop free-form Progressing output line [#1753](https://github.com/openshift/oc/pull/1753)
* [OTA-1279](https://issues.redhat.com/browse/OTA-1279): pkg/cli/admin/upgrade/status: Move Failing from free-form to updateInsight [#1744](https://github.com/openshift/oc/pull/1744)
* [OCPBUGS-32841](https://issues.redhat.com/browse/OCPBUGS-32841): Bump go-jose indirect reference to 2.6.3 [#1747](https://github.com/openshift/oc/pull/1747)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `update status`: unify on `--details` [#1748](https://github.com/openshift/oc/pull/1748)
* [OCPBUGS-32786](https://issues.redhat.com/browse/OCPBUGS-32786): Improve error message when binary is not in target list [#1746](https://github.com/openshift/oc/pull/1746)
* [OCPBUGS-32080](https://issues.redhat.com/browse/OCPBUGS-32080): release: extract ccoctl.rhel8 and ccoctl.rhel9 [#1734](https://github.com/openshift/oc/pull/1734)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Show resources in `--details=health` [#1737](https://github.com/openshift/oc/pull/1737)
* [OTA-1155](https://issues.redhat.com/browse/OTA-1155): `update status`: Simplify CO status line [#1741](https://github.com/openshift/oc/pull/1741)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1652](https://github.com/openshift/oc/pull/1652)
* NO-JIRA: Print an error msg instead of panicking when all image manifests are filtered out [#1729](https://github.com/openshift/oc/pull/1729)
* [WRKLDS-1190](https://issues.redhat.com/browse/WRKLDS-1190): oc adm must-gather: print timestamp when logging in fallback mode [#1738](https://github.com/openshift/oc/pull/1738)
* [OTA-1202](https://issues.redhat.com/browse/OTA-1202): Changing the conditional risk to known issues [#1739](https://github.com/openshift/oc/pull/1739)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Expand health insights with `--detailed=health` [#1736](https://github.com/openshift/oc/pull/1736)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: add `--detailed=nodes` that shows all nodes [#1735](https://github.com/openshift/oc/pull/1735)
* [MCO-1056](https://issues.redhat.com/browse/MCO-1056): MCO-1057: Implement oc adm prune machineconfigs command [#1723](https://github.com/openshift/oc/pull/1723)
* NO-JIRA: Report tests for feature [#1728](https://github.com/openshift/oc/pull/1728)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm update status`: Refactor node status [#1732](https://github.com/openshift/oc/pull/1732)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm upgrade status`: Add control plane nodes status [#1731](https://github.com/openshift/oc/pull/1731)
* [OCPBUGS-31498](https://issues.redhat.com/browse/OCPBUGS-31498): Add OIDC specific certificate authority bundle flag [#1720](https://github.com/openshift/oc/pull/1720)
* [WRKLDS-1171](https://issues.redhat.com/browse/WRKLDS-1171): Add openshift-install-fips target to oc release extract [#1725](https://github.com/openshift/oc/pull/1725)
* [OCPBUGS-31615](https://issues.redhat.com/browse/OCPBUGS-31615): Add help text the behavior of filter-by-os against single image [#1721](https://github.com/openshift/oc/pull/1721)
* make output table slightly easier to read [#1719](https://github.com/openshift/oc/pull/1719)
* NO-JIRA: update featuregate diff for clusterprofiles [#1714](https://github.com/openshift/oc/pull/1714)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): revert cli/admin/release/git: use optimized git flags [#1718](https://github.com/openshift/oc/pull/1718)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Remove some of newapp unit tests relying on external deprecated images [#1717](https://github.com/openshift/oc/pull/1717)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): cli/admin/release/git: use optimized git flags [#1708](https://github.com/openshift/oc/pull/1708)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Remove redundant endpoint resource modification [#1692](https://github.com/openshift/oc/pull/1692)
* [OCPBUGS-30703](https://issues.redhat.com/browse/OCPBUGS-30703): Bump coreos/go-oidc to 3.10.0 [#1713](https://github.com/openshift/oc/pull/1713)
* [WRKLDS-1103](https://issues.redhat.com/browse/WRKLDS-1103): tools: extend the image with sosreport [#1704](https://github.com/openshift/oc/pull/1704)
* [OTA-1165](https://issues.redhat.com/browse/OTA-1165): `adm upgrade status`: Add Worker Node Status [#1689](https://github.com/openshift/oc/pull/1689)
* [OCPBUGS-29623](https://issues.redhat.com/browse/OCPBUGS-29623): Introduce certificate-authority flag for image related commands [#1693](https://github.com/openshift/oc/pull/1693)
* [OCPBUGS-30212](https://issues.redhat.com/browse/OCPBUGS-30212): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1680](https://github.com/openshift/oc/pull/1680)
* [OCPBUGS-30244](https://issues.redhat.com/browse/OCPBUGS-30244): Add images mismatching kubectl version into warning to track [#1695](https://github.com/openshift/oc/pull/1695)
* [OCPBUGS-30162](https://issues.redhat.com/browse/OCPBUGS-30162): Introduce --issuer-url flag in oc login [#1694](https://github.com/openshift/oc/pull/1694)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1684](https://github.com/openshift/oc/pull/1684)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Extract oc also for linux/ppc64le [#1691](https://github.com/openshift/oc/pull/1691)
* [OTA-1080](https://issues.redhat.com/browse/OTA-1080): pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand [#1674](https://github.com/openshift/oc/pull/1674)
* [OCPBUGS-29210](https://issues.redhat.com/browse/OCPBUGS-29210): Update some commands incorrect examples [#1686](https://github.com/openshift/oc/pull/1686)
* NO-JIRA: Print log rather than returning an error when kubectl version mistmaches [#1685](https://github.com/openshift/oc/pull/1685)
* Do not force the ancient OS version dist tag. [#1536](https://github.com/openshift/oc/pull/1536)
* [TRT-1503](https://issues.redhat.com/browse/TRT-1503): Tools image no longer has python;adding [#1682](https://github.com/openshift/oc/pull/1682)
* Revert "NO-JIRA: Bump k8s dependencies to 1.29.1" [#1683](https://github.com/openshift/oc/pull/1683)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1681](https://github.com/openshift/oc/pull/1681)
* [OCPBUGS-29039](https://issues.redhat.com/browse/OCPBUGS-29039): fix copy-to-node [#1679](https://github.com/openshift/oc/pull/1679)
* [OCPBUGS-28540](https://issues.redhat.com/browse/OCPBUGS-28540): Copy oc.rhel8 instead of symlink [#1669](https://github.com/openshift/oc/pull/1669)
* [OCPBUGS-27732](https://issues.redhat.com/browse/OCPBUGS-27732): Bump joelanford/ignore to bump go-git to 5.11.0 [#1671](https://github.com/openshift/oc/pull/1671)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1661](https://github.com/openshift/oc/pull/1661)
* [OCPBUGS-27957](https://issues.redhat.com/browse/OCPBUGS-27957): pkg/cli/admin/inspect: use since/since-time for previous container logs [#1666](https://github.com/openshift/oc/pull/1666)
* NO-JIRA: Fix --parallelism flag formatting in help [#1664](https://github.com/openshift/oc/pull/1664)
* NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error [#1663](https://github.com/openshift/oc/pull/1663)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1667](https://github.com/openshift/oc/pull/1667)
* [OCPBUGS-27489](https://issues.redhat.com/browse/OCPBUGS-27489): Use correct hash sum of extracted tarball after re-signing with codesign [#1659](https://github.com/openshift/oc/pull/1659)
* NO-JIRA: Simplified kubectl component version check [#1662](https://github.com/openshift/oc/pull/1662)
* [CNV-37284](https://issues.redhat.com/browse/CNV-37284): Add --all-images flag to must-gather [#1633](https://github.com/openshift/oc/pull/1633)
* Revert "WRKLDS-1016: Bump kube dependencies to 1.29.0" [#1660](https://github.com/openshift/oc/pull/1660)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1655](https://github.com/openshift/oc/pull/1655)
* NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images [#1656](https://github.com/openshift/oc/pull/1656)
* [WRKLDS-998](https://issues.redhat.com/browse/WRKLDS-998): oc login: Built-in cred exec plugin implementation and wiring [#1640](https://github.com/openshift/oc/pull/1640)
* NO-JIRA: adm update status: add TODOs to remind us to revise early decisions [#1654](https://github.com/openshift/oc/pull/1654)
* [WRKLDS-1012](https://issues.redhat.com/browse/WRKLDS-1012): oc adm must-gather: pull gather container logs [#1641](https://github.com/openshift/oc/pull/1641)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): add since and since-time flags to limit log collection on must-gather [#1648](https://github.com/openshift/oc/pull/1648)
* [WRKLDS-1010](https://issues.redhat.com/browse/WRKLDS-1010): pkg/cli/admin/inspect: use since/since-time for rotated logs [#1653](https://github.com/openshift/oc/pull/1653)
* NO-ISSUE: add information about featuregate diff in a particular release [#1650](https://github.com/openshift/oc/pull/1650)
* NO-JIRA: report kubectl version to the release controller [#1651](https://github.com/openshift/oc/pull/1651)
* [OCPBUGS-25461](https://issues.redhat.com/browse/OCPBUGS-25461): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1647](https://github.com/openshift/oc/pull/1647)
* [OTA-1087](https://issues.redhat.com/browse/OTA-1087): Add upgade health section to `adm update status` [#1636](https://github.com/openshift/oc/pull/1636)
* [OCPBUGS-19807](https://issues.redhat.com/browse/OCPBUGS-19807): pkg/cli/admin/release/extract: Log a warning on --credentials-requests without --included [#1551](https://github.com/openshift/oc/pull/1551)
* NO-JIRA: Sanitize path using filepath Clean [#1645](https://github.com/openshift/oc/pull/1645)
* [OTA-492](https://issues.redhat.com/browse/OTA-492): pkg/cli/admin/upgrade/rollback: New rollback command [#1642](https://github.com/openshift/oc/pull/1642)
* NO-JIRA: oc adm prune images: fix --certificate-authority flag name in validation code [#1644](https://github.com/openshift/oc/pull/1644)
* [OCPBUGS-25703](https://issues.redhat.com/browse/OCPBUGS-25703): validate tag name on creation [#1643](https://github.com/openshift/oc/pull/1643)
* NO-JIRA: Migrate from deprecated ioutils to relevant libraries [#1602](https://github.com/openshift/oc/pull/1602)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Generate FIPS compatible RHEL9 oc binary [#1632](https://github.com/openshift/oc/pull/1632)
* [OCPBUGS-25021](https://issues.redhat.com/browse/OCPBUGS-25021): Bump ocp images to 4.16 in addition to go 1.21 [#1628](https://github.com/openshift/oc/pull/1628)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release extract: Introduce --idms-file and deprecate icsp-file [#1624](https://github.com/openshift/oc/pull/1624)
* [OCPBUGS-24834](https://issues.redhat.com/browse/OCPBUGS-24834): Bump api to include the new CloudCredential cap [#1622](https://github.com/openshift/oc/pull/1622)
* [OCPBUGS-24225](https://issues.redhat.com/browse/OCPBUGS-24225): Remove deprecated password defaulting in default config flag [#1619](https://github.com/openshift/oc/pull/1619)
* [Full changelog](https://github.com/openshift/oc/compare/82316376e25f6453b58258df6bf1e11ec4abb670...cf533b548154f7f2e828a44864477bbbb881692d)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/4672a9ad086ebcd75ee1ab0fb20af922e26f7029)
* [OCPBUGS-43645](https://issues.redhat.com/browse/OCPBUGS-43645): Only attempt timed token credentials on supported platforms. [#772](https://github.com/openshift/cloud-credential-operator/pull/772)
* [OCPBUGS-43337](https://issues.redhat.com/browse/OCPBUGS-43337): Update github.com/sirupsen/logrus v1.9.3 [#767](https://github.com/openshift/cloud-credential-operator/pull/767)
* [OCPBUGS-41234](https://issues.redhat.com/browse/OCPBUGS-41234): List secrets in batches to avoid api timeout [#757](https://github.com/openshift/cloud-credential-operator/pull/757)
* [OCPBUGS-38376](https://issues.redhat.com/browse/OCPBUGS-38376): Update google.golang.org/grpc v1.65.0 [#748](https://github.com/openshift/cloud-credential-operator/pull/748)
* [OCPBUGS-37418](https://issues.redhat.com/browse/OCPBUGS-37418): SNYK ignore go-client misreporting [#735](https://github.com/openshift/cloud-credential-operator/pull/735)
* [OCPBUGS-36834](https://issues.redhat.com/browse/OCPBUGS-36834): GCP passthrough permissions check to ignore problematic permissions. [#714](https://github.com/openshift/cloud-credential-operator/pull/714)
* [OCPBUGS-36954](https://issues.redhat.com/browse/OCPBUGS-36954): Update to azidentity v1.7.0 [#727](https://github.com/openshift/cloud-credential-operator/pull/727)
* [OCPBUGS-36031](https://issues.redhat.com/browse/OCPBUGS-36031): IBM/go-sdk-core update to v5.6.3 [#718](https://github.com/openshift/cloud-credential-operator/pull/718)
* [OCPBUGS-34117](https://issues.redhat.com/browse/OCPBUGS-34117): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#704](https://github.com/openshift/cloud-credential-operator/pull/704)
* [OCPBUGS-32948](https://issues.redhat.com/browse/OCPBUGS-32948): Update documentation to restart pods when enabling workload identity [#701](https://github.com/openshift/cloud-credential-operator/pull/701)
* [OCPBUGS-32026](https://issues.redhat.com/browse/OCPBUGS-32026): Docs: Fix migration to azure workload identy to apply the webhook config [#695](https://github.com/openshift/cloud-credential-operator/pull/695)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Dockerfile should keep prior rhel8 behavior for ccoctl default [#694](https://github.com/openshift/cloud-credential-operator/pull/694)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 [#693](https://github.com/openshift/cloud-credential-operator/pull/693)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 [#692](https://github.com/openshift/cloud-credential-operator/pull/692)
* [OCPBUGS-31678](https://issues.redhat.com/browse/OCPBUGS-31678): aws: remove non-existent permission [#690](https://github.com/openshift/cloud-credential-operator/pull/690)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#681](https://github.com/openshift/cloud-credential-operator/pull/681)
* [OCPBUGS-30713](https://issues.redhat.com/browse/OCPBUGS-30713): update go-jose module to v4.0.1 [#687](https://github.com/openshift/cloud-credential-operator/pull/687)
* [OCPBUGS-30478](https://issues.redhat.com/browse/OCPBUGS-30478): Update to cloud.google.com/go/storage v1.39.1 [#688](https://github.com/openshift/cloud-credential-operator/pull/688)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Scope networkResourceGroup permissions to more operators [#682](https://github.com/openshift/cloud-credential-operator/pull/682)
* [OCPBUGS-28787](https://issues.redhat.com/browse/OCPBUGS-28787): gcp actuator update check to consider custom roles [#685](https://github.com/openshift/cloud-credential-operator/pull/685)
* [CCO-525](https://issues.redhat.com/browse/CCO-525): Azure workload identity doc updates [#680](https://github.com/openshift/cloud-credential-operator/pull/680)
* NO-JIRA:docu change: fix find command [#677](https://github.com/openshift/cloud-credential-operator/pull/677)
* NO-JIRA: Fix update-codegen.sh [#669](https://github.com/openshift/cloud-credential-operator/pull/669)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#672](https://github.com/openshift/cloud-credential-operator/pull/672)
* [OCPBUGS-28388](https://issues.redhat.com/browse/OCPBUGS-28388): Fix the ClusterOperator watch of the status controller [#665](https://github.com/openshift/cloud-credential-operator/pull/665)
* [OCPBUGS-27214](https://issues.redhat.com/browse/OCPBUGS-27214): ccoctl - use proxy when validating CloudFront URL [#654](https://github.com/openshift/cloud-credential-operator/pull/654)
* [OCPBUGS-28535](https://issues.redhat.com/browse/OCPBUGS-28535): stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster [#667](https://github.com/openshift/cloud-credential-operator/pull/667)
* NO-JIRA: Fix user-facing typos [#668](https://github.com/openshift/cloud-credential-operator/pull/668)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#663](https://github.com/openshift/cloud-credential-operator/pull/663)
* NO-JIRA: Keep metrics.md up-to-date [#664](https://github.com/openshift/cloud-credential-operator/pull/664)
* [OCPBUGS-27446](https://issues.redhat.com/browse/OCPBUGS-27446): Report manualpodidentity mode in metrics when using Azure Workload Identity [#657](https://github.com/openshift/cloud-credential-operator/pull/657)
* [OCPBUGS-27445](https://issues.redhat.com/browse/OCPBUGS-27445): Use cached clients to avoid client side throttling [#656](https://github.com/openshift/cloud-credential-operator/pull/656)
* NO-JIRA: azwi doc: apply webhook manifest to cluster [#652](https://github.com/openshift/cloud-credential-operator/pull/652)
* [CCO-454](https://issues.redhat.com/browse/CCO-454): Bump go.mod k8s deps to 0.29.1 [#655](https://github.com/openshift/cloud-credential-operator/pull/655)
* [OCPBUGS-16181](https://issues.redhat.com/browse/OCPBUGS-16181): Write manifests when AWS IAM roles already exist. [#514](https://github.com/openshift/cloud-credential-operator/pull/514)
* [CCO-519](https://issues.redhat.com/browse/CCO-519): Resolve all outstanding snyk vulnerabilities [#648](https://github.com/openshift/cloud-credential-operator/pull/648)
* [OCPBUGS-26488](https://issues.redhat.com/browse/OCPBUGS-26488): Use live client for metrics [#645](https://github.com/openshift/cloud-credential-operator/pull/645)
* [OCPBUGS-25533](https://issues.redhat.com/browse/OCPBUGS-25533): Updating ose-cloud-credential-operator-container image to be consistent with ART [#642](https://github.com/openshift/cloud-credential-operator/pull/642)
* NO-JIRA: Update docs/sts.md [#634](https://github.com/openshift/cloud-credential-operator/pull/634)
* [OCPBUGS-24807](https://issues.redhat.com/browse/OCPBUGS-24807): Updating ose-cloud-credential-operator-container image to be consistent with ART [#639](https://github.com/openshift/cloud-credential-operator/pull/639)
* NO-JIRA: Fixed typos [#633](https://github.com/openshift/cloud-credential-operator/pull/633)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/60b3edb85025c66c2962fdb31c800afd484c8ba1...4672a9ad086ebcd75ee1ab0fb20af922e26f7029)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8ceee78810756afaa2efb75f60bef0358502834f)
* [OCPBUGS-33617](https://issues.redhat.com/browse/OCPBUGS-33617): Avoid panic when looking up attachedOutboundRule.ID in azure [#144](https://github.com/openshift/cloud-network-config-controller/pull/144)
* NO-JIRA: Update dependency google.golang.org/api [#143](https://github.com/openshift/cloud-network-config-controller/pull/143)
* [OCPBUGS-33154](https://issues.redhat.com/browse/OCPBUGS-33154): Incorrect use of go wait groups [#140](https://github.com/openshift/cloud-network-config-controller/pull/140)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#136](https://github.com/openshift/cloud-network-config-controller/pull/136)
* [OCPBUGS-27422](https://issues.redhat.com/browse/OCPBUGS-27422): Avoid nil pointer panic while assigning private IP on Azure [#133](https://github.com/openshift/cloud-network-config-controller/pull/133)
* [OCPBUGS-30146](https://issues.redhat.com/browse/OCPBUGS-30146): Serialize scheme construction to prevent panic [#134](https://github.com/openshift/cloud-network-config-controller/pull/134)
* [OCPBUGS-31289](https://issues.redhat.com/browse/OCPBUGS-31289): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 [#135](https://github.com/openshift/cloud-network-config-controller/pull/135)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#132](https://github.com/openshift/cloud-network-config-controller/pull/132)
* [SDN-4405](https://issues.redhat.com/browse/SDN-4405): 1.29_rebase: [#131](https://github.com/openshift/cloud-network-config-controller/pull/131)
* [OCPBUGS-28282](https://issues.redhat.com/browse/OCPBUGS-28282): Add Snyk file to exclude vendor dependent libraries on scan [#130](https://github.com/openshift/cloud-network-config-controller/pull/130)
* [OCPBUGS-24823](https://issues.redhat.com/browse/OCPBUGS-24823): Updating ose-cloud-network-config-controller-container image to be consistent with ART [#129](https://github.com/openshift/cloud-network-config-controller/pull/129)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/6864da0642026d6004df171539fa9fd5bcb6c2df...8ceee78810756afaa2efb75f60bef0358502834f)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4782c451e1aab859b7db09aee01af10c1ebf428c)
* [OCPBUGS-43367](https://issues.redhat.com/browse/OCPBUGS-43367): manifests should not use APIs that are removed in upcoming releases [#717](https://github.com/openshift/cluster-authentication-operator/pull/717)
* [OCPBUGS-34790](https://issues.redhat.com/browse/OCPBUGS-34790): update OpenShift favicon to new brand standard [#676](https://github.com/openshift/cluster-authentication-operator/pull/676)
* NO-JIRA: Fixes for Keycloack IDP test and unit tests [#683](https://github.com/openshift/cluster-authentication-operator/pull/683)
* NO-JIRA: remove go-jose not to get flagged with its CVEs [#668](https://github.com/openshift/cluster-authentication-operator/pull/668)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#656](https://github.com/openshift/cluster-authentication-operator/pull/656)
* [OCPBUGS-24195](https://issues.redhat.com/browse/OCPBUGS-24195): the apiservice controller waits until bootstrap complete [#662](https://github.com/openshift/cluster-authentication-operator/pull/662)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#640](https://github.com/openshift/cluster-authentication-operator/pull/640)
* NO-JIRA: e2e Keycloak: retry logging in as admin [#666](https://github.com/openshift/cluster-authentication-operator/pull/666)
* [OCPBUGS-32089](https://issues.redhat.com/browse/OCPBUGS-32089): wellknown-readiness: perform several attempts to connect before going unavailable [#664](https://github.com/openshift/cluster-authentication-operator/pull/664)
* NO-ISSUE: bump to the latest version of openshift/api [#663](https://github.com/openshift/cluster-authentication-operator/pull/663)
* NO-ISSUE: bump dependencies [#659](https://github.com/openshift/cluster-authentication-operator/pull/659)
* NO-JIRA: test/lib: create SA on deploy [#660](https://github.com/openshift/cluster-authentication-operator/pull/660)
* NO-ISSUE: oauth-apiserver: disable priority and fairness [#658](https://github.com/openshift/cluster-authentication-operator/pull/658)
* NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after [#657](https://github.com/openshift/cluster-authentication-operator/pull/657)
* NO-JIRA: _output - remove dir [#651](https://github.com/openshift/cluster-authentication-operator/pull/651)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#632](https://github.com/openshift/cluster-authentication-operator/pull/632)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#646](https://github.com/openshift/cluster-authentication-operator/pull/646)
* [OCPBUGS-24883](https://issues.redhat.com/browse/OCPBUGS-24883): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#644](https://github.com/openshift/cluster-authentication-operator/pull/644)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#636](https://github.com/openshift/cluster-authentication-operator/pull/636)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1...4782c451e1aab859b7db09aee01af10c1ebf428c)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/eecb123a3b02358046a2c2ce52adfc548a5caa17)
* [OCPBUGS-33932](https://issues.redhat.com/browse/OCPBUGS-33932): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#303](https://github.com/openshift/kubernetes-autoscaler/pull/303)
* NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup [#298](https://github.com/openshift/kubernetes-autoscaler/pull/298)
* [OCPBUGS-31421](https://issues.redhat.com/browse/OCPBUGS-31421): add check for taint.value == nil [#292](https://github.com/openshift/kubernetes-autoscaler/pull/292)
* [OCPBUGS-28334](https://issues.redhat.com/browse/OCPBUGS-28334): update snyk file [#287](https://github.com/openshift/kubernetes-autoscaler/pull/287)
* [PODAUTO-99](https://issues.redhat.com/browse/PODAUTO-99): Fix VPA e2e test failures [#286](https://github.com/openshift/kubernetes-autoscaler/pull/286)
* [OCPCLOUD-2431](https://issues.redhat.com/browse/OCPCLOUD-2431): rebase on upstream 1.29.0 release [#285](https://github.com/openshift/kubernetes-autoscaler/pull/285)
* [PODAUTO-104](https://issues.redhat.com/browse/PODAUTO-104): Add downstream pod autoscaling team member jkyros to VPA OWNERS [#283](https://github.com/openshift/kubernetes-autoscaler/pull/283)
* [OCPBUGS-27509](https://issues.redhat.com/browse/OCPBUGS-27509): Fix unstructured taint parsing in Cluster API provider [#281](https://github.com/openshift/kubernetes-autoscaler/pull/281)
* [OCPBUGS-26504](https://issues.redhat.com/browse/OCPBUGS-26504): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 [#279](https://github.com/openshift/kubernetes-autoscaler/pull/279)
* [OCPBUGS-25855](https://issues.redhat.com/browse/OCPBUGS-25855): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 [#277](https://github.com/openshift/kubernetes-autoscaler/pull/277)
* [OCPBUGS-25625](https://issues.redhat.com/browse/OCPBUGS-25625): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/kubernetes-autoscaler/pull/276)
* [OCPBUGS-24783](https://issues.redhat.com/browse/OCPBUGS-24783): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#271](https://github.com/openshift/kubernetes-autoscaler/pull/271)
* [OCPBUGS-25579](https://issues.redhat.com/browse/OCPBUGS-25579): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#274](https://github.com/openshift/kubernetes-autoscaler/pull/274)
* [PODAUTO-91](https://issues.redhat.com/browse/PODAUTO-91): Add joelsmith to OWNERS for approving of VPA-only PRs [#273](https://github.com/openshift/kubernetes-autoscaler/pull/273)
* [OCPBUGS-24974](https://issues.redhat.com/browse/OCPBUGS-24974): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#272](https://github.com/openshift/kubernetes-autoscaler/pull/272)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/e78ea20540f3f445f7417cf4fe138738f3a4143a...eecb123a3b02358046a2c2ce52adfc548a5caa17)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#315](https://github.com/openshift/cluster-autoscaler-operator/pull/315)
* [OCPBUGS-20565](https://issues.redhat.com/browse/OCPBUGS-20565): Set webhook minimum TLS version to 1.3 [#320](https://github.com/openshift/cluster-autoscaler-operator/pull/320)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add empty string as value for GpuType if GpuCount is empty 0 [#317](https://github.com/openshift/cluster-autoscaler-operator/pull/317)
* [OCPBUGS-31960](https://issues.redhat.com/browse/OCPBUGS-31960): Bump x/net to v.0.24.0 [#318](https://github.com/openshift/cluster-autoscaler-operator/pull/318)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Update CAO to add upstream annotations [#316](https://github.com/openshift/cluster-autoscaler-operator/pull/316)
* [OCPCLOUD-2523](https://issues.redhat.com/browse/OCPCLOUD-2523): add ExpanderOrderList api option [#304](https://github.com/openshift/cluster-autoscaler-operator/pull/304)
* [OCPBUGS-29863](https://issues.redhat.com/browse/OCPBUGS-29863): Apply hypershift cluster-profile for ibm-cloud-managed [#314](https://github.com/openshift/cluster-autoscaler-operator/pull/314)
* [OCPBUGS-28207](https://issues.redhat.com/browse/OCPBUGS-28207): update min/max memory limit documentation [#313](https://github.com/openshift/cluster-autoscaler-operator/pull/313)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Revert "OCPBUGS-18137: Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch" [#311](https://github.com/openshift/cluster-autoscaler-operator/pull/311)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#312](https://github.com/openshift/cluster-autoscaler-operator/pull/312)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH [#297](https://github.com/openshift/cluster-autoscaler-operator/pull/297)
* [OCPCLOUD-2432](https://issues.redhat.com/browse/OCPCLOUD-2432): Bump k8s packages to v1.29 [#310](https://github.com/openshift/cluster-autoscaler-operator/pull/310)
* [OCPBUGS-25559](https://issues.redhat.com/browse/OCPBUGS-25559): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#305](https://github.com/openshift/cluster-autoscaler-operator/pull/305)
* [OCPBUGS-25633](https://issues.redhat.com/browse/OCPBUGS-25633): Add Snyk file to exclude vendor directory on scan [#306](https://github.com/openshift/cluster-autoscaler-operator/pull/306)
* [OCPBUGS-24911](https://issues.redhat.com/browse/OCPBUGS-24911): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#303](https://github.com/openshift/cluster-autoscaler-operator/pull/303)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/8425d88b5bedd5d22acfb0f6c0edf929ec401288...40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/03738f2d941b836800926fc701202b8d4b9d0605)
* [OCPBUGS-43556](https://issues.redhat.com/browse/OCPBUGS-43556): SCC-pinning for metal3-baremetal-operator [#453](https://github.com/openshift/cluster-baremetal-operator/pull/453)
* [OCPBUGS-31961](https://issues.redhat.com/browse/OCPBUGS-31961): bump x/net to 0.23.0 [#431](https://github.com/openshift/cluster-baremetal-operator/pull/431)
* [OCPBUGS-36415](https://issues.redhat.com/browse/OCPBUGS-36415): set required-scc for openshift workloads [#433](https://github.com/openshift/cluster-baremetal-operator/pull/433)
* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Move pull secret from env var to VolumeMount in metal3-image-customization container [#436](https://github.com/openshift/cluster-baremetal-operator/pull/436)
* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Mount htpasswds as volumeMounts in metal3-httpd container [#434](https://github.com/openshift/cluster-baremetal-operator/pull/434)
* [OCPBUGS-35381](https://issues.redhat.com/browse/OCPBUGS-35381): provisioning: add ownership for tls secret [#425](https://github.com/openshift/cluster-baremetal-operator/pull/425)
* [OCPBUGS-35503](https://issues.redhat.com/browse/OCPBUGS-35503): Add capability to metal3-ramdisk-logs container [#426](https://github.com/openshift/cluster-baremetal-operator/pull/426)
* [OCPBUGS-34041](https://issues.redhat.com/browse/OCPBUGS-34041): Run metal3 containers as specific users and groups [#418](https://github.com/openshift/cluster-baremetal-operator/pull/418)
* [OCPBUGS-33493](https://issues.redhat.com/browse/OCPBUGS-33493): Enable leader election for baremetal-operator [#416](https://github.com/openshift/cluster-baremetal-operator/pull/416)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Drop unneccessary capabilities [#401](https://github.com/openshift/cluster-baremetal-operator/pull/401)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Wait for bootstrapping to finish before starting [#415](https://github.com/openshift/cluster-baremetal-operator/pull/415)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#413](https://github.com/openshift/cluster-baremetal-operator/pull/413)
* [METAL-979](https://issues.redhat.com/browse/METAL-979): Add RBAC for newer CRDs hostfirmwarecomponents and dataimages [#412](https://github.com/openshift/cluster-baremetal-operator/pull/412)
* [METAL-904](https://issues.redhat.com/browse/METAL-904): Move parts of ICC config to a new secret [#406](https://github.com/openshift/cluster-baremetal-operator/pull/406)
* [OCPBUGS-31341](https://issues.redhat.com/browse/OCPBUGS-31341): Refactor Pull Secret application [#409](https://github.com/openshift/cluster-baremetal-operator/pull/409)
* [OCPBUGS-27760](https://issues.redhat.com/browse/OCPBUGS-27760): Update the leader election durations to be tolerant [#403](https://github.com/openshift/cluster-baremetal-operator/pull/403)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): pass all IPs to image-customization-controller [#400](https://github.com/openshift/cluster-baremetal-operator/pull/400)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Reduce container privileges [#396](https://github.com/openshift/cluster-baremetal-operator/pull/396)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add terminationmessagepolicy to show last of error log in API [#399](https://github.com/openshift/cluster-baremetal-operator/pull/399)
* [METAL-856](https://issues.redhat.com/browse/METAL-856): set USE_IRONIC_INSPECTOR explicitly [#398](https://github.com/openshift/cluster-baremetal-operator/pull/398)
* [OCPBUGS-25766](https://issues.redhat.com/browse/OCPBUGS-25766): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#395](https://github.com/openshift/cluster-baremetal-operator/pull/395)
* [OCPBUGS-25572](https://issues.redhat.com/browse/OCPBUGS-25572): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#394](https://github.com/openshift/cluster-baremetal-operator/pull/394)
* [OCPBUGS-24946](https://issues.redhat.com/browse/OCPBUGS-24946): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#393](https://github.com/openshift/cluster-baremetal-operator/pull/393)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/934c2181e98f11c1a2629bd34d4a09e61323ffd6...03738f2d941b836800926fc701202b8d4b9d0605)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/27bfb59fd0ff399224ee673869b8875ef10f1962)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#103](https://github.com/openshift/cluster-bootstrap/pull/103)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#102](https://github.com/openshift/cluster-bootstrap/pull/102)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/0849c462de13b9a5765b9a8c882acb9e6e8bf39e...27bfb59fd0ff399224ee673869b8875ef10f1962)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/5830a10a2f545dc25ff4ca4c4efd9005088676aa)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#207](https://github.com/openshift/cluster-api/pull/207)
* [OCPBUGS-30480](https://issues.redhat.com/browse/OCPBUGS-30480): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master [#203](https://github.com/openshift/cluster-api/pull/203)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master [#199](https://github.com/openshift/cluster-api/pull/199)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#200](https://github.com/openshift/cluster-api/pull/200)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): openshift: promote core CAPI IPAM CRDs to GA [#197](https://github.com/openshift/cluster-api/pull/197)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): openshift: add CustomNoUpgrade annotation value to feature-set [#196](https://github.com/openshift/cluster-api/pull/196)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): openshift: generate separate manifest for core CAPI CRDs [#195](https://github.com/openshift/cluster-api/pull/195)
* [OCPBUGS-26111](https://issues.redhat.com/browse/OCPBUGS-26111): add snyk file [#194](https://github.com/openshift/cluster-api/pull/194)
* [OCPCLOUD-2449](https://issues.redhat.com/browse/OCPCLOUD-2449): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master [#192](https://github.com/openshift/cluster-api/pull/192)
* NO-JIRA: e2e: add openstack testing script [#193](https://github.com/openshift/cluster-api/pull/193)
* [OCPBUGS-25586](https://issues.redhat.com/browse/OCPBUGS-25586): Updating ose-cluster-api-container image to be consistent with ART [#191](https://github.com/openshift/cluster-api/pull/191)
* [OCPBUGS-25000](https://issues.redhat.com/browse/OCPBUGS-25000): Updating ose-cluster-api-container image to be consistent with ART [#190](https://github.com/openshift/cluster-api/pull/190)
* [Full changelog](https://github.com/openshift/cluster-api/compare/2053e13cb0fda9188e9b685db83c1e1f492e6efa...5830a10a2f545dc25ff4ca4c4efd9005088676aa)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/3a2f98fba9180a470d224aa662bb7df5ee5127bf)
* [OCPBUGS-37441](https://issues.redhat.com/browse/OCPBUGS-37441): fix: sort CredentialsRequest manifests after namespace [#190](https://github.com/openshift/cluster-capi-operator/pull/190)
* [OCPBUGS-37795](https://issues.redhat.com/browse/OCPBUGS-37795): fix: align openstack e2e branch [#192](https://github.com/openshift/cluster-capi-operator/pull/192)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#172](https://github.com/openshift/cluster-capi-operator/pull/172)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#171](https://github.com/openshift/cluster-capi-operator/pull/171)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609), [OCPCLOUD-1610](https://issues.redhat.com/browse/OCPCLOUD-1610): Add Support for VSphere [#149](https://github.com/openshift/cluster-capi-operator/pull/149)
* NO-JIRA: CAPA: use v1beta2 [#151](https://github.com/openshift/cluster-capi-operator/pull/151)
* NO-JIRA: Fix manifests-gen tool + testing [#168](https://github.com/openshift/cluster-capi-operator/pull/168)
* [OCPBUGS-29832](https://issues.redhat.com/browse/OCPBUGS-29832), [OCPCLOUD-2451](https://issues.redhat.com/browse/OCPCLOUD-2451): Bump CAPI 1.6 and k8s 1.28 [#164](https://github.com/openshift/cluster-capi-operator/pull/164)
* [OCPBUGS-29676](https://issues.redhat.com/browse/OCPBUGS-29676): create openshift-cluster-api namespace in CustomNoUpgrade [#163](https://github.com/openshift/cluster-capi-operator/pull/163)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): manifests-gen: promote Core CAPI IPAM CRDs to GA [#162](https://github.com/openshift/cluster-capi-operator/pull/162)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): manifests-gen: also add CustomNoUpgrade annotation value [#161](https://github.com/openshift/cluster-capi-operator/pull/161)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): manifests-gen: store core capi crds also in their own manifest [#159](https://github.com/openshift/cluster-capi-operator/pull/159)
* [OCPBUGS-28539](https://issues.redhat.com/browse/OCPBUGS-28539): Start operator controllers only on supported platforms, add unsupported controller [#157](https://github.com/openshift/cluster-capi-operator/pull/157)
* [OCPBUGS-26121](https://issues.redhat.com/browse/OCPBUGS-26121): Add Snyk file to exclude vendor directory on scan [#156](https://github.com/openshift/cluster-capi-operator/pull/156)
* [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#87](https://github.com/openshift/cluster-capi-operator/pull/87)
* NO-JIRA: e2e: add openstack testing script [#154](https://github.com/openshift/cluster-capi-operator/pull/154)
* [OCPBUGS-25778](https://issues.redhat.com/browse/OCPBUGS-25778): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.16 [#153](https://github.com/openshift/cluster-capi-operator/pull/153)
* [OCPBUGS-24979](https://issues.redhat.com/browse/OCPBUGS-24979): Updating ose-cluster-capi-operator-container image to be consistent with ART [#150](https://github.com/openshift/cluster-capi-operator/pull/150)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/203435ef87a2bed13fc43db893deb8bee1dff97f...3a2f98fba9180a470d224aa662bb7df5ee5127bf)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1c26756f0b4ff5537e32db18d5fb16555f5bd58f)
* [OCPBUGS-42125](https://issues.redhat.com/browse/OCPBUGS-42125): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#366](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/366)
* [OCPBUGS-43473](https://issues.redhat.com/browse/OCPBUGS-43473): update goimports targets [#372](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/372)
* [OCPBUGS-36317](https://issues.redhat.com/browse/OCPBUGS-36317): PowerVS: Remove bind address [#358](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/358)
* [OCPBUGS-34826](https://issues.redhat.com/browse/OCPBUGS-34826): Nutanix CCM pods Cipher Suites vulnerability issue [#350](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/350)
* NO-JIRA: Ensure termination message policy in tests [#344](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/344)
* [OCPBUGS-33405](https://issues.redhat.com/browse/OCPBUGS-33405): update azure and ash tolerations on node manager [#342](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/342)
* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Pass --cluster-name to OpenStack CCM [#337](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/337)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition logic [#335](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/335)
* Bug OCPBUGS-29605: Allow to patch events in OpenStack RBAC [#336](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/336)
* [OCPVE-660](https://issues.redhat.com/browse/OCPVE-660): add CloudController capability annotation [#284](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/284)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on feature gates for whether to deploy CCMs [#334](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/334)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Increase Azure Concurrent Service Syncs to 10 [#328](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/328)
* [OCPBUGS-29220](https://issues.redhat.com/browse/OCPBUGS-29220): Set AZURE_FEDERATED_TOKEN_FILE on CCM container [#332](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/332)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Add EndpointSlices permissions for Azure [#331](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/331)
* [OCPBUGS-13106](https://issues.redhat.com/browse/OCPBUGS-13106): Increase GCP Concurrent Service Syncs to 10 [#329](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/329)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#330](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/330)
* NO-JIRA:Use expressive Gomega matchers with Eventually [#327](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/327)
* [OCPBUGS-24486](https://issues.redhat.com/browse/OCPBUGS-24486): Enforce the use of shared health checks [#326](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/326)
* [OCPCLOUD-2424](https://issues.redhat.com/browse/OCPCLOUD-2424): Bump k8s packages to v1.29 [#325](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/325)
* [OCPBUGS-25887](https://issues.redhat.com/browse/OCPBUGS-25887): IBMCloud: Patch CCM for 4.16 [#323](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/323)
* [OCPBUGS-26494](https://issues.redhat.com/browse/OCPBUGS-26494): PowerVS: handle 4.16 changes [#322](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/322)
* [OCPBUGS-25483](https://issues.redhat.com/browse/OCPBUGS-25483): Adds CloudConfigTransformer for Azure [#316](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/316)
* [OCPBUGS-24948](https://issues.redhat.com/browse/OCPBUGS-24948): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#308](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/308)
* [OCPBUGS-25750](https://issues.redhat.com/browse/OCPBUGS-25750): Add Snyk file to exclude vendor directory on scan [#313](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/313)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Adds GCP ClusterRole and ClusterRoleBinding [#310](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/310)
* [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#205](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/205)
* trt-1382: reorder flag initialization [#309](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/309)
* trt-1382: test add space [#307](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/56181136d91dff7bac4aa5acb2c1461381ac6e34...1c26756f0b4ff5537e32db18d5fb16555f5bd58f)
### [cluster-config-api](https://github.com/openshift/api/tree/b7d0481c9094172326bc9462c4f85b8f3ff0d761)
* [OCPBUGS-38773](https://issues.redhat.com/browse/OCPBUGS-38773): remove duplicate featuregate 'ExternalRouteCertificate' [#2007](https://github.com/openshift/api/pull/2007)
* [OCPBUGS-37857](https://issues.redhat.com/browse/OCPBUGS-37857): [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features [#1985](https://github.com/openshift/api/pull/1985)
* [OCPBUGS-33788](https://issues.redhat.com/browse/OCPBUGS-33788): add console and download URLs to console operator config [#1915](https://github.com/openshift/api/pull/1915)
* [CFE-1047](https://issues.redhat.com/browse/CFE-1047): Add the field "CapacityReservationGroupID" to "AzureMachineProviderSpec" in openshift/api [#1923](https://github.com/openshift/api/pull/1923)
* [OCPBUGS-35742](https://issues.redhat.com/browse/OCPBUGS-35742): prevent removing featureSet entirely [#1933](https://github.com/openshift/api/pull/1933)
* [OCPBUGS-26466](https://issues.redhat.com/browse/OCPBUGS-26466): Disable PSA in non-previews 4.16 [#1912](https://github.com/openshift/api/pull/1912)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): promote VSphereDriverConfiguration feature to Accessible-by-default [#1904](https://github.com/openshift/api/pull/1904)
* temporarily break the featuregate check to show we can get results [#1911](https://github.com/openshift/api/pull/1911)
* Feature gates for platforms, architecture, and installs [#1910](https://github.com/openshift/api/pull/1910)
* [OCPBUGS-34398](https://issues.redhat.com/browse/OCPBUGS-34398): Streamline bootstrap crds [#1905](https://github.com/openshift/api/pull/1905)
* [ETCD-602](https://issues.redhat.com/browse/ETCD-602): Move etcd hardware speed feature to GA [#1901](https://github.com/openshift/api/pull/1901)
* Move CAPI install platforms to default feature set [#1892](https://github.com/openshift/api/pull/1892)
* [OCPBUGS-33727](https://issues.redhat.com/browse/OCPBUGS-33727): Fix Gateway API Feature Gate [#1894](https://github.com/openshift/api/pull/1894)
* NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config [#1890](https://github.com/openshift/api/pull/1890)
* [SDN-4600](https://issues.redhat.com/browse/SDN-4600): Add NetworkDiagnosticsConfig to the default featureset [#1886](https://github.com/openshift/api/pull/1886)
* Revert "Revert "Merge pull request #1851 from slashpai/metrics-server"" [#1865](https://github.com/openshift/api/pull/1865)
* [CORS-3488](https://issues.redhat.com/browse/CORS-3488): Add GCP CAPI installer to tech preview feature set. [#1889](https://github.com/openshift/api/pull/1889)
* Add eligible CAPI-install platforms to TechPreview [#1880](https://github.com/openshift/api/pull/1880)
* NO-JIRA: Update runtime image and drop color in CI [#1885](https://github.com/openshift/api/pull/1885)
* add MachineConfiguration conditions for boot image updates [#1882](https://github.com/openshift/api/pull/1882)
* [SPLAT-1452](https://issues.redhat.com/browse/SPLAT-1452): Changed vcenter MaxItems to be 3 for TechPreview. [#1842](https://github.com/openshift/api/pull/1842)
* [ETCD-520](https://issues.redhat.com/browse/ETCD-520): add BackendQuotaGiB example [#1874](https://github.com/openshift/api/pull/1874)
* Update SSA tag markers [#1881](https://github.com/openshift/api/pull/1881)
* Expose chunksize variable for S3 storage driver [#1864](https://github.com/openshift/api/pull/1864)
* [ETCD-520](https://issues.redhat.com/browse/ETCD-520): add etcd dbsize field [#1736](https://github.com/openshift/api/pull/1736)
* Update imageregistry component SSA tags [#1877](https://github.com/openshift/api/pull/1877)
* Add Machine V1 to payload CRDs [#1876](https://github.com/openshift/api/pull/1876)
* Recurse when loading CRD schemas to check [#1875](https://github.com/openshift/api/pull/1875)
* [MCO-1148](https://issues.redhat.com/browse/MCO-1148): Attempt to tombstone MachineConfiguration/StaticPodOperatorStatus [#1789](https://github.com/openshift/api/pull/1789)
* [OPNET-512](https://issues.redhat.com/browse/OPNET-512): config/v1/types_infrastructure: change set to atomic for networks [#1873](https://github.com/openshift/api/pull/1873)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): route: Fix insecureEdgeTerminationPolicy default [#1845](https://github.com/openshift/api/pull/1845)
* features: add capi-installer gate per platform [#1868](https://github.com/openshift/api/pull/1868)
* Simplify CEL validations in network operator [#1871](https://github.com/openshift/api/pull/1871)
* clean up NodeDisruptionPolicySpecAction godoc [#1870](https://github.com/openshift/api/pull/1870)
* fix MachineOSBuild printer columns [#1867](https://github.com/openshift/api/pull/1867)
* NO-JIRA: move featuregate definitions to a new package [#1821](https://github.com/openshift/api/pull/1821)
* Revert #1851 "MON-3538: Promote MetricsServer FeatureGate to GA" [#1863](https://github.com/openshift/api/pull/1863)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1: update MCP feature gated field to omitempty [#1862](https://github.com/openshift/api/pull/1862)
* NO-JIRA: Change PreviousFlakePercentage value type from int to float [#1861](https://github.com/openshift/api/pull/1861)
* [MON-3538](https://issues.redhat.com/browse/MON-3538): Promote MetricsServer FeatureGate to GA [#1851](https://github.com/openshift/api/pull/1851)
* Provide a small help when invoking tests/hack/gen-minimal-test.sh [#1860](https://github.com/openshift/api/pull/1860)
* NO-JIRA: Add DevPreviewNoUpgrade as a featureset [#1825](https://github.com/openshift/api/pull/1825)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Reintroduce CEL IP/CIDR validation for Config APIs [#1817](https://github.com/openshift/api/pull/1817)
* remove alpha level of AlertingRules which are GA since 4.14 [#1854](https://github.com/openshift/api/pull/1854)
* add explanation of how to provide automated testing for FeatureGate [#1855](https://github.com/openshift/api/pull/1855)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfig/v1: add PoolSynchronizers to MCP status [#1852](https://github.com/openshift/api/pull/1852)
* [STOR-1803](https://issues.redhat.com/browse/STOR-1803): add vsphere snapshot configuration fields to ClusterCSIDriver [#1783](https://github.com/openshift/api/pull/1783)
* NO-JIRA: add command to restrict features from promotion without tests [#1843](https://github.com/openshift/api/pull/1843)
* NO-JIRA: add type for recording tests per featuregate [#1848](https://github.com/openshift/api/pull/1848)
* MCO API Cleanup [#1850](https://github.com/openshift/api/pull/1850)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds seperate controllers for default rolebindings [#1770](https://github.com/openshift/api/pull/1770)
* [MCO-993](https://issues.redhat.com/browse/MCO-993): MachineOSBuild API [#1773](https://github.com/openshift/api/pull/1773)
* [OCPBUGS-28673](https://issues.redhat.com/browse/OCPBUGS-28673): Ingress - add connect timeout to tuning options [#1829](https://github.com/openshift/api/pull/1829)
* [SDN-4599](https://issues.redhat.com/browse/SDN-4599): Configurable network diagnostics pod placement [#1800](https://github.com/openshift/api/pull/1800)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1alpha1: add PinnedImageSet to MCN [#1824](https://github.com/openshift/api/pull/1824)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Promote `AdminNetworkPolicy` to GA [#1840](https://github.com/openshift/api/pull/1840)
* Proposed new api structure for ovnkubernetes / transit switch api [#1626](https://github.com/openshift/api/pull/1626)
* [OCPBUGS-31058](https://issues.redhat.com/browse/OCPBUGS-31058): config/ingress: Make Hostname godoc user-friendly [#1819](https://github.com/openshift/api/pull/1819)
* use CEL to enforce immutable featureset [#1839](https://github.com/openshift/api/pull/1839)
* NO-JIRA: enable the SA token node thing [#1831](https://github.com/openshift/api/pull/1831)
* [OCPCLOUD-2573](https://issues.redhat.com/browse/OCPCLOUD-2573): Enables kubelet cloud credential providers [#1786](https://github.com/openshift/api/pull/1786)
* update vendor for new test changes and vendoring [#1834](https://github.com/openshift/api/pull/1834)
* [MON-3486](https://issues.redhat.com/browse/MON-3486): add feature gate for Collection Profiles [#1835](https://github.com/openshift/api/pull/1835)
* Add models-schema to make clean [#1828](https://github.com/openshift/api/pull/1828)
* NO-JIRA: remove single-node-developer clusterProfile [#1827](https://github.com/openshift/api/pull/1827)
* NO-JIRA: update integration testing to be by gate [#1833](https://github.com/openshift/api/pull/1833)
* machineconfiguration/v1alpha1: add PinnedImageSetStatus [#1830](https://github.com/openshift/api/pull/1830)
* bump(golang.org/x/tools) to match k8s 1.28 [#1832](https://github.com/openshift/api/pull/1832)
* [MCO-1010](https://issues.redhat.com/browse/MCO-1010): Add node disruption policies to MachineConfiguration CRD [#1764](https://github.com/openshift/api/pull/1764)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1alpha1: add PinnedImageSet [#1822](https://github.com/openshift/api/pull/1822)
* NO-JIRA: Switch integration tests to ordered to save time [#1823](https://github.com/openshift/api/pull/1823)
* add markdown generator for featuregates [#1820](https://github.com/openshift/api/pull/1820)
* explain roughly what the new generator is doing [#1816](https://github.com/openshift/api/pull/1816)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Updates to build API reviewers [#1792](https://github.com/openshift/api/pull/1792)
* add section about adding new APIs [#1815](https://github.com/openshift/api/pull/1815)
* add doc.go to each generated mainfest dir [#1814](https://github.com/openshift/api/pull/1814)
* [TRT-1563](https://issues.redhat.com/browse/TRT-1563): Revert #1802 "Move config v1 IP validation to CEL" [#1810](https://github.com/openshift/api/pull/1810)
* move to new directory [#1803](https://github.com/openshift/api/pull/1803)
* skip rendering mutation of CustomNoUpgrade featuresets [#1806](https://github.com/openshift/api/pull/1806)
* All remaining genererated by new generator [#1808](https://github.com/openshift/api/pull/1808)
* Move config v1 IP validation to CEL [#1802](https://github.com/openshift/api/pull/1802)
* make featuregate manifest pattern consistent and remove legacy files [#1805](https://github.com/openshift/api/pull/1805)
* convert generation in a couple more v1 APIs [#1804](https://github.com/openshift/api/pull/1804)
* update the last manifests used directly from this image to featuregate generation [#1796](https://github.com/openshift/api/pull/1796)
* [OPNET-466](https://issues.redhat.com/browse/OPNET-466): PlatformLoadBalancer becomes GA for On-Prem [#1757](https://github.com/openshift/api/pull/1757)
* updating config stragglers to by-feature-gate generation [#1793](https://github.com/openshift/api/pull/1793)
* update network group to use "normal" generation [#1795](https://github.com/openshift/api/pull/1795)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Moved vSphereStaticIPs into Default from TechPreview [#1729](https://github.com/openshift/api/pull/1729)
* update the machine group to use the featuregate generator [#1799](https://github.com/openshift/api/pull/1799)
* tighten up the useCRD interface [#1801](https://github.com/openshift/api/pull/1801)
* Add tooling for publishing OpenShift kubebuilder tools [#1774](https://github.com/openshift/api/pull/1774)
* update machineconfiguration to use featuregated generation [#1797](https://github.com/openshift/api/pull/1797)
* update sharedresource to use featuregate generation [#1798](https://github.com/openshift/api/pull/1798)
* updating console stragglers to by-feature-gate generation [#1794](https://github.com/openshift/api/pull/1794)
* Merge manifests based on clusterProfile and featureSet [#1791](https://github.com/openshift/api/pull/1791)
* specify Featuregates by cluster profile [#1788](https://github.com/openshift/api/pull/1788)
* make the serialized featuregate location an input param [#1790](https://github.com/openshift/api/pull/1790)
* remove ungated case from manifest-merge [#1784](https://github.com/openshift/api/pull/1784)
* Generate config.openshift.io using FeatureGates instead of FeatureSets [#1731](https://github.com/openshift/api/pull/1731)
* [OCPBUGS-25594](https://issues.redhat.com/browse/OCPBUGS-25594): Fix text and indentation for TLS Security Profile [#1730](https://github.com/openshift/api/pull/1730)
* [OCPVE-658](https://issues.redhat.com/browse/OCPVE-658): add CloudController capability [#1579](https://github.com/openshift/api/pull/1579)
* [MCO-820](https://issues.redhat.com/browse/MCO-820): Add boot images update opt-in mechanism [#1672](https://github.com/openshift/api/pull/1672)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#1691](https://github.com/openshift/api/pull/1691)
* ImagePolicy uses byte format for base64 fields [#1765](https://github.com/openshift/api/pull/1765)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1771](https://github.com/openshift/api/pull/1771)
* config/v1/types_cluster_version: Drop never-implemented 'Evaluating' conditionalUpdates condition type [#1753](https://github.com/openshift/api/pull/1753)
* [NE-1303](https://issues.redhat.com/browse/NE-1303): cluster version: add v4.16 set and ingress capability [#1724](https://github.com/openshift/api/pull/1724)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1740](https://github.com/openshift/api/pull/1740)
* [SPLAT-1441](https://issues.redhat.com/browse/SPLAT-1441): promote vSphere failure domain template field [#1759](https://github.com/openshift/api/pull/1759)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): config.openshift.io/v1/scheduler: allow profile customizations for DRA [#1738](https://github.com/openshift/api/pull/1738)
* [STOR-1724](https://issues.redhat.com/browse/STOR-1724): Add Samba/CIFS CSI driver provider [#1741](https://github.com/openshift/api/pull/1741)
* [OCPBUGS-29075](https://issues.redhat.com/browse/OCPBUGS-29075): Move network.config status.conditions to GA [#1755](https://github.com/openshift/api/pull/1755)
* [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): Add BuildInterrupted type [#1752](https://github.com/openshift/api/pull/1752)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Add UnservableInFutureVersions route status condition type [#1722](https://github.com/openshift/api/pull/1722)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Add new API for VolumeGroupSnapshot [#1746](https://github.com/openshift/api/pull/1746)
* [NP-874](https://issues.redhat.com/browse/NP-874): Promote SDN Live Migration to GA [#1747](https://github.com/openshift/api/pull/1747)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Allow modified IPv6 address as CPIC name [#1727](https://github.com/openshift/api/pull/1727)
* Switch to K8s yaml to ensure consistent formatting of CRDs [#1744](https://github.com/openshift/api/pull/1744)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): add separate authentication config manifest for hypershift [#1732](https://github.com/openshift/api/pull/1732)
* [SPLAT-1396](https://issues.redhat.com/browse/SPLAT-1396): promote feature gate and vSphere failure domains to default [#1733](https://github.com/openshift/api/pull/1733)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): features: enabled TranslateStreamCloseWebsocketRequests through TechPreviewNoUpgrade [#1737](https://github.com/openshift/api/pull/1737)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Add new param ResourceManagerTags to GCPMachineProviderSpec [#1506](https://github.com/openshift/api/pull/1506)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): respect the cluster profile in rendering [#1734](https://github.com/openshift/api/pull/1734)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): Add feature gate for upgrade status [#1725](https://github.com/openshift/api/pull/1725)
* [SPLAT-1385](https://issues.redhat.com/browse/SPLAT-1385): introduce TagIDs field to vSphere providerSpec [#1697](https://github.com/openshift/api/pull/1697)
* Add ImagePolicyList and ClusterImagePolicyList to scheme known types [#1726](https://github.com/openshift/api/pull/1726)
* Add generated featuregate files inertly to payloads [#1720](https://github.com/openshift/api/pull/1720)
* add-IPsecExternal [#1667](https://github.com/openshift/api/pull/1667)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): authentication: use CRD validation for the 'type' field [#1716](https://github.com/openshift/api/pull/1716)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Revert the revert "Extend infra CR to store VIPs and MachineNetwork"" [#1695](https://github.com/openshift/api/pull/1695)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART for 4.16 [#1710](https://github.com/openshift/api/pull/1710)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): Add feature gate for pinned images [#1703](https://github.com/openshift/api/pull/1703)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1709](https://github.com/openshift/api/pull/1709)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1708](https://github.com/openshift/api/pull/1708)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#1676](https://github.com/openshift/api/pull/1676)
* Add KMSv1 to default feature gates [#1706](https://github.com/openshift/api/pull/1706)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1685](https://github.com/openshift/api/pull/1685)
* Add ClusterImagePolicy and ImagePolicy [#1457](https://github.com/openshift/api/pull/1457)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1700](https://github.com/openshift/api/pull/1700)
* Add payload manifests dir [#1648](https://github.com/openshift/api/pull/1648)
* [OCPBUGS-24573](https://issues.redhat.com/browse/OCPBUGS-24573): Generate Tech Preview version of ControllerConfig CRD [#1698](https://github.com/openshift/api/pull/1698)
* [Full changelog](https://github.com/openshift/api/compare/0a58f8c30a8c309baaa4aecd05580039b4d3888b...b7d0481c9094172326bc9462c4f85b8f3ff0d761)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/441d29c92b1759d1780a525112e764280b78b0d6)
* [SPLAT-1630](https://issues.redhat.com/browse/SPLAT-1630): Bump API version to get new VSphereMultiVCenters featuregate. [#418](https://github.com/openshift/cluster-config-operator/pull/418)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#410](https://github.com/openshift/cluster-config-operator/pull/410)
* [OCPBUGS-24871](https://issues.redhat.com/browse/OCPBUGS-24871): Updating ose-cluster-config-operator-container image to be consistent with ART [#390](https://github.com/openshift/cluster-config-operator/pull/390)
* [TRT-1581](https://issues.redhat.com/browse/TRT-1581): default to self-managed clusterprofile [#414](https://github.com/openshift/cluster-config-operator/pull/414)
* NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable [#412](https://github.com/openshift/cluster-config-operator/pull/412)
* [OCPBUGS-29576](https://issues.redhat.com/browse/OCPBUGS-29576): Apply hypershift cluster-profile for ibm-cloud-managed [#408](https://github.com/openshift/cluster-config-operator/pull/408)
* NO-JIRA: add check to ensure clusterprofile matches for featuregates [#411](https://github.com/openshift/cluster-config-operator/pull/411)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Fix PSa labels [#406](https://github.com/openshift/cluster-config-operator/pull/406)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Bump(openshift/api): to get new VolumeGroupSnapshot API [#405](https://github.com/openshift/cluster-config-operator/pull/405)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Add required PSa labels [#401](https://github.com/openshift/cluster-config-operator/pull/401)
* [SPLAT-1400](https://issues.redhat.com/browse/SPLAT-1400): promote vSphere control plane machinesets from tech preview [#400](https://github.com/openshift/cluster-config-operator/pull/400)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#399](https://github.com/openshift/cluster-config-operator/pull/399)
* Revert "OCPBUGS-26541: remove duplicate manifests in image" [#397](https://github.com/openshift/cluster-config-operator/pull/397)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#392](https://github.com/openshift/cluster-config-operator/pull/392)
* [OCPNODE-1671](https://issues.redhat.com/browse/OCPNODE-1671): Update api,client-go to add imagepolicy api [#376](https://github.com/openshift/cluster-config-operator/pull/376)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818...441d29c92b1759d1780a525112e764280b78b0d6)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)
* [OCPBUGS-44179](https://issues.redhat.com/browse/OCPBUGS-44179): relax validation on delete and if failureDomains not configured [#331](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/331)
* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#314](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/314)
* [OCPBUGS-35476](https://issues.redhat.com/browse/OCPBUGS-35476): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#307](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/307)
* [OCPBUGS-34970](https://issues.redhat.com/browse/OCPBUGS-34970): Add unreadyNodeGracePeriod for allowing brief node hiccups [#298](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/298)
* [OCPBUGS-35227](https://issues.redhat.com/browse/OCPBUGS-35227): Improved debugging of API listing errors [#300](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/300)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Modified webhook to reject changes to vsphere fields coming from failure domains. [#291](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/291)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#282](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/282)
* Drop CRDs for CPMS [#292](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/292)
* [OCPBUGS-31808](https://issues.redhat.com/browse/OCPBUGS-31808): Fix ExportFailureDomain to handle empty platform spec [#287](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/287)
* [OCPBUGS-32295](https://issues.redhat.com/browse/OCPBUGS-32295): Modified webhook to allow templates by name instead of just by path. [#288](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/288)
* [SPLAT-1440](https://issues.redhat.com/browse/SPLAT-1440): prevent rollout due to irrelevant path artifacts [#275](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/275)
* [OCPBUGS-26127](https://issues.redhat.com/browse/OCPBUGS-26127): add snyk configuration file [#277](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/277)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Fix vSphere machineprovider InjectFailureDomain to handle empty network device list. [#281](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/281)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Modified vSphere config provider to not lose AddressesFromPools when applying Failure Domains [#273](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/273)
* [OCPBUGS-29249](https://issues.redhat.com/browse/OCPBUGS-29249): Never delete a Machine when there's a single Machine in an index [#278](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/278)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#276](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/276)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#274](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/274)
* [SPLAT-1391](https://issues.redhat.com/browse/SPLAT-1391): promote vSphere from tech preview [#272](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/272)
* [OCPCLOUD-2415](https://issues.redhat.com/browse/OCPCLOUD-2415): Update K8s deps to 1.29 [#271](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/271)
* [OCPBUGS-25577](https://issues.redhat.com/browse/OCPBUGS-25577): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#270](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/270)
* [OCPCLOUD-1894](https://issues.redhat.com/browse/OCPCLOUD-1894): Implement admission warning for missing target pools [#269](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/269)
* [OCPBUGS-24967](https://issues.redhat.com/browse/OCPBUGS-24967): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#268](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/268)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/c03231f93a4630b94d86dde98688f357777c14b6...14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/439826e1a723c094717877db0f2ca1848d0fb10a)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#196](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/196)
* [STOR-1817](https://issues.redhat.com/browse/STOR-1817): Avoid deleting VolumeGroupSnapshot resources [#200](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/200)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#193](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/193)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Update manifests to v7.0.0 [#201](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/201)
* [OCPBUGS-31497](https://issues.redhat.com/browse/OCPBUGS-31497): create suitable role and roleBinding for csi-snapshot-webhook [#202](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/202)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set SecurityContext for HyperShift [#197](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/197)
* [OCPBUGS-30483](https://issues.redhat.com/browse/OCPBUGS-30483): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#198](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/198)
* [OCPBUGS-29577](https://issues.redhat.com/browse/OCPBUGS-29577): Apply hypershift cluster-profile for ibm-cloud-managed [#194](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/194)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Fix: typo of volumegroupsnapshots [#195](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/195)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Pass VolumeGroupSnapshot argument if feature is enabled [#191](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/191)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#192](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/192)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#190](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/190)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#187](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/187)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Revert "HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook" [#188](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/188)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): add KAS access label to csi-snapshot-controller and csi-snapshot-webhook [#182](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/182)
* [OCPBUGS-25558](https://issues.redhat.com/browse/OCPBUGS-25558): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#183](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/183)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#181](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/181)
* [OCPBUGS-25149](https://issues.redhat.com/browse/OCPBUGS-25149): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#179](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/179)
* [OCPBUGS-23838](https://issues.redhat.com/browse/OCPBUGS-23838): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#177](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/177)
* [OCPBUGS-24908](https://issues.redhat.com/browse/OCPBUGS-24908): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#178](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/178)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/65dbb12b710b7126f662f5f7f2d8272f9f6868cc...439826e1a723c094717877db0f2ca1848d0fb10a)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/8ddf28f959955e2b1b319856c0d47ae6729bcc31)
* [OCPBUGS-37078](https://issues.redhat.com/browse/OCPBUGS-37078): Bump version of DNSNameResolver controller [#419](https://github.com/openshift/cluster-dns-operator/pull/419)
* [CFE-964](https://issues.redhat.com/browse/CFE-964): Add DNSNameResolver controller [#394](https://github.com/openshift/cluster-dns-operator/pull/394)
* [OCPBUGS-32941](https://issues.redhat.com/browse/OCPBUGS-32941): Bump to Kubernetes 1.29 and controller-runtime 0.17.3 [#408](https://github.com/openshift/cluster-dns-operator/pull/408)
* [OCPBUGS-27924](https://issues.redhat.com/browse/OCPBUGS-27924): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 [#402](https://github.com/openshift/cluster-dns-operator/pull/402)
* [CFE-852](https://issues.redhat.com/browse/CFE-852): Enable ocp_dnsnameresolver CoreDNS plugin [#393](https://github.com/openshift/cluster-dns-operator/pull/393)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#403](https://github.com/openshift/cluster-dns-operator/pull/403)
* [OCPBUGS-24884](https://issues.redhat.com/browse/OCPBUGS-24884): Updating ose-cluster-dns-operator-container image to be consistent with ART [#397](https://github.com/openshift/cluster-dns-operator/pull/397)
* [OCPBUGS-24602](https://issues.redhat.com/browse/OCPBUGS-24602): Enable topology-aware hints iff nodes in >=2 zones [#398](https://github.com/openshift/cluster-dns-operator/pull/398)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/49290d7db2194df73dfaeb1e719580dabf166690...8ddf28f959955e2b1b319856c0d47ae6729bcc31)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd)
* [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348)
* [OCPBUGS-37820](https://issues.redhat.com/browse/OCPBUGS-37820): ensure ordering in member health checks [#1311](https://github.com/openshift/cluster-etcd-operator/pull/1311)
* [OCPBUGS-36489](https://issues.redhat.com/browse/OCPBUGS-36489): parallelize member health checks [#1290](https://github.com/openshift/cluster-etcd-operator/pull/1290)
* [OCPBUGS-35500](https://issues.redhat.com/browse/OCPBUGS-35500): Update etcd-tls-assets.md [#1276](https://github.com/openshift/cluster-etcd-operator/pull/1276)
* [ETCD-621](https://issues.redhat.com/browse/ETCD-621): Update api vendor libraries to get GA'ed tuning profiles [#1265](https://github.com/openshift/cluster-etcd-operator/pull/1265)
* [OCPBUGS-33495](https://issues.redhat.com/browse/OCPBUGS-33495): return errors in wait-for-ceo [#1260](https://github.com/openshift/cluster-etcd-operator/pull/1260)
* [OCPBUGS-31849](https://issues.redhat.com/browse/OCPBUGS-31849): check the quorum in case the cluster is healthy or not after generating certs [#1239](https://github.com/openshift/cluster-etcd-operator/pull/1239)
* NO-JIRA: remove cluster-backup pod [#1182](https://github.com/openshift/cluster-etcd-operator/pull/1182)
* [OCPBUGS-31956](https://issues.redhat.com/browse/OCPBUGS-31956): update golang x net [#1252](https://github.com/openshift/cluster-etcd-operator/pull/1252)
* [OCPBUGS-31249](https://issues.redhat.com/browse/OCPBUGS-31249): remove etcd-health-probe log [#1230](https://github.com/openshift/cluster-etcd-operator/pull/1230)
* [ETCD-583](https://issues.redhat.com/browse/ETCD-583): add signer expiration metric and alert [#1249](https://github.com/openshift/cluster-etcd-operator/pull/1249)
* [API-1800](https://issues.redhat.com/browse/API-1800): manifests: convert SecretTypeTLS secrets to kubernetes.io/tls [#1247](https://github.com/openshift/cluster-etcd-operator/pull/1247)
* NO-ISSUE: use IsBootstrapComplete from library-go [#1244](https://github.com/openshift/cluster-etcd-operator/pull/1244)
* [OCPBUGS-32217](https://issues.redhat.com/browse/OCPBUGS-32217): avoid race conditions during render cert creation [#1246](https://github.com/openshift/cluster-etcd-operator/pull/1246)
* [OCPBUGS-32176](https://issues.redhat.com/browse/OCPBUGS-32176): immediately return on dynamic certs errors [#1245](https://github.com/openshift/cluster-etcd-operator/pull/1245)
* Revert "ETCD-579: store revision at which signers are rotated" [#1243](https://github.com/openshift/cluster-etcd-operator/pull/1243)
* [ETCD-579](https://issues.redhat.com/browse/ETCD-579): store revision at which signers are rotated [#1235](https://github.com/openshift/cluster-etcd-operator/pull/1235)
* [ETCD-580](https://issues.redhat.com/browse/ETCD-580): Decrease validity period to prevent cert expiry for offline clusters [#1238](https://github.com/openshift/cluster-etcd-operator/pull/1238)
* [OCPBUGS-31658](https://issues.redhat.com/browse/OCPBUGS-31658): Fix feature set custom no upgrade [#1233](https://github.com/openshift/cluster-etcd-operator/pull/1233)
* NO-JIRA: fail certsignercontroller sync when secret can not be applied [#1226](https://github.com/openshift/cluster-etcd-operator/pull/1226)
* [ETCD-535](https://issues.redhat.com/browse/ETCD-535): Manual CA rotation should rotate all leaf certs [#1200](https://github.com/openshift/cluster-etcd-operator/pull/1200)
* Revert "OCPBUGS-30169: add timeout to etcd client.New config" [#1222](https://github.com/openshift/cluster-etcd-operator/pull/1222)
* [OCPBUGS-30873](https://issues.redhat.com/browse/OCPBUGS-30873): CEO aliveness check should only detect deadlocks [#1223](https://github.com/openshift/cluster-etcd-operator/pull/1223)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=master [#1219](https://github.com/openshift/cluster-etcd-operator/pull/1219)
* [ETCD-518](https://issues.redhat.com/browse/ETCD-518): garbage collect unused dynamic certs [#1209](https://github.com/openshift/cluster-etcd-operator/pull/1209)
* [OCPBUGS-30169](https://issues.redhat.com/browse/OCPBUGS-30169): add timeout to etcd client.New config [#1215](https://github.com/openshift/cluster-etcd-operator/pull/1215)
* NO-JIRA: replace nodelister with master nodelister [#1205](https://github.com/openshift/cluster-etcd-operator/pull/1205)
* [ETCD-517](https://issues.redhat.com/browse/ETCD-517): run certsignercontroller for bootstrap render [#1186](https://github.com/openshift/cluster-etcd-operator/pull/1186)
* [ETCD-516](https://issues.redhat.com/browse/ETCD-516): CEO needs to react on changing CA cert bundle and client certs [#1202](https://github.com/openshift/cluster-etcd-operator/pull/1202)
* NO-JIRA: increase client pool size [#1203](https://github.com/openshift/cluster-etcd-operator/pull/1203)
* [OCPBUGS-29417](https://issues.redhat.com/browse/OCPBUGS-29417): Sno fix bootstrap race [#1201](https://github.com/openshift/cluster-etcd-operator/pull/1201)
* [OCPBUGS-27926](https://issues.redhat.com/browse/OCPBUGS-27926): Updating cluster-etcd-operator-container image to be c… [#1189](https://github.com/openshift/cluster-etcd-operator/pull/1189)
* Revert "Revert "OCPBUGS-22969: Use v1 for flowcontrol API"" [#1199](https://github.com/openshift/cluster-etcd-operator/pull/1199)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1194](https://github.com/openshift/cluster-etcd-operator/pull/1194)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-etcd-operator namespace [#1198](https://github.com/openshift/cluster-etcd-operator/pull/1198)
* Revert "OCPBUGS-22969: Use v1 for flowcontrol API" [#1197](https://github.com/openshift/cluster-etcd-operator/pull/1197)
* [TRT-1485](https://issues.redhat.com/browse/TRT-1485): Revert #1177 "ETCD-512: refactoring the cert signer controller" [#1193](https://github.com/openshift/cluster-etcd-operator/pull/1193)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1177](https://github.com/openshift/cluster-etcd-operator/pull/1177)
* [OCPBUGS-27959](https://issues.redhat.com/browse/OCPBUGS-27959): fix panic in health check timeouts [#1190](https://github.com/openshift/cluster-etcd-operator/pull/1190)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1149](https://github.com/openshift/cluster-etcd-operator/pull/1149)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): update library-go to latest commit [#1180](https://github.com/openshift/cluster-etcd-operator/pull/1180)
* [OCPBUGS-24889](https://issues.redhat.com/browse/OCPBUGS-24889): Updating cluster-etcd-operator-container image to be consistent with ART [#1175](https://github.com/openshift/cluster-etcd-operator/pull/1175)
* NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy [#1171](https://github.com/openshift/cluster-etcd-operator/pull/1171)
* add ownership for etcd-ca-bundle that I don't think is updated [#1159](https://github.com/openshift/cluster-etcd-operator/pull/1159)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b72a596d1f588da8eca821f28f286dfd609691d1...3f2ce4889c255391323d8bdf07dece99e87dbccd)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068)
* [OCPBUGS-43797](https://issues.redhat.com/browse/OCPBUGS-43797): fix proxy config and leader election test flakes [#1148](https://github.com/openshift/cluster-image-registry-operator/pull/1148)
* [OCPBUGS-43555](https://issues.redhat.com/browse/OCPBUGS-43555): pkg/storage/azure: also check for auth failure error code on deletion [#1143](https://github.com/openshift/cluster-image-registry-operator/pull/1143)
* [OCPBUGS-42933](https://issues.redhat.com/browse/OCPBUGS-42933): azureclient: stop validating credentials when creating the client [#1134](https://github.com/openshift/cluster-image-registry-operator/pull/1134)
* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126)
* Revert "[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage" [#1119](https://github.com/openshift/cluster-image-registry-operator/pull/1119)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): pkg/operator/azurepathfixcontroller: do not sync on non-azure storage [#1115](https://github.com/openshift/cluster-image-registry-operator/pull/1115)
* [OCPBUGS-39098](https://issues.redhat.com/browse/OCPBUGS-39098): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1104](https://github.com/openshift/cluster-image-registry-operator/pull/1104)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource/azurepathfixjob: invoke update-ca-trust extract with --output [#1102](https://github.com/openshift/cluster-image-registry-operator/pull/1102)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource: invoke update-ca-trust extract with --output [#1098](https://github.com/openshift/cluster-image-registry-operator/pull/1098)
* [OCPBUGS-36037](https://issues.redhat.com/browse/OCPBUGS-36037): go.*,vendor: bump go-retryablehttp #1064 [#1064](https://github.com/openshift/cluster-image-registry-operator/pull/1064)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): add SAR capability to image-registry [#1054](https://github.com/openshift/cluster-image-registry-operator/pull/1054)
* [OCPBUGS-34165](https://issues.redhat.com/browse/OCPBUGS-34165): azure-path-fix: get client secret from k8s secret [#1041](https://github.com/openshift/cluster-image-registry-operator/pull/1041)
* [OCPBUGS-34166](https://issues.redhat.com/browse/OCPBUGS-34166): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1042](https://github.com/openshift/cluster-image-registry-operator/pull/1042)
* [OCPBUGS-34069](https://issues.redhat.com/browse/OCPBUGS-34069): Bump openshift api, client-go & library-go [#1039](https://github.com/openshift/cluster-image-registry-operator/pull/1039)
* [OCPBUGS-33172](https://issues.redhat.com/browse/OCPBUGS-33172): azurepathfix: check if platform status is nil before accessing it [#1030](https://github.com/openshift/cluster-image-registry-operator/pull/1030)
* [OCPBUGS-32491](https://issues.redhat.com/browse/OCPBUGS-32491): Power VS: Add support for Power VS endpoint overrides [#1024](https://github.com/openshift/cluster-image-registry-operator/pull/1024)
* [OCPBUGS-29559](https://issues.redhat.com/browse/OCPBUGS-29559): Apply hypershift cluster-profile for ibm-cloud-managed [#999](https://github.com/openshift/cluster-image-registry-operator/pull/999)
* [OCPBUGS-32328](https://issues.redhat.com/browse/OCPBUGS-32328): azure-path-fix: support auth via account key (without clientID) [#1021](https://github.com/openshift/cluster-image-registry-operator/pull/1021)
* [OCPBUGS-30484](https://issues.redhat.com/browse/OCPBUGS-30484): bump indirect google protobuf dependency [#1015](https://github.com/openshift/cluster-image-registry-operator/pull/1015)
* NO-JIRA: remove bparees from owners [#1019](https://github.com/openshift/cluster-image-registry-operator/pull/1019)
* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): bump aws-sdk-go from v1.44 to v1.50 [#1012](https://github.com/openshift/cluster-image-registry-operator/pull/1012)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1008](https://github.com/openshift/cluster-image-registry-operator/pull/1008)
* NO-JIRA: bump golangci-lint to v1.56.2 [#1013](https://github.com/openshift/cluster-image-registry-operator/pull/1013)
* [OCPBUGS-29932](https://issues.redhat.com/browse/OCPBUGS-29932): cmd/move-blobs: log and exit 1 on error instead of panic [#1006](https://github.com/openshift/cluster-image-registry-operator/pull/1006)
* [OCPBUGS-29637](https://issues.redhat.com/browse/OCPBUGS-29637): azurepathfix: fix stack hub, government and workload identity setup [#1003](https://github.com/openshift/cluster-image-registry-operator/pull/1003)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): move azure storage blobs from `docker` back into `/docker` [#998](https://github.com/openshift/cluster-image-registry-operator/pull/998)
* NO-JIRA: Add hack/local-dev.sh [#996](https://github.com/openshift/cluster-image-registry-operator/pull/996)
* [OCPBUGS-28225](https://issues.redhat.com/browse/OCPBUGS-28225): pkg/storage/s3: enable bucket key on encryption settings [#993](https://github.com/openshift/cluster-image-registry-operator/pull/993)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#992](https://github.com/openshift/cluster-image-registry-operator/pull/992)
* NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 [#989](https://github.com/openshift/cluster-image-registry-operator/pull/989)
* [OCPBUGS-26767](https://issues.redhat.com/browse/OCPBUGS-26767): MULTIARCH-4074: PowerVS: update supported regions [#987](https://github.com/openshift/cluster-image-registry-operator/pull/987)
* [IR-409](https://issues.redhat.com/browse/IR-409): build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 [#974](https://github.com/openshift/cluster-image-registry-operator/pull/974)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#979](https://github.com/openshift/cluster-image-registry-operator/pull/979)
* [IR-410](https://issues.redhat.com/browse/IR-410): build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 [#980](https://github.com/openshift/cluster-image-registry-operator/pull/980)
* [OCPBUGS-11624](https://issues.redhat.com/browse/OCPBUGS-11624): manifests/02-rbac.yaml: stop using wild cards [#964](https://github.com/openshift/cluster-image-registry-operator/pull/964)
* [OCPBUGS-24649](https://issues.redhat.com/browse/OCPBUGS-24649): add private endpoint permissions to Azure credentials request [#971](https://github.com/openshift/cluster-image-registry-operator/pull/971)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#975](https://github.com/openshift/cluster-image-registry-operator/pull/975)
* [IR-412](https://issues.redhat.com/browse/IR-412): IBMCloud: Add support for endpoint overrides [#955](https://github.com/openshift/cluster-image-registry-operator/pull/955)
* [CCO-248](https://issues.redhat.com/browse/CCO-248): Revert "Merge pull request #965 from jstuever/TRT-1368" [#967](https://github.com/openshift/cluster-image-registry-operator/pull/967)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/6776f554e8b0664f6e7f54abc4a2c03f42a2a378...00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/57f9674e75908ca11b24792fb9f077233cd7bcf1)
* [OCPBUGS-39324](https://issues.redhat.com/browse/OCPBUGS-39324): Refine logging for accurate infra CR status updates [#1139](https://github.com/openshift/cluster-ingress-operator/pull/1139)
* [OCPBUGS-39323](https://issues.redhat.com/browse/OCPBUGS-39323): Ingress operator status not degraded when canary route fails [#1138](https://github.com/openshift/cluster-ingress-operator/pull/1138)
* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Delete and recreate canary route to clear spec.host [#1099](https://github.com/openshift/cluster-ingress-operator/pull/1099)
* [OCPBUGS-36184](https://issues.redhat.com/browse/OCPBUGS-36184): Add e2e test for connect timeout [#1094](https://github.com/openshift/cluster-ingress-operator/pull/1094)
* [OCPBUGS-35883](https://issues.redhat.com/browse/OCPBUGS-35883): Add Regexp Anchor to TestAll [#1093](https://github.com/openshift/cluster-ingress-operator/pull/1093)
* [OCPBUGS-34835](https://issues.redhat.com/browse/OCPBUGS-34835): internalServiceChanged: Fix target port logic [#1072](https://github.com/openshift/cluster-ingress-operator/pull/1072)
* [OCPBUGS-34837](https://issues.redhat.com/browse/OCPBUGS-34837): Bump openshift/library-go to resolve NewPrometheusClient E2E failures [#1074](https://github.com/openshift/cluster-ingress-operator/pull/1074)
* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Allow operator to update Route spec.subdomain [#1047](https://github.com/openshift/cluster-ingress-operator/pull/1047)
* [OCPBUGS-32942](https://issues.redhat.com/browse/OCPBUGS-32942): Bump controller-runtime to v0.17.3 [#1050](https://github.com/openshift/cluster-ingress-operator/pull/1050)
* [OCPBUGS-28673](https://issues.redhat.com/browse/OCPBUGS-28673): implement connect timeout tuning option [#1035](https://github.com/openshift/cluster-ingress-operator/pull/1035)
* [NE-1317](https://issues.redhat.com/browse/NE-1317): manifests - add ingress capability annotation [#950](https://github.com/openshift/cluster-ingress-operator/pull/950)
* [OCPBUGS-32371](https://issues.redhat.com/browse/OCPBUGS-32371): Bump openshift/api, and update CRD generation [#1045](https://github.com/openshift/cluster-ingress-operator/pull/1045)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add vnet subnet read and join permission for azure [#1029](https://github.com/openshift/cluster-ingress-operator/pull/1029)
* [OCPBUGS-30834](https://issues.redhat.com/browse/OCPBUGS-30834): Update to go 1.21 [#1040](https://github.com/openshift/cluster-ingress-operator/pull/1040)
* [OCPBUGS-31722](https://issues.redhat.com/browse/OCPBUGS-31722): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1037](https://github.com/openshift/cluster-ingress-operator/pull/1037)
* [OCPBUGS-3522](https://issues.redhat.com/browse/OCPBUGS-3522): Include recent errors in canary checks fail [#865](https://github.com/openshift/cluster-ingress-operator/pull/865)
* [OCPBUGS-30091](https://issues.redhat.com/browse/OCPBUGS-30091): TestHostNetworkPortBinding: Delete t.Parallel() [#1032](https://github.com/openshift/cluster-ingress-operator/pull/1032)
* [CFE-987](https://issues.redhat.com/browse/CFE-987): Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods [#1017](https://github.com/openshift/cluster-ingress-operator/pull/1017)
* [CORS-2317](https://issues.redhat.com/browse/CORS-2317): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1016](https://github.com/openshift/cluster-ingress-operator/pull/1016)
* [OCPBUGS-28596](https://issues.redhat.com/browse/OCPBUGS-28596): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 [#1020](https://github.com/openshift/cluster-ingress-operator/pull/1020)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1019](https://github.com/openshift/cluster-ingress-operator/pull/1019)
* [NE-1490](https://issues.redhat.com/browse/NE-1490): update to go v1.20 [#1012](https://github.com/openshift/cluster-ingress-operator/pull/1012)
* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes [#980](https://github.com/openshift/cluster-ingress-operator/pull/980)
* [CCO-249](https://issues.redhat.com/browse/CCO-249): Replace GCP role with explicit permissions [#844](https://github.com/openshift/cluster-ingress-operator/pull/844)
* [OCPBUGS-25006](https://issues.redhat.com/browse/OCPBUGS-25006): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-ingress-operator/pull/1006)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert " OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved" [#1011](https://github.com/openshift/cluster-ingress-operator/pull/1011)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert "Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest" and add changes to skip test only for Azure and GCP [#1008](https://github.com/openshift/cluster-ingress-operator/pull/1008)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Skip CI for scope change until OCPBUGS-24044 is resolved [#1007](https://github.com/openshift/cluster-ingress-operator/pull/1007)
* [OCPVE-780](https://issues.redhat.com/browse/OCPVE-780): annotate credentials request manifests [#995](https://github.com/openshift/cluster-ingress-operator/pull/995)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9e0d092565a4589dbcbafb7b1212651afa6d36fa...57f9674e75908ca11b24792fb9f077233cd7bcf1)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0)
* [OCPBUGS-37563](https://issues.redhat.com/browse/OCPBUGS-37563): add disabled syncer as reason to CFE for PSA [#1714](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1714)
* [OCPBUGS-35303](https://issues.redhat.com/browse/OCPBUGS-35303): manifests: add ownership annotation for kubelet-bootstrap-kubeconfig [#1701](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1701)
* [OCPBUGS-35831](https://issues.redhat.com/browse/OCPBUGS-35831): add SNO control plane high cpu usage alert [#1705](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1705)
* [OCPBUGS-25104](https://issues.redhat.com/browse/OCPBUGS-25104): revert dev cert rotation 4.16 [#1695](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1695)
* [OCPBUGS-34408](https://issues.redhat.com/browse/OCPBUGS-34408): Create one-shot migrations for the flowcontrol group. [#1690](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1690)
* [OCPBUGS-33522](https://issues.redhat.com/browse/OCPBUGS-33522): add a controller that reconciles SCCs' volumes [#1675](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1675)
* NO-ISSUE: Revert "add SNO control plane high cpu usage alert" [#1674](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1674)
* [OCPBUGS-33184](https://issues.redhat.com/browse/OCPBUGS-33184): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1671](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1671)
* [OCPEDGE-902](https://issues.redhat.com/browse/OCPEDGE-902): add SNO control plane high cpu usage alert [#1660](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1660)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#1664](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1664)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1577](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1577)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret controller in update only mode [#1659](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1659)
* NO-ISSUE: Revert "certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates [#1661](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1661)
* NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry [#1652](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1652)
* [OCPBUGS-30119](https://issues.redhat.com/browse/OCPBUGS-30119): certrotation: Bump library-go to latest master [#1651](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1651)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): External CCM should no longer rely on feature gate access [#1649](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1649)
* [OCPBUGS-25894](https://issues.redhat.com/browse/OCPBUGS-25894): operator: stop removing kube-apiserver-slos asset [#1642](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1642)
* NO-JIRA: extend node-system-admin-client validity to 2 years [#1618](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1618)
* [OBSDA-553](https://issues.redhat.com/browse/OBSDA-553): add provider name to cluster_infrastructure_provider when external platform [#1638](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1638)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-kube-apiserver-operator namespace [#1637](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1637)
* [OCPBUGS-27842](https://issues.redhat.com/browse/OCPBUGS-27842): Add sno section to alert description [#1633](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1633)
* NO-JIRA: Add Vu and Vadim to OWNERS [#1634](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1634)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): when skipping a webhook check because of missing CA log the name of the webhook [#1632](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1632)
* NO-JIRA: Add ownership for the admin kubeconfig [#1584](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1584)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#1546](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1546)
* NO-ISSUE: prevent update status conflicts [#1621](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1621)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#1619](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1619)
* [OCPBUGS-14496](https://issues.redhat.com/browse/OCPBUGS-14496): manifests: fix the scope of the TechPreviewNoUpgrade alert [#1512](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1512)
* [OCPBUGS-24907](https://issues.redhat.com/browse/OCPBUGS-24907): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1606](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1606)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1608](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1608)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1587](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1587)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): revert #1586 #1596 [#1607](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1607)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#1586](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1586)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Set flag to skip setting cloud-provider=external [#1596](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1596)
* [OCPBUGS-24701](https://issues.redhat.com/browse/OCPBUGS-24701): ignore vendor folder in SAST scan [#1599](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1599)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/aabc7863cdbd76f8909a10fbc1be53b032e4ec31...de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)
* [OCPBUGS-28592](https://issues.redhat.com/browse/OCPBUGS-28592): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/cluster-api-operator/pull/37)
* [OCPBUGS-26140](https://issues.redhat.com/browse/OCPBUGS-26140): Fix formatting in snyk vendor exclusions [#36](https://github.com/openshift/cluster-api-operator/pull/36)
* [OCPBUGS-25634](https://issues.redhat.com/browse/OCPBUGS-25634): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/cluster-api-operator/pull/33)
* [OCPBUGS-24887](https://issues.redhat.com/browse/OCPBUGS-24887): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#32](https://github.com/openshift/cluster-api-operator/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/128d8e08c48e2002c416e84d0dec816bf5999c7e...95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0338b3be6912024d03def2c26f0fa10218fc2c25)
* [OCPBUGS-33933](https://issues.redhat.com/browse/OCPBUGS-33933): Remove cloud-provider, cloud-config, and cloud-volume-plugin flags [#808](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/808)
* [API-1800](https://issues.redhat.com/browse/API-1800): bindata: convert SecretTypeTLS secrets [#804](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/804)
* [WRKLDS-1169](https://issues.redhat.com/browse/WRKLDS-1169): tolerate node-role.kubernetes.io/control-plane:NoExecute [#802](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/802)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#800](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/800)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): revision_controller: do not create a new revision when a required object is missing [#796](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/796)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition [#795](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/795)
* [OCPBUGS-30488](https://issues.redhat.com/browse/OCPBUGS-30488): bump(google.golang.org/protobuf)=v1.33.0 [#798](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/798)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. [#794](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/794)
* [OCPBUGS-29565](https://issues.redhat.com/browse/OCPBUGS-29565): Apply hypershift cluster-profile for ibm-cloud-managed [#793](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/793)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#786](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/786)
* [OCPBUGS-26117](https://issues.redhat.com/browse/OCPBUGS-26117): Add .snyk file to exclude vendor and ignore unit tests [#784](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/784)
* [OCPBUGS-25587](https://issues.redhat.com/browse/OCPBUGS-25587): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#780](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/780)
* NO-JIRA: Make render unit pass consistently [#782](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/782)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#781](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/781)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#770](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/770)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Removes legacy cloud-provider resources [#778](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/778)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#777](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/777)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#757](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/757)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#775](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/775)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f...0338b3be6912024d03def2c26f0fa10218fc2c25)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/630f63bc7a30d2662bbb5115233144079de6eef6)
* [WRKLDS-1168](https://issues.redhat.com/browse/WRKLDS-1168): tolerate node-role.kubernetes.io/control-plane:NoExecute [#539](https://github.com/openshift/cluster-kube-scheduler-operator/pull/539)
* [OCPBUGS-30489](https://issues.redhat.com/browse/OCPBUGS-30489): bump(google.golang.org/protobuf)=v1.33.0 [#538](https://github.com/openshift/cluster-kube-scheduler-operator/pull/538)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=release-4.16 [#536](https://github.com/openshift/cluster-kube-scheduler-operator/pull/536)
* [OCPBUGS-29566](https://issues.redhat.com/browse/OCPBUGS-29566): Apply hypershift cluster-profile for ibm-cloud-managed [#535](https://github.com/openshift/cluster-kube-scheduler-operator/pull/535)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): README: fix dynamicResourceAllocation field name [#534](https://github.com/openshift/cluster-kube-scheduler-operator/pull/534)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate [#532](https://github.com/openshift/cluster-kube-scheduler-operator/pull/532)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): add PSa labels to openshift-kube-scheduler-operator namespace [#533](https://github.com/openshift/cluster-kube-scheduler-operator/pull/533)
* NO-JIRA: readme: describe mapping between logLevel and log level [#531](https://github.com/openshift/cluster-kube-scheduler-operator/pull/531)
* NO-JIRA: README: add notes about dumping KS's node cache [#530](https://github.com/openshift/cluster-kube-scheduler-operator/pull/530)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#526](https://github.com/openshift/cluster-kube-scheduler-operator/pull/526)
* [OCPBUGS-23631](https://issues.redhat.com/browse/OCPBUGS-23631): Add .snyk file to exclude vendor and ignore unit tests [#524](https://github.com/openshift/cluster-kube-scheduler-operator/pull/524)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#522](https://github.com/openshift/cluster-kube-scheduler-operator/pull/522)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#521](https://github.com/openshift/cluster-kube-scheduler-operator/pull/521)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#510](https://github.com/openshift/cluster-kube-scheduler-operator/pull/510)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#519](https://github.com/openshift/cluster-kube-scheduler-operator/pull/519)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#517](https://github.com/openshift/cluster-kube-scheduler-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f054dfaf189b43b262c11ef7f97038c79592c796...630f63bc7a30d2662bbb5115233144079de6eef6)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e825811333c05b705c35d2e9a9a62e55e9ab0935)
* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): bump protobuf [#115](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/115)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#107](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/107)
* [OCPBUGS-29567](https://issues.redhat.com/browse/OCPBUGS-29567): Apply hypershift cluster-profile for ibm-cloud-managed [#106](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/106)
* [OCPBUGS-27930](https://issues.redhat.com/browse/OCPBUGS-27930): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/103)
* [OCPBUGS-24989](https://issues.redhat.com/browse/OCPBUGS-24989): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#101](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/101)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e76cea5f52bd5a125d051c6a0da4127a4dae6700...e825811333c05b705c35d2e9a9a62e55e9ab0935)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7fbf7f22ad6779c17414fc3072e2ea70cc2625c5)
* [OCPBUGS-44629](https://issues.redhat.com/browse/OCPBUGS-44629): Client internal DNS checks should be case insensitive [#244](https://github.com/openshift/cluster-machine-approver/pull/244)
* [OCPBUGS-34161](https://issues.redhat.com/browse/OCPBUGS-34161): check for machine crd before listing machines [#233](https://github.com/openshift/cluster-machine-approver/pull/233)
* [OCPBUGS-29568](https://issues.redhat.com/browse/OCPBUGS-29568): Apply hypershift cluster-profile for ibm-cloud-managed [#229](https://github.com/openshift/cluster-machine-approver/pull/229)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#227](https://github.com/openshift/cluster-machine-approver/pull/227)
* [OCPBUGS-26116](https://issues.redhat.com/browse/OCPBUGS-26116): Add Snyk file to exclude vendor directory on scan [#225](https://github.com/openshift/cluster-machine-approver/pull/225)
* [OCPCLOUD-2417](https://issues.redhat.com/browse/OCPCLOUD-2417): Update to kube 1.29 and controller-runtime 0.17.0 [#224](https://github.com/openshift/cluster-machine-approver/pull/224)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Increase concurrent reconciles to 10 [#222](https://github.com/openshift/cluster-machine-approver/pull/222)
* [OCPBUGS-25582](https://issues.redhat.com/browse/OCPBUGS-25582): Updating ose-cluster-machine-approver-container image to be consistent with ART [#223](https://github.com/openshift/cluster-machine-approver/pull/223)
* [OCPBUGS-24985](https://issues.redhat.com/browse/OCPBUGS-24985): Updating ose-cluster-machine-approver-container image to be consistent with ART [#218](https://github.com/openshift/cluster-machine-approver/pull/218)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/6a809ce320324a3f841c7ac992cc77eafe1d97d7...7fbf7f22ad6779c17414fc3072e2ea70cc2625c5)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c2c204a1244adc54d7b31ec35766b82bf6db413d)
* [OCPBUGS-44005](https://issues.redhat.com/browse/OCPBUGS-44005): fix(monitoring-plugin): disable emitting nginx version on error pages [#2521](https://github.com/openshift/cluster-monitoring-operator/pull/2521)
* [OCPBUGS-43826](https://issues.redhat.com/browse/OCPBUGS-43826): Add runbook url for TelemeterClientFailures [#2508](https://github.com/openshift/cluster-monitoring-operator/pull/2508)
* [OCPBUGS-41967](https://issues.redhat.com/browse/OCPBUGS-41967): disable user-defined monitoring per object [#2474](https://github.com/openshift/cluster-monitoring-operator/pull/2474)
* [OCPBUGS-42067](https://issues.redhat.com/browse/OCPBUGS-42067): Reapply "chore: poll immediately in the e2e tests" [#2476](https://github.com/openshift/cluster-monitoring-operator/pull/2476)
* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Configure graceful shutdown for metrics-server (4.16 backport) [#2467](https://github.com/openshift/cluster-monitoring-operator/pull/2467)
* [OCPBUGS-41910](https://issues.redhat.com/browse/OCPBUGS-41910): filter alerts sent to Telemeter [#2471](https://github.com/openshift/cluster-monitoring-operator/pull/2471)
* [OCPBUGS-39170](https://issues.redhat.com/browse/OCPBUGS-39170): Backport #2441 for 4.16 [#2447](https://github.com/openshift/cluster-monitoring-operator/pull/2447)
* [OCPBUGS-36907](https://issues.redhat.com/browse/OCPBUGS-36907): Add deprecated config runbook [#2411](https://github.com/openshift/cluster-monitoring-operator/pull/2411)
* [OCPBUGS-36717](https://issues.redhat.com/browse/OCPBUGS-36717): Exclude windows nodes from kubelet servicemonitor [#2408](https://github.com/openshift/cluster-monitoring-operator/pull/2408)
* [OCPBUGS-36482](https://issues.redhat.com/browse/OCPBUGS-36482): add runbook_url annotations [#2404](https://github.com/openshift/cluster-monitoring-operator/pull/2404)
* [OCPBUGS-36206](https://issues.redhat.com/browse/OCPBUGS-36206): Add deprecation for prometheus adapter [#2396](https://github.com/openshift/cluster-monitoring-operator/pull/2396)
* [OCPBUGS-34530](https://issues.redhat.com/browse/OCPBUGS-34530): inject trusted CA bundle into UWM Alertmanager [#2373](https://github.com/openshift/cluster-monitoring-operator/pull/2373)
* [OCPBUGS-35904](https://issues.redhat.com/browse/OCPBUGS-35904): opt-out of multi-cluster Prometheus dashboard [#2391](https://github.com/openshift/cluster-monitoring-operator/pull/2391)
* [OCPBUGS-34383](https://issues.redhat.com/browse/OCPBUGS-34383): remove deprecated logtostderr argument [#2370](https://github.com/openshift/cluster-monitoring-operator/pull/2370)
* [OCPBUGS-35884](https://issues.redhat.com/browse/OCPBUGS-35884): attach runbook to the PrometheusDuplicateTimestamps alert [#2389](https://github.com/openshift/cluster-monitoring-operator/pull/2389)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [OCPBUGS-35061](https://issues.redhat.com/browse/OCPBUGS-35061): Backport anp telemetry [#2379](https://github.com/openshift/cluster-monitoring-operator/pull/2379)
* [OCPBUGS-34806](https://issues.redhat.com/browse/OCPBUGS-34806): send cnv_abnormal metric via telemetry [#2364](https://github.com/openshift/cluster-monitoring-operator/pull/2364)
* [MON-3861](https://issues.redhat.com/browse/MON-3861): Bump go tools 1.21 [#2348](https://github.com/openshift/cluster-monitoring-operator/pull/2348)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#2342](https://github.com/openshift/cluster-monitoring-operator/pull/2342)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): change metrics-server probes for SNO [#2337](https://github.com/openshift/cluster-monitoring-operator/pull/2337)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#2338](https://github.com/openshift/cluster-monitoring-operator/pull/2338)
* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#2336](https://github.com/openshift/cluster-monitoring-operator/pull/2336)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): tweak Prometheus RBAC setup as a temp fix. [#2334](https://github.com/openshift/cluster-monitoring-operator/pull/2334)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#2335](https://github.com/openshift/cluster-monitoring-operator/pull/2335)
* [MON-3163](https://issues.redhat.com/browse/MON-3163): support VPAs [#2078](https://github.com/openshift/cluster-monitoring-operator/pull/2078)
* [OCPBUGS-23801](https://issues.redhat.com/browse/OCPBUGS-23801): update OTEL `google.golang.org/grpc/otelgrpc` [#2321](https://github.com/openshift/cluster-monitoring-operator/pull/2321)
* NO-JIRA: Increase `checkAlertmanagerAPIVerbs` timeout [#2330](https://github.com/openshift/cluster-monitoring-operator/pull/2330)
* [MON-3487](https://issues.redhat.com/browse/MON-3487): base CP enablement on dedicated feature gate [#2153](https://github.com/openshift/cluster-monitoring-operator/pull/2153)
* [OCPBUGS-32177](https://issues.redhat.com/browse/OCPBUGS-32177): fix wrong dir hack/tools of tools.go [#2327](https://github.com/openshift/cluster-monitoring-operator/pull/2327)
* [MON-3707](https://issues.redhat.com/browse/MON-3707): Add ipsec state metric into telemetry [#2326](https://github.com/openshift/cluster-monitoring-operator/pull/2326)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for k8s Prometheus [#2323](https://github.com/openshift/cluster-monitoring-operator/pull/2323)
* [MON-3839](https://issues.redhat.com/browse/MON-3839): test: add skip tests for prometheus adapter tests [#2328](https://github.com/openshift/cluster-monitoring-operator/pull/2328)
* [MON-3820](https://issues.redhat.com/browse/MON-3820): allow read-only access for Alertmanager API [#2319](https://github.com/openshift/cluster-monitoring-operator/pull/2319)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove trusted CA bundle from Thanos Querier [#2325](https://github.com/openshift/cluster-monitoring-operator/pull/2325)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): follow-up of PR #2308 [#2324](https://github.com/openshift/cluster-monitoring-operator/pull/2324)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Synchronize versions of the downstream components [#2322](https://github.com/openshift/cluster-monitoring-operator/pull/2322)
* [OCPBUGS-30430](https://issues.redhat.com/browse/OCPBUGS-30430): update `google.golang.org/protobuf` [#2320](https://github.com/openshift/cluster-monitoring-operator/pull/2320)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for main Alertmanager [#2310](https://github.com/openshift/cluster-monitoring-operator/pull/2310)
* [MON-3783](https://issues.redhat.com/browse/MON-3783): add controller-id annotation to pods deployments and operator [#2309](https://github.com/openshift/cluster-monitoring-operator/pull/2309)
* [OCPBUGS-18643](https://issues.redhat.com/browse/OCPBUGS-18643): address lint warnings [#2284](https://github.com/openshift/cluster-monitoring-operator/pull/2284)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): assets, jsonnet: Add container_network openshift-kubernetes.rules [#2314](https://github.com/openshift/cluster-monitoring-operator/pull/2314)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Synchronize versions of the downstream components [#2318](https://github.com/openshift/cluster-monitoring-operator/pull/2318)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove references to OAuth proxy [#2308](https://github.com/openshift/cluster-monitoring-operator/pull/2308)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: simplify GetServiceAccountToken() [#2272](https://github.com/openshift/cluster-monitoring-operator/pull/2272)
* [MON-3621](https://issues.redhat.com/browse/MON-3621): Enable `extra-scrape-metrics` feature in PrometheusUWM [#2302](https://github.com/openshift/cluster-monitoring-operator/pull/2302)
* [OCPBUGS-31411](https://issues.redhat.com/browse/OCPBUGS-31411): add runbook link for KubeAggregatedAPIErrors alert [#2316](https://github.com/openshift/cluster-monitoring-operator/pull/2316)
* [OCPBUGS-29531](https://issues.redhat.com/browse/OCPBUGS-29531): Add include.release.openshift.io/hypershift label [#2264](https://github.com/openshift/cluster-monitoring-operator/pull/2264)
* [MON-3778](https://issues.redhat.com/browse/MON-3778), [OLS-117](https://issues.redhat.com/browse/OLS-117): Add OLS metrics to telemetry whitelist [#2300](https://github.com/openshift/cluster-monitoring-operator/pull/2300)
* [OCPBUGS-31920](https://issues.redhat.com/browse/OCPBUGS-31920): go.mod: bump openshift/api [#2290](https://github.com/openshift/cluster-monitoring-operator/pull/2290)
* [MON-3700](https://issues.redhat.com/browse/MON-3700): replace OAuth proxy for Thanos Ruler [#2294](https://github.com/openshift/cluster-monitoring-operator/pull/2294)
* [MON-3799](https://issues.redhat.com/browse/MON-3799): Synchronize versions of the downstream components [#2301](https://github.com/openshift/cluster-monitoring-operator/pull/2301)
* [MON-3749](https://issues.redhat.com/browse/MON-3749): enable request headers flags for metrics server [#2293](https://github.com/openshift/cluster-monitoring-operator/pull/2293)
* [OCPBUGS-28650](https://issues.redhat.com/browse/OCPBUGS-28650): fix generation of telemeter token hash [#2298](https://github.com/openshift/cluster-monitoring-operator/pull/2298)
* [MON-3801](https://issues.redhat.com/browse/MON-3801): remove oauth-redirectreference annotations [#2299](https://github.com/openshift/cluster-monitoring-operator/pull/2299)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Synchronize versions of the downstream components [#2295](https://github.com/openshift/cluster-monitoring-operator/pull/2295)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): jsonnet: Bump jsonnet deps for prometheus-operator [#2296](https://github.com/openshift/cluster-monitoring-operator/pull/2296)
* [MON-3792](https://issues.redhat.com/browse/MON-3792): fix metrics-server path for /test versions [#2286](https://github.com/openshift/cluster-monitoring-operator/pull/2286)
* [MON-3789](https://issues.redhat.com/browse/MON-3789): add a golangci-lint-fix makefile target to fix golangci-lint errros when possible [#2275](https://github.com/openshift/cluster-monitoring-operator/pull/2275)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): update Prometheus operator to v0.72.0 [#2288](https://github.com/openshift/cluster-monitoring-operator/pull/2288)
* [MON-3498](https://issues.redhat.com/browse/MON-3498): Modify prometheus-adapter e2e tests to compact with metrics server [#2196](https://github.com/openshift/cluster-monitoring-operator/pull/2196)
* [OCPBUGS-30257](https://issues.redhat.com/browse/OCPBUGS-30257): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2269](https://github.com/openshift/cluster-monitoring-operator/pull/2269)
* [OCPNODE-2100](https://issues.redhat.com/browse/OCPNODE-2100): jsonnet: update crio port to TLS port 9637 [#2257](https://github.com/openshift/cluster-monitoring-operator/pull/2257)
* [MON-3694](https://issues.redhat.com/browse/MON-3694): chore: encourage the use of the new 'slices' package instead of 'golang.org/x/exp/slices' [#2243](https://github.com/openshift/cluster-monitoring-operator/pull/2243)
* [MON-3748](https://issues.redhat.com/browse/MON-3748): Enable audit logs by default for metrics-server [#2280](https://github.com/openshift/cluster-monitoring-operator/pull/2280)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): adjust prometheus-k8s service openshift.io/description [#2279](https://github.com/openshift/cluster-monitoring-operator/pull/2279)
* [MON-3747](https://issues.redhat.com/browse/MON-3747): Increase e2e test timeout to 150 min [#2278](https://github.com/openshift/cluster-monitoring-operator/pull/2278)
* [MON-3381](https://issues.redhat.com/browse/MON-3381): replace OAuth proxy for Alertmanager [#2260](https://github.com/openshift/cluster-monitoring-operator/pull/2260)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix Thanos ruler alert generator url [#2267](https://github.com/openshift/cluster-monitoring-operator/pull/2267)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): Revert "chore: poll immediately in the e2e tests" [#2271](https://github.com/openshift/cluster-monitoring-operator/pull/2271)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. [#2226](https://github.com/openshift/cluster-monitoring-operator/pull/2226)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): update library-go to get https://github.com/openshift/libra… [#2266](https://github.com/openshift/cluster-monitoring-operator/pull/2266)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): re-add kube-rbac-proxy for /metrics and /federate [#2261](https://github.com/openshift/cluster-monitoring-operator/pull/2261)
* [MON-3172](https://issues.redhat.com/browse/MON-3172): describe monitoring services [#2188](https://github.com/openshift/cluster-monitoring-operator/pull/2188)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: poll immediately in the e2e tests [#2258](https://github.com/openshift/cluster-monitoring-operator/pull/2258)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): replace OAuth proxy for prometheus-k8s [#2246](https://github.com/openshift/cluster-monitoring-operator/pull/2246)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add Console cap annotation to dashboards [#2254](https://github.com/openshift/cluster-monitoring-operator/pull/2254)
* [TRT-1489](https://issues.redhat.com/browse/TRT-1489): Revert "jsonnet: update crio port to TLS port 9637" [#2255](https://github.com/openshift/cluster-monitoring-operator/pull/2255)
* [OCPNODE-2022](https://issues.redhat.com/browse/OCPNODE-2022): jsonnet: update crio port to TLS port 9637 [#2229](https://github.com/openshift/cluster-monitoring-operator/pull/2229)
* [MON-3705](https://issues.redhat.com/browse/MON-3705): [bot] Update jsonnet dependencies [#2208](https://github.com/openshift/cluster-monitoring-operator/pull/2208)
* [MON-3699](https://issues.redhat.com/browse/MON-3699): chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc [#2247](https://github.com/openshift/cluster-monitoring-operator/pull/2247)
* [MON-3697](https://issues.redhat.com/browse/MON-3697): use `maximumStartupDurationSeconds` instead of container patch [#2251](https://github.com/openshift/cluster-monitoring-operator/pull/2251)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix: set externalURL in UWM Prometheus [#2250](https://github.com/openshift/cluster-monitoring-operator/pull/2250)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Synchronize versions of the downstream components [#2245](https://github.com/openshift/cluster-monitoring-operator/pull/2245)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 [#2244](https://github.com/openshift/cluster-monitoring-operator/pull/2244)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to cluster-storage-operator [#2235](https://github.com/openshift/cluster-monitoring-operator/pull/2235)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): rollout metrics-server on cert rotations [#2242](https://github.com/openshift/cluster-monitoring-operator/pull/2242)
* [OCPBUGS-27213](https://issues.redhat.com/browse/OCPBUGS-27213): Adjust lastError injection to wait.PollUntilContextTimeout's final error [#2234](https://github.com/openshift/cluster-monitoring-operator/pull/2234)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#2240](https://github.com/openshift/cluster-monitoring-operator/pull/2240)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Synchronize versions of the downstream components [#2238](https://github.com/openshift/cluster-monitoring-operator/pull/2238)
* [MON-2853](https://issues.redhat.com/browse/MON-2853): add runbook link to TargetDown alert [#2237](https://github.com/openshift/cluster-monitoring-operator/pull/2237)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): [bot] Synchronize versions of the downstream components [#2236](https://github.com/openshift/cluster-monitoring-operator/pull/2236)
* [OCPBUGS-26983](https://issues.redhat.com/browse/OCPBUGS-26983): rollout monitoring plugin on TLS rotation [#2233](https://github.com/openshift/cluster-monitoring-operator/pull/2233)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): chore: update Prometheus operator to v0.71.0 [#2230](https://github.com/openshift/cluster-monitoring-operator/pull/2230)
* [MON-3667](https://issues.redhat.com/browse/MON-3667): remove outdated documentation [#2232](https://github.com/openshift/cluster-monitoring-operator/pull/2232)
* [OCPBUGS-25849](https://issues.redhat.com/browse/OCPBUGS-25849): make PrometheusAdapter and MetricsServer tasks less conflict prone [#2218](https://github.com/openshift/cluster-monitoring-operator/pull/2218)
* [OCPBUGS-25378](https://issues.redhat.com/browse/OCPBUGS-25378): drop InfoInhibitor from default Alertmanager config [#2225](https://github.com/openshift/cluster-monitoring-operator/pull/2225)
* [MON-3664](https://issues.redhat.com/browse/MON-3664): chore: avoid issues with std.set* functions [#2231](https://github.com/openshift/cluster-monitoring-operator/pull/2231)
* [MON-3654](https://issues.redhat.com/browse/MON-3654): use Go standard errors package instead of github.com/pkg/errors [#2224](https://github.com/openshift/cluster-monitoring-operator/pull/2224)
* [MON-1047](https://issues.redhat.com/browse/MON-1047): fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… [#2228](https://github.com/openshift/cluster-monitoring-operator/pull/2228)
* [MON-3552](https://issues.redhat.com/browse/MON-3552): remove temporary cleanup code and no longer needed tests [#2210](https://github.com/openshift/cluster-monitoring-operator/pull/2210)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Synchronize versions of the downstream components [#2222](https://github.com/openshift/cluster-monitoring-operator/pull/2222)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Synchronize versions of the downstream components [#2221](https://github.com/openshift/cluster-monitoring-operator/pull/2221)
* [MON-3644](https://issues.redhat.com/browse/MON-3644): Ease the tracking of monitoring components versions. [#2220](https://github.com/openshift/cluster-monitoring-operator/pull/2220)
* [OCPBUGS-25803](https://issues.redhat.com/browse/OCPBUGS-25803): make CMO ConsolePluginComponents task resilient to dependencies [#2193](https://github.com/openshift/cluster-monitoring-operator/pull/2193)
* [OCPBUGS-25676](https://issues.redhat.com/browse/OCPBUGS-25676): fix(tasks): adjust 'trusted CA bundle ConfigMap' related logs for alertmanagers. [#2219](https://github.com/openshift/cluster-monitoring-operator/pull/2219)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Synchronize versions of the downstream components [#2214](https://github.com/openshift/cluster-monitoring-operator/pull/2214)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2211](https://github.com/openshift/cluster-monitoring-operator/pull/2211)
* [OCPBUGS-25403](https://issues.redhat.com/browse/OCPBUGS-25403): go.mod update k8s.io/api* to v0.29.0 [#2205](https://github.com/openshift/cluster-monitoring-operator/pull/2205)
* [MON-3589](https://issues.redhat.com/browse/MON-3589): Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for --scrape.timestamp-tolerance on Platform Prometheus [#2194](https://github.com/openshift/cluster-monitoring-operator/pull/2194)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): use 1.20 in go.mod [#2199](https://github.com/openshift/cluster-monitoring-operator/pull/2199)
* [MON-3592](https://issues.redhat.com/browse/MON-3592): Use strict yaml unmarshaling [#2195](https://github.com/openshift/cluster-monitoring-operator/pull/2195)
* [OCPBUGS-25025](https://issues.redhat.com/browse/OCPBUGS-25025): go.mod: bump prometheus-operator to v0.70.0 [#2191](https://github.com/openshift/cluster-monitoring-operator/pull/2191)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2190](https://github.com/openshift/cluster-monitoring-operator/pull/2190)
* [OCPBUGS-24630](https://issues.redhat.com/browse/OCPBUGS-24630): additionalArgs: list items must have named fields [#2189](https://github.com/openshift/cluster-monitoring-operator/pull/2189)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2eb5a2c888b61fdbf80a238c3ff13787f989b7b2...c2c204a1244adc54d7b31ec35766b82bf6db413d)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/179c38004739adde111d2fabf08bc94b0c663d9b)
* [OCPBUGS-43604](https://issues.redhat.com/browse/OCPBUGS-43604): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2538](https://github.com/openshift/cluster-network-operator/pull/2538)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Set global IP forwarding sysctl parameters while starting ovnkube-node [#2422](https://github.com/openshift/cluster-network-operator/pull/2422)
* [OCPBUGS-43544](https://issues.redhat.com/browse/OCPBUGS-43544): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2537](https://github.com/openshift/cluster-network-operator/pull/2537)
* [OCPBUGS-43035](https://issues.redhat.com/browse/OCPBUGS-43035): Configure narrowing=yes for IPsec connections [#2528](https://github.com/openshift/cluster-network-operator/pull/2528)
* [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430)
* [OCPBUGS-41840](https://issues.redhat.com/browse/OCPBUGS-41840): Add configurable subnets while running hybrid-overlay-node binary [#2502](https://github.com/openshift/cluster-network-operator/pull/2502)
* [OCPBUGS-37763](https://issues.redhat.com/browse/OCPBUGS-37763): Handle random crictl errors in iptables-alerter [#2452](https://github.com/openshift/cluster-network-operator/pull/2452)
* [OCPBUGS-41555](https://issues.redhat.com/browse/OCPBUGS-41555): HyperShift: do not use antiaffinity on single replica control planes [#2494](https://github.com/openshift/cluster-network-operator/pull/2494)
* [OCPBUGS-37937](https://issues.redhat.com/browse/OCPBUGS-37937): Add proxy env vars to onvkube-node [#2457](https://github.com/openshift/cluster-network-operator/pull/2457)
* [OCPBUGS-41607](https://issues.redhat.com/browse/OCPBUGS-41607): set required-scc for openshift workloads [#2496](https://github.com/openshift/cluster-network-operator/pull/2496)
* [OCPBUGS-35407](https://issues.redhat.com/browse/OCPBUGS-35407): Use applyconfigurations for updating network.oprerator status [#2413](https://github.com/openshift/cluster-network-operator/pull/2413)
* [OCPBUGS-37362](https://issues.redhat.com/browse/OCPBUGS-37362): Fix IC distributed control plane alerts [#2445](https://github.com/openshift/cluster-network-operator/pull/2445)
* [OCPBUGS-35836](https://issues.redhat.com/browse/OCPBUGS-35836): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2417](https://github.com/openshift/cluster-network-operator/pull/2417)
* [OCPBUGS-35829](https://issues.redhat.com/browse/OCPBUGS-35829): Create the configmap mtu if not found [#2416](https://github.com/openshift/cluster-network-operator/pull/2416)
* [OCPBUGS-35923](https://issues.redhat.com/browse/OCPBUGS-35923): update whereabouts crd [#2419](https://github.com/openshift/cluster-network-operator/pull/2419)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Limit iptables-alerter's cpu [#2407](https://github.com/openshift/cluster-network-operator/pull/2407)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Handle pod exiting race conditions in iptables-alerter [#2394](https://github.com/openshift/cluster-network-operator/pull/2394)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [OCPBUGS-35061](https://issues.redhat.com/browse/OCPBUGS-35061): Add ANP metric rule expressions for telemetry exposure [#2398](https://github.com/openshift/cluster-network-operator/pull/2398)
* [OCPBUGS-34612](https://issues.redhat.com/browse/OCPBUGS-34612), [OCPBUGS-34660](https://issues.redhat.com/browse/OCPBUGS-34660), [OCPBUGS-34663](https://issues.redhat.com/browse/OCPBUGS-34663): Live migration backports [#2392](https://github.com/openshift/cluster-network-operator/pull/2392)
* [OCPBUGS-34964](https://issues.redhat.com/browse/OCPBUGS-34964): Fix DNSResolver feature gate enablement [#2402](https://github.com/openshift/cluster-network-operator/pull/2402)
* [OCPBUGS-34770](https://issues.redhat.com/browse/OCPBUGS-34770): Ensure that the node-identity webhook address contains colons for IPv6 [#2395](https://github.com/openshift/cluster-network-operator/pull/2395)
* [OCPBUGS-34214](https://issues.redhat.com/browse/OCPBUGS-34214): Add conditions for ignored-namespaces [#2378](https://github.com/openshift/cluster-network-operator/pull/2378)
* [OCPBUGS-34013](https://issues.redhat.com/browse/OCPBUGS-34013): Add custom masquerade subnet against right key at ovnkube-config CM [#2374](https://github.com/openshift/cluster-network-operator/pull/2374)
* [CFE-888](https://issues.redhat.com/browse/CFE-888): Enable DNSNameResolver feature-gate [#2131](https://github.com/openshift/cluster-network-operator/pull/2131)
* [OCPBUGS-32979](https://issues.redhat.com/browse/OCPBUGS-32979): Update network operator status for IPsec [#2360](https://github.com/openshift/cluster-network-operator/pull/2360)
* [USHIFT-2912](https://issues.redhat.com/browse/USHIFT-2912): Add ref to MicroShift's Multus and CNI Plugins [#2365](https://github.com/openshift/cluster-network-operator/pull/2365)
* [OCPBUGS-29403](https://issues.redhat.com/browse/OCPBUGS-29403): add more safe sysctls [#2273](https://github.com/openshift/cluster-network-operator/pull/2273)
* [OCPBUGS-32525](https://issues.redhat.com/browse/OCPBUGS-32525): Check every MachineConfigPool for IPsec plugin existence [#2349](https://github.com/openshift/cluster-network-operator/pull/2349)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2364](https://github.com/openshift/cluster-network-operator/pull/2364)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Update EQoS CRD to latest [#2362](https://github.com/openshift/cluster-network-operator/pull/2362)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Reapply "Merge pull request #2330 from pperiyasamy/block-sdn-upgrade" [#2361](https://github.com/openshift/cluster-network-operator/pull/2361)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2354](https://github.com/openshift/cluster-network-operator/pull/2354)
* Revert #2330 "SDN-4726: Block upgrade for openshift-sdn" [#2356](https://github.com/openshift/cluster-network-operator/pull/2356)
* [SDN-4434](https://issues.redhat.com/browse/SDN-4434): Network diagnostics scheduling [#2339](https://github.com/openshift/cluster-network-operator/pull/2339)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Block upgrade for openshift-sdn [#2330](https://github.com/openshift/cluster-network-operator/pull/2330)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Add iptables-alerter daemonset [#2329](https://github.com/openshift/cluster-network-operator/pull/2329)
* [OCPBUGS-31528](https://issues.redhat.com/browse/OCPBUGS-31528): infraconfig: handle vSphere UPI by not updating any fields [#2327](https://github.com/openshift/cluster-network-operator/pull/2327)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Improved prometheus rule for ipsec metric [#2346](https://github.com/openshift/cluster-network-operator/pull/2346)
* [OCPBUGS-32402](https://issues.redhat.com/browse/OCPBUGS-32402): Fix wait logic for IPsec certificate signing request [#2342](https://github.com/openshift/cluster-network-operator/pull/2342)
* [SDN-4688](https://issues.redhat.com/browse/SDN-4688): ANP: Add RBAC for cluster-manager [#2338](https://github.com/openshift/cluster-network-operator/pull/2338)
* [OCPBUGS-32347](https://issues.redhat.com/browse/OCPBUGS-32347): Improve IPsec MachineConfig readiness check [#2341](https://github.com/openshift/cluster-network-operator/pull/2341)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Add ipsec state to telemetry [#2270](https://github.com/openshift/cluster-network-operator/pull/2270)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#2095](https://github.com/openshift/cluster-network-operator/pull/2095)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2340](https://github.com/openshift/cluster-network-operator/pull/2340)
* [SDN-4519](https://issues.redhat.com/browse/SDN-4519): Configure CNO as per new API changes for join and transit switch subnet [#2318](https://github.com/openshift/cluster-network-operator/pull/2318)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2334](https://github.com/openshift/cluster-network-operator/pull/2334)
* [NP-956](https://issues.redhat.com/browse/NP-956): Remove managed cluster checking for live migration [#2321](https://github.com/openshift/cluster-network-operator/pull/2321)
* [OCPBUGS-26408](https://issues.redhat.com/browse/OCPBUGS-26408): automountServiceAccountToken:false hosted CP pods [#2306](https://github.com/openshift/cluster-network-operator/pull/2306)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Update (B)ANP CRDs; prepare for GA [#2328](https://github.com/openshift/cluster-network-operator/pull/2328)
* [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319)
* [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309)
* [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313)
* [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307)
* [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288)
* [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308)
* [OCPBUGS-30299](https://issues.redhat.com/browse/OCPBUGS-30299): Fix managed cluster detection on ARO [#2299](https://github.com/openshift/cluster-network-operator/pull/2299)
* [OPNET-358](https://issues.redhat.com/browse/OPNET-358), [OPNET-360](https://issues.redhat.com/browse/OPNET-360): Allow VIP mutation in Infra CR [#2130](https://github.com/openshift/cluster-network-operator/pull/2130)
* [OCPBUGS-29288](https://issues.redhat.com/browse/OCPBUGS-29288): Ensure proper deprecation for the default field manager [#2274](https://github.com/openshift/cluster-network-operator/pull/2274)
* [OCPBUGS-24380](https://issues.redhat.com/browse/OCPBUGS-24380), [OCPBUGS-24381](https://issues.redhat.com/browse/OCPBUGS-24381), [OCPBUGS-24382](https://issues.redhat.com/browse/OCPBUGS-24382): Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods [#2262](https://github.com/openshift/cluster-network-operator/pull/2262)
* [OCPBUGS-25764](https://issues.redhat.com/browse/OCPBUGS-25764): memory-trim-on-compaction is enabled by default [#2260](https://github.com/openshift/cluster-network-operator/pull/2260)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#2127](https://github.com/openshift/cluster-network-operator/pull/2127)
* [OCPBUGS-29341](https://issues.redhat.com/browse/OCPBUGS-29341): Run dhcp-daemon pods as system-node-critical priority [#2280](https://github.com/openshift/cluster-network-operator/pull/2280)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Disable network-node-identity on ROKS [#2197](https://github.com/openshift/cluster-network-operator/pull/2197)
* [OCPBUGS-26492](https://issues.redhat.com/browse/OCPBUGS-26492): Not set CNO to degraded if API server returns conflict error [#2192](https://github.com/openshift/cluster-network-operator/pull/2192)
* [OCPBUGS-24214](https://issues.redhat.com/browse/OCPBUGS-24214): Add ownership annotations [#2120](https://github.com/openshift/cluster-network-operator/pull/2120)
* [OCPBUGS-24601](https://issues.redhat.com/browse/OCPBUGS-24601): Add minReadySeconds to network-node-identity [#2151](https://github.com/openshift/cluster-network-operator/pull/2151)
* [OCPBUGS-29305](https://issues.redhat.com/browse/OCPBUGS-29305): ipsec: fix openssl typo [#2269](https://github.com/openshift/cluster-network-operator/pull/2269)
* [OCPBUGS-28920](https://issues.redhat.com/browse/OCPBUGS-28920): Update ingressconfig_controller to use field Manager [#2259](https://github.com/openshift/cluster-network-operator/pull/2259)
* NO-JIRA: Remove ILB from CNCC [#2182](https://github.com/openshift/cluster-network-operator/pull/2182)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Fix CloudPrivateIPConfig CRD in common [#2249](https://github.com/openshift/cluster-network-operator/pull/2249)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2233](https://github.com/openshift/cluster-network-operator/pull/2233)
* [OCPBUGS-28676](https://issues.redhat.com/browse/OCPBUGS-28676): Remove libreswan rpm existence checks [#2238](https://github.com/openshift/cluster-network-operator/pull/2238)
* [OCPBUGS-29099](https://issues.redhat.com/browse/OCPBUGS-29099): Add hostNetwork:true to cni-sysctl-allowlist ds [#2237](https://github.com/openshift/cluster-network-operator/pull/2237)
* [OCPBUGS-24436](https://issues.redhat.com/browse/OCPBUGS-24436): Add probes to node-network-identity [#2148](https://github.com/openshift/cluster-network-operator/pull/2148)
* [OCPBUGS-24299](https://issues.redhat.com/browse/OCPBUGS-24299): network-node-identity mounts secrets with mode 0640 [#2142](https://github.com/openshift/cluster-network-operator/pull/2142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#2224](https://github.com/openshift/cluster-network-operator/pull/2224)
* [NP-874](https://issues.redhat.com/browse/NP-874), [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Bump openshift API [#2246](https://github.com/openshift/cluster-network-operator/pull/2246)
* [OCPBUGS-24383](https://issues.redhat.com/browse/OCPBUGS-24383): Limit write permissions for egressservices [#2171](https://github.com/openshift/cluster-network-operator/pull/2171)
* [NP-903](https://issues.redhat.com/browse/NP-903): Only allows live migration on standalone managed clusters [#2236](https://github.com/openshift/cluster-network-operator/pull/2236)
* [OCPBUGS-19551](https://issues.redhat.com/browse/OCPBUGS-19551): ovnkube: simplify northd threading and SNO templating [#2234](https://github.com/openshift/cluster-network-operator/pull/2234)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156)
* [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208)
* NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226)
* [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209)
* [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807)
* [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201)
* [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206)
* NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199)
* [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191)
* [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170)
* [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153)
* [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187)
* [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173)
* [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169)
* [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179)
* [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070)
* [SDN-4227](https://issues.redhat.com/browse/SDN-4227): Use specific permissions for CNCC in GCP [#2069](https://github.com/openshift/cluster-network-operator/pull/2069)
* [OCPBUGS-24693](https://issues.redhat.com/browse/OCPBUGS-24693): HyperShift, network-node-identity: Check the deployment in the management cluster [#2166](https://github.com/openshift/cluster-network-operator/pull/2166)
* [OCPBUGS-24176](https://issues.redhat.com/browse/OCPBUGS-24176): Ignore invalid PEM blocks [#2178](https://github.com/openshift/cluster-network-operator/pull/2178)
* [OCPBUGS-25337](https://issues.redhat.com/browse/OCPBUGS-25337): Avoid removal of ipsec-host daemonset when node is NotReady [#2161](https://github.com/openshift/cluster-network-operator/pull/2161)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): remove service account token mount in cloud-network-con… [#2165](https://github.com/openshift/cluster-network-operator/pull/2165)
* [OCPBUGS-23729](https://issues.redhat.com/browse/OCPBUGS-23729): Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy [#2159](https://github.com/openshift/cluster-network-operator/pull/2159)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2114](https://github.com/openshift/cluster-network-operator/pull/2114)
* [OCPBUGS-23199](https://issues.redhat.com/browse/OCPBUGS-23199): add env var in whereabouts-reconciler daemonset [#2160](https://github.com/openshift/cluster-network-operator/pull/2160)
* [OCPBUGS-19830](https://issues.redhat.com/browse/OCPBUGS-19830): fix whereabouts conformance test failures [#2103](https://github.com/openshift/cluster-network-operator/pull/2103)
* [OCPBUGS-24650](https://issues.redhat.com/browse/OCPBUGS-24650), [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Set enable-multi-external-gateway flag in ovnkube.conf [#2149](https://github.com/openshift/cluster-network-operator/pull/2149)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7b8459dc88657a44785995a4c0cc88403a95954d...179c38004739adde111d2fabf08bc94b0c663d9b)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/e739b63c155856b93d072e6077bb73a995ba0f28)
* Fixing empty tuned submodule when using Dockerfile (#1212) [#1212](https://github.com/openshift/cluster-node-tuning-operator/pull/1212)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1203) [#1203](https://github.com/openshift/cluster-node-tuning-operator/pull/1203)
* Make ocp-tuned-one-shot.service restart on-failure (#1202) [#1202](https://github.com/openshift/cluster-node-tuning-operator/pull/1202)
* Unblock 4.16 CI (#1204) [#1204](https://github.com/openshift/cluster-node-tuning-operator/pull/1204)
* e2e: performance: verify tuned one-shot service vs kubelet (#1192) [#1192](https://github.com/openshift/cluster-node-tuning-operator/pull/1192)
* E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1166) [#1166](https://github.com/openshift/cluster-node-tuning-operator/pull/1166)
* OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) [#1152](https://github.com/openshift/cluster-node-tuning-operator/pull/1152)
* E2E: Remove checking of reserved cpus in irqbalance file (#1156) [#1156](https://github.com/openshift/cluster-node-tuning-operator/pull/1156)
* Fix the destination of asset's copy (#1134) [#1134](https://github.com/openshift/cluster-node-tuning-operator/pull/1134)
* [OCPBUGS-33682](https://issues.redhat.com/browse/OCPBUGS-33682): right-hand-side profile_dirs take precedence (#1080) [#1080](https://github.com/openshift/cluster-node-tuning-operator/pull/1080)
* NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) [#1046](https://github.com/openshift/cluster-node-tuning-operator/pull/1046)
* [CNF-11817](https://issues.redhat.com/browse/CNF-11817): e2e: control and data planes clients (#1004) [#1004](https://github.com/openshift/cluster-node-tuning-operator/pull/1004)
* Unify OKD and OCP Dockerfiles (#1058) [#1058](https://github.com/openshift/cluster-node-tuning-operator/pull/1058)
* [OCPBUGS-33460](https://issues.redhat.com/browse/OCPBUGS-33460): E2E: change tuned profile path (#1055) [#1055](https://github.com/openshift/cluster-node-tuning-operator/pull/1055)
* E2E: modify test use HaveKey matchter instead of ContainElement (#1056) [#1056](https://github.com/openshift/cluster-node-tuning-operator/pull/1056)
* E2E: Add automation to check default cpuset from cpu manager state file (#1050) [#1050](https://github.com/openshift/cluster-node-tuning-operator/pull/1050)
* perfprof: latency e2e: adjust failure message (#1044) [#1044](https://github.com/openshift/cluster-node-tuning-operator/pull/1044)
* set required-scc for openshift workloads (#968) [#968](https://github.com/openshift/cluster-node-tuning-operator/pull/968)
* [OCPBUGS-26401](https://issues.redhat.com/browse/OCPBUGS-26401): TuneD prior to kubelet in one-shot mode (#1045) [#1045](https://github.com/openshift/cluster-node-tuning-operator/pull/1045)
* perfprof: e2e: account for node base load (#1047) [#1047](https://github.com/openshift/cluster-node-tuning-operator/pull/1047)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 2] Hypershift PAO adoption (#1037) [#1037](https://github.com/openshift/cluster-node-tuning-operator/pull/1037)
* [CNF-11099](https://issues.redhat.com/browse/CNF-11099): set intel_pstate driver to automatic as default (#950) [#950](https://github.com/openshift/cluster-node-tuning-operator/pull/950)
* [OCPBUGS-32469](https://issues.redhat.com/browse/OCPBUGS-32469): Remove tuned/rendered object (#1036) [#1036](https://github.com/openshift/cluster-node-tuning-operator/pull/1036)
* NO-JIRA: 4.16 go deps (#1042) [#1042](https://github.com/openshift/cluster-node-tuning-operator/pull/1042)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 1] Hypershift PAO adoption (#1032) [#1032](https://github.com/openshift/cluster-node-tuning-operator/pull/1032)
* [PSAP-1354](https://issues.redhat.com/browse/PSAP-1354): Updated a script for deploying a custom NTO image to a cluster (#1030) [#1030](https://github.com/openshift/cluster-node-tuning-operator/pull/1030)
* [OCPBUGS-30111](https://issues.redhat.com/browse/OCPBUGS-30111): Negative net interface name does not reduce queues (#973) [#973](https://github.com/openshift/cluster-node-tuning-operator/pull/973)
* Enhance latency cnf-tests UX (#1041) [#1041](https://github.com/openshift/cluster-node-tuning-operator/pull/1041)
* pao:controller: remove depracated function (#1039) [#1039](https://github.com/openshift/cluster-node-tuning-operator/pull/1039)
* Replaced tuned hard-included repo with a git submodule (#1029) [#1029](https://github.com/openshift/cluster-node-tuning-operator/pull/1029)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): NTO operand (openshift-tuned) fixes (#1024) [#1024](https://github.com/openshift/cluster-node-tuning-operator/pull/1024)
* NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) [#1031](https://github.com/openshift/cluster-node-tuning-operator/pull/1031)
* NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) [#1022](https://github.com/openshift/cluster-node-tuning-operator/pull/1022)
* Update the awk print field to fetch rhcos-image (#1033) [#1033](https://github.com/openshift/cluster-node-tuning-operator/pull/1033)
* set Cgroups V2 as default (#1010) [#1010](https://github.com/openshift/cluster-node-tuning-operator/pull/1010)
* E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) [#1011](https://github.com/openshift/cluster-node-tuning-operator/pull/1011)
* NO-JIRA: deps: Bump to K8s 1.29.2 (#990) [#990](https://github.com/openshift/cluster-node-tuning-operator/pull/990)
* Delete duplicate mixedcpus e2e test (#1015) [#1015](https://github.com/openshift/cluster-node-tuning-operator/pull/1015)
* e2e: Enhance tests related to crio annotations (#955) [#955](https://github.com/openshift/cluster-node-tuning-operator/pull/955)
* NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) [#993](https://github.com/openshift/cluster-node-tuning-operator/pull/993)
* [OCPBUGS-30569](https://issues.redhat.com/browse/OCPBUGS-30569): Systemd processes not being moved to cpuset/systemd.slice fix (#992) [#992](https://github.com/openshift/cluster-node-tuning-operator/pull/992)
* NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) [#991](https://github.com/openshift/cluster-node-tuning-operator/pull/991)
* e2e: when crun is enabled by default skip checking runc config (#948) [#948](https://github.com/openshift/cluster-node-tuning-operator/pull/948)
* NO-JIRA: Update tuned profile degraded test (#1005) [#1005](https://github.com/openshift/cluster-node-tuning-operator/pull/1005)
* Change .snyk format (#1000) [#1000](https://github.com/openshift/cluster-node-tuning-operator/pull/1000)
* Remove removePerformanceOLMOperator() (#997) [#997](https://github.com/openshift/cluster-node-tuning-operator/pull/997)
* [CNF-11213](https://issues.redhat.com/browse/CNF-11213): added mixedCpus e2e test (#967) [#967](https://github.com/openshift/cluster-node-tuning-operator/pull/967)
* NO-JIRA: Add positive tests with ginkgo timeout (#964) [#964](https://github.com/openshift/cluster-node-tuning-operator/pull/964)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): Remove TuneD timeout code and reload on ERRORs (#998) [#998](https://github.com/openshift/cluster-node-tuning-operator/pull/998)
* Add sync for rendering extra ctrcfgs (#980) [#980](https://github.com/openshift/cluster-node-tuning-operator/pull/980)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): Reduce number of reboots in offline tests (#940) [#940](https://github.com/openshift/cluster-node-tuning-operator/pull/940)
* makefile:hypershift: initial make target (#995) [#995](https://github.com/openshift/cluster-node-tuning-operator/pull/995)
* e2e:mixedcpus: check env variables of init process (#961) [#961](https://github.com/openshift/cluster-node-tuning-operator/pull/961)
* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 24786: update protobuf (#985) [#985](https://github.com/openshift/cluster-node-tuning-operator/pull/985)
* Ignore scheduler plugin IRQs when globally enabled (#987) [#987](https://github.com/openshift/cluster-node-tuning-operator/pull/987)
* E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) [#988](https://github.com/openshift/cluster-node-tuning-operator/pull/988)
* Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) [#969](https://github.com/openshift/cluster-node-tuning-operator/pull/969)
* Update OWNERS file (#872) [#872](https://github.com/openshift/cluster-node-tuning-operator/pull/872)
* e2e: perf-prof: increase logging for debugging (#974) [#974](https://github.com/openshift/cluster-node-tuning-operator/pull/974)
* [OCPBUGS-26400](https://issues.redhat.com/browse/OCPBUGS-26400): scheduler plugin: ignore IRQs (#976) [#976](https://github.com/openshift/cluster-node-tuning-operator/pull/976)
* e2e: testdata: remove the annotated profile (#962) [#962](https://github.com/openshift/cluster-node-tuning-operator/pull/962)
* [OCPBUGS-29641](https://issues.redhat.com/browse/OCPBUGS-29641): fix rendering extra ctrcfgs (#972) [#972](https://github.com/openshift/cluster-node-tuning-operator/pull/972)
* NTO operand cleanup (#970) [#970](https://github.com/openshift/cluster-node-tuning-operator/pull/970)
* Render: Don't fail if there is no recommended profile. (#935) [#935](https://github.com/openshift/cluster-node-tuning-operator/pull/935)
* [OCPBUGS-23167](https://issues.redhat.com/browse/OCPBUGS-23167): Add performance real time tuned template (#954) [#954](https://github.com/openshift/cluster-node-tuning-operator/pull/954)
* Add support to inject owner-ref argument to render command (#960) [#960](https://github.com/openshift/cluster-node-tuning-operator/pull/960)
* [OCPBUGS-29546](https://issues.redhat.com/browse/OCPBUGS-29546): Apply hypershift cluster-profile for ibm-cloud-managed (#958) [#958](https://github.com/openshift/cluster-node-tuning-operator/pull/958)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): e2e: fix comparing incompatible types (#957) [#957](https://github.com/openshift/cluster-node-tuning-operator/pull/957)
* Render: Add MCSelector to missing default MCPs (#956) [#956](https://github.com/openshift/cluster-node-tuning-operator/pull/956)
* e2e: check if shared CPUs survive Kubelet restart (#912) [#912](https://github.com/openshift/cluster-node-tuning-operator/pull/912)
* render: perfprofile: don't annotate perfprof (#951) [#951](https://github.com/openshift/cluster-node-tuning-operator/pull/951)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: mixedcpus test (#892) [#892](https://github.com/openshift/cluster-node-tuning-operator/pull/892)
* e2e: fix typo in label name (#947) [#947](https://github.com/openshift/cluster-node-tuning-operator/pull/947)
* skip realtime disabled tests due to OCPBUGS-28828 (#944) [#944](https://github.com/openshift/cluster-node-tuning-operator/pull/944)
* [OCPBUGS-29183](https://issues.redhat.com/browse/OCPBUGS-29183): Enable crun as runtime only if missing (#937) [#937](https://github.com/openshift/cluster-node-tuning-operator/pull/937)
* Fix e2e tests on SNO (#939) [#939](https://github.com/openshift/cluster-node-tuning-operator/pull/939)
* e2e: classifying tests using labels (#936) [#936](https://github.com/openshift/cluster-node-tuning-operator/pull/936)
* Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) [#938](https://github.com/openshift/cluster-node-tuning-operator/pull/938)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: cgroups: introduce cgroup package (#906) [#906](https://github.com/openshift/cluster-node-tuning-operator/pull/906)
* New flags in Performance profile creator (#908) [#908](https://github.com/openshift/cluster-node-tuning-operator/pull/908)
* NO-JIRA: e2e: set performance profile cpus using env vars (#909) [#909](https://github.com/openshift/cluster-node-tuning-operator/pull/909)
* [CNF-11091](https://issues.redhat.com/browse/CNF-11091): Change webhook failure policy to ignore (#933) [#933](https://github.com/openshift/cluster-node-tuning-operator/pull/933)
* [CNF-11145](https://issues.redhat.com/browse/CNF-11145): Enhance render sync to include bootstrap rendering tests (#932) [#932](https://github.com/openshift/cluster-node-tuning-operator/pull/932)
* NO-JIRA: perfprof: render: make ownerReference optional (#907) [#907](https://github.com/openshift/cluster-node-tuning-operator/pull/907)
* Revert "NO-JIRA: skip crun configuration test" (#918) [#918](https://github.com/openshift/cluster-node-tuning-operator/pull/918)
* Render MC without additional PP (#924) [#924](https://github.com/openshift/cluster-node-tuning-operator/pull/924)
* Report duplicate priority only for multiple matching profiles (#890) [#890](https://github.com/openshift/cluster-node-tuning-operator/pull/890)
* e2e: `UpdateWithRetry` only update spec (#914) [#914](https://github.com/openshift/cluster-node-tuning-operator/pull/914)
* Skip PerformanceProfile update test (#929) [#929](https://github.com/openshift/cluster-node-tuning-operator/pull/929)
* Export ValidateBasicFields for Hypershift (#916) [#916](https://github.com/openshift/cluster-node-tuning-operator/pull/916)
* e2e: log: set ctrl-runtime logger (#911) [#911](https://github.com/openshift/cluster-node-tuning-operator/pull/911)
* [OCPBUGS-22095](https://issues.redhat.com/browse/OCPBUGS-22095): Add default MCP objects for rendering (#833) [#833](https://github.com/openshift/cluster-node-tuning-operator/pull/833)
* README Doc Typo Fix (#920) [#920](https://github.com/openshift/cluster-node-tuning-operator/pull/920)
* HyperShift code linter PR837 followup (#910) [#910](https://github.com/openshift/cluster-node-tuning-operator/pull/910)
* [CNF-10786](https://issues.redhat.com/browse/CNF-10786): e2e: general improvements and cleanup (#898) [#898](https://github.com/openshift/cluster-node-tuning-operator/pull/898)
* dnm: skip crun configuration test (#917) [#917](https://github.com/openshift/cluster-node-tuning-operator/pull/917)
* Add .snyk file for static code analysis (#902) [#902](https://github.com/openshift/cluster-node-tuning-operator/pull/902)
* [OCPBUGS-25699](https://issues.redhat.com/browse/OCPBUGS-25699): irqbalance: set banned cpus list to '0' (#899) [#899](https://github.com/openshift/cluster-node-tuning-operator/pull/899)
* rps: fail silently when rps application failed (#895) [#895](https://github.com/openshift/cluster-node-tuning-operator/pull/895)
* [OCPBUGS-20368](https://issues.redhat.com/browse/OCPBUGS-20368): E2E: Add tests for Dynamic ovs pinning (#746) [#746](https://github.com/openshift/cluster-node-tuning-operator/pull/746)
* NTO: Add MCP name to filter PP (#878) [#878](https://github.com/openshift/cluster-node-tuning-operator/pull/878)
* [OCPBUGS-24581](https://issues.redhat.com/browse/OCPBUGS-24581): rps: fix mask update for SR-IOV devices (#877) [#877](https://github.com/openshift/cluster-node-tuning-operator/pull/877)
* [OCPBUGS-24792](https://issues.redhat.com/browse/OCPBUGS-24792): Make MC names deterministic (#875) [#875](https://github.com/openshift/cluster-node-tuning-operator/pull/875)
* makefile: add target to trigger mixedcpus e2e test (#883) [#883](https://github.com/openshift/cluster-node-tuning-operator/pull/883)
* Fix error logging in metrics server.go (#882) [#882](https://github.com/openshift/cluster-node-tuning-operator/pull/882)
* e2e-test: Call SetLogger (#881) [#881](https://github.com/openshift/cluster-node-tuning-operator/pull/881)
* Use go 1.21 (#879) [#879](https://github.com/openshift/cluster-node-tuning-operator/pull/879)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#868) [#868](https://github.com/openshift/cluster-node-tuning-operator/pull/868)
* Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) [#867](https://github.com/openshift/cluster-node-tuning-operator/pull/867)
* e2e: images: bump default test image to 4.14 (#856) [#856](https://github.com/openshift/cluster-node-tuning-operator/pull/856)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4010bec15ab232b10d847df430b72913c8e66573...e739b63c155856b93d072e6077bb73a995ba0f28)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/27bf70ddf9421637e1da18b249785b2cca177272)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#54](https://github.com/openshift/cluster-olm-operator/pull/54)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for clusterextensions [#53](https://github.com/openshift/cluster-olm-operator/pull/53)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for validating admission policy APIs [#52](https://github.com/openshift/cluster-olm-operator/pull/52)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Update dependencies [#51](https://github.com/openshift/cluster-olm-operator/pull/51)
* [OCPBUGS-31280](https://issues.redhat.com/browse/OCPBUGS-31280): manual art compliance [#50](https://github.com/openshift/cluster-olm-operator/pull/50)
* [OCPBUGS-32188](https://issues.redhat.com/browse/OCPBUGS-32188): Update README.md [#49](https://github.com/openshift/cluster-olm-operator/pull/49)
* [OCPBUGS-30491](https://issues.redhat.com/browse/OCPBUGS-30491): Update kube dep to 1.27.12 [#48](https://github.com/openshift/cluster-olm-operator/pull/48)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#46](https://github.com/openshift/cluster-olm-operator/pull/46)
* NO-ISSUE: Remove ncdc from OWNERS [#45](https://github.com/openshift/cluster-olm-operator/pull/45)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Reenable cluster-olm-operator [#44](https://github.com/openshift/cluster-olm-operator/pull/44)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Disable cluster-olm-operator [#43](https://github.com/openshift/cluster-olm-operator/pull/43)
* [OCPBUGS-25542](https://issues.redhat.com/browse/OCPBUGS-25542): Updating ose-cluster-olm-operator-container image to be consistent with ART [#42](https://github.com/openshift/cluster-olm-operator/pull/42)
* [OCPBUGS-24794](https://issues.redhat.com/browse/OCPBUGS-24794): Updating ose-cluster-olm-operator-container image to be consistent with ART [#39](https://github.com/openshift/cluster-olm-operator/pull/39)
* NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#37](https://github.com/openshift/cluster-olm-operator/pull/37)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/a7ba89874970cd10765e1d0753405e32fb357d84...27bf70ddf9421637e1da18b249785b2cca177272)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/d26f3002e10be6f206f69a829d1511130e8188d9)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): Set required-scc for openshift workloads [#573](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/573)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#574](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/574)
* [OCPBUGS-29580](https://issues.redhat.com/browse/OCPBUGS-29580): Apply hypershift cluster-profile for ibm-cloud-managed [#572](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/572)
* [OCPBUGS-32346](https://issues.redhat.com/browse/OCPBUGS-32346): the apiservice controller waits until bootstrap complete [#575](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/575)
* NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets [#577](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/577)
* NO-ISSUE: fix: TestRedeployOnConfigChange [#576](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/576)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#559](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/559)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#566](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/566)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#547](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/547)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#562](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/562)
* [OCPBUGS-24972](https://issues.redhat.com/browse/OCPBUGS-24972): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#561](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/561)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/078c81f6e3e39675e8b1edd864e1ddf72472bb73...d26f3002e10be6f206f69a829d1511130e8188d9)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2280f54414cf403aed0a02b3fdb86ee6bf672410)
* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [#363](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/363)
* [OCPBUGS-34213](https://issues.redhat.com/browse/OCPBUGS-34213): lots of churn during image registry managed/removed transition [#348](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/348)
* [OCPBUGS-35822](https://issues.redhat.com/browse/OCPBUGS-35822): nil pointer reference in ocm-operator [#356](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/356)
* [OCPBUGS-34384](https://issues.redhat.com/browse/OCPBUGS-34384): [release-4.16] Disable Rolebindings for Capabilities [#350](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/350)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#336](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/336)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps opentelemetry dependencies [#341](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/341)
* [OCPBUGS-29973](https://issues.redhat.com/browse/OCPBUGS-29973): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 [#337](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/337)
* [OCPBUGS-29581](https://issues.redhat.com/browse/OCPBUGS-29581): Apply hypershift cluster-profile for ibm-cloud-managed [#334](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/334)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#316](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/316)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#338](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/338)
* [OCPBUGS-24888](https://issues.redhat.com/browse/OCPBUGS-24888): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#321](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/321)
* [OCPBUGS-28666](https://issues.redhat.com/browse/OCPBUGS-28666): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#326](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/326)
* [OCPBUGS-23624](https://issues.redhat.com/browse/OCPBUGS-23624): Add .snyk file to exclude vendor and ignore unit tests [#325](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/325)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump k8s dependencies to 1.29.0 [#324](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/324)
* [OCPBUGS-24190](https://issues.redhat.com/browse/OCPBUGS-24190): Disable deployer-controller when deploymentconfig is disabled [#320](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/320)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/68e8bcd5c5df5072d5eefb8abd9c9ecab289adf4...2280f54414cf403aed0a02b3fdb86ee6bf672410)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/eaea543f4c845a7b65705f12e162cc121bb12f88)
* [OCPBUGS-30496](https://issues.redhat.com/browse/OCPBUGS-30496): bump(google.golang.org/protobuf)=v1.33.0 [#147](https://github.com/openshift/cluster-policy-controller/pull/147)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#146](https://github.com/openshift/cluster-policy-controller/pull/146)
* [OCPBUGS-24877](https://issues.redhat.com/browse/OCPBUGS-24877): Updating ose-cluster-policy-controller-container image to be consistent with ART [#144](https://github.com/openshift/cluster-policy-controller/pull/144)
* [OCPBUGS-26190](https://issues.redhat.com/browse/OCPBUGS-26190): Add .snyk file to exclude vendor and ignore unit tests [#145](https://github.com/openshift/cluster-policy-controller/pull/145)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/cc48f3152213bfe6e42fdd82f760246e862d208f...eaea543f4c845a7b65705f12e162cc121bb12f88)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6541dd7e1fdb3d40896956a56f1dc800fae5d8b8)
* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#576](https://github.com/openshift/cluster-samples-operator/pull/576)
* [OCPBUGS-38159](https://issues.redhat.com/browse/OCPBUGS-38159): add owners [#555](https://github.com/openshift/cluster-samples-operator/pull/555)
* [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543)
* Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542)
* [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540)
* [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#530](https://github.com/openshift/cluster-samples-operator/pull/530)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#527](https://github.com/openshift/cluster-samples-operator/pull/527)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/dac17316605b5dbdc0b12f84af7ff3aa41e8f577...6541dd7e1fdb3d40896956a56f1dc800fae5d8b8)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/761b62fa95c15dd7fcae6df1dda5876e50a10f2d)
* [OCPBUGS-43315](https://issues.redhat.com/browse/OCPBUGS-43315): assets: shared-resource: hypershift: add pull-secret to operator SA [#521](https://github.com/openshift/cluster-storage-operator/pull/521)
* NO-JIRA: release-4.16: Run make update [#512](https://github.com/openshift/cluster-storage-operator/pull/512)
* [OCPBUGS-36969](https://issues.redhat.com/browse/OCPBUGS-36969): STOR-1839: VSphereDriverConfiguration feature Accessible-by-default [#491](https://github.com/openshift/cluster-storage-operator/pull/491)
* [OCPBUGS-35298](https://issues.redhat.com/browse/OCPBUGS-35298): revert vsphere problem detector controller name change [#481](https://github.com/openshift/cluster-storage-operator/pull/481)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#470](https://github.com/openshift/cluster-storage-operator/pull/470)
* [OCPBUGS-29126](https://issues.redhat.com/browse/OCPBUGS-29126): vsphere-problem-detector: don't set Available condition [#456](https://github.com/openshift/cluster-storage-operator/pull/456)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#467](https://github.com/openshift/cluster-storage-operator/pull/467)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): update ClusterCSIDriver CRDs [#464](https://github.com/openshift/cluster-storage-operator/pull/464)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#459](https://github.com/openshift/cluster-storage-operator/pull/459)
* [OCPBUGS-28748](https://issues.redhat.com/browse/OCPBUGS-28748): log default storage class names when collector is triggered [#460](https://github.com/openshift/cluster-storage-operator/pull/460)
* [OCPBUGS-30498](https://issues.redhat.com/browse/OCPBUGS-30498): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#463](https://github.com/openshift/cluster-storage-operator/pull/463)
* [STOR-1758](https://issues.redhat.com/browse/STOR-1758): Add azure file hypershift [#454](https://github.com/openshift/cluster-storage-operator/pull/454)
* [OCPBUGS-28879](https://issues.redhat.com/browse/OCPBUGS-28879): Fix problem-detector proxy setting [#457](https://github.com/openshift/cluster-storage-operator/pull/457)
* [OCPBUGS-29573](https://issues.redhat.com/browse/OCPBUGS-29573): Apply hypershift cluster-profile for ibm-cloud-managed [#458](https://github.com/openshift/cluster-storage-operator/pull/458)
* [OCPBUGS-28765](https://issues.redhat.com/browse/OCPBUGS-28765): Remove master node selector from azure-csi-driver-operator deployment [#448](https://github.com/openshift/cluster-storage-operator/pull/448)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#455](https://github.com/openshift/cluster-storage-operator/pull/455)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#447](https://github.com/openshift/cluster-storage-operator/pull/447)
* [STOR-1611](https://issues.redhat.com/browse/STOR-1611): remove ibm-vpc-node-label-updater [#445](https://github.com/openshift/cluster-storage-operator/pull/445)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Allow vSphere CSI driver to be disabled [#444](https://github.com/openshift/cluster-storage-operator/pull/444)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to CSO [#442](https://github.com/openshift/cluster-storage-operator/pull/442)
* [STOR-1354](https://issues.redhat.com/browse/STOR-1354): Remove Alibaba Disk CSI Driver [#440](https://github.com/openshift/cluster-storage-operator/pull/440)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#443](https://github.com/openshift/cluster-storage-operator/pull/443)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Azure disk hypershift [#420](https://github.com/openshift/cluster-storage-operator/pull/420)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#437](https://github.com/openshift/cluster-storage-operator/pull/437)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert [#430](https://github.com/openshift/cluster-storage-operator/pull/430)
* [OCPBUGS-22422](https://issues.redhat.com/browse/OCPBUGS-22422): Fix PodStartupStorageOperationsFailing alert [#436](https://github.com/openshift/cluster-storage-operator/pull/436)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#434](https://github.com/openshift/cluster-storage-operator/pull/434)
* [OCPBUGS-25564](https://issues.redhat.com/browse/OCPBUGS-25564): Updating ose-cluster-storage-operator-container image to be consistent with ART [#435](https://github.com/openshift/cluster-storage-operator/pull/435)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): replace instanceAdmin role with specific compute permissions [#429](https://github.com/openshift/cluster-storage-operator/pull/429)
* [OCPBUGS-24927](https://issues.redhat.com/browse/OCPBUGS-24927): Updating ose-cluster-storage-operator-container image to be consistent with ART [#432](https://github.com/openshift/cluster-storage-operator/pull/432)
* [OCPBUGS-23852](https://issues.redhat.com/browse/OCPBUGS-23852): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#431](https://github.com/openshift/cluster-storage-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98...761b62fa95c15dd7fcae6df1dda5876e50a10f2d)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/e8478585cca88314094112aa5933e5281f4707ea)
* [OCPBUGS-43467](https://issues.redhat.com/browse/OCPBUGS-43467): keys: Update Red Hat keys to use SHA256 signatures [#64](https://github.com/openshift/cluster-update-keys/pull/64)
* [OCPBUGS-29570](https://issues.redhat.com/browse/OCPBUGS-29570): Apply hypershift cluster-profile for ibm-cloud-managed [#54](https://github.com/openshift/cluster-update-keys/pull/54)
* [OCPBUGS-24932](https://issues.redhat.com/browse/OCPBUGS-24932): Updating ose-cluster-update-keys-container image to be consistent with ART [#53](https://github.com/openshift/cluster-update-keys/pull/53)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/802233d84243d3eeceef50a29579501e94ebbf26...e8478585cca88314094112aa5933e5281f4707ea)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/15c87e7e6d56f89fcc2453012e09283e965e71af)
* [OCPBUGS-43964](https://issues.redhat.com/browse/OCPBUGS-43964): Fix desired before sync_worker's work is initialized [#1097](https://github.com/openshift/cluster-version-operator/pull/1097)
* [OCPBUGS-37853](https://issues.redhat.com/browse/OCPBUGS-37853): Revert "OCPBUGS-35994: Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream"" [#1077](https://github.com/openshift/cluster-version-operator/pull/1077)
* [OCPBUGS-36898](https://issues.redhat.com/browse/OCPBUGS-36898): vendor: Update openshift/api to pick up zz_generated.crd-manifests [#1069](https://github.com/openshift/cluster-version-operator/pull/1069)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream" [#1065](https://github.com/openshift/cluster-version-operator/pull/1065)
* [OCPBUGS-35249](https://issues.redhat.com/browse/OCPBUGS-35249): Revert: Add support for Custom Certificate Authorities for custom signature stores" [#1053](https://github.com/openshift/cluster-version-operator/pull/1053)
* [OCPBUGS-24700](https://issues.redhat.com/browse/OCPBUGS-24700): Add support for Custom Certificate Authorities for custom signature stores [#1030](https://github.com/openshift/cluster-version-operator/pull/1030)
* [OTA-1160](https://issues.redhat.com/browse/OTA-1160): pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart [#1044](https://github.com/openshift/cluster-version-operator/pull/1044)
* NO-ISSUE: pkg/payload/task: Drop unused Requeued property [#1043](https://github.com/openshift/cluster-version-operator/pull/1043)
* [NE-1318](https://issues.redhat.com/browse/NE-1318): Add always-enable-capabilities flag and set Ingress as always enabled [#946](https://github.com/openshift/cluster-version-operator/pull/946)
* [OCPBUGS-9133](https://issues.redhat.com/browse/OCPBUGS-9133): pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded [#746](https://github.com/openshift/cluster-version-operator/pull/746)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1038](https://github.com/openshift/cluster-version-operator/pull/1038)
* NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 [#1042](https://github.com/openshift/cluster-version-operator/pull/1042)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): pkg/cvo: Render status.Failure in ReconciliationIssues [#1041](https://github.com/openshift/cluster-version-operator/pull/1041)
* [OTA-1210](https://issues.redhat.com/browse/OTA-1210): *: Add --update-service command-line option [#1035](https://github.com/openshift/cluster-version-operator/pull/1035)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [2/3] Maintain `ReconciliationIssues` condition [#1032](https://github.com/openshift/cluster-version-operator/pull/1032)
* [OCPBUGS-29868](https://issues.redhat.com/browse/OCPBUGS-29868): Apply hypershift cluster-profile for ibm-cloud-managed [#1037](https://github.com/openshift/cluster-version-operator/pull/1037)
* NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded [#1036](https://github.com/openshift/cluster-version-operator/pull/1036)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api with new capability [#979](https://github.com/openshift/cluster-version-operator/pull/979)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [1/x] Refactor syncStatus for testability [#1031](https://github.com/openshift/cluster-version-operator/pull/1031)
* [OCPBUGS-18454](https://issues.redhat.com/browse/OCPBUGS-18454): Avoid using risk names as condition reasons when invalid [#962](https://github.com/openshift/cluster-version-operator/pull/962)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): yield lock while retrieving payload [#1005](https://github.com/openshift/cluster-version-operator/pull/1005)
* NO-JIRA: manifests: fix service manifest filename [#1027](https://github.com/openshift/cluster-version-operator/pull/1027)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features [#1026](https://github.com/openshift/cluster-version-operator/pull/1026)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): Refactor & improve SyncWorker lock code [#1020](https://github.com/openshift/cluster-version-operator/pull/1020)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): deps: bump openshift/api and k8s.io/client.go [#1022](https://github.com/openshift/cluster-version-operator/pull/1022)
* [OCPBUGS-25862](https://issues.redhat.com/browse/OCPBUGS-25862): CO health: only track current in-progress upgrade start [#1011](https://github.com/openshift/cluster-version-operator/pull/1011)
* [OCPBUGS-26014](https://issues.redhat.com/browse/OCPBUGS-26014): clusterOperatorBuilder: Reconcile metadata on COs [#1012](https://github.com/openshift/cluster-version-operator/pull/1012)
* [OCPBUGS-25708](https://issues.redhat.com/browse/OCPBUGS-25708): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1009](https://github.com/openshift/cluster-version-operator/pull/1009)
* [OCPBUGS-24535](https://issues.redhat.com/browse/OCPBUGS-24535): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#996](https://github.com/openshift/cluster-version-operator/pull/996)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-version-operator/pull/1006)
* [OCPBUGS-25055](https://issues.redhat.com/browse/OCPBUGS-25055): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1003](https://github.com/openshift/cluster-version-operator/pull/1003)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1004](https://github.com/openshift/cluster-version-operator/pull/1004)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/fbb41e8d40fd3753fb44cffe68189b717356c564...15c87e7e6d56f89fcc2453012e09283e965e71af)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)
* [MON-3671](https://issues.redhat.com/browse/MON-3671): add machine424 and rexagod to OWNERS [#55](https://github.com/openshift/configmap-reload/pull/55)
* [OCPBUGS-24912](https://issues.redhat.com/browse/OCPBUGS-24912): Updating configmap-reload-container image to be consistent with ART [#58](https://github.com/openshift/configmap-reload/pull/58)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/617398f581faadbad2c7ded993bfa3169a87b6ab...dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)
### [console](https://github.com/openshift/console/tree/70202d40d3f3a2b4f944b066a531adbec3c71a20)
* [OCPBUGS-44219](https://issues.redhat.com/browse/OCPBUGS-44219): Add flag to hide the pipelines-plugin pipeline builder extensions [#14466](https://github.com/openshift/console/pull/14466)
* [OCPBUGS-41673](https://issues.redhat.com/browse/OCPBUGS-41673): Update vendor imports to include all PatternFly components [#14273](https://github.com/openshift/console/pull/14273)
* [OCPBUGS-43834](https://issues.redhat.com/browse/OCPBUGS-43834): Enabling topology e2e tests on CI [#14438](https://github.com/openshift/console/pull/14438)
* [OCPBUGS-35204](https://issues.redhat.com/browse/OCPBUGS-35204): replace global refresh sync lock in OIDC provider with per-refresh-token one [#13950](https://github.com/openshift/console/pull/13950)
* [OCPBUGS-36556](https://issues.redhat.com/browse/OCPBUGS-36556): Increase login flow state paramater length/entropy [#14354](https://github.com/openshift/console/pull/14354)
* [OCPBUGS-42369](https://issues.redhat.com/browse/OCPBUGS-42369): Console crashes when ssh is selected in add secret for starting a pipeline run [#14320](https://github.com/openshift/console/pull/14320)
* [OCPBUGS-41904](https://issues.redhat.com/browse/OCPBUGS-41904): fix annotation for ovn localnet [#14366](https://github.com/openshift/console/pull/14366)
* [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091)
* [OCPBUGS-37689](https://issues.redhat.com/browse/OCPBUGS-37689): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14094](https://github.com/openshift/console/pull/14094)
* [OCPBUGS-42015](https://issues.redhat.com/browse/OCPBUGS-42015): Topology screen crashes when completed pod is selected [#14298](https://github.com/openshift/console/pull/14298)
* [OCPBUGS-35850](https://issues.redhat.com/browse/OCPBUGS-35850): Fix: Quick Start "next" button requires double click to move to next step [#13989](https://github.com/openshift/console/pull/13989)
* [OCPBUGS-42382](https://issues.redhat.com/browse/OCPBUGS-42382): Allow operators to enable monitoring by default [#14317](https://github.com/openshift/console/pull/14317)
* [OCPBUGS-41905](https://issues.redhat.com/browse/OCPBUGS-41905): List of default Camel K event sources disappears when adding a custom event source [#14290](https://github.com/openshift/console/pull/14290)
* [OCPBUGS-41709](https://issues.redhat.com/browse/OCPBUGS-41709): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14278](https://github.com/openshift/console/pull/14278)
* [OCPBUGS-42069](https://issues.redhat.com/browse/OCPBUGS-42069): add Create button to Console plugins tab [#14302](https://github.com/openshift/console/pull/14302)
* [OCPBUGS-41996](https://issues.redhat.com/browse/OCPBUGS-41996): Fix updating the "Until" field on the Silence > Edit page [#14296](https://github.com/openshift/console/pull/14296)
* [OCPBUGS-38112](https://issues.redhat.com/browse/OCPBUGS-38112): do not directly mutate links in useMemo [#14117](https://github.com/openshift/console/pull/14117)
* [OCPBUGS-34518](https://issues.redhat.com/browse/OCPBUGS-34518): Restore user toggle when authentification is disabled [#13902](https://github.com/openshift/console/pull/13902)
* [OCPBUGS-41619](https://issues.redhat.com/browse/OCPBUGS-41619): Use vCenterCluster value from CM as primary resource [#14268](https://github.com/openshift/console/pull/14268)
* [OCPBUGS-37046](https://issues.redhat.com/browse/OCPBUGS-37046): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14059](https://github.com/openshift/console/pull/14059)
* [OCPBUGS-38911](https://issues.redhat.com/browse/OCPBUGS-38911): Values entered into the Instantiate Template form are automatically cleared [#14187](https://github.com/openshift/console/pull/14187)
* [OCPBUGS-38914](https://issues.redhat.com/browse/OCPBUGS-38914): Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart [#14188](https://github.com/openshift/console/pull/14188)
* [OCPBUGS-38968](https://issues.redhat.com/browse/OCPBUGS-38968): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14193](https://github.com/openshift/console/pull/14193)
* [OCPBUGS-38424](https://issues.redhat.com/browse/OCPBUGS-38424): fix bug where cluster version text appears black in da… [#14144](https://github.com/openshift/console/pull/14144)
* [OCPBUGS-38464](https://issues.redhat.com/browse/OCPBUGS-38464): correct casing in "Lightspeed" [#14148](https://github.com/openshift/console/pull/14148)
* [OCPBUGS-37430](https://issues.redhat.com/browse/OCPBUGS-37430): Fix utilization card limits/total display [#14082](https://github.com/openshift/console/pull/14082)
* [OCPBUGS-36510](https://issues.redhat.com/browse/OCPBUGS-36510): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14031](https://github.com/openshift/console/pull/14031)
* [OCPBUGS-37954](https://issues.redhat.com/browse/OCPBUGS-37954): No access to list pipelines.tekton.dev prevents from using Delete application form [#14107](https://github.com/openshift/console/pull/14107)
* [OCPBUGS-36601](https://issues.redhat.com/browse/OCPBUGS-36601): Tooltip on Pipeline when expression is not shows [#14033](https://github.com/openshift/console/pull/14033)
* [OCPBUGS-38803](https://issues.redhat.com/browse/OCPBUGS-38803): CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub [#14095](https://github.com/openshift/console/pull/14095)
* [OCPBUGS-37048](https://issues.redhat.com/browse/OCPBUGS-37048): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14060](https://github.com/openshift/console/pull/14060)
* [OCPBUGS-35839](https://issues.redhat.com/browse/OCPBUGS-35839): Fix placement of icons on WebKit [#13988](https://github.com/openshift/console/pull/13988)
* [OCPBUGS-35271](https://issues.redhat.com/browse/OCPBUGS-35271): Fix password set to Secret created through Start Pipeline form [#13954](https://github.com/openshift/console/pull/13954)
* [OCPBUGS-38093](https://issues.redhat.com/browse/OCPBUGS-38093): correct link for Lightspeed operator [#14112](https://github.com/openshift/console/pull/14112)
* [OCPBUGS-36484](https://issues.redhat.com/browse/OCPBUGS-36484): Revert - terminal: use username if uid is not present [#14027](https://github.com/openshift/console/pull/14027)
* [OCPBUGS-37097](https://issues.redhat.com/browse/OCPBUGS-37097): Add useQuickStartContext hook and expose it via dynamic plugin API [#14070](https://github.com/openshift/console/pull/14070)
* [OCPBUGS-36864](https://issues.redhat.com/browse/OCPBUGS-36864): maintain session across tabs [#14051](https://github.com/openshift/console/pull/14051)
* [OCPBUGS-36620](https://issues.redhat.com/browse/OCPBUGS-36620): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14035](https://github.com/openshift/console/pull/14035)
* [OCPBUGS-36759](https://issues.redhat.com/browse/OCPBUGS-36759): RWOP accessMode is not available on OpenShift console UI [#14040](https://github.com/openshift/console/pull/14040)
* [OCPBUGS-37063](https://issues.redhat.com/browse/OCPBUGS-37063): hide 'View all steps in documentation' for ROSA and OSD [#14069](https://github.com/openshift/console/pull/14069)
* [OCPBUGS-36411](https://issues.redhat.com/browse/OCPBUGS-36411): fix BMH restart annotation [#14022](https://github.com/openshift/console/pull/14022)
* [OCPBUGS-36841](https://issues.redhat.com/browse/OCPBUGS-36841): ensure correct API version for OperandDetails [#14049](https://github.com/openshift/console/pull/14049)
* [OCPBUGS-36186](https://issues.redhat.com/browse/OCPBUGS-36186): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#14008](https://github.com/openshift/console/pull/14008)
* [OCPBUGS-36002](https://issues.redhat.com/browse/OCPBUGS-36002): fix flaking crd-extension tests [#14003](https://github.com/openshift/console/pull/14003)
* [OCPBUGS-35565](https://issues.redhat.com/browse/OCPBUGS-35565): remove duplicate OAuth config [#13982](https://github.com/openshift/console/pull/13982)
* [OCPBUGS-35571](https://issues.redhat.com/browse/OCPBUGS-35571): Update Go prereq in README.md [#13981](https://github.com/openshift/console/pull/13981)
* [OCPBUGS-35465](https://issues.redhat.com/browse/OCPBUGS-35465): ManagedField in YAML editor is not collapsed by default which is incorrect [#13974](https://github.com/openshift/console/pull/13974)
* [OCPBUGS-35408](https://issues.redhat.com/browse/OCPBUGS-35408): fix pseudolocalization [#13972](https://github.com/openshift/console/pull/13972)
* [OCPBUGS-35280](https://issues.redhat.com/browse/OCPBUGS-35280): Ensure requiredVersion is set for Console provided shared modules [#13956](https://github.com/openshift/console/pull/13956)
* [OCPBUGS-34011](https://issues.redhat.com/browse/OCPBUGS-34011): Use bridge instead of cnv-bridge [#13875](https://github.com/openshift/console/pull/13875)
* [OCPBUGS-35946](https://issues.redhat.com/browse/OCPBUGS-35946): Fix invalid node filesystem query [#13999](https://github.com/openshift/console/pull/13999)
* [OCPBUGS-34717](https://issues.redhat.com/browse/OCPBUGS-34717): The s2i build strategy is not assumed for Serverless Functions [#13915](https://github.com/openshift/console/pull/13915)
* [OCPBUGS-34968](https://issues.redhat.com/browse/OCPBUGS-34968): Update plugin docs regarding Console 4.16 shared module changes [#13933](https://github.com/openshift/console/pull/13933)
* [OCPBUGS-35281](https://issues.redhat.com/browse/OCPBUGS-35281): Display of "Auth Token GCP" filter in OperatorHub should be conditioned [#13955](https://github.com/openshift/console/pull/13955)
* [OCPBUGS-35472](https://issues.redhat.com/browse/OCPBUGS-35472): bump helm to 3.14 [#13971](https://github.com/openshift/console/pull/13971)
* [OCPBUGS-35481](https://issues.redhat.com/browse/OCPBUGS-35481): fix crash if helm chart metadata is nil [#13975](https://github.com/openshift/console/pull/13975)
* [OCPBUGS-35395](https://issues.redhat.com/browse/OCPBUGS-35395): Keep useUserSettings hook in the internal api [#13970](https://github.com/openshift/console/pull/13970)
* [OCPBUGS-35152](https://issues.redhat.com/browse/OCPBUGS-35152): restore missing CloseButton styles [#13947](https://github.com/openshift/console/pull/13947)
* [OCPBUGS-35318](https://issues.redhat.com/browse/OCPBUGS-35318), [OCPBUGS-35319](https://issues.redhat.com/browse/OCPBUGS-35319), [OCPBUGS-35320](https://issues.redhat.com/browse/OCPBUGS-35320): disabling add-flow A-04-TC01 test and knative tests due to flakes [#13962](https://github.com/openshift/console/pull/13962)
* (chore) Update tectonic builder image to use golang-1.21 [#13944](https://github.com/openshift/console/pull/13944)
* [OCPBUGS-34139](https://issues.redhat.com/browse/OCPBUGS-34139): Improve Pipeline list page performance [#13882](https://github.com/openshift/console/pull/13882)
* [OCPBUGS-34002](https://issues.redhat.com/browse/OCPBUGS-34002): Fix console crash-loop with OIDC auth config [#13874](https://github.com/openshift/console/pull/13874)
* [OCPBUGS-34711](https://issues.redhat.com/browse/OCPBUGS-34711): show "Debug container" link for pods with status.phase… [#13914](https://github.com/openshift/console/pull/13914)
* [OCPBUGS-33965](https://issues.redhat.com/browse/OCPBUGS-33965): i18n - Download and merge French and Spanish languages translations in the OCP Console [#13870](https://github.com/openshift/console/pull/13870)
* [OCPBUGS-34393](https://issues.redhat.com/browse/OCPBUGS-34393): fix bug where textarea is not resizable [#13894](https://github.com/openshift/console/pull/13894)
* [OCPBUGS-33989](https://issues.redhat.com/browse/OCPBUGS-33989): Updating the secrets using Form editor displays an unknown warning message [#13873](https://github.com/openshift/console/pull/13873)
* [OCPBUGS-34112](https://issues.redhat.com/browse/OCPBUGS-34112): Fix Admission webhook warning for Route and BuildConfig creation via import flow [#13881](https://github.com/openshift/console/pull/13881)
* [OCPBUGS-34141](https://issues.redhat.com/browse/OCPBUGS-34141): UI inconsistency in topology when application grouping is collapsed [#13883](https://github.com/openshift/console/pull/13883)
* [OCPBUGS-34142](https://issues.redhat.com/browse/OCPBUGS-34142): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13884](https://github.com/openshift/console/pull/13884)
* [OCPBUGS-34143](https://issues.redhat.com/browse/OCPBUGS-34143): Create Serverless form does not create BuildConfig [#13885](https://github.com/openshift/console/pull/13885)
* [OCPBUGS-33872](https://issues.redhat.com/browse/OCPBUGS-33872): add user-impersonation to QuickStartGettingStartedCard,… [#13864](https://github.com/openshift/console/pull/13864)
* [OCPBUGS-32631](https://issues.redhat.com/browse/OCPBUGS-32631): TaskRuns should not be fetched for Failed PLR's [#13806](https://github.com/openshift/console/pull/13806)
* [OCPBUGS-33567](https://issues.redhat.com/browse/OCPBUGS-33567): Expose useUserSettings hooks in dynamic plugin sdk [#13843](https://github.com/openshift/console/pull/13843)
* [ODC-7576](https://issues.redhat.com/browse/ODC-7576): Pipelines plugin test fixes [#13841](https://github.com/openshift/console/pull/13841)
* [OCPBUGS-31901](https://issues.redhat.com/browse/OCPBUGS-31901): Patch PF dynamic module parser to exclude 'next' modules [#13832](https://github.com/openshift/console/pull/13832)
* [ODC-7574](https://issues.redhat.com/browse/ODC-7574): Add e2e tests for QuickStart from Masthead in CI [#13837](https://github.com/openshift/console/pull/13837)
* [OCPBUGS-33523](https://issues.redhat.com/browse/OCPBUGS-33523): restrict Masthead logo to max-height [#13838](https://github.com/openshift/console/pull/13838)
* [OCPBUGS-29745](https://issues.redhat.com/browse/OCPBUGS-29745): Fix Pipeline details page with when expression using CEL expression [#13834](https://github.com/openshift/console/pull/13834)
* [CONSOLE-4019](https://issues.redhat.com/browse/CONSOLE-4019): Display a warning message from kube-apiserver when creating resource integration tests [#13814](https://github.com/openshift/console/pull/13814)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Backup to segment public api key [#13821](https://github.com/openshift/console/pull/13821)
* [OCPBUGS-33352](https://issues.redhat.com/browse/OCPBUGS-33352): Fix PatternFly modules check [#13817](https://github.com/openshift/console/pull/13817)
* [OCPBUGS-33345](https://issues.redhat.com/browse/OCPBUGS-33345): Disable create button on NAD empty state for regular user [#13805](https://github.com/openshift/console/pull/13805)
* [CNV-36170](https://issues.redhat.com/browse/CNV-36170): Multi NetworkPolicies [#13772](https://github.com/openshift/console/pull/13772)
* [OCPBUGS-33219](https://issues.redhat.com/browse/OCPBUGS-33219): Fix StatusItem layout when no timestamp is present [#13815](https://github.com/openshift/console/pull/13815)
* [OCPBUGS-31558](https://issues.redhat.com/browse/OCPBUGS-31558): Fix NAD creation defaulting to the default namespace [#13822](https://github.com/openshift/console/pull/13822)
* [OCPBUGS-33222](https://issues.redhat.com/browse/OCPBUGS-33222): List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature [#13818](https://github.com/openshift/console/pull/13818)
* [OCPBUGS-33199](https://issues.redhat.com/browse/OCPBUGS-33199): The filepath including leading slash makes error during parsing devfile using Gitlab [#13812](https://github.com/openshift/console/pull/13812)
* [OCPBUGS-33202](https://issues.redhat.com/browse/OCPBUGS-33202): Pipeline list page is crashed when navigating from Search page [#13813](https://github.com/openshift/console/pull/13813)
* [CONSOLE-3939](https://issues.redhat.com/browse/CONSOLE-3939): Display a warning message from kube-apiserver when creating / updating workloads resource [#13763](https://github.com/openshift/console/pull/13763)
* [OCPBUGS-32707](https://issues.redhat.com/browse/OCPBUGS-32707): Fix React Router useParams in dynamic demo plugin [#13803](https://github.com/openshift/console/pull/13803)
* [CONSOLE-1756](https://issues.redhat.com/browse/CONSOLE-1756): replace PodIP with PodIPs or HostIP with HostIPs if mor… [#13774](https://github.com/openshift/console/pull/13774)
* [ODC-7437](https://issues.redhat.com/browse/ODC-7437): Remove pf classes in topology package [#13710](https://github.com/openshift/console/pull/13710)
* [OCPBUGS-33011](https://issues.redhat.com/browse/OCPBUGS-33011): fix issues with Edit Route form [#13799](https://github.com/openshift/console/pull/13799)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014), [OCPBUGS-32791](https://issues.redhat.com/browse/OCPBUGS-32791): Consume telemetry CLUSTER_ID and use it together with orgId as segment identifier [#13786](https://github.com/openshift/console/pull/13786)
* [ODC-7435](https://issues.redhat.com/browse/ODC-7435): Remove pf classes in pipelines package [#13739](https://github.com/openshift/console/pull/13739)
* [ODC-7569](https://issues.redhat.com/browse/ODC-7569): Automation of the Recently Used Resources Section in the Search Resource page Dropdown [#13791](https://github.com/openshift/console/pull/13791)
* [ODC-7566](https://issues.redhat.com/browse/ODC-7566): Remove the Approvals Feature from the Console Repository [#13789](https://github.com/openshift/console/pull/13789)
* [ODC-7547](https://issues.redhat.com/browse/ODC-7547): Add e2e tests for QuickStarts in CI [#13764](https://github.com/openshift/console/pull/13764)
* [ODC-7438](https://issues.redhat.com/browse/ODC-7438), [ODC-7535](https://issues.redhat.com/browse/ODC-7535): web-terminal automation improvement [#13749](https://github.com/openshift/console/pull/13749)
* [OCPBUGS-32741](https://issues.redhat.com/browse/OCPBUGS-32741): change OperatorHub filter FIPS Mode to Designed for FIPS [#13790](https://github.com/openshift/console/pull/13790)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): Use record created for container_network metrics [#13759](https://github.com/openshift/console/pull/13759)
* [OBSDOCS-986](https://issues.redhat.com/browse/OBSDOCS-986): Update the Monitoring topic used by the console team [#13765](https://github.com/openshift/console/pull/13765)
* [ODC-7433](https://issues.redhat.com/browse/ODC-7433): Remove PatternFly classes from helm integration tests [#13777](https://github.com/openshift/console/pull/13777)
* [CONSOLE-4020](https://issues.redhat.com/browse/CONSOLE-4020): i18n upload/download routine task - Sprint 252 [#13760](https://github.com/openshift/console/pull/13760)
* [OCPBUGS-32725](https://issues.redhat.com/browse/OCPBUGS-32725): fix OIDC logging out [#13755](https://github.com/openshift/console/pull/13755)
* [OCPBUGS-32059](https://issues.redhat.com/browse/OCPBUGS-32059): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13776](https://github.com/openshift/console/pull/13776)
* [OCPBUGS-32222](https://issues.redhat.com/browse/OCPBUGS-32222): Add warning about service binding operator will not be supported from 4.15 [#13766](https://github.com/openshift/console/pull/13766)
* [ODC-7554](https://issues.redhat.com/browse/ODC-7554): Update the UI according to the recent changes from UX [#13723](https://github.com/openshift/console/pull/13723)
* [ODC-7565](https://issues.redhat.com/browse/ODC-7565): Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) [#13773](https://github.com/openshift/console/pull/13773)
* [OCPBUGS-13114](https://issues.redhat.com/browse/OCPBUGS-13114): Add visual connector between VMs and non VMs workloads [#13617](https://github.com/openshift/console/pull/13617)
* [OCPBUGS-31809](https://issues.redhat.com/browse/OCPBUGS-31809): Pipeline details page Metrics tab crashed due to no custom data [#13733](https://github.com/openshift/console/pull/13733)
* [OCPBUGS-30426](https://issues.redhat.com/browse/OCPBUGS-30426): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#13661](https://github.com/openshift/console/pull/13661)
* [OCPBUGS-28723](https://issues.redhat.com/browse/OCPBUGS-28723): Improve Create serverless function error message [#13591](https://github.com/openshift/console/pull/13591)
* [OCPBUGS-32218](https://issues.redhat.com/browse/OCPBUGS-32218): fix runtime error on Pending pod details page [#13768](https://github.com/openshift/console/pull/13768)
* [ODC-7479](https://issues.redhat.com/browse/ODC-7479): automation of quick-starts-cluster-overview.feature [#13715](https://github.com/openshift/console/pull/13715)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Add NaN handling for Stacked Graphs [#13712](https://github.com/openshift/console/pull/13712)
* [OCPBUGS-26073](https://issues.redhat.com/browse/OCPBUGS-26073): setting correct image trigger annotation [#13492](https://github.com/openshift/console/pull/13492)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944): Disable segment analytics when cluster telemetry is disabled [#13677](https://github.com/openshift/console/pull/13677)
* [OCPBUGS-32019](https://issues.redhat.com/browse/OCPBUGS-32019): Handle loading issue for PLR status in PLR list page [#13747](https://github.com/openshift/console/pull/13747)
* [OCPBUGS-29377](https://issues.redhat.com/browse/OCPBUGS-29377): Routes created by devfiles do not always use HTTPS [#13725](https://github.com/openshift/console/pull/13725)
* [OCPBUGS-32307](https://issues.redhat.com/browse/OCPBUGS-32307): Increase Max node limit for topology page to 300 [#13761](https://github.com/openshift/console/pull/13761)
* [OCPBUGS-22405](https://issues.redhat.com/browse/OCPBUGS-22405): Add a button to enable autoscaling for a deployment that is scaled to 0 [#13711](https://github.com/openshift/console/pull/13711)
* [OCPBUGS-32189](https://issues.redhat.com/browse/OCPBUGS-32189): Fix PatternFly version resolution check script for MacOS [#13757](https://github.com/openshift/console/pull/13757)
* [CONSOLE-3759](https://issues.redhat.com/browse/CONSOLE-3759): Update file-loader pkg [#13743](https://github.com/openshift/console/pull/13743)
* [OCPBUGS-31430](https://issues.redhat.com/browse/OCPBUGS-31430): Re-enable Pipelines e2e tests [#13700](https://github.com/openshift/console/pull/13700)
* [OCPBUGS-32175](https://issues.redhat.com/browse/OCPBUGS-32175): Update i18n docs : Change "traditional Chinese" to "simplified Chinese" [#13754](https://github.com/openshift/console/pull/13754)
* [OCPBUGS-32117](https://issues.redhat.com/browse/OCPBUGS-32117): Add flag to hide Output tab contributed by pipelines-plugin [#13751](https://github.com/openshift/console/pull/13751)
* [CONSOLE-3997](https://issues.redhat.com/browse/CONSOLE-3997): Bump Yarn to v1 latest & add script to check PatternFly modules [#13706](https://github.com/openshift/console/pull/13706)
* [OCPBUGS-31745](https://issues.redhat.com/browse/OCPBUGS-31745): TaskRun status is not displayed near the name [#13746](https://github.com/openshift/console/pull/13746)
* [CONSOLE-3916](https://issues.redhat.com/browse/CONSOLE-3916): Direct OIDC tech debt [#13647](https://github.com/openshift/console/pull/13647)
* [OCPBUGS-31082](https://issues.redhat.com/browse/OCPBUGS-31082): Remove deprecated resources from spec of the Pipeline [#13741](https://github.com/openshift/console/pull/13741)
* [OCPBUGS-31759](https://issues.redhat.com/browse/OCPBUGS-31759): Update i18n docs on how to update Phrase Project Template [#13730](https://github.com/openshift/console/pull/13730)
* [OCPBUGS-31843](https://issues.redhat.com/browse/OCPBUGS-31843): Use UserInfo username field when logging out as kubeadmin [#13740](https://github.com/openshift/console/pull/13740)
* [OCPBUGS-31680](https://issues.redhat.com/browse/OCPBUGS-31680): Correct the button text for VolumeSnapshotContent [#13742](https://github.com/openshift/console/pull/13742)
* [WINC-1182](https://issues.redhat.com/browse/WINC-1182): [node] Modify filesystem queries to include Windows metrics [#13662](https://github.com/openshift/console/pull/13662)
* [OCPBUGS-31703](https://issues.redhat.com/browse/OCPBUGS-31703): Resource yaml with create [#13722](https://github.com/openshift/console/pull/13722)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment [#13728](https://github.com/openshift/console/pull/13728)
* [OCPBUGS-23319](https://issues.redhat.com/browse/OCPBUGS-23319): fix bug where paused MCPs were incorrectly unpausing w… [#13717](https://github.com/openshift/console/pull/13717)
* [OCPBUGS-31744](https://issues.redhat.com/browse/OCPBUGS-31744): Add fr and es languages to i18n script for Memsource upload [#13729](https://github.com/openshift/console/pull/13729)
* [OCPBUGS-29616](https://issues.redhat.com/browse/OCPBUGS-29616), [OCPBUGS-29823](https://issues.redhat.com/browse/OCPBUGS-29823), [OCPBUGS-31613](https://issues.redhat.com/browse/OCPBUGS-31613): Add validation for vSphere fields [#13726](https://github.com/openshift/console/pull/13726)
* [OCPBUGS-23480](https://issues.redhat.com/browse/OCPBUGS-23480): Improve PipelineRun list view performance [#13676](https://github.com/openshift/console/pull/13676)
* [OCPBUGS-31732](https://issues.redhat.com/browse/OCPBUGS-31732): Hide the cluster configuration for analytics [#13727](https://github.com/openshift/console/pull/13727)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: use our own pre-configured client for token refreshes [#13716](https://github.com/openshift/console/pull/13716)
* [OCPBUGS-31695](https://issues.redhat.com/browse/OCPBUGS-31695): Use bearer-token for local dev with auth [#13720](https://github.com/openshift/console/pull/13720)
* [OCPBUGS-31355](https://issues.redhat.com/browse/OCPBUGS-31355): add readOnly option to ResourceYAMLEditor [#13694](https://github.com/openshift/console/pull/13694)
* [ODC-7436](https://issues.redhat.com/browse/ODC-7436): shipwright test package update concerning pf5 update [#13660](https://github.com/openshift/console/pull/13660)
* [OCPBUGS-31431](https://issues.redhat.com/browse/OCPBUGS-31431): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13701](https://github.com/openshift/console/pull/13701)
* [ODC-7431](https://issues.redhat.com/browse/ODC-7431): dev-console test package update concerning pf5 update [#13685](https://github.com/openshift/console/pull/13685)
* [OCPBUGS-31315](https://issues.redhat.com/browse/OCPBUGS-31315): i18n upload/download routine task - Sprint 249 [#13692](https://github.com/openshift/console/pull/13692)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): fix asynccache improper initialization [#13703](https://github.com/openshift/console/pull/13703)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13454](https://github.com/openshift/console/pull/13454)
* Revert "OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters" [#13705](https://github.com/openshift/console/pull/13705)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Improve local plugin development docs [#13679](https://github.com/openshift/console/pull/13679)
* [OCPBUGS-30958](https://issues.redhat.com/browse/OCPBUGS-30958): Upgrade Pipeline trigger resources to v1beta1 [#13702](https://github.com/openshift/console/pull/13702)
* [OCPBUGS-30824](https://issues.redhat.com/browse/OCPBUGS-30824): Remove react-helmet from Console provided shared modules [#13687](https://github.com/openshift/console/pull/13687)
* [CONSOLE-3971](https://issues.redhat.com/browse/CONSOLE-3971): add impersonate action to Group list and details pages [#13671](https://github.com/openshift/console/pull/13671)
* [OCPBUGS-28585](https://issues.redhat.com/browse/OCPBUGS-28585): remove generics from use*Modal docs [#13689](https://github.com/openshift/console/pull/13689)
* [OCPBUGS-24637](https://issues.redhat.com/browse/OCPBUGS-24637): Fix storage request unit dropdown to display any valid unit [#13620](https://github.com/openshift/console/pull/13620)
* [OCPBUGS-29992](https://issues.redhat.com/browse/OCPBUGS-29992), [OCPBUGS-30584](https://issues.redhat.com/browse/OCPBUGS-30584): PatternFly upgrade to 5.2.1 followup to… [#13693](https://github.com/openshift/console/pull/13693)
* [CONSOLE-3972](https://issues.redhat.com/browse/CONSOLE-3972): add Last Status to Pod details Container list and Conta… [#13674](https://github.com/openshift/console/pull/13674)
* [ODC-7531](https://issues.redhat.com/browse/ODC-7531): Added the ApprovalTask List Tabbed Page [#13651](https://github.com/openshift/console/pull/13651)
* [ODC-7546](https://issues.redhat.com/browse/ODC-7546): Fix that the UI doesn't load on non-openshift clusters [#13408](https://github.com/openshift/console/pull/13408)
* [ODC-7498](https://issues.redhat.com/browse/ODC-7498): Show an opt-in / opt-out option to the user depending on the cluster configuration [#13587](https://github.com/openshift/console/pull/13587)
* [ODC-7434](https://issues.redhat.com/browse/ODC-7434): Knative test package update concerning pf5 update [#13562](https://github.com/openshift/console/pull/13562)
* [OCPBUGS-24049](https://issues.redhat.com/browse/OCPBUGS-24049): Add option to enable/disable tailing to Pod log viewer mobile screen issues [#13394](https://github.com/openshift/console/pull/13394)
* [CONSOLE-3949](https://issues.redhat.com/browse/CONSOLE-3949): Add support for returning response.header in consoleFetchCommon function [#13623](https://github.com/openshift/console/pull/13623)
* [CONSOLE-3969](https://issues.redhat.com/browse/CONSOLE-3969): Enable French and Spanish in the OCP Console [#13665](https://github.com/openshift/console/pull/13665)
* [ODC-7519](https://issues.redhat.com/browse/ODC-7519): Update the Pipeline Topology to adjust the new node design for the CustomRun [#13613](https://github.com/openshift/console/pull/13613)
* [CONSOLE-3922](https://issues.redhat.com/browse/CONSOLE-3922): Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage [#13560](https://github.com/openshift/console/pull/13560)
* [ODC-7489](https://issues.redhat.com/browse/ODC-7489): automation for getting-started-tour-dev-perspective feature file [#13531](https://github.com/openshift/console/pull/13531)
* [OCPBUGS-30052](https://issues.redhat.com/browse/OCPBUGS-30052), [OCPBUGS-30575](https://issues.redhat.com/browse/OCPBUGS-30575): PipelineRuns in Console show wrong status or load indefinitely [#13659](https://github.com/openshift/console/pull/13659)
* [CONSOLE-3965](https://issues.redhat.com/browse/CONSOLE-3965): i18n upload/download routine task for version-4.16/ sprint-248 [#13652](https://github.com/openshift/console/pull/13652)
* [ODC-7492](https://issues.redhat.com/browse/ODC-7492): automation for sample-card-add-page feature file [#13589](https://github.com/openshift/console/pull/13589)
* [OCPBUGS-30567](https://issues.redhat.com/browse/OCPBUGS-30567): Remove wrong arguments in K8sCreate method instance for Create YAML editor [#13658](https://github.com/openshift/console/pull/13658)
* [OCPBUGS-30297](https://issues.redhat.com/browse/OCPBUGS-30297): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13650](https://github.com/openshift/console/pull/13650)
* [CONSOLE-3931](https://issues.redhat.com/browse/CONSOLE-3931): replace existing CloseButton with one from @patternfly/… [#13588](https://github.com/openshift/console/pull/13588)
* [OCPBUGS-30805](https://issues.redhat.com/browse/OCPBUGS-30805): fix Configure link in AlertmanagerReceiversNotConfigur… [#13666](https://github.com/openshift/console/pull/13666)
* [OCPBUGS-30762](https://issues.redhat.com/browse/OCPBUGS-30762): Fix bugs in Console dynamic plugin SDK webpack code [#13657](https://github.com/openshift/console/pull/13657)
* [ODC-7539](https://issues.redhat.com/browse/ODC-7539): Update devfile library to v2.2.2 [#13045](https://github.com/openshift/console/pull/13045)
* [OCPBUGS-26415](https://issues.redhat.com/browse/OCPBUGS-26415): Application creation fail when manually entering input scaling value in local setup [#13487](https://github.com/openshift/console/pull/13487)
* [OCPBUGS-30551](https://issues.redhat.com/browse/OCPBUGS-30551): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13654](https://github.com/openshift/console/pull/13654)
* [OCPBUGS-29513](https://issues.redhat.com/browse/OCPBUGS-29513): Update the Pipeline List and Details Pages to acknowledge Custom Task [#13614](https://github.com/openshift/console/pull/13614)
* [OCPBUGS-29365](https://issues.redhat.com/browse/OCPBUGS-29365): Requesting for country codes in localization of openshift - webconsole [#13612](https://github.com/openshift/console/pull/13612)
* [OCPBUGS-25931](https://issues.redhat.com/browse/OCPBUGS-25931): fix for execute inline markdown syntax issue [#13580](https://github.com/openshift/console/pull/13580)
* [RHSTOR-4130](https://issues.redhat.com/browse/RHSTOR-4130): Cross storage class clone /restore [#13549](https://github.com/openshift/console/pull/13549)
* [OCPBUGS-27469](https://issues.redhat.com/browse/OCPBUGS-27469): "Deploy Image" with "Serverless Deployment", Scaling "Min Pods"/"Max Pods" should set "autoscaling.knative.dev/min-scale"/max-scale not minScale/maxScale [#13534](https://github.com/openshift/console/pull/13534)
* [OCPBUGS-30073](https://issues.redhat.com/browse/OCPBUGS-30073): Upload Jar form's Clear button is not functioning [#13644](https://github.com/openshift/console/pull/13644)
* [OCPBUGS-21800](https://issues.redhat.com/browse/OCPBUGS-21800): Dev console buildconfig got [the server does not allow this method on the requested resource] error when not setting metadate.namespace [#13544](https://github.com/openshift/console/pull/13544)
* [OCPBUGS-30046](https://issues.redhat.com/browse/OCPBUGS-30046): Missing dependency warning error in console UI dev env [#13640](https://github.com/openshift/console/pull/13640)
* [OCPBUGS-22894](https://issues.redhat.com/browse/OCPBUGS-22894): adjusting documentation links for 4.15 [#13634](https://github.com/openshift/console/pull/13634)
* [OCPBUGS-30077](https://issues.redhat.com/browse/OCPBUGS-30077): Add additional search filters in the toolbar [#13233](https://github.com/openshift/console/pull/13233)
* [ODC-7480](https://issues.redhat.com/browse/ODC-7480): Recently Searched Section in Search Resource Page Dropdown [#13389](https://github.com/openshift/console/pull/13389)
* [CONSOLE-3907](https://issues.redhat.com/browse/CONSOLE-3907): add actions extension point to Events [#13554](https://github.com/openshift/console/pull/13554)
* [OCPBUGS-22487](https://issues.redhat.com/browse/OCPBUGS-22487): Fix operands list endpoint. [#13632](https://github.com/openshift/console/pull/13632)
* [CONSOLE-3948](https://issues.redhat.com/browse/CONSOLE-3948): rename 'supported but not recommended' to 'known issues… [#13622](https://github.com/openshift/console/pull/13622)
* [OCPBUGS-29701](https://issues.redhat.com/browse/OCPBUGS-29701): Use selfsubjectreview API from frontend [#13605](https://github.com/openshift/console/pull/13605)
* [ODC-7478](https://issues.redhat.com/browse/ODC-7478): Gherkin and automation of "Install Red Hat Developer Hub with a Helm Chart" guided tour [#13511](https://github.com/openshift/console/pull/13511)
* [CONSOLE-3924](https://issues.redhat.com/browse/CONSOLE-3924): i18n upload/download routine task - version4.16/sprint247 [#13608](https://github.com/openshift/console/pull/13608)
* [CONSOLE-3776](https://issues.redhat.com/browse/CONSOLE-3776): Add GCP token auth to Infrastructure features filter section in OpertorHub [#13559](https://github.com/openshift/console/pull/13559)
* [OCPBUGS-29816](https://issues.redhat.com/browse/OCPBUGS-29816): Switch to service from external result route endpoint [#13624](https://github.com/openshift/console/pull/13624)
* [OCPBUGS-29757](https://issues.redhat.com/browse/OCPBUGS-29757): Use HTTP proxy configuration from environment variables in dev-console proxies, so that our backend proxies works fine on airgapped clusters [#13619](https://github.com/openshift/console/pull/13619)
* [OCPBUGS-28967](https://issues.redhat.com/browse/OCPBUGS-28967): 'Oh no somthing went wrong' shown on Image Manifest Vulnerability page after create IMV via CL [#13578](https://github.com/openshift/console/pull/13578)
* [CONSOLE-3921](https://issues.redhat.com/browse/CONSOLE-3921): Remove Disks/NICs page from Node details [#13552](https://github.com/openshift/console/pull/13552)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update dynamic plugins README [#13598](https://github.com/openshift/console/pull/13598)
* [OCPBUGS-29760](https://issues.redhat.com/browse/OCPBUGS-29760): Dev console: Observe > Dashboard page should be called "Dashboards" (OU-260) [#13597](https://github.com/openshift/console/pull/13597)
* [CONSOLE-3774](https://issues.redhat.com/browse/CONSOLE-3774): Enable OperatorHub filter by TLSProfiles annotation [#13555](https://github.com/openshift/console/pull/13555)
* [ODC-7477](https://issues.redhat.com/browse/ODC-7477): automation of quick-start-access-code-snippet.feature [#13494](https://github.com/openshift/console/pull/13494)
* [OCPBUGS-29423](https://issues.redhat.com/browse/OCPBUGS-29423): update TableData doc to use PatternFly 5 classname [#13606](https://github.com/openshift/console/pull/13606)
* [OCPBUGS-29363](https://issues.redhat.com/browse/OCPBUGS-29363): TaskRuns list page is loading constantly for all projects [#13604](https://github.com/openshift/console/pull/13604)
* [OCPBUGS-29355](https://issues.redhat.com/browse/OCPBUGS-29355): Output image url link leads to 404 for Shipwright Builds [#13602](https://github.com/openshift/console/pull/13602)
* [OCPBUGS-29601](https://issues.redhat.com/browse/OCPBUGS-29601): Disabling pipeline tests to restore CI health [#13611](https://github.com/openshift/console/pull/13611)
* [ODC-7476](https://issues.redhat.com/browse/ODC-7476): automation for getting-started-serverless gherkin [#13476](https://github.com/openshift/console/pull/13476)
* [OCPBUGS-27473](https://issues.redhat.com/browse/OCPBUGS-27473): Error in displaying BuildRun logs in Console [#13583](https://github.com/openshift/console/pull/13583)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update Console vs. dynamic plugin SDK package compat table [#13586](https://github.com/openshift/console/pull/13586)
* [OCPBUGS-9714](https://issues.redhat.com/browse/OCPBUGS-9714): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13411](https://github.com/openshift/console/pull/13411)
* [OCPBUGS-28718](https://issues.redhat.com/browse/OCPBUGS-28718): Revision tab and routes tab in serving details page showing no resource found [#13556](https://github.com/openshift/console/pull/13556)
* [OCPBUGS-26566](https://issues.redhat.com/browse/OCPBUGS-26566): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13504](https://github.com/openshift/console/pull/13504)
* [OCPBUGS-28383](https://issues.redhat.com/browse/OCPBUGS-28383): Activity card event has expanded content that is not correctly left aligned with the rest of the card content [#13547](https://github.com/openshift/console/pull/13547)
* [OCPBUGS-27247](https://issues.redhat.com/browse/OCPBUGS-27247): improve empty state message for Machines and MachineSets page [#13577](https://github.com/openshift/console/pull/13577)
* [OCPBUGS-25942](https://issues.redhat.com/browse/OCPBUGS-25942): make sure folder is encapsulated with quotas [#13477](https://github.com/openshift/console/pull/13477)
* [OCPBUGS-27246](https://issues.redhat.com/browse/OCPBUGS-27246): Unhealthy conditions table should put Type as first column on MachineHealthCheck details page [#13576](https://github.com/openshift/console/pull/13576)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name to "network-xxx-xxx" when creating [#13568](https://github.com/openshift/console/pull/13568)
* [ODC-7490](https://issues.redhat.com/browse/ODC-7490): Add TaskRun tab in PLR details page using plugin [#13527](https://github.com/openshift/console/pull/13527)
* [OCPBUGS-28856](https://issues.redhat.com/browse/OCPBUGS-28856): make getGroupVersionKindForResource null safe [#13574](https://github.com/openshift/console/pull/13574)
* [OCPBUGS-27908](https://issues.redhat.com/browse/OCPBUGS-27908): fix i18n for Remove volume modal [#13550](https://github.com/openshift/console/pull/13550)
* [CONSOLE-3377](https://issues.redhat.com/browse/CONSOLE-3377): Add Cypress integration tests for ConsoleYAMLSample CRDs [#13567](https://github.com/openshift/console/pull/13567)
* [OCPBUGS-28836](https://issues.redhat.com/browse/OCPBUGS-28836): AUTH-440: fix usersettings identifier creation [#13557](https://github.com/openshift/console/pull/13557)
* [OCPBUGS-27310](https://issues.redhat.com/browse/OCPBUGS-27310): Source column header not displayed in PVC > VolumeSnapshots tab [#13565](https://github.com/openshift/console/pull/13565)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Optimize module federation of PatternFly packages [#13521](https://github.com/openshift/console/pull/13521)
* [CONSOLE-3909](https://issues.redhat.com/browse/CONSOLE-3909): i18n upload/download routine task - chore(i18n): update translations [#13519](https://github.com/openshift/console/pull/13519)
* [CONSOLE-3818](https://issues.redhat.com/browse/CONSOLE-3818): Remove Chrome from the console builder image [#13539](https://github.com/openshift/console/pull/13539)
* [OCPBUGS-28216](https://issues.redhat.com/browse/OCPBUGS-28216): Adjust width and spacing so that warning icons are not clipped. [#13546](https://github.com/openshift/console/pull/13546)
* [OCPBUGS-26236](https://issues.redhat.com/browse/OCPBUGS-26236): VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab [#13485](https://github.com/openshift/console/pull/13485)
* [OCPBUGS-25936](https://issues.redhat.com/browse/OCPBUGS-25936): fix copy-execute-demo.yaml inline syntax [#13471](https://github.com/openshift/console/pull/13471)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13513](https://github.com/openshift/console/pull/13513)
* [OCPBUGS-25843](https://issues.redhat.com/browse/OCPBUGS-25843): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13483](https://github.com/openshift/console/pull/13483)
* [OCPBUGS-25881](https://issues.redhat.com/browse/OCPBUGS-25881): remove "openshift-storage" namespace usage from the console [#13418](https://github.com/openshift/console/pull/13418)
* [OCPBUGS-27455](https://issues.redhat.com/browse/OCPBUGS-27455): do not deduplicate ImageManifestVulns in Overview popover [#13529](https://github.com/openshift/console/pull/13529)
* [OCPBUGS-27016](https://issues.redhat.com/browse/OCPBUGS-27016): fix resizeObserver limit exceed for dev-console [#13502](https://github.com/openshift/console/pull/13502)
* [OCPBUGS-27152](https://issues.redhat.com/browse/OCPBUGS-27152): Fix popover jump in Tables [#13524](https://github.com/openshift/console/pull/13524)
* [OCPBUGS-25788](https://issues.redhat.com/browse/OCPBUGS-25788): Add Node Maintenance menu actions to Node list/details [#13506](https://github.com/openshift/console/pull/13506)
* [OCPBUGS-27779](https://issues.redhat.com/browse/OCPBUGS-27779): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13532](https://github.com/openshift/console/pull/13532)
* [CONSOLE-3430](https://issues.redhat.com/browse/CONSOLE-3430): add Cluster Settings > Details integration tests [#13515](https://github.com/openshift/console/pull/13515)
* [ODC-7482](https://issues.redhat.com/browse/ODC-7482): Add flags checks to hide Pipeline static plugin List and details pages [#13512](https://github.com/openshift/console/pull/13512)
* [OCPBUGS-27498](https://issues.redhat.com/browse/OCPBUGS-27498): Update get method so it can display zero value when set [#13533](https://github.com/openshift/console/pull/13533)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): Addition of optional chaining to prevent yaml crash [#13510](https://github.com/openshift/console/pull/13510)
* [OCPBUGS-27399](https://issues.redhat.com/browse/OCPBUGS-27399): Filter out Client CSRs for nodes which already exist [#13522](https://github.com/openshift/console/pull/13522)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-16814](https://issues.redhat.com/browse/OCPBUGS-16814): backend: use the k8s SelfSubjectReview API to get info about a user [#13321](https://github.com/openshift/console/pull/13321)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13276](https://github.com/openshift/console/pull/13276)
* [OCPBUGS-26772](https://issues.redhat.com/browse/OCPBUGS-26772): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13503](https://github.com/openshift/console/pull/13503)
* [OCPBUGS-26039](https://issues.redhat.com/browse/OCPBUGS-26039): Make editor sidebar width consistent [#13495](https://github.com/openshift/console/pull/13495)
* [OCPBUGS-10851](https://issues.redhat.com/browse/OCPBUGS-10851): Add source maps to production builds [#13497](https://github.com/openshift/console/pull/13497)
* [OCPBUGS-25890](https://issues.redhat.com/browse/OCPBUGS-25890): Prevent complete page reload when changing perspective [#13500](https://github.com/openshift/console/pull/13500)
* [OCPBUGS-14481](https://issues.redhat.com/browse/OCPBUGS-14481): update check for the 'provider' label on the PackageMa… [#13491](https://github.com/openshift/console/pull/13491)
* [OCPBUGS-26554](https://issues.redhat.com/browse/OCPBUGS-26554): Fixed some problems in topology Chinese translation text [#13458](https://github.com/openshift/console/pull/13458)
* [OCPBUGS-18699](https://issues.redhat.com/browse/OCPBUGS-18699): add additional check to determine if file is binary [#13496](https://github.com/openshift/console/pull/13496)
* [ODC-7465](https://issues.redhat.com/browse/ODC-7465): Update Getting started section in Openshift UI to use expandable section [#13466](https://github.com/openshift/console/pull/13466)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13441](https://github.com/openshift/console/pull/13441)
* [OCPBUGS-25722](https://issues.redhat.com/browse/OCPBUGS-25722): Add support for custom segment domains (to load JS and make API calls) [#13459](https://github.com/openshift/console/pull/13459)
* [OCPBUGS-26049](https://issues.redhat.com/browse/OCPBUGS-26049): Tab VolumeSnapshots crashed on PVC page [#13481](https://github.com/openshift/console/pull/13481)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): add integration test to check that Update cluster moda… [#13480](https://github.com/openshift/console/pull/13480)
* [OCPBUGS-25898](https://issues.redhat.com/browse/OCPBUGS-25898): Fix PipelineRun Logs tab navigation [#13470](https://github.com/openshift/console/pull/13470)
* [OCPBUGS-25840](https://issues.redhat.com/browse/OCPBUGS-25840): make Azure warning title consistent [#13472](https://github.com/openshift/console/pull/13472)
* [OCPBUGS-25771](https://issues.redhat.com/browse/OCPBUGS-25771): Enable catalog source badge to truncate for long names [#13474](https://github.com/openshift/console/pull/13474)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): fix bug where Update cluster modal will not open [#13473](https://github.com/openshift/console/pull/13473)
* [OCPBUGS-25934](https://issues.redhat.com/browse/OCPBUGS-25934): clean up icon color and sizes [#13460](https://github.com/openshift/console/pull/13460)
* [OCPBUGS-25927](https://issues.redhat.com/browse/OCPBUGS-25927): Fix config ini format [#13210](https://github.com/openshift/console/pull/13210)
* [OCPBUGS-25612](https://issues.redhat.com/browse/OCPBUGS-25612): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13455](https://github.com/openshift/console/pull/13455)
* [OCPBUGS-24592](https://issues.redhat.com/browse/OCPBUGS-24592): Fix CI tests in helm and devconsole packages [#13464](https://github.com/openshift/console/pull/13464)
* [OCPBUGS-25206](https://issues.redhat.com/browse/OCPBUGS-25206): Re-enable and fix pipelines e2e tests [#13438](https://github.com/openshift/console/pull/13438)
* [OCPBUGS-18844](https://issues.redhat.com/browse/OCPBUGS-18844): Replace the old sr-only class to the patternfly pf-v5-u-screen-reader class [#13453](https://github.com/openshift/console/pull/13453)
* [HELM-522](https://issues.redhat.com/browse/HELM-522): bump helm version to 3.13.2 for OCP 4.15 [#13410](https://github.com/openshift/console/pull/13410)
* [OCPBUGS-25441](https://issues.redhat.com/browse/OCPBUGS-25441): fix Observe tab in Topology overview [#13451](https://github.com/openshift/console/pull/13451)
* [OCPBUGS-25530](https://issues.redhat.com/browse/OCPBUGS-25530): fix bug where filter at mobile could be empty on Searc… [#13456](https://github.com/openshift/console/pull/13456)
* [OCPBUGS-25396](https://issues.redhat.com/browse/OCPBUGS-25396): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13450](https://github.com/openshift/console/pull/13450)
* [CONSOLE-3874](https://issues.redhat.com/browse/CONSOLE-3874): Refactor EventStream [#13431](https://github.com/openshift/console/pull/13431)
* [OCPBUGS-23299](https://issues.redhat.com/browse/OCPBUGS-23299): Replace checkbox with PF checkbox component to correct alignment [#13397](https://github.com/openshift/console/pull/13397)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13445](https://github.com/openshift/console/pull/13445)
* [OCPBUGS-24711](https://issues.redhat.com/browse/OCPBUGS-24711): fix preferredTab selection on Pipelines page [#13430](https://github.com/openshift/console/pull/13430)
* [OCPBUGS-24715](https://issues.redhat.com/browse/OCPBUGS-24715), [OCPBUGS-25018](https://issues.redhat.com/browse/OCPBUGS-25018): Fix pipelineRuns loading on repository details page [#13432](https://github.com/openshift/console/pull/13432)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13434](https://github.com/openshift/console/pull/13434)
* [OCPBUGS-24408](https://issues.redhat.com/browse/OCPBUGS-24408): fix runtime error on Node details Overview when Machin… [#13422](https://github.com/openshift/console/pull/13422)
* [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Prevent text overlap with popover close button on Create NetworkPolicy form [#13429](https://github.com/openshift/console/pull/13429)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Prevent PatternFly styles from being included in plugin compilation [#13388](https://github.com/openshift/console/pull/13388)
* [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): Add missing https:// check for an external link [#13421](https://github.com/openshift/console/pull/13421)
* chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13403](https://github.com/openshift/console/pull/13403)
* [OCPBUGS-5113](https://issues.redhat.com/browse/OCPBUGS-5113): Date&Time values are not showing as per browser default language [#12506](https://github.com/openshift/console/pull/12506)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Only show VPAs that are associated with the selected namespace [#13417](https://github.com/openshift/console/pull/13417)
* [OCPBUGS-24186](https://issues.redhat.com/browse/OCPBUGS-24186): Strip 'Server' header from proxy response [#13404](https://github.com/openshift/console/pull/13404)
* Console-3733: Add support for Azure Workload Identity / Federated Identity based installs in OperatorHub [#13082](https://github.com/openshift/console/pull/13082)
* [Full changelog](https://github.com/openshift/console/compare/8e9e4015d859afb4219ae4c770a258fdf8aca565...70202d40d3f3a2b4f944b066a531adbec3c71a20)
### [console-operator](https://github.com/openshift/console-operator/tree/92447df597eeca8a92bb9019e854619e19736638)
* [OCPBUGS-34783](https://issues.redhat.com/browse/OCPBUGS-34783): set required-scc for openshift workloads [#908](https://github.com/openshift/console-operator/pull/908)
* [OCPBUGS-34012](https://issues.redhat.com/browse/OCPBUGS-34012): Cache organization ID [#916](https://github.com/openshift/console-operator/pull/916)
* [OCPBUGS-33788](https://issues.redhat.com/browse/OCPBUGS-33788): Tolerate the absence of ingress capability on HyperShift clusters [#910](https://github.com/openshift/console-operator/pull/910)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#901](https://github.com/openshift/console-operator/pull/901)
* [OCPBUGS-33505](https://issues.redhat.com/browse/OCPBUGS-33505): Add missing return statement to fix crash in healthcheck controller [#900](https://github.com/openshift/console-operator/pull/900)
* [OKD-214](https://issues.redhat.com/browse/OKD-214): Dockerfile: Add ARG TAGS=ocp [#896](https://github.com/openshift/console-operator/pull/896)
* [TRT-1664](https://issues.redhat.com/browse/TRT-1664): Revert #895 "CONSOLE-4047: Console-operator should be internally using listers for fetching data" [#899](https://github.com/openshift/console-operator/pull/899)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#895](https://github.com/openshift/console-operator/pull/895)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Default telemetry values [#890](https://github.com/openshift/console-operator/pull/890)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#893](https://github.com/openshift/console-operator/pull/893)
* [TRT-1623](https://issues.redhat.com/browse/TRT-1623): Revert "Merge pull request #889 from jhadvig/CONSOLE-4014" [#892](https://github.com/openshift/console-operator/pull/892)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#889](https://github.com/openshift/console-operator/pull/889)
* [OCPBUGS-20129](https://issues.redhat.com/browse/OCPBUGS-20129): Fix triggering `upgradenotification` in the cluster installation time [#790](https://github.com/openshift/console-operator/pull/790)
* [OCPBUGS-20466](https://issues.redhat.com/browse/OCPBUGS-20466): Tighten console operator permissions for cluster operators [#873](https://github.com/openshift/console-operator/pull/873)
* [OCPBUGS-32400](https://issues.redhat.com/browse/OCPBUGS-32400): base OIDC status updates on the ExternalOIDC feature gate [#887](https://github.com/openshift/console-operator/pull/887)
* [OCPBUGS-29547](https://issues.redhat.com/browse/OCPBUGS-29547): Apply hypershift cluster-profile for ibm-cloud-managed [#868](https://github.com/openshift/console-operator/pull/868)
* [OCPBUGS-30458](https://issues.redhat.com/browse/OCPBUGS-30458): Bump k8s.io/component-base to latest [#884](https://github.com/openshift/console-operator/pull/884)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944), [OCPBUGS-31020](https://issues.redhat.com/browse/OCPBUGS-31020): Disable segment analytics when cluster telemetry is disabled [#877](https://github.com/openshift/console-operator/pull/877)
* [CONSOLE-3910](https://issues.redhat.com/browse/CONSOLE-3910): Add quickstart to impersonate a system:admin user [#865](https://github.com/openshift/console-operator/pull/865)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: synchronize the CM with a CA to trust the issuer, if configured [#879](https://github.com/openshift/console-operator/pull/879)
* [OCPBUGS-29331](https://issues.redhat.com/browse/OCPBUGS-29331): Update RHDH QuickStarts and add CR examples [#878](https://github.com/openshift/console-operator/pull/878)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 [#827](https://github.com/openshift/console-operator/pull/827)
* [OCPBUGS-28541](https://issues.redhat.com/browse/OCPBUGS-28541): Remove Janus IDP and update RHDH quickstarts [#862](https://github.com/openshift/console-operator/pull/862)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): Add startupProbe to console container. [#869](https://github.com/openshift/console-operator/pull/869)
* [OCPBUGS-29532](https://issues.redhat.com/browse/OCPBUGS-29532): ouathclients: further split oidc and integrated oauth handling [#861](https://github.com/openshift/console-operator/pull/861)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): always sync oidcClients in authn status if the field is present [#857](https://github.com/openshift/console-operator/pull/857)
* [OCPBUGS-28982](https://issues.redhat.com/browse/OCPBUGS-28982): oauthclients: fix oauthclients degraded condition that never gets removed [#855](https://github.com/openshift/console-operator/pull/855)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#847](https://github.com/openshift/console-operator/pull/847)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#849](https://github.com/openshift/console-operator/pull/849)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#841](https://github.com/openshift/console-operator/pull/841)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Merge auth cert configmap deployment annotations into one [#842](https://github.com/openshift/console-operator/pull/842)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): make it impossible double set conditions in a single loop [#848](https://github.com/openshift/console-operator/pull/848)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#839](https://github.com/openshift/console-operator/pull/839)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): The console-deployment should set the number of replicas based on the ControlPlaneTopology [#838](https://github.com/openshift/console-operator/pull/838)
* NO-JIRA:(chore) remove unused loglevel [#830](https://github.com/openshift/console-operator/pull/830)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): Bump library-go to deal with GET conflict [#836](https://github.com/openshift/console-operator/pull/836)
* [OCPBUGS-24041](https://issues.redhat.com/browse/OCPBUGS-24041): Prevent healthcheck controller from Available=False blipping [#834](https://github.com/openshift/console-operator/pull/834)
* [OCPBUGS-7656](https://issues.redhat.com/browse/OCPBUGS-7656): Remove service ca controller annotation from console-redirect service. [#826](https://github.com/openshift/console-operator/pull/826)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Revert #831 and fix cluster proxy annotation on console conversion webhook deployment [#833](https://github.com/openshift/console-operator/pull/833)
* Revert #822 "OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher" [#831](https://github.com/openshift/console-operator/pull/831)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Update console conversion webhook server to use sig.k8s.io certwatcher [#822](https://github.com/openshift/console-operator/pull/822)
* [OCPBUGS-25618](https://issues.redhat.com/browse/OCPBUGS-25618): Bump documentationBaseURL to 4.16 [#824](https://github.com/openshift/console-operator/pull/824)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#823](https://github.com/openshift/console-operator/pull/823)
* [Full changelog](https://github.com/openshift/console-operator/compare/5d7ebcddf5a58d44ba37d63b149b06d6fc5ae1d8...92447df597eeca8a92bb9019e854619e19736638)
### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/73b4123cc75abd22af8dc3b429836be2bea45fd5)
* [OCPBUGS-37725](https://issues.redhat.com/browse/OCPBUGS-37725): Update owners [#166](https://github.com/openshift/containernetworking-plugins/pull/166)
* [OCPBUGS-32212](https://issues.redhat.com/browse/OCPBUGS-32212): modify to invoke SAST test [#159](https://github.com/openshift/containernetworking-plugins/pull/159)
* [OCPBUGS-28559](https://issues.redhat.com/browse/OCPBUGS-28559): Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 [#150](https://github.com/openshift/containernetworking-plugins/pull/150)
* [USHIFT-2219](https://issues.redhat.com/browse/USHIFT-2219): Dockerfile for MicroShift [#153](https://github.com/openshift/containernetworking-plugins/pull/153)
* [OCPBUGS-29888](https://issues.redhat.com/browse/OCPBUGS-29888): cherry-pick containernetworking/plugins#997 [#154](https://github.com/openshift/containernetworking-plugins/pull/154)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#146](https://github.com/openshift/containernetworking-plugins/pull/146)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#145](https://github.com/openshift/containernetworking-plugins/pull/145)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#142](https://github.com/openshift/containernetworking-plugins/pull/142)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/401d35070f2d1d4db3f08ffe183b8262754b7287...73b4123cc75abd22af8dc3b429836be2bea45fd5)
### [coredns](https://github.com/openshift/coredns/tree/1e417656c1c72d3410b31ee08caf25bcdf8836e3)
* [OCPBUGS-37078](https://issues.redhat.com/browse/OCPBUGS-37078): UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin [#127](https://github.com/openshift/coredns/pull/127)
* [OCPBUGS-35296](https://issues.redhat.com/browse/OCPBUGS-35296): UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 [#123](https://github.com/openshift/coredns/pull/123)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order [#116](https://github.com/openshift/coredns/pull/116)
* [OCPBUGS-31768](https://issues.redhat.com/browse/OCPBUGS-31768): UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 [#108](https://github.com/openshift/coredns/pull/108)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin [#115](https://github.com/openshift/coredns/pull/115)
* [OCPBUGS-27928](https://issues.redhat.com/browse/OCPBUGS-27928): Updating coredns-container image to be consistent with ART for 4.16 [#111](https://github.com/openshift/coredns/pull/111)
* [OCPBUGS-27397](https://issues.redhat.com/browse/OCPBUGS-27397): UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 [#109](https://github.com/openshift/coredns/pull/109)
* [OCPBUGS-24957](https://issues.redhat.com/browse/OCPBUGS-24957): Updating coredns-container image to be consistent with ART [#107](https://github.com/openshift/coredns/pull/107)
* [OCPBUGS-15755](https://issues.redhat.com/browse/OCPBUGS-15755): UPSTREAM: <carry>: openshift: Fix OCPBUGS-15755 [#105](https://github.com/openshift/coredns/pull/105)
* [Full changelog](https://github.com/openshift/coredns/compare/1326282c9e158078634be4261b75ded247d233d7...1e417656c1c72d3410b31ee08caf25bcdf8836e3)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b7e9010d795f78f39bf12433599658bbbdd9560e)
* [OCPBUGS-38167](https://issues.redhat.com/browse/OCPBUGS-38167): rebase CPO on 4.16 [#291](https://github.com/openshift/cloud-provider-openstack/pull/291)
* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Allow changing cluster-name on existing deployments [#276](https://github.com/openshift/cloud-provider-openstack/pull/276)
* [OCPBUGS-29605](https://issues.redhat.com/browse/OCPBUGS-29605): Remove enforcement of IPv6 LB as internal [#275](https://github.com/openshift/cloud-provider-openstack/pull/275)
* NO-JIRA: More snyk ignores [#265](https://github.com/openshift/cloud-provider-openstack/pull/265)
* don't use static version in sed replacement rules [#2510](https://github.com/openshift/cloud-provider-openstack/pull/2510)
* bump k8s e2e test to 1.29 [#2509](https://github.com/openshift/cloud-provider-openstack/pull/2509)
* update docs in order to reflect the current state of the ovn lb-provider support [#2489](https://github.com/openshift/cloud-provider-openstack/pull/2489)
* update CSI version [#2478](https://github.com/openshift/cloud-provider-openstack/pull/2478)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/6ab1226a552376801e1f5712e3189a27729a23ed...b7e9010d795f78f39bf12433599658bbbdd9560e)
### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/c25d1ff2677a882504b18220dcbbe153781f3883)
* [OCPBUGS-38458](https://issues.redhat.com/browse/OCPBUGS-38458): Add missing healthchecks [#241](https://github.com/openshift/csi-driver-manila-operator/pull/241)
* [OCPBUGS-30438](https://issues.redhat.com/browse/OCPBUGS-30438): Bump protobuf dependency [#237](https://github.com/openshift/csi-driver-manila-operator/pull/237)
* [OCPBUGS-38013](https://issues.redhat.com/browse/OCPBUGS-38013): Set required-scc for openshift workloads [#235](https://github.com/openshift/csi-driver-manila-operator/pull/235)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/csi-driver-manila-operator/pull/229)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#226](https://github.com/openshift/csi-driver-manila-operator/pull/226)
* [OCPBUGS-28934](https://issues.redhat.com/browse/OCPBUGS-28934): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 [#227](https://github.com/openshift/csi-driver-manila-operator/pull/227)
* NO-ISSUE: Remove local manifests [#208](https://github.com/openshift/csi-driver-manila-operator/pull/208)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#225](https://github.com/openshift/csi-driver-manila-operator/pull/225)
* [OCPBUGS-23809](https://issues.redhat.com/browse/OCPBUGS-23809): Bump opentelemetry libs [#220](https://github.com/openshift/csi-driver-manila-operator/pull/220)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#223](https://github.com/openshift/csi-driver-manila-operator/pull/223)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#218](https://github.com/openshift/csi-driver-manila-operator/pull/218)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#217](https://github.com/openshift/csi-driver-manila-operator/pull/217)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#214](https://github.com/openshift/csi-driver-manila-operator/pull/214)
* [OCPBUGS-24824](https://issues.redhat.com/browse/OCPBUGS-24824): Updating csi-driver-manila-operator-container image to be consistent with ART [#213](https://github.com/openshift/csi-driver-manila-operator/pull/213)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/9bcf382eb68d3dd13a553dce41822d24da3870d0...c25d1ff2677a882504b18220dcbbe153781f3883)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/406cec72a10684a7545a976a8c31e60712bcc5b2)
* [OCPBUGS-30439](https://issues.redhat.com/browse/OCPBUGS-30439): Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#139](https://github.com/openshift/csi-driver-nfs/pull/139)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#138](https://github.com/openshift/csi-driver-nfs/pull/138)
* NO-JIRA: Add snyk configuration file [#137](https://github.com/openshift/csi-driver-nfs/pull/137)
* [OCPBUGS-24952](https://issues.redhat.com/browse/OCPBUGS-24952): Updating csi-driver-nfs-container image to be consistent with ART [#136](https://github.com/openshift/csi-driver-nfs/pull/136)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/d032dc1050b58a965e6bb9f923baef6d3c95538e...406cec72a10684a7545a976a8c31e60712bcc5b2)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/bc125def6a15a71b2ef8c59e9c1284e471e7d905)
* [BUILD-877](https://issues.redhat.com/browse/BUILD-877): BUILD-887: Add konflux config for push and pull request [#183](https://github.com/openshift/csi-driver-shared-resource/pull/183)
* [BUILD-961](https://issues.redhat.com/browse/BUILD-961): use separate dockerfile for using catalog images [#180](https://github.com/openshift/csi-driver-shared-resource/pull/180)
* [OCPBUGS-33513](https://issues.redhat.com/browse/OCPBUGS-33513): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 [#178](https://github.com/openshift/csi-driver-shared-resource/pull/178)
* [OCPBUGS-33511](https://issues.redhat.com/browse/OCPBUGS-33511): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/csi-driver-shared-resource/pull/177)
* [BUILD-957](https://issues.redhat.com/browse/BUILD-957): Update Images with Red Hat Catalog Images [#173](https://github.com/openshift/csi-driver-shared-resource/pull/173)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Compare to Other Secret Stores [#176](https://github.com/openshift/csi-driver-shared-resource/pull/176)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Simplify README [#174](https://github.com/openshift/csi-driver-shared-resource/pull/174)
* [OCPBUGS-30501](https://issues.redhat.com/browse/OCPBUGS-30501): bump google.golang.org/grpc to 1.63.0 [#172](https://github.com/openshift/csi-driver-shared-resource/pull/172)
* [OCPBUGS-29871](https://issues.redhat.com/browse/OCPBUGS-29871): Apply hypershift cluster-profile for ibm-cloud-managed [#171](https://github.com/openshift/csi-driver-shared-resource/pull/171)
* [OCPBUGS-28663](https://issues.redhat.com/browse/OCPBUGS-28663): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#165](https://github.com/openshift/csi-driver-shared-resource/pull/165)
* [OCPBUGS-27860](https://issues.redhat.com/browse/OCPBUGS-27860), [OCPBUGS-28261](https://issues.redhat.com/browse/OCPBUGS-28261): address SAST/SNYK findings [#164](https://github.com/openshift/csi-driver-shared-resource/pull/164)
* [OCPBUGS-26081](https://issues.redhat.com/browse/OCPBUGS-26081), [OCPBUGS-26114](https://issues.redhat.com/browse/OCPBUGS-26114), [OCPBUGS-26145](https://issues.redhat.com/browse/OCPBUGS-26145): add snyk config file for SAST scan [#161](https://github.com/openshift/csi-driver-shared-resource/pull/161)
* [OCPBUGS-24984](https://issues.redhat.com/browse/OCPBUGS-24984): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#159](https://github.com/openshift/csi-driver-shared-resource/pull/159)
* [OCPBUGS-25035](https://issues.redhat.com/browse/OCPBUGS-25035): Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART [#160](https://github.com/openshift/csi-driver-shared-resource/pull/160)
* [OCPBUGS-24903](https://issues.redhat.com/browse/OCPBUGS-24903): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#158](https://github.com/openshift/csi-driver-shared-resource/pull/158)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/260a085ae25606bba7a94cdfed88f67265905ba9...bc125def6a15a71b2ef8c59e9c1284e471e7d905)
### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#107](https://github.com/openshift/csi-driver-shared-resource-operator/pull/107)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#100](https://github.com/openshift/csi-driver-shared-resource-operator/pull/100)
* [OCPBUGS-28941](https://issues.redhat.com/browse/OCPBUGS-28941): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/csi-driver-shared-resource-operator/pull/101)
* [OCPBUGS-28664](https://issues.redhat.com/browse/OCPBUGS-28664): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#99](https://github.com/openshift/csi-driver-shared-resource-operator/pull/99)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#98](https://github.com/openshift/csi-driver-shared-resource-operator/pull/98)
* [OCPBUGS-26087](https://issues.redhat.com/browse/OCPBUGS-26087): add snyk config file for SAST scan [#95](https://github.com/openshift/csi-driver-shared-resource-operator/pull/95)
* [OCPBUGS-24855](https://issues.redhat.com/browse/OCPBUGS-24855): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART [#94](https://github.com/openshift/csi-driver-shared-resource-operator/pull/94)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/8d017b7f19f0226dfd4fc7933271939c550d180f...1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/7da80aab15cabd182ee35742443c0b836de4e180)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-attacher` to v4.5.1 for OCP 4.16 [#72](https://github.com/openshift/csi-external-attacher/pull/72)
* [OCPBUGS-30437](https://issues.redhat.com/browse/OCPBUGS-30437): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#71](https://github.com/openshift/csi-external-attacher/pull/71)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#70](https://github.com/openshift/csi-external-attacher/pull/70)
* [OCPBUGS-25576](https://issues.redhat.com/browse/OCPBUGS-25576): Updating csi-attacher-container image to be consistent with ART [#69](https://github.com/openshift/csi-external-attacher/pull/69)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#68](https://github.com/openshift/csi-external-attacher/pull/68)
* [OCPBUGS-25053](https://issues.redhat.com/browse/OCPBUGS-25053): Updating csi-attacher-container image to be consistent with ART [#67](https://github.com/openshift/csi-external-attacher/pull/67)
* [OCPBUGS-24966](https://issues.redhat.com/browse/OCPBUGS-24966): Updating csi-attacher-container image to be consistent with ART [#66](https://github.com/openshift/csi-external-attacher/pull/66)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/f806f266600fbc0db4d072e4d041fc80e28deee7...7da80aab15cabd182ee35742443c0b836de4e180)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/9e8af011e0a0aea96066821b57c42bdaccf24a42)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-provisioner` to v4.0.1 for OCP 4.16 [#95](https://github.com/openshift/csi-external-provisioner/pull/95)
* [OCPBUGS-30442](https://issues.redhat.com/browse/OCPBUGS-30442): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#94](https://github.com/openshift/csi-external-provisioner/pull/94)
* [OCPBUGS-29971](https://issues.redhat.com/browse/OCPBUGS-29971): Updating csi-provisioner-container image to be consistent with ART for 4.16 [#93](https://github.com/openshift/csi-external-provisioner/pull/93)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#88](https://github.com/openshift/csi-external-provisioner/pull/88)
* [OCPBUGS-25492](https://issues.redhat.com/browse/OCPBUGS-25492): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#85](https://github.com/openshift/csi-external-provisioner/pull/85)
* [OCPBUGS-25532](https://issues.redhat.com/browse/OCPBUGS-25532): Updating csi-provisioner-container image to be consistent with ART [#84](https://github.com/openshift/csi-external-provisioner/pull/84)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#83](https://github.com/openshift/csi-external-provisioner/pull/83)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-23812](https://issues.redhat.com/browse/OCPBUGS-23812): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#81](https://github.com/openshift/csi-external-provisioner/pull/81)
* [OCPBUGS-25082](https://issues.redhat.com/browse/OCPBUGS-25082): Updating csi-provisioner-container image to be consistent with ART [#80](https://github.com/openshift/csi-external-provisioner/pull/80)
* [OCPBUGS-24804](https://issues.redhat.com/browse/OCPBUGS-24804): Updating csi-provisioner-container image to be consistent with ART [#79](https://github.com/openshift/csi-external-provisioner/pull/79)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/ce5a1a33fadf10bba0c90510c09dfc879dcfec87...9e8af011e0a0aea96066821b57c42bdaccf24a42)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/bdf5bfb4da07be6a85ae5253218f29fb8af51adf)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-resizer` to v1.10.0 for OCP 4.16 [#160](https://github.com/openshift/csi-external-resizer/pull/160)
* [OCPBUGS-30502](https://issues.redhat.com/browse/OCPBUGS-30502): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#159](https://github.com/openshift/csi-external-resizer/pull/159)
* [OCPBUGS-29984](https://issues.redhat.com/browse/OCPBUGS-29984): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 [#158](https://github.com/openshift/csi-external-resizer/pull/158)
* [OCPBUGS-25540](https://issues.redhat.com/browse/OCPBUGS-25540): Updating ose-csi-external-resizer-container image to be consistent with ART [#154](https://github.com/openshift/csi-external-resizer/pull/154)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#153](https://github.com/openshift/csi-external-resizer/pull/153)
* [OCPBUGS-24846](https://issues.redhat.com/browse/OCPBUGS-24846): Updating ose-csi-external-resizer-container image to be consistent with ART [#152](https://github.com/openshift/csi-external-resizer/pull/152)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/3b4236d382e4593ca41ecc6f394775be467b1a0d...bdf5bfb4da07be6a85ae5253218f29fb8af51adf)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/5315d37a1e5415e8b6870f23e50238681979cc28)
* [OCPBUGS-31746](https://issues.redhat.com/browse/OCPBUGS-31746): Backport volumegroupsnapshot fixes to OCP 4.16 [#148](https://github.com/openshift/csi-external-snapshotter/pull/148)
* [OCPBUGS-31439](https://issues.redhat.com/browse/OCPBUGS-31439): Backport volumegroupsnapshot fixes to OCP 4.16 [#146](https://github.com/openshift/csi-external-snapshotter/pull/146)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase external-snapshotter to v7.0.1 for OCP 4.16 [#145](https://github.com/openshift/csi-external-snapshotter/pull/145)
* [OCPBUGS-30503](https://issues.redhat.com/browse/OCPBUGS-30503): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#144](https://github.com/openshift/csi-external-snapshotter/pull/144)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Rebase `external-snapshotter` to v7.0.0 to get VolumeGroupSnapshot [#139](https://github.com/openshift/csi-external-snapshotter/pull/139)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#137](https://github.com/openshift/csi-external-snapshotter/pull/137)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#133](https://github.com/openshift/csi-external-snapshotter/pull/133)
* [OCPBUGS-25548](https://issues.redhat.com/browse/OCPBUGS-25548): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#135](https://github.com/openshift/csi-external-snapshotter/pull/135)
* [OCPBUGS-25575](https://issues.redhat.com/browse/OCPBUGS-25575): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#136](https://github.com/openshift/csi-external-snapshotter/pull/136)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#132](https://github.com/openshift/csi-external-snapshotter/pull/132)
* [OCPBUGS-25052](https://issues.redhat.com/browse/OCPBUGS-25052): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#131](https://github.com/openshift/csi-external-snapshotter/pull/131)
* [OCPBUGS-25124](https://issues.redhat.com/browse/OCPBUGS-25124): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#130](https://github.com/openshift/csi-external-snapshotter/pull/130)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#129](https://github.com/openshift/csi-external-snapshotter/pull/129)
* [OCPBUGS-24964](https://issues.redhat.com/browse/OCPBUGS-24964): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#128](https://github.com/openshift/csi-external-snapshotter/pull/128)
* [OCPBUGS-24866](https://issues.redhat.com/browse/OCPBUGS-24866): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#127](https://github.com/openshift/csi-external-snapshotter/pull/127)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/4f2955c7c90cd150f9dfae782148d0fa8eba7342...5315d37a1e5415e8b6870f23e50238681979cc28)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/f5e3ff5532d58af34b5b407be2cac6934c1ff223)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `livenessprobe` to v2.12.0 for OCP 4.16 [#64](https://github.com/openshift/csi-livenessprobe/pull/64)
* [OCPBUGS-30440](https://issues.redhat.com/browse/OCPBUGS-30440): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#63](https://github.com/openshift/csi-livenessprobe/pull/63)
* [OCPBUGS-29972](https://issues.redhat.com/browse/OCPBUGS-29972): Updating csi-livenessprobe-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/csi-livenessprobe/pull/62)
* [OCPBUGS-25534](https://issues.redhat.com/browse/OCPBUGS-25534): Updating csi-livenessprobe-container image to be consistent with ART [#58](https://github.com/openshift/csi-livenessprobe/pull/58)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#57](https://github.com/openshift/csi-livenessprobe/pull/57)
* [OCPBUGS-25093](https://issues.redhat.com/browse/OCPBUGS-25093): Updating csi-livenessprobe-container image to be consistent with ART [#56](https://github.com/openshift/csi-livenessprobe/pull/56)
* [OCPBUGS-24815](https://issues.redhat.com/browse/OCPBUGS-24815): Updating csi-livenessprobe-container image to be consistent with ART [#55](https://github.com/openshift/csi-livenessprobe/pull/55)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3...f5e3ff5532d58af34b5b407be2cac6934c1ff223)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/8930c368500a5d1f15c3e1a5906397e206879de0)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `node-driver-registrar` to v2.10.0 for OCP 4.16 [#70](https://github.com/openshift/csi-node-driver-registrar/pull/70)
* [OCPBUGS-30441](https://issues.redhat.com/browse/OCPBUGS-30441): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#69](https://github.com/openshift/csi-node-driver-registrar/pull/69)
* [OCPBUGS-29987](https://issues.redhat.com/browse/OCPBUGS-29987): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 [#68](https://github.com/openshift/csi-node-driver-registrar/pull/68)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#64](https://github.com/openshift/csi-node-driver-registrar/pull/64)
* [OCPBUGS-25544](https://issues.redhat.com/browse/OCPBUGS-25544): Updating csi-node-driver-registrar-container image to be consistent with ART [#62](https://github.com/openshift/csi-node-driver-registrar/pull/62)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#61](https://github.com/openshift/csi-node-driver-registrar/pull/61)
* [OCPBUGS-25117](https://issues.redhat.com/browse/OCPBUGS-25117): Updating csi-node-driver-registrar-container image to be consistent with ART [#59](https://github.com/openshift/csi-node-driver-registrar/pull/59)
* [OCPBUGS-23811](https://issues.redhat.com/browse/OCPBUGS-23811): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#58](https://github.com/openshift/csi-node-driver-registrar/pull/58)
* [OCPBUGS-24856](https://issues.redhat.com/browse/OCPBUGS-24856): Updating csi-node-driver-registrar-container image to be consistent with ART [#57](https://github.com/openshift/csi-node-driver-registrar/pull/57)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9005584ee45c4d3158e383870aafa5d78a03b141...8930c368500a5d1f15c3e1a5906397e206879de0)
### [docker-builder](https://github.com/openshift/builder/tree/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)
* [OCPBUGS-30455](https://issues.redhat.com/browse/OCPBUGS-30455): bump google.golang.org/protobuf to 1.33.0 [#402](https://github.com/openshift/builder/pull/402)
* [OCPBUGS-35283](https://issues.redhat.com/browse/OCPBUGS-35283): Bumps openshift/api & related dependencies [#397](https://github.com/openshift/builder/pull/397)
* [OCPBUGS-30672](https://issues.redhat.com/browse/OCPBUGS-30672): bump go-jose to fix CVE-2024-28176 [#386](https://github.com/openshift/builder/pull/386)
* [OCPBUGS-31930](https://issues.redhat.com/browse/OCPBUGS-31930): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#385](https://github.com/openshift/builder/pull/385)
* [OCPBUGS-24746](https://issues.redhat.com/browse/OCPBUGS-24746): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#382](https://github.com/openshift/builder/pull/382)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#380](https://github.com/openshift/builder/pull/380)
* [OCPBUGS-28661](https://issues.redhat.com/browse/OCPBUGS-28661): Replace 'coreydaley' with 'sayan-biswas' [#377](https://github.com/openshift/builder/pull/377)
* [Full changelog](https://github.com/openshift/builder/compare/160e7cacc7ab7a6664e4c574b78139a29ace9cd3...5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)
### [docker-registry](https://github.com/openshift/image-registry/tree/e4d56625da1bde6f51fb84f05efe02df92b6f120)
* [OCPBUGS-39412](https://issues.redhat.com/browse/OCPBUGS-39412): pull upstream distribution changes to use a consistent multipart chunk size [#410](https://github.com/openshift/image-registry/pull/410)
* [OCPBUGS-35567](https://issues.redhat.com/browse/OCPBUGS-35567): use SelfSubjectReview to obtain user info [#405](https://github.com/openshift/image-registry/pull/405)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): Use SAR instead of SSAR [#403](https://github.com/openshift/image-registry/pull/403)
* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): vendor: bump aws-sdk-go to support ca-west-1 [#395](https://github.com/openshift/image-registry/pull/395)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): update distribution with bugfix [#392](https://github.com/openshift/image-registry/pull/392)
* [OCPBUGS-26173](https://issues.redhat.com/browse/OCPBUGS-26173): Updating openshift-enterprise-registry-container image to be consistent with ART [#390](https://github.com/openshift/image-registry/pull/390)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#389](https://github.com/openshift/image-registry/pull/389)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#388](https://github.com/openshift/image-registry/pull/388)
* [Full changelog](https://github.com/openshift/image-registry/compare/b9de67d83c9f850ed42317495b7b340109b3c9ac...e4d56625da1bde6f51fb84f05efe02df92b6f120)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1d5732f0209bb7d98661a53c66c5ac265272dce6)
* Adding the `+` char to the RT kernel version. (#156) [#156](https://github.com/openshift/driver-toolkit/pull/156)
* ART bash parser is failing on [[...]] syntax Replace with sh compatible syntax. (#152) [#152](https://github.com/openshift/driver-toolkit/pull/152)
* Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) [#150](https://github.com/openshift/driver-toolkit/pull/150)
* Use a default RHEL_VERSION when the build argument is not specified (#148) [#148](https://github.com/openshift/driver-toolkit/pull/148)
* Add importMode and set it to `PreserveOriginal` to import (#144) [#144](https://github.com/openshift/driver-toolkit/pull/144)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): Start using rhel-coreos image rather than machine-os-content. (#142) [#142](https://github.com/openshift/driver-toolkit/pull/142)
* apply hypershift cluster-profile (#143) [#143](https://github.com/openshift/driver-toolkit/pull/143)
* Add support for 64k pages with ARM64 (#140) [#140](https://github.com/openshift/driver-toolkit/pull/140)
* Updating driver-toolkit-container image to be consistent with ART (#139) [#139](https://github.com/openshift/driver-toolkit/pull/139)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7a448c2ee026c772e293dd344da587493c859f82...1d5732f0209bb7d98661a53c66c5ac265272dce6)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7089efe6100c1f52f28adccf1dccc722b8dcacdc)
* [OCPBUGS-35525](https://issues.redhat.com/browse/OCPBUGS-35525): update to go 1.21 and k8s.io mods to v0.29.2 [#85](https://github.com/openshift/egress-router-cni/pull/85)
* [OCPBUGS-28581](https://issues.redhat.com/browse/OCPBUGS-28581): Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 [#80](https://github.com/openshift/egress-router-cni/pull/80)
* [OCPBUGS-24860](https://issues.redhat.com/browse/OCPBUGS-24860): Updating ose-egress-router-cni-container image to be consistent with ART [#79](https://github.com/openshift/egress-router-cni/pull/79)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/f8ec690bc12a13ec7c9c45f0e3696ad02e143581...7089efe6100c1f52f28adccf1dccc722b8dcacdc)
### [etcd](https://github.com/openshift/etcd/tree/16202ec4ecea353650b3681979ba73c5d8664d8c)
* [OCPBUGS-34690](https://issues.redhat.com/browse/OCPBUGS-34690): Rebase etcd 3.5.14 openshift 4.16 [#274](https://github.com/openshift/etcd/pull/274)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): DOWNSTREAM <carry>: add native binary to installer images [#269](https://github.com/openshift/etcd/pull/269)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: installer: make etcd binaries static [#268](https://github.com/openshift/etcd/pull/268)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: add installer Dockerfile for ART builds [#267](https://github.com/openshift/etcd/pull/267)
* [OCPBUGS-31624](https://issues.redhat.com/browse/OCPBUGS-31624): Rebase etcd 3.5.13 openshift 4.16 [#259](https://github.com/openshift/etcd/pull/259)
* no-issue: Update Installer dockerfile to use golang-1.20 [#251](https://github.com/openshift/etcd/pull/251)
* [OCPBUGS-28730](https://issues.redhat.com/browse/OCPBUGS-28730): Rebase etcd 3.5.12 openshift 4.16 [#242](https://github.com/openshift/etcd/pull/242)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to build etcd for openshift-installer [#249](https://github.com/openshift/etcd/pull/249)
* [OCPBUGS-24988](https://issues.redhat.com/browse/OCPBUGS-24988): Updating ose-etcd-container image to be consistent with ART [#236](https://github.com/openshift/etcd/pull/236)
* [OCPBUGS-24931](https://issues.redhat.com/browse/OCPBUGS-24931): Rebase etcd 3.5.11 openshift 4.16 [#237](https://github.com/openshift/etcd/pull/237)
* [Full changelog](https://github.com/openshift/etcd/compare/a7005ef1eae85eec6c59411860538169cea182fd...16202ec4ecea353650b3681979ba73c5d8664d8c)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/26b43dfc7ddce718014b8991db10cbff30b7b117)
* [OCPCLOUD-2463](https://issues.redhat.com/browse/OCPCLOUD-2463): Adds auth-provider-gcp .spec file and build script [#58](https://github.com/openshift/cloud-provider-gcp/pull/58)
* [OCPBUGS-22598](https://issues.redhat.com/browse/OCPBUGS-22598): Merge https://github.com/kubernetes/cloud-provider-gcp:master (58ec6ae) into master [#53](https://github.com/openshift/cloud-provider-gcp/pull/53)
* [OCPBUGS-25754](https://issues.redhat.com/browse/OCPBUGS-25754): Add Snyk file to exclude vendor directory on scan [#54](https://github.com/openshift/cloud-provider-gcp/pull/54)
* [OCPBUGS-24044](https://issues.redhat.com/browse/OCPBUGS-24044): Merge https://github.com/kubernetes/cloud-provider-gcp:master (522e293) into master [#40](https://github.com/openshift/cloud-provider-gcp/pull/40)
* [OCPBUGS-25581](https://issues.redhat.com/browse/OCPBUGS-25581): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#52](https://github.com/openshift/cloud-provider-gcp/pull/52)
* [OCPBUGS-24981](https://issues.redhat.com/browse/OCPBUGS-24981): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#48](https://github.com/openshift/cloud-provider-gcp/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/fc50272ac32348a96455688c470bf256b1042825...26b43dfc7ddce718014b8991db10cbff30b7b117)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/02432df87df9a731c8d630311854fbd515602e91)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#224](https://github.com/openshift/cluster-api-provider-gcp/pull/224)
* [OCPBUGS-28331](https://issues.redhat.com/browse/OCPBUGS-28331): add test directory to snyk excludes [#220](https://github.com/openshift/cluster-api-provider-gcp/pull/220)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#222](https://github.com/openshift/cluster-api-provider-gcp/pull/222)
* [OCPCLOUD-2445](https://issues.redhat.com/browse/OCPCLOUD-2445): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.6.0 (be17146) into master [#221](https://github.com/openshift/cluster-api-provider-gcp/pull/221)
* [OCPBUGS-26143](https://issues.redhat.com/browse/OCPBUGS-26143): Fix formatting in snyk vendor exclusions [#219](https://github.com/openshift/cluster-api-provider-gcp/pull/219)
* [OCPBUGS-24875](https://issues.redhat.com/browse/OCPBUGS-24875): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#215](https://github.com/openshift/cluster-api-provider-gcp/pull/215)
* [OCPBUGS-25628](https://issues.redhat.com/browse/OCPBUGS-25628): Add Snyk file to exclude vendor directory on scan [#216](https://github.com/openshift/cluster-api-provider-gcp/pull/216)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/bad54034ed075b24ee8962661e78cfbd84a7dd0a...02432df87df9a731c8d630311854fbd515602e91)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e72657c0d2713842f701f1d43c777d6ec6880cb9)
* [OCPBUGS-30520](https://issues.redhat.com/browse/OCPBUGS-30520): Bump protobuf to v1.34.0 [#82](https://github.com/openshift/machine-api-provider-gcp/pull/82)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Add user defined tags to the created gcp resource [#54](https://github.com/openshift/machine-api-provider-gcp/pull/54)
* [OCPBUGS-27866](https://issues.redhat.com/browse/OCPBUGS-27866): Update Snyk file to exclude other vendor folders [#81](https://github.com/openshift/machine-api-provider-gcp/pull/81)
* [OCPCLOUD-2427](https://issues.redhat.com/browse/OCPCLOUD-2427): Rebase k8s to 1.29 and update dependencies [#78](https://github.com/openshift/machine-api-provider-gcp/pull/78)
* [OCPBUGS-26128](https://issues.redhat.com/browse/OCPBUGS-26128): Add Snyk file to exclude vendor directory on scan [#77](https://github.com/openshift/machine-api-provider-gcp/pull/77)
* [OCPBUGS-25578](https://issues.redhat.com/browse/OCPBUGS-25578): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-gcp/pull/75)
* [OCPBUGS-24970](https://issues.redhat.com/browse/OCPBUGS-24970): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#73](https://github.com/openshift/machine-api-provider-gcp/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b15daaf5836910277b7154a006800505f018aa5a...e72657c0d2713842f701f1d43c777d6ec6880cb9)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/5ed71c64ce9c1879f0d2a17976387f1b0292796d)
* [OCPBUGS-30511](https://issues.redhat.com/browse/OCPBUGS-30511): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#60](https://github.com/openshift/gcp-pd-csi-driver/pull/60)
* [STOR-1581](https://issues.redhat.com/browse/STOR-1581): Rebase to new upstream version 1.13.0 [#59](https://github.com/openshift/gcp-pd-csi-driver/pull/59)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#58](https://github.com/openshift/gcp-pd-csi-driver/pull/58)
* [OCPBUGS-25553](https://issues.redhat.com/browse/OCPBUGS-25553): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#56](https://github.com/openshift/gcp-pd-csi-driver/pull/56)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#55](https://github.com/openshift/gcp-pd-csi-driver/pull/55)
* [OCPBUGS-25138](https://issues.redhat.com/browse/OCPBUGS-25138): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#54](https://github.com/openshift/gcp-pd-csi-driver/pull/54)
* [OCPBUGS-24886](https://issues.redhat.com/browse/OCPBUGS-24886): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#53](https://github.com/openshift/gcp-pd-csi-driver/pull/53)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/856ee3e23802cd341619cc4fc3181cf6ebbbd548...5ed71c64ce9c1879f0d2a17976387f1b0292796d)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/799327f7c45b362beadc39e85b9e773cab3654c5)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#119](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/119)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node registrat healthcheck [#118](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/118)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#116](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/116)
* [OCPBUGS-28939](https://issues.redhat.com/browse/OCPBUGS-28939): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.16 [#117](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/117)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#115](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/115)
* [OCPBUGS-26486](https://issues.redhat.com/browse/OCPBUGS-26486): Increase data source provision timeout [#112](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/112)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#110](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/110)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#105](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/105)
* [OCPBUGS-25541](https://issues.redhat.com/browse/OCPBUGS-25541): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#106](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/106)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#104](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/104)
* [OCPBUGS-25113](https://issues.redhat.com/browse/OCPBUGS-25113): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#101](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/101)
* [OCPBUGS-23859](https://issues.redhat.com/browse/OCPBUGS-23859): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#98](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#100](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/100)
* [OCPBUGS-24847](https://issues.redhat.com/browse/OCPBUGS-24847): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#99](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3b91ee310c8a7394ceb2d4de6a51dd18a3800312...799327f7c45b362beadc39e85b9e773cab3654c5)
### [haproxy-router](https://github.com/openshift/router/tree/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
* [CFE-1020](https://issues.redhat.com/browse/CFE-1020): feature:route external certificate reference [#565](https://github.com/openshift/router/pull/565)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): generateHAProxyCertConfigMap: No H2 with dup certs [#589](https://github.com/openshift/router/pull/589)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Optimize Upgrade Validation plugin by skipping unnecessary changes [#587](https://github.com/openshift/router/pull/587)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Make ingressConditionsEqual more efficient [#588](https://github.com/openshift/router/pull/588)
* [OCPBUGS-29690](https://issues.redhat.com/browse/OCPBUGS-29690): Count active services before setting weight to 1 [#576](https://github.com/openshift/router/pull/576)
* "OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests" [#575](https://github.com/openshift/router/pull/575)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Reject routes with SHA1 certs [#552](https://github.com/openshift/router/pull/552)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Upgrade Validation plugin for SHA1 certs [#555](https://github.com/openshift/router/pull/555)
* [OCPBUGS-32044](https://issues.redhat.com/browse/OCPBUGS-32044): Introduce 'idle-close-on-response' option for frontends [#573](https://github.com/openshift/router/pull/573)
* [OCPBUGS-22739](https://issues.redhat.com/browse/OCPBUGS-22739): Properly handle rewrite-target annotation [#534](https://github.com/openshift/router/pull/534)
* NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image [#567](https://github.com/openshift/router/pull/567)
* [OCPBUGS-30314](https://issues.redhat.com/browse/OCPBUGS-30314): Refactor logging in DoHTTPProbe to avoid serialisation errors [#566](https://github.com/openshift/router/pull/566)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Bump HaProxy to the latest version 2.8 [#563](https://github.com/openshift/router/pull/563)
* [TRT-1507](https://issues.redhat.com/browse/TRT-1507): Revert #551 "NE-1444: Upgrade OpenShift Router to HAProxy 2.8" [#561](https://github.com/openshift/router/pull/561)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Upgrade OpenShift Router to HAProxy 2.8 [#551](https://github.com/openshift/router/pull/551)
* [OCPBUGS-26539](https://issues.redhat.com/browse/OCPBUGS-26539): Reject routes with MD5 certs [#553](https://github.com/openshift/router/pull/553)
* [OCPBUGS-25546](https://issues.redhat.com/browse/OCPBUGS-25546): Updating ose-haproxy-router-base-container image to be consistent with ART [#550](https://github.com/openshift/router/pull/550)
* NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug [#544](https://github.com/openshift/router/pull/544)
* [OCPBUGS-25029](https://issues.redhat.com/browse/OCPBUGS-25029): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART [#547](https://github.com/openshift/router/pull/547)
* [NE-1446](https://issues.redhat.com/browse/NE-1446): Update to RHEL9 base image [#548](https://github.com/openshift/router/pull/548)
* [OCPBUGS-24859](https://issues.redhat.com/browse/OCPBUGS-24859): Updating ose-haproxy-router-base-container image to be consistent with ART [#546](https://github.com/openshift/router/pull/546)
* [Full changelog](https://github.com/openshift/router/compare/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3...4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/67d33871ba24f0e8c4d2d201a4c4decaabfa1eca)
* [OCPBUGS-44513](https://issues.redhat.com/browse/OCPBUGS-44513): Bump k8s api to 1.29.10 [#2133](https://github.com/openshift/kubernetes/pull/2133)
* [OCPBUGS-42555](https://issues.redhat.com/browse/OCPBUGS-42555): Allow pod to be scheduled if node's name and hostname mismatch [#2099](https://github.com/openshift/kubernetes/pull/2099)
* [OCPBUGS-42168](https://issues.redhat.com/browse/OCPBUGS-42168): Bump k8s api to 1.29.9 [#2090](https://github.com/openshift/kubernetes/pull/2090)
* release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2096](https://github.com/openshift/kubernetes/pull/2096)
* [OCPBUGS-39015](https://issues.redhat.com/browse/OCPBUGS-39015): Bump k8s api to 1.29.8 [#2066](https://github.com/openshift/kubernetes/pull/2066)
* [OCPBUGS-36773](https://issues.redhat.com/browse/OCPBUGS-36773): UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes [#2021](https://github.com/openshift/kubernetes/pull/2021)
* NO-JIRA: update downstream owners [#2049](https://github.com/openshift/kubernetes/pull/2049)
* [OCPBUGS-37621](https://issues.redhat.com/browse/OCPBUGS-37621): Bump k8s api to 1.29.7 [#2039](https://github.com/openshift/kubernetes/pull/2039)
* [OCPBUGS-19802](https://issues.redhat.com/browse/OCPBUGS-19802): Bump 4.16 runc [#2032](https://github.com/openshift/kubernetes/pull/2032)
* [OCPBUGS-35551](https://issues.redhat.com/browse/OCPBUGS-35551): Bump k8s 1.29.6 [#1990](https://github.com/openshift/kubernetes/pull/1990)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): UPSTREAM: <carry>: Disable PersistentVolumeLabel by default [#1993](https://github.com/openshift/kubernetes/pull/1993)
* [OCPBUGS-35291](https://issues.redhat.com/browse/OCPBUGS-35291): Backport 125337 [#1989](https://github.com/openshift/kubernetes/pull/1989)
* [OCPBUGS-27074](https://issues.redhat.com/browse/OCPBUGS-27074): UPSTREAM: <carry>: extend termination events [#1980](https://github.com/openshift/kubernetes/pull/1980)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1985](https://github.com/openshift/kubernetes/pull/1985)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#1972](https://github.com/openshift/kubernetes/pull/1972)
* UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries [#1978](https://github.com/openshift/kubernetes/pull/1978)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): bump openshift/library-go@e22d25a [#1967](https://github.com/openshift/kubernetes/pull/1967)
* [OCPBUGS-32934](https://issues.redhat.com/browse/OCPBUGS-32934): UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods [#1966](https://github.com/openshift/kubernetes/pull/1966)
* no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#1959](https://github.com/openshift/kubernetes/pull/1959)
* NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server [#1957](https://github.com/openshift/kubernetes/pull/1957)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1954](https://github.com/openshift/kubernetes/pull/1954)
* [OCPBUGS-32296](https://issues.redhat.com/browse/OCPBUGS-32296): Bump K8s api to 1.29.4 [#1947](https://github.com/openshift/kubernetes/pull/1947)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): UPSTREAM: <carry>: Fix garbage-collection for CRDs. [#1811](https://github.com/openshift/kubernetes/pull/1811)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): UPSTREAM: <carry>: create readyz event for kubeapi server [#1914](https://github.com/openshift/kubernetes/pull/1914)
* UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads [#1902](https://github.com/openshift/kubernetes/pull/1902)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator [#1904](https://github.com/openshift/kubernetes/pull/1904)
* NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL [#1944](https://github.com/openshift/kubernetes/pull/1944)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): bump library-go [#1941](https://github.com/openshift/kubernetes/pull/1941)
* [OCPBUGS-11933](https://issues.redhat.com/browse/OCPBUGS-11933): UPSTREAM: <drop>: bump apiserver-library-go [#1910](https://github.com/openshift/kubernetes/pull/1910)
* [OCPBUGS-31663](https://issues.redhat.com/browse/OCPBUGS-31663): UPSTREAM: <carry>: add management workload check for guaranteed qos [#1928](https://github.com/openshift/kubernetes/pull/1928)
* [OCPBUGS-30957](https://issues.redhat.com/browse/OCPBUGS-30957): Use the right feature gate when updating uncertain … [#1919](https://github.com/openshift/kubernetes/pull/1919)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1932](https://github.com/openshift/kubernetes/pull/1932)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Bump k8s 1.29.3 [#1925](https://github.com/openshift/kubernetes/pull/1925)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1929](https://github.com/openshift/kubernetes/pull/1929)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1924](https://github.com/openshift/kubernetes/pull/1924)
* [OCPBUGS-30767](https://issues.redhat.com/browse/OCPBUGS-30767): UPSTREAM: 124110: retry policy creation for CRD type checking E2E test [#1922](https://github.com/openshift/kubernetes/pull/1922)
* [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852)
* UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911)
* [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900)
* [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888)
* NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872)
* NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871)
* [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841)
* [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845)
* [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849)
* [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848)
* [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846)
* [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815)
* [Full changelog](https://github.com/openshift/kubernetes/compare/502c5ce31170c64d2cb97884b450aea9b63eb2e8...67d33871ba24f0e8c4d2d201a4c4decaabfa1eca)
### [hypershift](https://github.com/openshift/hypershift/tree/6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5161](https://github.com/openshift/hypershift/pull/5161)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) [#5163](https://github.com/openshift/hypershift/pull/5163)
* chore(deps): update konflux references (release-4.16) [#5135](https://github.com/openshift/hypershift/pull/5135)
* [OCPBUGS-44277](https://issues.redhat.com/browse/OCPBUGS-44277): Configure OAuth https proxy to dial cloud endpoints directly [#5069](https://github.com/openshift/hypershift/pull/5069)
* chore(deps): update konflux references (release-4.16) [#5119](https://github.com/openshift/hypershift/pull/5119)
* [OCPBUGS-43973](https://issues.redhat.com/browse/OCPBUGS-43973): Add network policies for konnectivity server and ignition server proxy [#4998](https://github.com/openshift/hypershift/pull/4998)
* NO-JIRA: Update Konflux references (release-4.16) [#5112](https://github.com/openshift/hypershift/pull/5112)
* NO-JIRA: Update Konflux references (release-4.16) [#5099](https://github.com/openshift/hypershift/pull/5099)
* chore(deps): update konflux references (release-4.16) [#5078](https://github.com/openshift/hypershift/pull/5078)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) [#5059](https://github.com/openshift/hypershift/pull/5059)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5058](https://github.com/openshift/hypershift/pull/5058)
* NO-JIRA: Update Konflux references (release-4.16) [#5042](https://github.com/openshift/hypershift/pull/5042)
* chore(deps): update konflux references (release-4.16) [#5024](https://github.com/openshift/hypershift/pull/5024)
* chore(deps): update konflux references (release-4.16) [#5019](https://github.com/openshift/hypershift/pull/5019)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) [#5017](https://github.com/openshift/hypershift/pull/5017)
* NO-JIRA: Update Konflux references (release-4.16) [#5012](https://github.com/openshift/hypershift/pull/5012)
* [OCPBUGS-43840](https://issues.redhat.com/browse/OCPBUGS-43840): add ValidIDPConfiguration condition to report IDP config issues [#4985](https://github.com/openshift/hypershift/pull/4985)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4971](https://github.com/openshift/hypershift/pull/4971)
* [OCPBUGS-43046](https://issues.redhat.com/browse/OCPBUGS-43046): Do not send traffic to local audit-webhook through konnectivity [#4883](https://github.com/openshift/hypershift/pull/4883)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4954](https://github.com/openshift/hypershift/pull/4954)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) [#4947](https://github.com/openshift/hypershift/pull/4947)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4933](https://github.com/openshift/hypershift/pull/4933)
* [OCPBUGS-43104](https://issues.redhat.com/browse/OCPBUGS-43104): label routes only when HCP router used [#4899](https://github.com/openshift/hypershift/pull/4899)
* [OCPBUGS-43308](https://issues.redhat.com/browse/OCPBUGS-43308): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4905](https://github.com/openshift/hypershift/pull/4905)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4923](https://github.com/openshift/hypershift/pull/4923)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) [#4919](https://github.com/openshift/hypershift/pull/4919)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) [#4908](https://github.com/openshift/hypershift/pull/4908)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4896](https://github.com/openshift/hypershift/pull/4896)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) [#4880](https://github.com/openshift/hypershift/pull/4880)
* [OCPBUGS-42432](https://issues.redhat.com/browse/OCPBUGS-42432): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4799](https://github.com/openshift/hypershift/pull/4799)
* [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787)
* [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798)
* NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853)
* [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) [#4827](https://github.com/openshift/hypershift/pull/4827)
* chore(deps): update konflux references (release-4.16) [#4816](https://github.com/openshift/hypershift/pull/4816)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) [#4806](https://github.com/openshift/hypershift/pull/4806)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) [#4796](https://github.com/openshift/hypershift/pull/4796)
* chore(deps): update konflux references (release-4.16) [#4781](https://github.com/openshift/hypershift/pull/4781)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4760](https://github.com/openshift/hypershift/pull/4760)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) [#4759](https://github.com/openshift/hypershift/pull/4759)
* NO-JIRA: Security fixes for openshift-ci-security job [#4750](https://github.com/openshift/hypershift/pull/4750)
* [OCPBUGS-41372](https://issues.redhat.com/browse/OCPBUGS-41372): CPO oauth idp converter: resolve names before dialing [#4689](https://github.com/openshift/hypershift/pull/4689)
* NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) [#4729](https://github.com/openshift/hypershift/pull/4729)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) [#4728](https://github.com/openshift/hypershift/pull/4728)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4727](https://github.com/openshift/hypershift/pull/4727)
* [OCPBUGS-38058](https://issues.redhat.com/browse/OCPBUGS-38058): Add HTTP konnectivity proxy to OAuth server [#4496](https://github.com/openshift/hypershift/pull/4496)
* [HOSTEDCP-1955](https://issues.redhat.com/browse/HOSTEDCP-1955): bump CCO version [#4696](https://github.com/openshift/hypershift/pull/4696)
* [OCPBUGS-34803](https://issues.redhat.com/browse/OCPBUGS-34803): cmd: report server version, supported OCP [#4141](https://github.com/openshift/hypershift/pull/4141)
* [OCPBUGS-39293](https://issues.redhat.com/browse/OCPBUGS-39293): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4647](https://github.com/openshift/hypershift/pull/4647)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) [#4685](https://github.com/openshift/hypershift/pull/4685)
* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): [release-4.16] Use HTTP proxy for ingress controller [#4688](https://github.com/openshift/hypershift/pull/4688)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4684](https://github.com/openshift/hypershift/pull/4684)
* [OCPBUGS-39447](https://issues.redhat.com/browse/OCPBUGS-39447): handle version skewed NodePools that do not have rhel9 binaries [#4664](https://github.com/openshift/hypershift/pull/4664)
* [HOSTEDCP-1895](https://issues.redhat.com/browse/HOSTEDCP-1895): [release-4.16] Allow setting Kube APIServer maximum requests in flight [#4551](https://github.com/openshift/hypershift/pull/4551)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) [#4600](https://github.com/openshift/hypershift/pull/4600)
* chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) [#4602](https://github.com/openshift/hypershift/pull/4602)
* chore(deps): update konflux references (release-4.16) [#4599](https://github.com/openshift/hypershift/pull/4599)
* [OCPBUGS-38942](https://issues.redhat.com/browse/OCPBUGS-38942): copy oapi ca-trust recursively when building trust anchor [#4615](https://github.com/openshift/hypershift/pull/4615)
* NO-JIRA: Flaky cert validation test [#4622](https://github.com/openshift/hypershift/pull/4622)
* [OCPBUGS-38259](https://issues.redhat.com/browse/OCPBUGS-38259): Set KCM node monitor grace period [#4520](https://github.com/openshift/hypershift/pull/4520)
* [OCPBUGS-38726](https://issues.redhat.com/browse/OCPBUGS-38726): fix: bump github.com/IBM/go-sdk-core/v5 [#4611](https://github.com/openshift/hypershift/pull/4611)
* [HOSTEDCP-1764](https://issues.redhat.com/browse/HOSTEDCP-1764): retrieve registryOverrides when ImageStream is not ava… [#4541](https://github.com/openshift/hypershift/pull/4541)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) [#4525](https://github.com/openshift/hypershift/pull/4525)
* [OCPBUGS-36781](https://issues.redhat.com/browse/OCPBUGS-36781): Set Azure VM identity if user assigned identity set [#4341](https://github.com/openshift/hypershift/pull/4341)
* [OCPBUGS-37936](https://issues.redhat.com/browse/OCPBUGS-37936): set proxy envvars on aws and azure CCMs [#4476](https://github.com/openshift/hypershift/pull/4476)
* [OCPBUGS-38486](https://issues.redhat.com/browse/OCPBUGS-38486): hcco: reconcile apiserver config into hosted cluster [#4559](https://github.com/openshift/hypershift/pull/4559)
* NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results [#4534](https://github.com/openshift/hypershift/pull/4534)
* [OCPBUGS-38131](https://issues.redhat.com/browse/OCPBUGS-38131): Let the CPO oidc check resolve through data plane [#4505](https://github.com/openshift/hypershift/pull/4505)
* NO-JIRA: test: relax mgmt KAS egress check [#4561](https://github.com/openshift/hypershift/pull/4561)
* chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) [#4528](https://github.com/openshift/hypershift/pull/4528)
* chore(deps): update golang docker tag to v1.22 (release-4.16) [#4527](https://github.com/openshift/hypershift/pull/4527)
* NO-JIRA: Update Konflux references (release-4.16) [#4524](https://github.com/openshift/hypershift/pull/4524)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak ciphers from security profile [#4518](https://github.com/openshift/hypershift/pull/4518)
* [OCPBUGS-37060](https://issues.redhat.com/browse/OCPBUGS-37060): OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates [#4366](https://github.com/openshift/hypershift/pull/4366)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.16) [#4482](https://github.com/openshift/hypershift/pull/4482)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4481](https://github.com/openshift/hypershift/pull/4481)
* [OCPBUGS-37065](https://issues.redhat.com/browse/OCPBUGS-37065): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4367](https://github.com/openshift/hypershift/pull/4367)
* [OCPBUGS-30282](https://issues.redhat.com/browse/OCPBUGS-30282): Multiple MachineConfigs in one CM [#4398](https://github.com/openshift/hypershift/pull/4398)
* [OCPBUGS-36937](https://issues.redhat.com/browse/OCPBUGS-36937): [release-4.16] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4357](https://github.com/openshift/hypershift/pull/4357)
* [OCPBUGS-36766](https://issues.redhat.com/browse/OCPBUGS-36766): Delete IDMS in dataplane once HCP ICS field is removed [#4434](https://github.com/openshift/hypershift/pull/4434)
* NO-JIRA: Konflux migration for release-4.16 [#4436](https://github.com/openshift/hypershift/pull/4436)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) [#4430](https://github.com/openshift/hypershift/pull/4430)
* [HOSTEDCP-1569](https://issues.redhat.com/browse/HOSTEDCP-1569): test: e2e: skip unknown conditions instead of erroring [#4440](https://github.com/openshift/hypershift/pull/4440)
* [OCPBUGS-37645](https://issues.redhat.com/browse/OCPBUGS-37645): Set right endpointSlice port [#4431](https://github.com/openshift/hypershift/pull/4431)
* [OCPBUGS-37214](https://issues.redhat.com/browse/OCPBUGS-37214): Separate ibmcloud kms encryption configuration types [#4380](https://github.com/openshift/hypershift/pull/4380)
* [OCPBUGS-37302](https://issues.redhat.com/browse/OCPBUGS-37302): fix(api): Nodepool CEL validation fix [#4395](https://github.com/openshift/hypershift/pull/4395)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 [#4392](https://github.com/openshift/hypershift/pull/4392)
* [OCPBUGS-37241](https://issues.redhat.com/browse/OCPBUGS-37241): extract rhel9 MCO binaries for rhel8 based MCO images [#4383](https://github.com/openshift/hypershift/pull/4383)
* NO-JIRA: [release-4.16] test/e2e: remove api budget checks [#4368](https://github.com/openshift/hypershift/pull/4368)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4371](https://github.com/openshift/hypershift/pull/4371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned [#4364](https://github.com/openshift/hypershift/pull/4364)
* NO-JIRA: trivial typo fixes to configuring-storage.md [#4353](https://github.com/openshift/hypershift/pull/4353)
* [OCPBUGS-36849](https://issues.redhat.com/browse/OCPBUGS-36849): Add newline after TLS certs referenced by image.config [#4352](https://github.com/openshift/hypershift/pull/4352)
* [OCPBUGS-36589](https://issues.redhat.com/browse/OCPBUGS-36589): Fix Hypershift dump for non-OpenShift Management Clusters [#4317](https://github.com/openshift/hypershift/pull/4317)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.10-1.1719562237 (release-4.16) - abandoned [#4328](https://github.com/openshift/hypershift/pull/4328)
* [OCPBUGS-36358](https://issues.redhat.com/browse/OCPBUGS-36358): enable audit log for oauth-openshift [#4302](https://github.com/openshift/hypershift/pull/4302)
* [OCPBUGS-35522](https://issues.redhat.com/browse/OCPBUGS-35522): Copy infra-volumesnapshot-class-mapping to core binding [#4291](https://github.com/openshift/hypershift/pull/4291)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4299](https://github.com/openshift/hypershift/pull/4299)
* [OCPBUGS-36227](https://issues.redhat.com/browse/OCPBUGS-36227): kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4276](https://github.com/openshift/hypershift/pull/4276)
* [OCPBUGS-35341](https://issues.redhat.com/browse/OCPBUGS-35341): [release-4.16] Fixed ValidReleaseInfo condition [#4204](https://github.com/openshift/hypershift/pull/4204)
* [OCPBUGS-36220](https://issues.redhat.com/browse/OCPBUGS-36220): Make guest cluster components use the correct KAS port [#4275](https://github.com/openshift/hypershift/pull/4275)
* [OCPBUGS-35934](https://issues.redhat.com/browse/OCPBUGS-35934): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4264](https://github.com/openshift/hypershift/pull/4264)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4260](https://github.com/openshift/hypershift/pull/4260)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): Disable PersistentVolumeLabel admission plugin [#4241](https://github.com/openshift/hypershift/pull/4241)
* [OCPBUGS-35838](https://issues.redhat.com/browse/OCPBUGS-35838): Remove KMS V1 provider support for IBM Cloud [#4250](https://github.com/openshift/hypershift/pull/4250)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4251](https://github.com/openshift/hypershift/pull/4251)
* [OCPBUGS-35369](https://issues.redhat.com/browse/OCPBUGS-35369): OCPBUGS-35252: Enforce Privileged Instead of Restricted PSA in 4.16 [#4193](https://github.com/openshift/hypershift/pull/4193)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4245](https://github.com/openshift/hypershift/pull/4245)
* [OCPBUGS-35557](https://issues.redhat.com/browse/OCPBUGS-35557): Complete KAS migration to none endpoint reconciler type [#4227](https://github.com/openshift/hypershift/pull/4227)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4238](https://github.com/openshift/hypershift/pull/4238)
* NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4230](https://github.com/openshift/hypershift/pull/4230)
* [OCPBUGS-35268](https://issues.redhat.com/browse/OCPBUGS-35268): Add hypershift-cluster-version-operator image to release providers [#4185](https://github.com/openshift/hypershift/pull/4185)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4235](https://github.com/openshift/hypershift/pull/4235)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 [#4233](https://github.com/openshift/hypershift/pull/4233)
* [OCPBUGS-35056](https://issues.redhat.com/browse/OCPBUGS-35056): Generate default worker security group rules based on machineCIDR [#4174](https://github.com/openshift/hypershift/pull/4174)
* [OCPBUGS-35369](https://issues.redhat.com/browse/OCPBUGS-35369): OCPBUGS-35252: vendor: bump openshift/api [#4197](https://github.com/openshift/hypershift/pull/4197)
* NO-JIRA: hack: make the e2e script generic [#4198](https://github.com/openshift/hypershift/pull/4198)
* [OCPBUGS-35308](https://issues.redhat.com/browse/OCPBUGS-35308): fix router on 4.14 y-stream upgrade [#4194](https://github.com/openshift/hypershift/pull/4194)
* [HOSTEDCP-1715](https://issues.redhat.com/browse/HOSTEDCP-1715): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 [#4177](https://github.com/openshift/hypershift/pull/4177)
* [HOSTEDCP-1570](https://issues.redhat.com/browse/HOSTEDCP-1570): remove liveness and readiness probes using metrics endpoint [#4116](https://github.com/openshift/hypershift/pull/4116)
* [OCPBUGS-35052](https://issues.redhat.com/browse/OCPBUGS-35052): Add missing Tag permissions to cli role [#4173](https://github.com/openshift/hypershift/pull/4173)
* [OCPBUGS-34903](https://issues.redhat.com/browse/OCPBUGS-34903): Allow access to root-ca configmap in cluster-network-operator role [#4155](https://github.com/openshift/hypershift/pull/4155)
* [OCPBUGS-34575](https://issues.redhat.com/browse/OCPBUGS-34575): Rename machine-config operator CRD references [#4105](https://github.com/openshift/hypershift/pull/4105)
* [OCPBUGS-34759](https://issues.redhat.com/browse/OCPBUGS-34759): add AWS STS URL to OIDC provider audiences [#4134](https://github.com/openshift/hypershift/pull/4134)
* [HOSTEDCP-1688](https://issues.redhat.com/browse/HOSTEDCP-1688): Use operator namespace for openshift-config-managed-trusted-ca-bundle [#4117](https://github.com/openshift/hypershift/pull/4117)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak cipher [#4139](https://github.com/openshift/hypershift/pull/4139)
* [OCPBUGS-34773](https://issues.redhat.com/browse/OCPBUGS-34773): Fix disconnected metadata inspection for nodepool [#4137](https://github.com/openshift/hypershift/pull/4137)
* [OCPBUGS-34569](https://issues.redhat.com/browse/OCPBUGS-34569), [OCPBUGS-34602](https://issues.redhat.com/browse/OCPBUGS-34602): Backports that should go in together [#4114](https://github.com/openshift/hypershift/pull/4114)
* [OCPBUGS-34542](https://issues.redhat.com/browse/OCPBUGS-34542): Reconcile KAS endpoints and endpoint slice [#4096](https://github.com/openshift/hypershift/pull/4096)
* [OCPBUGS-34554](https://issues.redhat.com/browse/OCPBUGS-34554): Fixed audit-logs sigterm failing to terminate gracefully [#4090](https://github.com/openshift/hypershift/pull/4090)
* [OCPBUGS-34390](https://issues.redhat.com/browse/OCPBUGS-34390): Add TrustedBundles to OAS container [#4087](https://github.com/openshift/hypershift/pull/4087)
* [HOSTEDCP-1561](https://issues.redhat.com/browse/HOSTEDCP-1561): Move HCP Product CLI to STS [#4092](https://github.com/openshift/hypershift/pull/4092)
* [HOSTEDCP-1556](https://issues.redhat.com/browse/HOSTEDCP-1556): Support Priority based expander for cluster-autoscaler [#4068](https://github.com/openshift/hypershift/pull/4068)
* [OCPBUGS-34171](https://issues.redhat.com/browse/OCPBUGS-34171): Make active & backup Azure KMS containers use different --metrics-addr [#4079](https://github.com/openshift/hypershift/pull/4079)
* NO-JIRA: Bump library-go dependency [#4069](https://github.com/openshift/hypershift/pull/4069)
* [TRT-1672](https://issues.redhat.com/browse/TRT-1672): e2e: proceed with teardown even if dump fails [#4052](https://github.com/openshift/hypershift/pull/4052)
* NO-JIRA: Update RHTAP references [#4042](https://github.com/openshift/hypershift/pull/4042)
* [OCPBUGS-33729](https://issues.redhat.com/browse/OCPBUGS-33729): Do not ignore single placeholder pods for a specific hosted cluster [#4037](https://github.com/openshift/hypershift/pull/4037)
* [HOSTEDCP-1668](https://issues.redhat.com/browse/HOSTEDCP-1668): remove dns-operator leader-elect flags [#4038](https://github.com/openshift/hypershift/pull/4038)
* [OCPBUGS-33595](https://issues.redhat.com/browse/OCPBUGS-33595): Cluster sizing controller: do not error on not found HC [#4023](https://github.com/openshift/hypershift/pull/4023)
* [HOSTEDCP-1655](https://issues.redhat.com/browse/HOSTEDCP-1655): Don't Ignore SubnetID and Network Security Group ID flags when values are passed through [#4021](https://github.com/openshift/hypershift/pull/4021)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#3864](https://github.com/openshift/hypershift/pull/3864)
* [HOSTEDCP-1310](https://issues.redhat.com/browse/HOSTEDCP-1310): use kms images from payload [#3996](https://github.com/openshift/hypershift/pull/3996)
* [OCPBUGS-32257](https://issues.redhat.com/browse/OCPBUGS-32257): Restrict image registry overrides to control plane components [#3952](https://github.com/openshift/hypershift/pull/3952)
* [HOSTEDCP-1560](https://issues.redhat.com/browse/HOSTEDCP-1560): Create AWS STS Role for the hypershift/hcp cli [#4003](https://github.com/openshift/hypershift/pull/4003)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies [#4012](https://github.com/openshift/hypershift/pull/4012)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump CAPI dependencies [#4011](https://github.com/openshift/hypershift/pull/4011)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Fix nil dereference in clustersizingconfig validation [#4016](https://github.com/openshift/hypershift/pull/4016)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Fixed azure using incorrect kms socket [#3981](https://github.com/openshift/hypershift/pull/3981)
* [HOSTEDCP-1563](https://issues.redhat.com/browse/HOSTEDCP-1563): Refine the Azure API in the NodePool Spec [#4004](https://github.com/openshift/hypershift/pull/4004)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Autoscaler for non request serving nodes [#4007](https://github.com/openshift/hypershift/pull/4007)
* [HOSTEDCP-1557](https://issues.redhat.com/browse/HOSTEDCP-1557): Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config [#4006](https://github.com/openshift/hypershift/pull/4006)
* NO-JIRA: Remove CLI inspection of release image [#3548](https://github.com/openshift/hypershift/pull/3548)
* [OCPBUGS-33237](https://issues.redhat.com/browse/OCPBUGS-33237): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#3999](https://github.com/openshift/hypershift/pull/3999)
* [OCPBUGS-26762](https://issues.redhat.com/browse/OCPBUGS-26762): Disable DNS resolving for CNO [#3986](https://github.com/openshift/hypershift/pull/3986)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Set arch to ppc64le within PowerVS platform func [#4002](https://github.com/openshift/hypershift/pull/4002)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Support ppc64le arch for Agent and PowerVS platform [#3979](https://github.com/openshift/hypershift/pull/3979)
* [HOSTEDCP-1544](https://issues.redhat.com/browse/HOSTEDCP-1544): Allow user to specify subnet ID for Hosted Cluster & NodePool Creation [#3945](https://github.com/openshift/hypershift/pull/3945)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Set time out for external snapshotter on kubevirt csi driver [#3968](https://github.com/openshift/hypershift/pull/3968)
* [HOSTEDCP-1523](https://issues.redhat.com/browse/HOSTEDCP-1523): Bump k8s to v0.29.3 [#3878](https://github.com/openshift/hypershift/pull/3878)
* [OCPBUGS-25012](https://issues.redhat.com/browse/OCPBUGS-25012): Updating ose-hypershift-container image to be consistent with ART [#3303](https://github.com/openshift/hypershift/pull/3303)
* [OCPBUGS-33203](https://issues.redhat.com/browse/OCPBUGS-33203), [OCPBUGS-33274](https://issues.redhat.com/browse/OCPBUGS-33274): Autoscaler: scale down unused machinesets [#3988](https://github.com/openshift/hypershift/pull/3988)
* NO-JIRA: chore(deps): update rhtap references [#3973](https://github.com/openshift/hypershift/pull/3973)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Add operator scoping support to nodepool controller [#3928](https://github.com/openshift/hypershift/pull/3928)
* [OCPBUGS-33132](https://issues.redhat.com/browse/OCPBUGS-33132): Restore ingresscontroller rbac [#3965](https://github.com/openshift/hypershift/pull/3965)
* NO-JIRA: sizing: add logging for what we're doing [#3961](https://github.com/openshift/hypershift/pull/3961)
* chore(deps): update rhtap references [#3966](https://github.com/openshift/hypershift/pull/3966)
* NO-JIRA: Minor doc updates to creating Azure HC on AKS [#3964](https://github.com/openshift/hypershift/pull/3964)
* [OCPBUGS-29110](https://issues.redhat.com/browse/OCPBUGS-29110): Reconcile over ICSP/IDMS [#3933](https://github.com/openshift/hypershift/pull/3933)
* [OCPBUGS-33101](https://issues.redhat.com/browse/OCPBUGS-33101): Fix nil pointer deref when effects not specified in CSC [#3959](https://github.com/openshift/hypershift/pull/3959)
* [OCPBUGS-32110](https://issues.redhat.com/browse/OCPBUGS-32110): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3906](https://github.com/openshift/hypershift/pull/3906)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3956](https://github.com/openshift/hypershift/pull/3956)
* [OCPBUGS-31398](https://issues.redhat.com/browse/OCPBUGS-31398): Recycler-pod image now points to the OCP Payload reference [#3901](https://github.com/openshift/hypershift/pull/3901)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Support Azure KMS key rotation [#3940](https://github.com/openshift/hypershift/pull/3940)
* [CNV-40687](https://issues.redhat.com/browse/CNV-40687): Detect machine and cluster-network cidr collision [#3880](https://github.com/openshift/hypershift/pull/3880)
* [OCPBUGS-32930](https://issues.redhat.com/browse/OCPBUGS-32930): Allow specifying resource requests per cluster size [#3941](https://github.com/openshift/hypershift/pull/3941)
* [OCPBUGS-32760](https://issues.redhat.com/browse/OCPBUGS-32760): Request serving scheduler: omit deleting nodes [#3929](https://github.com/openshift/hypershift/pull/3929)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): fix setting replicas on autoscaler [#3947](https://github.com/openshift/hypershift/pull/3947)
* [OCPBUGS-32378](https://issues.redhat.com/browse/OCPBUGS-32378): Ensure placeholder deployments are deleted [#3931](https://github.com/openshift/hypershift/pull/3931)
* [OCPBUGS-32255](https://issues.redhat.com/browse/OCPBUGS-32255): Remove kube-scheduler readiness probe [#3889](https://github.com/openshift/hypershift/pull/3889)
* [HOSTEDCP-1484](https://issues.redhat.com/browse/HOSTEDCP-1484): Disaster recovery documentation with OADP [#3950](https://github.com/openshift/hypershift/pull/3950)
* [OCPBUGS-32492](https://issues.redhat.com/browse/OCPBUGS-32492): Set ImportMode for catalog [#3937](https://github.com/openshift/hypershift/pull/3937)
* [HOSTEDCP-1522](https://issues.redhat.com/browse/HOSTEDCP-1522): Add API definitions and CEL for AzurePlatformSpec vars [#3879](https://github.com/openshift/hypershift/pull/3879)
* NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 [#3821](https://github.com/openshift/hypershift/pull/3821)
* chore(deps): update rhtap references (main) [#3943](https://github.com/openshift/hypershift/pull/3943)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Ignore subnet annotations for control plane load balancers [#3944](https://github.com/openshift/hypershift/pull/3944)
* [OCPBUGS-32759](https://issues.redhat.com/browse/OCPBUGS-32759): Fix invalid node selector in autosizing placeholder [#3930](https://github.com/openshift/hypershift/pull/3930)
* [HOSTEDCP-1044](https://issues.redhat.com/browse/HOSTEDCP-1044): Add NodePool Size/Replicas to Telemetry [#3593](https://github.com/openshift/hypershift/pull/3593)
* NO-JIRA: remove obsolete konnectivity image code [#3932](https://github.com/openshift/hypershift/pull/3932)
* [HOSTEDCP-1219](https://issues.redhat.com/browse/HOSTEDCP-1219): Add arch & multi-arch flags to HCP CLI [#3926](https://github.com/openshift/hypershift/pull/3926)
* NO-JIRA: reduce autoscaling test memory requests [#3938](https://github.com/openshift/hypershift/pull/3938)
* NO-JIRA: chore(deps): update rhtap references [#3934](https://github.com/openshift/hypershift/pull/3934)
* [ACM-11259](https://issues.redhat.com/browse/ACM-11259): Add mapping documentation for KubeVirt CSI driver snaphotting [#3925](https://github.com/openshift/hypershift/pull/3925)
* [OCPBUGS-32496](https://issues.redhat.com/browse/OCPBUGS-32496): Controller to assist autoscaling for placeholder nodes [#3922](https://github.com/openshift/hypershift/pull/3922)
* Revert "Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters"" [#3895](https://github.com/openshift/hypershift/pull/3895)
* chore(deps): update rhtap references [#3919](https://github.com/openshift/hypershift/pull/3919)
* [OCPBUGS-32487](https://issues.redhat.com/browse/OCPBUGS-32487): Fix OLM intilization args [#3918](https://github.com/openshift/hypershift/pull/3918)
* [OCPNODE-2096](https://issues.redhat.com/browse/OCPNODE-2096): Add ClusterImagePolicy to the list of valid config manifests [#3894](https://github.com/openshift/hypershift/pull/3894)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): KubeVirt, Add snapshot side car and volumesnapshot class [#3640](https://github.com/openshift/hypershift/pull/3640)
* NO-ISSUE: placeholders: ignore auto-sizer placeholders [#3877](https://github.com/openshift/hypershift/pull/3877)
* [OCPBUGS-32228](https://issues.redhat.com/browse/OCPBUGS-32228): Fix failure to create a second hostedcluster in the same namespace [#3900](https://github.com/openshift/hypershift/pull/3900)
* [OCPBUGS-32248](https://issues.redhat.com/browse/OCPBUGS-32248): Replace periods with commas in subnet label value [#3885](https://github.com/openshift/hypershift/pull/3885)
* chore(deps): update rhtap references [#3886](https://github.com/openshift/hypershift/pull/3886)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): set HostPath.Type on volumesource in CloudNodeManagerD… [#3892](https://github.com/openshift/hypershift/pull/3892)
* NO-JIRA: fixed e2e teardown failing the outer test instead of subtest [#3891](https://github.com/openshift/hypershift/pull/3891)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): feat(api): Add ingress-controller-load-balancer-scope annotation [#3848](https://github.com/openshift/hypershift/pull/3848)
* NO-JIRA: remove ovnkube-control-plane from expected component token m… [#3850](https://github.com/openshift/hypershift/pull/3850)
* [CNV-40622](https://issues.redhat.com/browse/CNV-40622): Docs: Avoid cidr Collisions b/w Infra &Guest cluster [#3863](https://github.com/openshift/hypershift/pull/3863)
* NO-JIRA: Disable kubevirt-csi crash detection in e2e [#3896](https://github.com/openshift/hypershift/pull/3896)
* Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters" [#3890](https://github.com/openshift/hypershift/pull/3890)
* [HOSTEDCP-1465](https://issues.redhat.com/browse/HOSTEDCP-1465): Create HCPs with externalDNS on AKS Clusters [#3688](https://github.com/openshift/hypershift/pull/3688)
* chore(deps): update rhtap references [#3872](https://github.com/openshift/hypershift/pull/3872)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric [#3697](https://github.com/openshift/hypershift/pull/3697)
* NO-ISSUE: *: use the api package constant for the size label [#3876](https://github.com/openshift/hypershift/pull/3876)
* NO-JIRA: bump capk ci image [#3830](https://github.com/openshift/hypershift/pull/3830)
* NO-JIRA: chore(deps): update rhtap references (main) [#3867](https://github.com/openshift/hypershift/pull/3867)
* [OCPBUGS-29466](https://issues.redhat.com/browse/OCPBUGS-29466): Fix ICSP and IDMS inclusion as registriesOverrides [#3862](https://github.com/openshift/hypershift/pull/3862)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set RUN_AS_USER if mgmt cluster doesn't have SCC [#3819](https://github.com/openshift/hypershift/pull/3819)
* [OCPBUGS-29494](https://issues.redhat.com/browse/OCPBUGS-29494): Fix disconnected metadata inspection [#3860](https://github.com/openshift/hypershift/pull/3860)
* [OCPBUGS-31012](https://issues.redhat.com/browse/OCPBUGS-31012): Disable audit-log container in kas when profile is None [#3765](https://github.com/openshift/hypershift/pull/3765)
* NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster [#3854](https://github.com/openshift/hypershift/pull/3854)
* NO-JIRA: update private cluster IAM policy doc [#3851](https://github.com/openshift/hypershift/pull/3851)
* NO-JIRA: chore(deps): update rhtap references (main) [#3856](https://github.com/openshift/hypershift/pull/3856)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): disable autoscaler when no nodepool requires it [#3846](https://github.com/openshift/hypershift/pull/3846)
* NO-JIRA: Document additional known issues for the disconnected scenario [#3611](https://github.com/openshift/hypershift/pull/3611)
* NO-JIRA: Update RHTAP references (main) [#3834](https://github.com/openshift/hypershift/pull/3834)
* [OCPBUGS-29391](https://issues.redhat.com/browse/OCPBUGS-29391): Add new permission required in CAPA [#3779](https://github.com/openshift/hypershift/pull/3779)
* [CNF-11885](https://issues.redhat.com/browse/CNF-11885): nto: add events resources under operator `Role` [#3827](https://github.com/openshift/hypershift/pull/3827)
* [OCPBUGS-31444](https://issues.redhat.com/browse/OCPBUGS-31444): use dnsPolicy: Default for konnectivity-agent in data plane [#3810](https://github.com/openshift/hypershift/pull/3810)
* NO-JIRA: docs: fixing wrong key name [#3833](https://github.com/openshift/hypershift/pull/3833)
* NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… [#3837](https://github.com/openshift/hypershift/pull/3837)
* [OCPBUGS-31725](https://issues.redhat.com/browse/OCPBUGS-31725): include hostnetwork SCC CPO role for 4.13 and earlier [#3838](https://github.com/openshift/hypershift/pull/3838)
* [HOSTEDCP-1511](https://issues.redhat.com/browse/HOSTEDCP-1511): enable and document kubevirt custom default network [#3832](https://github.com/openshift/hypershift/pull/3832)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support annotation scoping for hostedcluster resources [#3702](https://github.com/openshift/hypershift/pull/3702)
* [OCPBUGS-31415](https://issues.redhat.com/browse/OCPBUGS-31415): update desired image even when HCP doesn't exist yet [#3829](https://github.com/openshift/hypershift/pull/3829)
* NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. [#2707](https://github.com/openshift/hypershift/pull/2707)
* [OCPBUGS-31585](https://issues.redhat.com/browse/OCPBUGS-31585): disable http2 for ignition server and proxy [#3817](https://github.com/openshift/hypershift/pull/3817)
* [OTA-1211](https://issues.redhat.com/browse/OTA-1211): api/v1beta1/hostedcluster_types: Add spec.updateService [#3576](https://github.com/openshift/hypershift/pull/3576)
* [HOSTEDCP-1365](https://issues.redhat.com/browse/HOSTEDCP-1365): kubevirt, Generate kccm lb endpointslices [#3528](https://github.com/openshift/hypershift/pull/3528)
* NO-JIRA: Add --auto-repair flag to `hcp create nodepool` [#3163](https://github.com/openshift/hypershift/pull/3163)
* NO-JIRA: Set control plane to HA by default [#3788](https://github.com/openshift/hypershift/pull/3788)
* NO-JIRA: Fix docs commands related to Azure ephemeral OS disks [#3809](https://github.com/openshift/hypershift/pull/3809)
* Update RHTAP references [#3814](https://github.com/openshift/hypershift/pull/3814)
* NO-JIRA: Documentation overview of HCP KubeVirt Storage [#3763](https://github.com/openshift/hypershift/pull/3763)
* [OCPBUGS-31465](https://issues.redhat.com/browse/OCPBUGS-31465): remove max function usage from deicated request serving nodes [#3815](https://github.com/openshift/hypershift/pull/3815)
* [OCPBUGS-31106](https://issues.redhat.com/browse/OCPBUGS-31106): Reduce log file size for hypershift apiservers [#3781](https://github.com/openshift/hypershift/pull/3781)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): Enable TestNodePool and CreateCluster tests on Azure [#3732](https://github.com/openshift/hypershift/pull/3732)
* [OCPBUGS-31319](https://issues.redhat.com/browse/OCPBUGS-31319): copy issuerCertificateAuthority configmap into HC openshift-config [#3799](https://github.com/openshift/hypershift/pull/3799)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Request serving node scheduler that uses HC size label [#3776](https://github.com/openshift/hypershift/pull/3776)
* [OCPBUGS-31076](https://issues.redhat.com/browse/OCPBUGS-31076): Support other azure clouds [#3804](https://github.com/openshift/hypershift/pull/3804)
* [OCPBUGS-31110](https://issues.redhat.com/browse/OCPBUGS-31110): Fix empty RHCOSImage error when creating Azure Infrastructure [#3782](https://github.com/openshift/hypershift/pull/3782)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104): Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server [#3797](https://github.com/openshift/hypershift/pull/3797)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): fix race between ignition payload generation and MCS configmap update [#3795](https://github.com/openshift/hypershift/pull/3795)
* NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools [#3752](https://github.com/openshift/hypershift/pull/3752)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 [#3710](https://github.com/openshift/hypershift/pull/3710)
* [OCPBUGS-31089](https://issues.redhat.com/browse/OCPBUGS-31089): Fix empty resourceGroupName error when deleting Azure infra [#3775](https://github.com/openshift/hypershift/pull/3775)
* [OCPBUGS-31090](https://issues.redhat.com/browse/OCPBUGS-31090): Fix empty subnet name error when creating Azure infrastructure [#3778](https://github.com/openshift/hypershift/pull/3778)
* [OCPBUGS-31263](https://issues.redhat.com/browse/OCPBUGS-31263): Add missing PodSecurityViolation alert [#3733](https://github.com/openshift/hypershift/pull/3733)
* [OCPBUGS-31118](https://issues.redhat.com/browse/OCPBUGS-31118): fix(ignition): Fix priority class override [#3784](https://github.com/openshift/hypershift/pull/3784)
* [OCPBUGS-31088](https://issues.redhat.com/browse/OCPBUGS-31088): Fix loopvar issue [#3770](https://github.com/openshift/hypershift/pull/3770)
* Update RHTAP references [#3790](https://github.com/openshift/hypershift/pull/3790)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104), [HOSTEDCP-1105](https://issues.redhat.com/browse/HOSTEDCP-1105): Validate multi-arch aspects in an AWS Hosted Cluster [#3769](https://github.com/openshift/hypershift/pull/3769)
* [HOSTEDCP-1501](https://issues.redhat.com/browse/HOSTEDCP-1501): Create default ClusterSizingConfig CR on start [#3787](https://github.com/openshift/hypershift/pull/3787)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3789](https://github.com/openshift/hypershift/pull/3789)
* [OCPBUGS-30930](https://issues.redhat.com/browse/OCPBUGS-30930): Add CEL validation for NodePool autoScaling / replicas [#3786](https://github.com/openshift/hypershift/pull/3786)
* [OCPBUGS-31102](https://issues.redhat.com/browse/OCPBUGS-31102): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3780](https://github.com/openshift/hypershift/pull/3780)
* NO-JIRA: Adding Disable PKI Reconciliation annotation as an option [#2989](https://github.com/openshift/hypershift/pull/2989)
* [OCPBUGS-30991](https://issues.redhat.com/browse/OCPBUGS-30991): external OIDC: fix certificateAuthority field in structured auth config [#3773](https://github.com/openshift/hypershift/pull/3773)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): Add install flag to enable/disable size tagging [#3766](https://github.com/openshift/hypershift/pull/3766)
* [OCPBUGS-30968](https://issues.redhat.com/browse/OCPBUGS-30968): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3760](https://github.com/openshift/hypershift/pull/3760)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add managed service constants to HyperShift API [#3762](https://github.com/openshift/hypershift/pull/3762)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support subnet labels separated by periods [#3767](https://github.com/openshift/hypershift/pull/3767)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: wire up placeholder pods for sizes [#3749](https://github.com/openshift/hypershift/pull/3749)
* NO-JIRA: Increase stability in autoscaled environments [#3757](https://github.com/openshift/hypershift/pull/3757)
* NO-JIRA: Bump HO read budget in e2e to 6000 [#3761](https://github.com/openshift/hypershift/pull/3761)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3743](https://github.com/openshift/hypershift/pull/3743)
* [HOSTEDCP-1467](https://issues.redhat.com/browse/HOSTEDCP-1467): ARO HCP - Add ability to specify subnet at nodepool level [#3748](https://github.com/openshift/hypershift/pull/3748)
* NO-JIRA: Update RHTAP references [#3753](https://github.com/openshift/hypershift/pull/3753)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support specifying AWS LB subnets [#3746](https://github.com/openshift/hypershift/pull/3746)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add ability to set managed service type in HO [#3736](https://github.com/openshift/hypershift/pull/3736)
* NO-ISSUE: hypershift-operator: react to hosted cluster changes [#3735](https://github.com/openshift/hypershift/pull/3735)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: add a controller for t-shirt sizing [#3686](https://github.com/openshift/hypershift/pull/3686)
* [HOSTEDCP-929](https://issues.redhat.com/browse/HOSTEDCP-929): Add nodepool annotation to allow requesting IMDSv2 [#3584](https://github.com/openshift/hypershift/pull/3584)
* NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget [#3745](https://github.com/openshift/hypershift/pull/3745)
* [OCPBUGS-30320](https://issues.redhat.com/browse/OCPBUGS-30320): speed up HCP rollout durations [#3734](https://github.com/openshift/hypershift/pull/3734)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set env var when the mgmt cluster supports SCC [#3701](https://github.com/openshift/hypershift/pull/3701)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3742](https://github.com/openshift/hypershift/pull/3742)
* NO-JIRA: Update RHTAP references [#3737](https://github.com/openshift/hypershift/pull/3737)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): consider nigthly images in payoad version check [#3727](https://github.com/openshift/hypershift/pull/3727)
* [OCPBUGS-28634](https://issues.redhat.com/browse/OCPBUGS-28634): Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES [#3687](https://github.com/openshift/hypershift/pull/3687)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Support additional node selectors for request serving nodes [#3729](https://github.com/openshift/hypershift/pull/3729)
* Revert "HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation" [#3731](https://github.com/openshift/hypershift/pull/3731)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): honor HC image configuration [#3714](https://github.com/openshift/hypershift/pull/3714)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3689](https://github.com/openshift/hypershift/pull/3689)
* [OCPBUGS-30769](https://issues.redhat.com/browse/OCPBUGS-30769): include node local client loadbalancer address in kube-apiserver signing ips [#3699](https://github.com/openshift/hypershift/pull/3699)
* NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline [#3728](https://github.com/openshift/hypershift/pull/3728)
* [HOSTEDCP-1460](https://issues.redhat.com/browse/HOSTEDCP-1460): Remove resource limits on azure-cloud-node-manager [#3725](https://github.com/openshift/hypershift/pull/3725)
* [HOSTEDCP-1479](https://issues.redhat.com/browse/HOSTEDCP-1479): Update IBM/networking-go-sdk package [#3722](https://github.com/openshift/hypershift/pull/3722)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#3718](https://github.com/openshift/hypershift/pull/3718)
* NO-JIRA: Fixes Dependabot PR #3712 [#3716](https://github.com/openshift/hypershift/pull/3716)
* [HOSTEDCP-1466](https://issues.redhat.com/browse/HOSTEDCP-1466): support/metrics: don't filter HCCO metrics [#3715](https://github.com/openshift/hypershift/pull/3715)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): ignition-server/controllers: drop `MCSIgnitionProvider` [#3709](https://github.com/openshift/hypershift/pull/3709)
* [HOSTEDCP-1469](https://issues.redhat.com/browse/HOSTEDCP-1469): Set GOMEMLIMIT annotation based on request serving node label [#3708](https://github.com/openshift/hypershift/pull/3708)
* [OCPBUGS-30574](https://issues.redhat.com/browse/OCPBUGS-30574): Update OLM Default Catalog Sources to 4.16 on main [#3707](https://github.com/openshift/hypershift/pull/3707)
* chore(deps): update rhtap references [#3704](https://github.com/openshift/hypershift/pull/3704)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): Use cluster-config-operator for 4.14 payload [#3685](https://github.com/openshift/hypershift/pull/3685)
* NO-JIRA: Dependabot#3659 [#3665](https://github.com/openshift/hypershift/pull/3665)
* Revert "NO-JIRA: test/e2e: temporarily skip NTO machineconfig test" [#3700](https://github.com/openshift/hypershift/pull/3700)
* NO-JIRA: cleanup: nilness check failures [#3698](https://github.com/openshift/hypershift/pull/3698)
* [HOSTEDCP-1464](https://issues.redhat.com/browse/HOSTEDCP-1464): Add pull secret to install CLI & create k8s secret [#3682](https://github.com/openshift/hypershift/pull/3682)
* [OCPBUGS-30060](https://issues.redhat.com/browse/OCPBUGS-30060): Set OPERATOR_IMAGE environment variable [#3667](https://github.com/openshift/hypershift/pull/3667)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Use correct return error when destroying AWS SG [#3661](https://github.com/openshift/hypershift/pull/3661)
* [OCPBUGS-30301](https://issues.redhat.com/browse/OCPBUGS-30301): [kubevirt] Fix virt-launcher netpol to allow missing access [#3680](https://github.com/openshift/hypershift/pull/3680)
* [OCPBUGS-30124](https://issues.redhat.com/browse/OCPBUGS-30124): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3678](https://github.com/openshift/hypershift/pull/3678)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3658](https://github.com/openshift/hypershift/pull/3658)
* NO-JIRA: Bump the golang-dependencies group with 1 update [#3657](https://github.com/openshift/hypershift/pull/3657)
* chore(deps): update rhtap references [#3674](https://github.com/openshift/hypershift/pull/3674)
* NO-JIRA: test/e2e: temporarily skip NTO machineconfig test [#3683](https://github.com/openshift/hypershift/pull/3683)
* NO-JIRA: chore(deps): update rhtap references [#3671](https://github.com/openshift/hypershift/pull/3671)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3605](https://github.com/openshift/hypershift/pull/3605)
* [OCPBUGS-30102](https://issues.redhat.com/browse/OCPBUGS-30102): Support to disable machine management components [#3570](https://github.com/openshift/hypershift/pull/3570)
* NO-JIRA: Minor cleanup of Azure create cluster document [#3663](https://github.com/openshift/hypershift/pull/3663)
* NO-JIRA: chore(deps): update rhtap references [#3650](https://github.com/openshift/hypershift/pull/3650)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): test: add a test for invalid CSRs [#3612](https://github.com/openshift/hypershift/pull/3612)
* NO-JIRA: test: skip CCO in pod crash check [#3652](https://github.com/openshift/hypershift/pull/3652)
* [OCPBUGS-29773](https://issues.redhat.com/browse/OCPBUGS-29773): set Konnectivity cipher suites [#3618](https://github.com/openshift/hypershift/pull/3618)
* [OCPBUGS-30030](https://issues.redhat.com/browse/OCPBUGS-30030): rollout kas on auth config change [#3647](https://github.com/openshift/hypershift/pull/3647)
* NO-JIRA: test: increase CPO mutate budget [#3649](https://github.com/openshift/hypershift/pull/3649)
* NO-JIRA: test: debug certificates on unauthz error [#3642](https://github.com/openshift/hypershift/pull/3642)
* NO-JIRA: Remove replace statements [#3631](https://github.com/openshift/hypershift/pull/3631)
* NO-JIRA: DEPENDABOT#3613 [#3617](https://github.com/openshift/hypershift/pull/3617)
* NO-JIRA: chore(deps): update rhtap references [#3638](https://github.com/openshift/hypershift/pull/3638)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates [#3636](https://github.com/openshift/hypershift/pull/3636)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3634](https://github.com/openshift/hypershift/pull/3634)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Skip SG deletion if it has dependancy violation [#3622](https://github.com/openshift/hypershift/pull/3622)
* NO-JIRA: Update RHTAP references [#3621](https://github.com/openshift/hypershift/pull/3621)
* NO-JIRA: Update RHTAP references (main) [#3623](https://github.com/openshift/hypershift/pull/3623)
* [OCPBUGS-23457](https://issues.redhat.com/browse/OCPBUGS-23457): Switch to use service endpoint for Konnectivity [#3627](https://github.com/openshift/hypershift/pull/3627)
* [OCPBUGS-27180](https://issues.redhat.com/browse/OCPBUGS-27180): Update the oauth API server's shutdown delay duration [#3608](https://github.com/openshift/hypershift/pull/3608)
* NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) [#3600](https://github.com/openshift/hypershift/pull/3600)
* [OCPBUGS-29855](https://issues.redhat.com/browse/OCPBUGS-29855): feat(ho): Add flag for dedicated request serving isolation [#3601](https://github.com/openshift/hypershift/pull/3601)
* [OCPBUGS-28607](https://issues.redhat.com/browse/OCPBUGS-28607): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3477](https://github.com/openshift/hypershift/pull/3477)
* NO-JIRA: adjust pdb for oauth-apiserver [#3619](https://github.com/openshift/hypershift/pull/3619)
* [OCPBUGS-29645](https://issues.redhat.com/browse/OCPBUGS-29645): control-plane-pki-operator: fix CA used for SRE client credentials [#3615](https://github.com/openshift/hypershift/pull/3615)
* [HOSTEDCP-1424](https://issues.redhat.com/browse/HOSTEDCP-1424): ARO HCP Support Disabling Outbound SNAT [#3583](https://github.com/openshift/hypershift/pull/3583)
* NO-JIRA: always set minAvailable on PDBs to 1 [#3616](https://github.com/openshift/hypershift/pull/3616)
* [OCPBUGS-29723](https://issues.redhat.com/browse/OCPBUGS-29723): CLI: create nodepool aws - remove sg requirement [#3614](https://github.com/openshift/hypershift/pull/3614)
* NO-JIRA: Bump the misc-dependencies group with 15 updates [#3609](https://github.com/openshift/hypershift/pull/3609)
* NO-JIRA: Ignore kubectl version mistmaches in Component Versions [#3575](https://github.com/openshift/hypershift/pull/3575)
* NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates [#3598](https://github.com/openshift/hypershift/pull/3598)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Add an SCC for validation pods with Cilium SDN [#3602](https://github.com/openshift/hypershift/pull/3602)
* NO-JIRA: chore(deps): update rhtap references [#3603](https://github.com/openshift/hypershift/pull/3603)
* [HOSTEDCP-1411](https://issues.redhat.com/browse/HOSTEDCP-1411): Add capability to specify additional tags to azure resource… [#3490](https://github.com/openshift/hypershift/pull/3490)
* NO-JIRA: chore(deps): update rhtap references [#3590](https://github.com/openshift/hypershift/pull/3590)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3574](https://github.com/openshift/hypershift/pull/3574)
* [HOSTEDCP-1428](https://issues.redhat.com/browse/HOSTEDCP-1428): hcco: report node count on HCPs [#3557](https://github.com/openshift/hypershift/pull/3557)
* [HOSTEDCP-1436](https://issues.redhat.com/browse/HOSTEDCP-1436): Make nodepool.spec.aws.subnet required [#3581](https://github.com/openshift/hypershift/pull/3581)
* [OCPBUGS-29586](https://issues.redhat.com/browse/OCPBUGS-29586): use 2040 for apiserver svc in IBM provider [#3569](https://github.com/openshift/hypershift/pull/3569)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): Preserve container resources for more hosted control plane components [#3120](https://github.com/openshift/hypershift/pull/3120)
* NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements [#3585](https://github.com/openshift/hypershift/pull/3585)
* NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector [#3464](https://github.com/openshift/hypershift/pull/3464)
* NO-JIRA: remove dead code from kas config [#3578](https://github.com/openshift/hypershift/pull/3578)
* [OCPBUGS-29115](https://issues.redhat.com/browse/OCPBUGS-29115): Default NodeUpgradeType on day2 nodepool creation [#3572](https://github.com/openshift/hypershift/pull/3572)
* Revert "CNV-36608: Enable InPlace NodePool upgrade test for kubevirt" [#3547](https://github.com/openshift/hypershift/pull/3547)
* NO-JIRA: Update RHTAP references [#3577](https://github.com/openshift/hypershift/pull/3577)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Added docs to get other sdn providers deployed with agent provider [#3405](https://github.com/openshift/hypershift/pull/3405)
* Update RHTAP references [#3568](https://github.com/openshift/hypershift/pull/3568)
* [CNF-6516](https://issues.redhat.com/browse/CNF-6516): NTO: Enable PerformanceProfile [#1782](https://github.com/openshift/hypershift/pull/1782)
* [OCPBUGS-29209](https://issues.redhat.com/browse/OCPBUGS-29209): hypershift-operator: don't create PKI rbac when disabled [#3544](https://github.com/openshift/hypershift/pull/3544)
* [OCPBUGS-29104](https://issues.redhat.com/browse/OCPBUGS-29104): control-plane-pki-operator: add a signer for SRE break-glass [#3542](https://github.com/openshift/hypershift/pull/3542)
* NO-ISSUE: test: wait longer for certificate signing, revocation [#3560](https://github.com/openshift/hypershift/pull/3560)
* NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues [#3562](https://github.com/openshift/hypershift/pull/3562)
* NO-JIRA: Developer namespace template for CI clusters [#3561](https://github.com/openshift/hypershift/pull/3561)
* [HOSTEDCP-1419](https://issues.redhat.com/browse/HOSTEDCP-1419): Always include AWS default security group in worker security groups [#3527](https://github.com/openshift/hypershift/pull/3527)
* [HOSTEDCP-1407](https://issues.redhat.com/browse/HOSTEDCP-1407): Add steps for seting up azure CI cluster [#3545](https://github.com/openshift/hypershift/pull/3545)
* Update RHTAP references (main) [#3546](https://github.com/openshift/hypershift/pull/3546)
* [HOSTEDCP-1420](https://issues.redhat.com/browse/HOSTEDCP-1420): Set a fixed minimum supported version [#3525](https://github.com/openshift/hypershift/pull/3525)
* NO-JIRA: Update RHTAP references [#3518](https://github.com/openshift/hypershift/pull/3518)
* [OCPBUGS-29103](https://issues.redhat.com/browse/OCPBUGS-29103): control-plane-pki-operator: validate CN for CSR [#3538](https://github.com/openshift/hypershift/pull/3538)
* NO-JIRA: stevekuznetsov approver on CPPO and integration tests [#3540](https://github.com/openshift/hypershift/pull/3540)
* NO-JIRA: Fix issue with release note tool [#3429](https://github.com/openshift/hypershift/pull/3429)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Hypershift API separation [#3390](https://github.com/openshift/hypershift/pull/3390)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): control-plane-pki-operator: add a revocation controller [#3339](https://github.com/openshift/hypershift/pull/3339)
* [CNV-36608](https://issues.redhat.com/browse/CNV-36608): Enable InPlace NodePool upgrade test for kubevirt [#3517](https://github.com/openshift/hypershift/pull/3517)
* [OCPBUGS-27282](https://issues.redhat.com/browse/OCPBUGS-27282): Make ControllerAvailabilityPolicy immutable [#3513](https://github.com/openshift/hypershift/pull/3513)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3512](https://github.com/openshift/hypershift/pull/3512)
* [OCPBUGS-28659](https://issues.redhat.com/browse/OCPBUGS-28659): Add ValidatingAdmissionPolicy to KAS config [#3488](https://github.com/openshift/hypershift/pull/3488)
* [OCPBUGS-28741](https://issues.redhat.com/browse/OCPBUGS-28741): Fix default release image lookup [#3450](https://github.com/openshift/hypershift/pull/3450)
* NO-JIRA: Add app labels to KubeVirt CCM component [#3510](https://github.com/openshift/hypershift/pull/3510)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3491](https://github.com/openshift/hypershift/pull/3491)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3503](https://github.com/openshift/hypershift/pull/3503)
* [OCPBUGS-28625](https://issues.redhat.com/browse/OCPBUGS-28625): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3511](https://github.com/openshift/hypershift/pull/3511)
* NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools [#3505](https://github.com/openshift/hypershift/pull/3505)
* Update RHTAP references (main) [#3508](https://github.com/openshift/hypershift/pull/3508)
* [OCPBUGS-28763](https://issues.redhat.com/browse/OCPBUGS-28763): Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used [#3494](https://github.com/openshift/hypershift/pull/3494)
* [OCPBUGS-28601](https://issues.redhat.com/browse/OCPBUGS-28601): Remove webhook validations that introduce resource ordering [#3484](https://github.com/openshift/hypershift/pull/3484)
* NO-JIRA: manifests: Skip pod anti affinity for nil labels [#3507](https://github.com/openshift/hypershift/pull/3507)
* [MULTIARCH-3882](https://issues.redhat.com/browse/MULTIARCH-3882): Support PER solution for powervs platform via transit gateway [#3277](https://github.com/openshift/hypershift/pull/3277)
* [HOSTEDCP-1408](https://issues.redhat.com/browse/HOSTEDCP-1408): Update CAPZ Identity Type to Service Principal [#3501](https://github.com/openshift/hypershift/pull/3501)
* [OCPBUGS-27161](https://issues.redhat.com/browse/OCPBUGS-27161): reflect NodePool replica count nil in status [#3472](https://github.com/openshift/hypershift/pull/3472)
* NO-JIRA: Fix dependabot pr 3414 [#3453](https://github.com/openshift/hypershift/pull/3453)
* NO-JIRA: kubevirt, e2e, Add additional network test [#3449](https://github.com/openshift/hypershift/pull/3449)
* NO-JIRA: remove PrivateIngressController cleanup [#3489](https://github.com/openshift/hypershift/pull/3489)
* [HOSTEDCP-1373](https://issues.redhat.com/browse/HOSTEDCP-1373): ARO HCP - Add capability for Azure VMs to be created with ephemeral disks [#3483](https://github.com/openshift/hypershift/pull/3483)
* NO-JIRA: contrib: add code for aws-tag-lb-service-webhook [#3493](https://github.com/openshift/hypershift/pull/3493)
* NO-JIRA: Bump the misc-dependencies group with 3 updates [#3486](https://github.com/openshift/hypershift/pull/3486)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3469](https://github.com/openshift/hypershift/pull/3469)
* [HOSTEDCP-1364](https://issues.redhat.com/browse/HOSTEDCP-1364): kubevirt, use selector less services for ingress [#3343](https://github.com/openshift/hypershift/pull/3343)
* [OCPBUGS-22899](https://issues.redhat.com/browse/OCPBUGS-22899): node spread anti-affinity for HA HCP [#3286](https://github.com/openshift/hypershift/pull/3286)
* NO-JIRA: Bump the misc-dependencies group with 17 updates [#3476](https://github.com/openshift/hypershift/pull/3476)
* [HOSTEDCP-1401](https://issues.redhat.com/browse/HOSTEDCP-1401): Enable BYO NSG [#3455](https://github.com/openshift/hypershift/pull/3455)
* NO-JIRA: Update go-jose to the latest version to fix CVE [#3475](https://github.com/openshift/hypershift/pull/3475)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): re-revert api stuff [#3463](https://github.com/openshift/hypershift/pull/3463)
* [OCPBUGS-26940](https://issues.redhat.com/browse/OCPBUGS-26940): Include OperatorHubSpec sync with HC when Config is empty [#3454](https://github.com/openshift/hypershift/pull/3454)
* NO-JIRA: Simplified kubectl component version check [#3458](https://github.com/openshift/hypershift/pull/3458)
* NO-JIRA: Remove '--attach-default-network' from productized cli [#3462](https://github.com/openshift/hypershift/pull/3462)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#3451](https://github.com/openshift/hypershift/pull/3451)
* NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 [#3466](https://github.com/openshift/hypershift/pull/3466)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): indicate cluster profile to render the correct manifests [#3443](https://github.com/openshift/hypershift/pull/3443)
* [OCPBUGS-26977](https://issues.redhat.com/browse/OCPBUGS-26977): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3403](https://github.com/openshift/hypershift/pull/3403)
* [TRT-1456](https://issues.redhat.com/browse/TRT-1456): Revert #3448 "api: move CSRA to a new group" [#3460](https://github.com/openshift/hypershift/pull/3460)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): api: move CSRA to a new group [#3448](https://github.com/openshift/hypershift/pull/3448)
* [HOSTEDCP-1397](https://issues.redhat.com/browse/HOSTEDCP-1397): Add documentation on how to debug Azure nodes [#3452](https://github.com/openshift/hypershift/pull/3452)
* NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images [#3426](https://github.com/openshift/hypershift/pull/3426)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Add e2e to ensure SA token not mounted on mgmt workloa… [#3301](https://github.com/openshift/hypershift/pull/3301)
* NO-JIRA: Fix promql testdata missing issue [#3438](https://github.com/openshift/hypershift/pull/3438)
* NO-JIRA: Update RHTAP references (main) [#3446](https://github.com/openshift/hypershift/pull/3446)
* [HOSTEDCP-1188](https://issues.redhat.com/browse/HOSTEDCP-1188): Add docs for control plane scheduling topologies [#3434](https://github.com/openshift/hypershift/pull/3434)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Set outbound LoadBalancer name on AzureCluster [#3445](https://github.com/openshift/hypershift/pull/3445)
* NO-JIRA: Bump misc dependencies 21f825371d [#3433](https://github.com/openshift/hypershift/pull/3433)
* [HOSTEDCP-1207](https://issues.redhat.com/browse/HOSTEDCP-1207): Automated etcd backup [#3034](https://github.com/openshift/hypershift/pull/3034)
* NO-JIRA: Document machine configuration in HyperShift [#3331](https://github.com/openshift/hypershift/pull/3331)
* [HOSTEDCP-1382](https://issues.redhat.com/browse/HOSTEDCP-1382): [Subtask] Restore Ability to Create HCPs on Azure [#3404](https://github.com/openshift/hypershift/pull/3404)
* [HOSTEDCP-1314](https://issues.redhat.com/browse/HOSTEDCP-1314): Ensure all e2e HCs use NLB for ingress controller [#3293](https://github.com/openshift/hypershift/pull/3293)
* [OCPBUGS-26757](https://issues.redhat.com/browse/OCPBUGS-26757): Change KAS bootstrap image to cluster-config-api [#3400](https://github.com/openshift/hypershift/pull/3400)
* NO-JIRA: Improve nodepool's machine condition message [#3354](https://github.com/openshift/hypershift/pull/3354)
* [OCPBUGS-23228](https://issues.redhat.com/browse/OCPBUGS-23228): Add storage, csisnapshotcontroller and clustercsidrive… [#3396](https://github.com/openshift/hypershift/pull/3396)
* [OCPBUGS-27027](https://issues.redhat.com/browse/OCPBUGS-27027): availability-prober: wait for infrastructure name to be set [#3409](https://github.com/openshift/hypershift/pull/3409)
* NO-JIRA: remove non-existent v1beta2 from webhook [#3407](https://github.com/openshift/hypershift/pull/3407)
* [HOSTEDCP-1376](https://issues.redhat.com/browse/HOSTEDCP-1376): Bump the sigs.k8s-dependencies group and update dependabot groupings [#3392](https://github.com/openshift/hypershift/pull/3392)
* [OCPBUGS-25696](https://issues.redhat.com/browse/OCPBUGS-25696): Apply Scheduling Configuration for kCCM [#3382](https://github.com/openshift/hypershift/pull/3382)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): remove LoadBalancer filter from external-dns [#3410](https://github.com/openshift/hypershift/pull/3410)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): fix up external-dns flags [#3408](https://github.com/openshift/hypershift/pull/3408)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): reduce external-dns route53 call volume [#3394](https://github.com/openshift/hypershift/pull/3394)
* Update RHTAP references (main) [#3401](https://github.com/openshift/hypershift/pull/3401)
* [OCPBUGS-25897](https://issues.redhat.com/browse/OCPBUGS-25897): hcco: use manual mode for CCO [#3375](https://github.com/openshift/hypershift/pull/3375)
* [HOSTEDCP-1309](https://issues.redhat.com/browse/HOSTEDCP-1309): Add GC knobs for KAS [#3384](https://github.com/openshift/hypershift/pull/3384)
* NO-JIRA: [KubeVirt] Fix external infra permissions documentation [#3391](https://github.com/openshift/hypershift/pull/3391)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3373](https://github.com/openshift/hypershift/pull/3373)
* [OCPBUGS-25974](https://issues.redhat.com/browse/OCPBUGS-25974): Do not use CPO image from status if it's not a valid image reference [#3361](https://github.com/openshift/hypershift/pull/3361)
* [OCPBUGS-23518](https://issues.redhat.com/browse/OCPBUGS-23518): consider HCP upgradeable if CVO has no upgradable condition [#3239](https://github.com/openshift/hypershift/pull/3239)
* [OCPBUGS-26232](https://issues.redhat.com/browse/OCPBUGS-26232): set KAS runtime-config in alignment with feature gates [#3377](https://github.com/openshift/hypershift/pull/3377)
* [HOSTEDCP-1372](https://issues.redhat.com/browse/HOSTEDCP-1372): Bumps k8s to v0.29 [#3360](https://github.com/openshift/hypershift/pull/3360)
* [OCPBUGS-25342](https://issues.redhat.com/browse/OCPBUGS-25342): Add extra resources to be encrypted. [#3341](https://github.com/openshift/hypershift/pull/3341)
* [OCPBUGS-26197](https://issues.redhat.com/browse/OCPBUGS-26197): hostedcontrolplane: don't start pki operator when disabled [#3368](https://github.com/openshift/hypershift/pull/3368)
* [CNV-36656](https://issues.redhat.com/browse/CNV-36656): Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider [#3364](https://github.com/openshift/hypershift/pull/3364)
* NO-JIRA: Update RHTAP references (main) [#3365](https://github.com/openshift/hypershift/pull/3365)
* [HOSTEDCP-1371](https://issues.redhat.com/browse/HOSTEDCP-1371): Bump Golang to v1.21 [#3359](https://github.com/openshift/hypershift/pull/3359)
* [HOSTEDCP-1328](https://issues.redhat.com/browse/HOSTEDCP-1328): Add Ability to Encrypt VM OS Disks [#3281](https://github.com/openshift/hypershift/pull/3281)
* [HOSTEDCP-1122](https://issues.redhat.com/browse/HOSTEDCP-1122): Etcd defrag controller [#2869](https://github.com/openshift/hypershift/pull/2869)
* NO-JIRA: Update RHTAP references (main) [#3275](https://github.com/openshift/hypershift/pull/3275)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move fixtures out of API [#3342](https://github.com/openshift/hypershift/pull/3342)
* [OCPBUGS-23362](https://issues.redhat.com/browse/OCPBUGS-23362): Set new condition on SG deletion. [#3307](https://github.com/openshift/hypershift/pull/3307)
* NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update [#3251](https://github.com/openshift/hypershift/pull/3251)
* NO-JIRA: Add rbac permission for kubevirt capi [#3344](https://github.com/openshift/hypershift/pull/3344)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry writer when telemeter-client cm not exists [#3348](https://github.com/openshift/hypershift/pull/3348)
* NO-JIRA: Approvers update [#3347](https://github.com/openshift/hypershift/pull/3347)
* [HOSTEDCP-1262](https://issues.redhat.com/browse/HOSTEDCP-1262): Add additional CEL to Arch in NodePoolSpec [#3333](https://github.com/openshift/hypershift/pull/3333)
* NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools [#3334](https://github.com/openshift/hypershift/pull/3334)
* NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 [#3335](https://github.com/openshift/hypershift/pull/3335)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3332](https://github.com/openshift/hypershift/pull/3332)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move CAPI imports from /api package into support/api [#3270](https://github.com/openshift/hypershift/pull/3270)
* [OCPBUGS-24308](https://issues.redhat.com/browse/OCPBUGS-24308): Add PodDisruptionBudget for router deployment [#3337](https://github.com/openshift/hypershift/pull/3337)
* [HOSTEDCP-1355](https://issues.redhat.com/browse/HOSTEDCP-1355): Remove unused functions from repo [#3325](https://github.com/openshift/hypershift/pull/3325)
* NO-JIRA: RHTAP Multi-Arch PipelineSpec [#3340](https://github.com/openshift/hypershift/pull/3340)
* [HOSTEDCP-1329](https://issues.redhat.com/browse/HOSTEDCP-1329): Allow user to specify resource group for NodePool resources [#3279](https://github.com/openshift/hypershift/pull/3279)
* [HOSTEDCP-1353](https://issues.redhat.com/browse/HOSTEDCP-1353): Improve description for agent APIServerAddress CLI flag [#3314](https://github.com/openshift/hypershift/pull/3314)
* [ACM-8917](https://issues.redhat.com/browse/ACM-8917): Add agentLabelSelector to nodepool agent create to CLI [#3285](https://github.com/openshift/hypershift/pull/3285)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): control-plane-operator: reconcile the CCO [#2794](https://github.com/openshift/hypershift/pull/2794)
* NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools [#3045](https://github.com/openshift/hypershift/pull/3045)
* NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools [#3145](https://github.com/openshift/hypershift/pull/3145)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): use library-go crypto where we can [#3326](https://github.com/openshift/hypershift/pull/3326)
* [OCPBUGS-25332](https://issues.redhat.com/browse/OCPBUGS-25332): Force KMSv1 on [#3318](https://github.com/openshift/hypershift/pull/3318)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3320](https://github.com/openshift/hypershift/pull/3320)
* [HOSTEDCP-1327](https://issues.redhat.com/browse/HOSTEDCP-1327): Remove Old Azure SDKs from Azure Infra [#3274](https://github.com/openshift/hypershift/pull/3274)
* [OCPBUGS-25306](https://issues.redhat.com/browse/OCPBUGS-25306): Use k8s.io/kube-scheduler/config/v1 [#3313](https://github.com/openshift/hypershift/pull/3313)
* [TRT-1406](https://issues.redhat.com/browse/TRT-1406): Revert #3283 "HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation" [#3306](https://github.com/openshift/hypershift/pull/3306)
* [OCPBUGS-25103](https://issues.redhat.com/browse/OCPBUGS-25103): Remove reference to v1alpha1 flowcontrol [#3304](https://github.com/openshift/hypershift/pull/3304)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3267](https://github.com/openshift/hypershift/pull/3267)
* NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) [#3305](https://github.com/openshift/hypershift/pull/3305)
* [OCPBUGS-24261](https://issues.redhat.com/browse/OCPBUGS-24261): Konnectivity agent update strategy [#3294](https://github.com/openshift/hypershift/pull/3294)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3280](https://github.com/openshift/hypershift/pull/3280)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3284](https://github.com/openshift/hypershift/pull/3284)
* [OCPBUGS-23511](https://issues.redhat.com/browse/OCPBUGS-23511): Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals [#3215](https://github.com/openshift/hypershift/pull/3215)
* NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out [#3302](https://github.com/openshift/hypershift/pull/3302)
* [HOSTEDCP-1343](https://issues.redhat.com/browse/HOSTEDCP-1343): docs(ibmcloud): Add HC/HCP yamls for IBM Cloud [#3287](https://github.com/openshift/hypershift/pull/3287)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3283](https://github.com/openshift/hypershift/pull/3283)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3276](https://github.com/openshift/hypershift/pull/3276)
* [OCPBUGS-20035](https://issues.redhat.com/browse/OCPBUGS-20035): Add HostedCluster false conditions sumamry when cluste… [#3190](https://github.com/openshift/hypershift/pull/3190)
* [Full changelog](https://github.com/openshift/hypershift/compare/ff2600ab1d4ff8f5b6a860b5e9f9e9b38724e667...6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)
* [OCPBUGS-22602](https://issues.redhat.com/browse/OCPBUGS-22602), [OCPCLOUD-2419](https://issues.redhat.com/browse/OCPCLOUD-2419): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (d1ca4a9) into master [#59](https://github.com/openshift/cloud-provider-ibm/pull/59)
* [OCPBUGS-25562](https://issues.redhat.com/browse/OCPBUGS-25562): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-ibm/pull/62)
* [OCPBUGS-25638](https://issues.redhat.com/browse/OCPBUGS-25638): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/cloud-provider-ibm/pull/63)
* [OCPBUGS-24921](https://issues.redhat.com/browse/OCPBUGS-24921): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-ibm/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/cc0d54159c5d626aaa91eef94a92a80b3d1a3870...f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/957197389ec49234c3883bbb730bb630b459e24f)
* [OCPBUGS-36067](https://issues.redhat.com/browse/OCPBUGS-36067): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#71](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/71)
* [OCPBUGS-30514](https://issues.redhat.com/browse/OCPBUGS-30514): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#65](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/65)
* [STOR-1571](https://issues.redhat.com/browse/STOR-1571): Chore: Update ibm-vpc-block-csi-driver to the latest release [#64](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/64)
* [OCPBUGS-25566](https://issues.redhat.com/browse/OCPBUGS-25566): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#63](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/63)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#62](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/62)
* [OCPBUGS-25049](https://issues.redhat.com/browse/OCPBUGS-25049): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#61](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/61)
* [OCPBUGS-24930](https://issues.redhat.com/browse/OCPBUGS-24930): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#60](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/60)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d...957197389ec49234c3883bbb730bb630b459e24f)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/5d5d8010a59916cc264d0ab14962be85a35b7228)
* [OCPBUGS-42286](https://issues.redhat.com/browse/OCPBUGS-42286): Reorder static resources to create RBAC first [#129](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/129)
* [OCPBUGS-36073](https://issues.redhat.com/browse/OCPBUGS-36073): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#120](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/120)
* [OCPBUGS-33329](https://issues.redhat.com/browse/OCPBUGS-33329): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#115](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/115)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#114](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/114)
* [OCPBUGS-29247](https://issues.redhat.com/browse/OCPBUGS-29247): ibm-vpc-block-csi-driver is missing sidecar metrics [#112](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/112)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node registrar [#110](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/110)
* [OCPBUGS-29578](https://issues.redhat.com/browse/OCPBUGS-29578): Apply hypershift cluster-profile for ibm-cloud-managed [#111](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/111)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#108](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/108)
* [OCPBUGS-28938](https://issues.redhat.com/browse/OCPBUGS-28938): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/109)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#107](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/107)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#105](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/105)
* [OCPBUGS-25539](https://issues.redhat.com/browse/OCPBUGS-25539): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#102](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/102)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#101](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/101)
* [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#100](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/100)
* [OCPBUGS-25105](https://issues.redhat.com/browse/OCPBUGS-25105): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#98](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#97](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/97)
* [OCPBUGS-24845](https://issues.redhat.com/browse/OCPBUGS-24845): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#96](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/96)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/1c5b0f9fd714a3df22f6f0273aa8479bd37bbe18...5d5d8010a59916cc264d0ab14962be85a35b7228)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7d4f93efe65a7c070ded6b889b61ae3d51e259fb)
* [OCPBUGS-43686](https://issues.redhat.com/browse/OCPBUGS-43686): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 [#89](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/89)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#80](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/80)
* [OCPBUGS-29590](https://issues.redhat.com/browse/OCPBUGS-29590): Update golang.org/x/crypto module [#77](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/77)
* [OCPBUGS-24924](https://issues.redhat.com/browse/OCPBUGS-24924): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#70](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/70)
* [OCPBUGS-22604](https://issues.redhat.com/browse/OCPBUGS-22604), [OCPCLOUD-2454](https://issues.redhat.com/browse/OCPCLOUD-2454): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.7.0 (e51c61e) into main [#74](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/74)
* [OCPBUGS-26135](https://issues.redhat.com/browse/OCPBUGS-26135): Fix formatting in snyk vendor exclusions [#75](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/75)
* [OCPBUGS-25631](https://issues.redhat.com/browse/OCPBUGS-25631): Add Snyk file to exclude vendor directory on scan [#71](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/71)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/b934c68cd083ea3abb65faf463cb6ab5383e5d7d...7d4f93efe65a7c070ded6b889b61ae3d51e259fb)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/46c3c741fd44c1160a1f17d360723dc734d64648)
* [OCPBUGS-36698](https://issues.redhat.com/browse/OCPBUGS-36698): IBMCloud: Handle pagination for subnets [#42](https://github.com/openshift/machine-api-provider-ibmcloud/pull/42)
* [OCPBUGS-27872](https://issues.redhat.com/browse/OCPBUGS-27872): add an extra vendor exclude to snyk config [#36](https://github.com/openshift/machine-api-provider-ibmcloud/pull/36)
* [OCPBUGS-28965](https://issues.redhat.com/browse/OCPBUGS-28965): update textlogger usage [#35](https://github.com/openshift/machine-api-provider-ibmcloud/pull/35)
* [OCPCLOUD-2426](https://issues.redhat.com/browse/OCPCLOUD-2426): Update to k8s 1.29 [#34](https://github.com/openshift/machine-api-provider-ibmcloud/pull/34)
* [OCPBUGS-26134](https://issues.redhat.com/browse/OCPBUGS-26134): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/machine-api-provider-ibmcloud/pull/33)
* [OCPBUGS-25574](https://issues.redhat.com/browse/OCPBUGS-25574): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#32](https://github.com/openshift/machine-api-provider-ibmcloud/pull/32)
* [OCPBUGS-24962](https://issues.redhat.com/browse/OCPBUGS-24962): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#31](https://github.com/openshift/machine-api-provider-ibmcloud/pull/31)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1...46c3c741fd44c1160a1f17d360723dc734d64648)
### [insights-operator](https://github.com/openshift/insights-operator/tree/faf70d79e50b62a3e5014c2081ee5203957c0d20)
* gather selected clusterroles (#1023) [#1023](https://github.com/openshift/insights-operator/pull/1023)
* [OCPBUGS-39564](https://issues.redhat.com/browse/OCPBUGS-39564): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) [#1013](https://github.com/openshift/insights-operator/pull/1013)
* [OCPBUGS-39394](https://issues.redhat.com/browse/OCPBUGS-39394): collect some nmstate customresources (#986) (#989) (#995) [#986](https://github.com/openshift/insights-operator/pull/986)
* [OCPBUGS-38021](https://issues.redhat.com/browse/OCPBUGS-38021): Integration of the OpenStack CRs into the insights-operator (#974) [#974](https://github.com/openshift/insights-operator/pull/974)
* Add haproxy metric (#977) [#977](https://github.com/openshift/insights-operator/pull/977)
* [OCPBUGS-37671](https://issues.redhat.com/browse/OCPBUGS-37671): Ingress controller related certificates' validate dates gathering (#970) [#970](https://github.com/openshift/insights-operator/pull/970)
* fix the configmapobserver notifications (#969) [#969](https://github.com/openshift/insights-operator/pull/969)
* [OCPBUGS-35882](https://issues.redhat.com/browse/OCPBUGS-35882): properly encode the URL for the advisor links (#957) [#957](https://github.com/openshift/insights-operator/pull/957)
* [OCPBUGS-35086](https://issues.redhat.com/browse/OCPBUGS-35086): Collect aggregated Prometheus Alertmanager instances (#948) [#948](https://github.com/openshift/insights-operator/pull/948)
* gather aggregated numbers of Pods and Netnamespaces with SDN annotations (#946) [#946](https://github.com/openshift/insights-operator/pull/946)
* [OCPBUGS-32702](https://issues.redhat.com/browse/OCPBUGS-32702): anonymization - externalIP can be nil (#929) [#929](https://github.com/openshift/insights-operator/pull/929)
* [OCPBUGS-31959](https://issues.redhat.com/browse/OCPBUGS-31959): bump golang.org/x/net version (#924) [#924](https://github.com/openshift/insights-operator/pull/924)
* feat: increase archive size (#923) [#923](https://github.com/openshift/insights-operator/pull/923)
* DVO metrics gatherer minor changes (#922) [#922](https://github.com/openshift/insights-operator/pull/922)
* NO-JIRA: (refactor) reduce cognitive and adding unit tests (#889) [#889](https://github.com/openshift/insights-operator/pull/889)
* update & refactor "checkSummaryAndSend" function in the insightsuploader (#919) [#919](https://github.com/openshift/insights-operator/pull/919)
* delete all active jobs during restart (#920) [#920](https://github.com/openshift/insights-operator/pull/920)
* [OCPBUGS-31031](https://issues.redhat.com/browse/OCPBUGS-31031): use retrywatcher when watching job (#921) [#921](https://github.com/openshift/insights-operator/pull/921)
* [OCPBUGS-30515](https://issues.redhat.com/browse/OCPBUGS-30515): update protobuf version (#918) [#918](https://github.com/openshift/insights-operator/pull/918)
* NO-JIRA: (refactor) job completion uses event instead polling (#888) [#888](https://github.com/openshift/insights-operator/pull/888)
* apply hypershift cluster-profile (#914) [#914](https://github.com/openshift/insights-operator/pull/914)
* manifests: set required-scc for openshift workloads (#915) [#915](https://github.com/openshift/insights-operator/pull/915)
* extend clusteroperators gatherer to collect status of insightsoperator resource (#912) [#912](https://github.com/openshift/insights-operator/pull/912)
* update dependencies (#916) [#916](https://github.com/openshift/insights-operator/pull/916)
* NO-JIRA: update the gathered CPU usage metric (#913) [#913](https://github.com/openshift/insights-operator/pull/913)
* NO-JIRA: adjust loglevel for some further messages (#911) [#911](https://github.com/openshift/insights-operator/pull/911)
* apply hypershift cluster-profile (#908) [#908](https://github.com/openshift/insights-operator/pull/908)
* bump loglevel of operator to normal (#895) [#895](https://github.com/openshift/insights-operator/pull/895)
* adjust log level of some rather important messages (#898) [#898](https://github.com/openshift/insights-operator/pull/898)
* NO-JIRA: add permission for prometheus to be able to read metrics (#907) [#907](https://github.com/openshift/insights-operator/pull/907)
* [OCPBUGS-26937](https://issues.redhat.com/browse/OCPBUGS-26937): Add extra check in ids to bypass validations (#899) [#899](https://github.com/openshift/insights-operator/pull/899)
* gather etcd_server_slow metrics (#897) [#897](https://github.com/openshift/insights-operator/pull/897)
* NO-JIRA: fix helmchart gather unit test (#880) [#880](https://github.com/openshift/insights-operator/pull/880)
* feature: support loglevel controller (#894) [#894](https://github.com/openshift/insights-operator/pull/894)
* NO-JIRA: Adding insights-config configuration description to arch.md (#892) [#892](https://github.com/openshift/insights-operator/pull/892)
* another attempt to fix security warning for changelog script (#893) [#893](https://github.com/openshift/insights-operator/pull/893)
* OpenShift & K8s versions bump up (#881) [#881](https://github.com/openshift/insights-operator/pull/881)
* NO-JIRA: fix errors handling + docs + lint (#866) [#866](https://github.com/openshift/insights-operator/pull/866)
* changelog script - parse arguments as time (#882) [#882](https://github.com/openshift/insights-operator/pull/882)
* Updating ose-insights-operator-container image to be consistent with ART (#885) [#885](https://github.com/openshift/insights-operator/pull/885)
* Updating ose-insights-operator-container image to be consistent with ART (#871) [#871](https://github.com/openshift/insights-operator/pull/871)
* [Full changelog](https://github.com/openshift/insights-operator/compare/692e90c04ac4546949eb4a537d88bb1b4801f6cb...faf70d79e50b62a3e5014c2081ee5203957c0d20)
### [ironic](https://github.com/openshift/ironic-image/tree/d56a7dc8465a36357ba4ede63eabc9897a06a657)
* [OCPBUGS-43950](https://issues.redhat.com/browse/OCPBUGS-43950), [OCPBUGS-43958](https://issues.redhat.com/browse/OCPBUGS-43958): Bump python-waitress [4.16] [#604](https://github.com/openshift/ironic-image/pull/604)
* [OCPBUGS-43438](https://issues.redhat.com/browse/OCPBUGS-43438): Include fixes for CVE-2024-5569 [#599](https://github.com/openshift/ironic-image/pull/599)
* [OCPBUGS-42511](https://issues.redhat.com/browse/OCPBUGS-42511): Include fix for CVE-2024-47211 [#594](https://github.com/openshift/ironic-image/pull/594)
* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#569](https://github.com/openshift/ironic-image/pull/569)
* [OCPBUGS-38797](https://issues.redhat.com/browse/OCPBUGS-38797): redfish-virtualmedia fails on XFusion nodes [#564](https://github.com/openshift/ironic-image/pull/564)
* [OCPBUGS-42113](https://issues.redhat.com/browse/OCPBUGS-42113): Update ironic-inspector to fix the memory leak [#587](https://github.com/openshift/ironic-image/pull/587)
* [OCPBUGS-37758](https://issues.redhat.com/browse/OCPBUGS-37758), [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#579](https://github.com/openshift/ironic-image/pull/579)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set min version for python3-webob [#553](https://github.com/openshift/ironic-image/pull/553)
* [OCPBUGS-33376](https://issues.redhat.com/browse/OCPBUGS-33376): bump werkzeug [#534](https://github.com/openshift/ironic-image/pull/534)
* [OCPBUGS-36838](https://issues.redhat.com/browse/OCPBUGS-36838): Update Jinja2 [#521](https://github.com/openshift/ironic-image/pull/521)
* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Read ironic and inspector htpasswds from files [#517](https://github.com/openshift/ironic-image/pull/517)
* Bug OCPBUGS-34985: Disable installation of .pyc files through pip [#509](https://github.com/openshift/ironic-image/pull/509)
* [OCPBUGS-32304](https://issues.redhat.com/browse/OCPBUGS-32304): Fix ironic-inspector permissions for creating /certs/ca directory [#500](https://github.com/openshift/ironic-image/pull/500)
* [METAL-1005](https://issues.redhat.com/browse/METAL-1005): [4.16] Update ironic projects and remove cinder and glance clients [#493](https://github.com/openshift/ironic-image/pull/493)
* NO-ISSUE: Merge from metal3-io/ironic-image [#473](https://github.com/openshift/ironic-image/pull/473)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] remove unused prometheus-exporter from OKD too [#486](https://github.com/openshift/ironic-image/pull/486)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Remove unused prometheus exporter [#484](https://github.com/openshift/ironic-image/pull/484)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Bump gunicorn version [#480](https://github.com/openshift/ironic-image/pull/480)
* NO-ISSUE: Use microversion-parse package [#481](https://github.com/openshift/ironic-image/pull/481)
* [OCPBUGS-32350](https://issues.redhat.com/browse/OCPBUGS-32350): Update to include fixes for ironic servicing feature [#478](https://github.com/openshift/ironic-image/pull/478)
* [OCPBUGS-32390](https://issues.redhat.com/browse/OCPBUGS-32390): Use unix sockets by default for reverse proxy communication [#472](https://github.com/openshift/ironic-image/pull/472)
* [OCPBUGS-32162](https://issues.redhat.com/browse/OCPBUGS-32162): Bump eventlet version [#471](https://github.com/openshift/ironic-image/pull/471)
* [METAL-949](https://issues.redhat.com/browse/METAL-949): Force pysnmp-lextudio and pyasn1 min version [#464](https://github.com/openshift/ironic-image/pull/464)
* [METAL-952](https://issues.redhat.com/browse/METAL-952): Install sushy from source [#466](https://github.com/openshift/ironic-image/pull/466)
* [METAL-804](https://issues.redhat.com/browse/METAL-804): Bump ironic hash to include recent fixes and features [#465](https://github.com/openshift/ironic-image/pull/465)
* [METAL-944](https://issues.redhat.com/browse/METAL-944): Install ironic-lib from source [#463](https://github.com/openshift/ironic-image/pull/463)
* [METAL-923](https://issues.redhat.com/browse/METAL-923): pick-up non-bootable ISO fix [#462](https://github.com/openshift/ironic-image/pull/462)
* [METAL-922](https://issues.redhat.com/browse/METAL-922): Add check requirements script [#461](https://github.com/openshift/ironic-image/pull/461)
* [METAL-901](https://issues.redhat.com/browse/METAL-901): Update ironic dependencies for OCP 4.16 [#457](https://github.com/openshift/ironic-image/pull/457)
* NO-ISSUE: Merge from upstream metal3-io/ironic-image [#459](https://github.com/openshift/ironic-image/pull/459)
* [METAL-909](https://issues.redhat.com/browse/METAL-909): Avoid context copy in CI or local builds [#458](https://github.com/openshift/ironic-image/pull/458)
* [METAL-849](https://issues.redhat.com/browse/METAL-849): Install ironic and ironic-inspector from source [#444](https://github.com/openshift/ironic-image/pull/444)
* [METAL-902](https://issues.redhat.com/browse/METAL-902): Split OKD and OCP packages list [#456](https://github.com/openshift/ironic-image/pull/456)
* NO-ISSUE: Updating openstack-ironic version [#455](https://github.com/openshift/ironic-image/pull/455)
* [OCPBUGS-27967](https://issues.redhat.com/browse/OCPBUGS-27967): Update packages for OCP 4.16 [#451](https://github.com/openshift/ironic-image/pull/451)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#449](https://github.com/openshift/ironic-image/pull/449)
* [OCPBUGS-22699](https://issues.redhat.com/browse/OCPBUGS-22699): Fix Inspector iPXE config for IPv6 addresses [#446](https://github.com/openshift/ironic-image/pull/446)
* [OCPBUGS-25605](https://issues.redhat.com/browse/OCPBUGS-25605): Relax packages requirements [#441](https://github.com/openshift/ironic-image/pull/441)
* NO-ISSUE: Merge from metal3-io/ironic-image (33275f5) [#443](https://github.com/openshift/ironic-image/pull/443)
* NO-ISSUE: Add requirements placeholders for cachito [#437](https://github.com/openshift/ironic-image/pull/437)
* [OCPBUGS-25392](https://issues.redhat.com/browse/OCPBUGS-25392): Stuck deployment [#440](https://github.com/openshift/ironic-image/pull/440)
* [OCPBUGS-24747](https://issues.redhat.com/browse/OCPBUGS-24747): Updating ironic-container image to be consistent with ART [#438](https://github.com/openshift/ironic-image/pull/438)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6603bcfdfbb9b0a8a35cf4d14ec45480fce9efde...d56a7dc8465a36357ba4ede63eabc9897a06a657)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3c5298e05497b59a876c73c51359f49f3cc2cb99)
* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#156](https://github.com/openshift/ironic-agent-image/pull/156)
* [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#161](https://github.com/openshift/ironic-agent-image/pull/161)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set webob and bump werkzeug [#149](https://github.com/openshift/ironic-agent-image/pull/149)
* [OCPBUGS-31549](https://issues.redhat.com/browse/OCPBUGS-31549): update ironic-python-agent with latest fixes [#128](https://github.com/openshift/ironic-agent-image/pull/128)
* [OCPBUGS-32172](https://issues.redhat.com/browse/OCPBUGS-32172): Fix name in setup.cfg [#122](https://github.com/openshift/ironic-agent-image/pull/122)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Fix permission of check reqs script [#120](https://github.com/openshift/ironic-agent-image/pull/120)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add makefile with build and check reqs [#119](https://github.com/openshift/ironic-agent-image/pull/119)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Install ironic-python-agent from source [#118](https://github.com/openshift/ironic-agent-image/pull/118)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add requirements placeholders for cachito [#117](https://github.com/openshift/ironic-agent-image/pull/117)
* NO-ISSUE: Update openstack-ironic-python-agent version [#110](https://github.com/openshift/ironic-agent-image/pull/110)
* [METAL-913](https://issues.redhat.com/browse/METAL-913): drop dependency on python-hardware [#113](https://github.com/openshift/ironic-agent-image/pull/113)
* [OCPBUGS-30075](https://issues.redhat.com/browse/OCPBUGS-30075): Fix tripleo url with commit hash for openstack repos config [#114](https://github.com/openshift/ironic-agent-image/pull/114)
* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Always add ignition to set hostname on /etc/hostname [#106](https://github.com/openshift/ironic-agent-image/pull/106)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#104](https://github.com/openshift/ironic-agent-image/pull/104)
* [OCPBUGS-19950](https://issues.redhat.com/browse/OCPBUGS-19950): pick up the heartbeat retry fix [#101](https://github.com/openshift/ironic-agent-image/pull/101)
* [OCPBUGS-16607](https://issues.redhat.com/browse/OCPBUGS-16607): 502 Proxy Error [#100](https://github.com/openshift/ironic-agent-image/pull/100)
* [OCPBUGS-24781](https://issues.redhat.com/browse/OCPBUGS-24781): Updating ironic-agent-container image to be consistent with ART [#97](https://github.com/openshift/ironic-agent-image/pull/97)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/d339f3ffb3bbf9879037c1f3d88303880dcb3068...3c5298e05497b59a876c73c51359f49f3cc2cb99)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/93b8b5fa33950cadd2310278b7c762ebe0057418)
* [OCPBUGS-25775](https://issues.redhat.com/browse/OCPBUGS-25775): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.16 [#96](https://github.com/openshift/ironic-rhcos-downloader/pull/96)
* [OCPBUGS-25526](https://issues.redhat.com/browse/OCPBUGS-25526): Updating ironic-rhcos-downloader-container image to be consistent with ART [#95](https://github.com/openshift/ironic-rhcos-downloader/pull/95)
* [OCPBUGS-24788](https://issues.redhat.com/browse/OCPBUGS-24788): Updating ironic-rhcos-downloader-container image to be consistent with ART [#94](https://github.com/openshift/ironic-rhcos-downloader/pull/94)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/bcbcd95b6209afc8248b34c55294686dbd3831a3...93b8b5fa33950cadd2310278b7c762ebe0057418)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/e78e4c3e6db1805816308197eb9002dfbca27560)
* [OCPBUGS-24790](https://issues.redhat.com/browse/OCPBUGS-24790): Updating ironic-static-ip-manager-container image to be consistent with ART [#41](https://github.com/openshift/ironic-static-ip-manager/pull/41)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/472000211344be4a5e9581820e94895144cf2bfc...e78e4c3e6db1805816308197eb9002dfbca27560)
### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/e4f859be4f56d1fc65138f99f5331baf17c15885)
* [OCPBUGS-30532](https://issues.redhat.com/browse/OCPBUGS-30532): upgrade github.com/golang/protobuf to v1.5.4 for bette… [#101](https://github.com/openshift/k8s-prometheus-adapter/pull/101)
* [OCPBUGS-25583](https://issues.redhat.com/browse/OCPBUGS-25583): Updating ose-prometheus-adapter-container image to be consistent with ART [#100](https://github.com/openshift/k8s-prometheus-adapter/pull/100)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#99](https://github.com/openshift/k8s-prometheus-adapter/pull/99)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#98](https://github.com/openshift/k8s-prometheus-adapter/pull/98)
* [MON-3584](https://issues.redhat.com/browse/MON-3584): Remove trailing spaces from Dockerfile.ocp [#97](https://github.com/openshift/k8s-prometheus-adapter/pull/97)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/34e201936898455995cd60c6699c6329a696f288...e4f859be4f56d1fc65138f99f5331baf17c15885)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/b58673a314f0e8253fabadada2ee1a9e5b11c5cf)
* [OKD-219](https://issues.redhat.com/browse/OKD-219): add util-linux to base image [#188](https://github.com/openshift/images/pull/188)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Revert #179 [#180](https://github.com/openshift/images/pull/180)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency [#179](https://github.com/openshift/images/pull/179)
* Add dnf-plugins-core in scos to help with OCP image compat [#178](https://github.com/openshift/images/pull/178)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add sig-cloud repository and enable rt repository [#177](https://github.com/openshift/images/pull/177)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add the sig-nfv repo in the CS9 base [#176](https://github.com/openshift/images/pull/176)
* [OCPBUGS-24850](https://issues.redhat.com/browse/OCPBUGS-24850): Bump OpenShift 4.16, RHEL9, and iptables package [#175](https://github.com/openshift/images/pull/175)
* [OCPBUGS-24990](https://issues.redhat.com/browse/OCPBUGS-24990): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART [#159](https://github.com/openshift/images/pull/159)
* [OCPBUGS-24800](https://issues.redhat.com/browse/OCPBUGS-24800): Updating ose-egress-http-proxy-container image to be consistent with ART [#156](https://github.com/openshift/images/pull/156)
* NO-ISSUE: Add Scott and Mrunal as image approvers [#170](https://github.com/openshift/images/pull/170)
* NO-ISSUE: remove bparees from owners [#169](https://github.com/openshift/images/pull/169)
* [OCPBUGS-29484](https://issues.redhat.com/browse/OCPBUGS-29484): update unit tests in egress/dns-proxy [#165](https://github.com/openshift/images/pull/165)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): egress/dns-proxy: switch to haproxy28 RPM package [#160](https://github.com/openshift/images/pull/160)
* [OCPBUGS-24861](https://issues.redhat.com/browse/OCPBUGS-24861): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART [#158](https://github.com/openshift/images/pull/158)
* [OCPBUGS-24751](https://issues.redhat.com/browse/OCPBUGS-24751): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART [#155](https://github.com/openshift/images/pull/155)
* [OCPBUGS-24723](https://issues.redhat.com/browse/OCPBUGS-24723): Updating openshift-enterprise-base-container image to be consistent with ART [#154](https://github.com/openshift/images/pull/154)
* [Full changelog](https://github.com/openshift/images/compare/87c23b5aa611556ff5013822c7779e6c7551a0f0...b58673a314f0e8253fabadada2ee1a9e5b11c5cf)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/8c2920c24c3705e43cefd6c6e65409b7da341ddc)
* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Wire server run options to flags. ([release-4.16] backport) [#37](https://github.com/openshift/kubernetes-metrics-server/pull/37)
* [OCPBUGS-25164](https://issues.redhat.com/browse/OCPBUGS-25164): Bump to 0.7.1 [#25](https://github.com/openshift/kubernetes-metrics-server/pull/25)
* [OCPBUGS-31288](https://issues.redhat.com/browse/OCPBUGS-31288): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.16 [#24](https://github.com/openshift/kubernetes-metrics-server/pull/24)
* [MON-3465](https://issues.redhat.com/browse/MON-3465): Sync metrics-server with upstream v0.7.0 [#22](https://github.com/openshift/kubernetes-metrics-server/pull/22)
* [OCPBUGS-24858](https://issues.redhat.com/browse/OCPBUGS-24858): Updating ose-kube-metrics-server-container image to be consistent with ART [#21](https://github.com/openshift/kubernetes-metrics-server/pull/21)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/bcbf241cece8ef455be32a910f1570bae827b4a1...8c2920c24c3705e43cefd6c6e65409b7da341ddc)
### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/c4dd04f7cece66d0a237f06cac9253d4e70103a7)
* [OCPBUGS-44301](https://issues.redhat.com/browse/OCPBUGS-44301): Use copy() to duplicate a net.IP [#641](https://github.com/openshift/sdn/pull/641)
* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs [#635](https://github.com/openshift/sdn/pull/635)
* [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636)
* [OCPBUGS-42159](https://issues.redhat.com/browse/OCPBUGS-42159): fix redundant router-default iptables rule [#633](https://github.com/openshift/sdn/pull/633)
* [OCPBUGS-30431](https://issues.redhat.com/browse/OCPBUGS-30431): CVE-2024-24786: bump pkg golang protobuf [#620](https://github.com/openshift/sdn/pull/620)
* [SDN-4404](https://issues.redhat.com/browse/SDN-4404): Kube 1.29 bump [#618](https://github.com/openshift/sdn/pull/618)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Do per-pod MCS/metadata blocking with nftables rather than iptables [#581](https://github.com/openshift/sdn/pull/581)
* NO-JIRA: Update README to note that openshift-sdn is deprecated [#611](https://github.com/openshift/sdn/pull/611)
* NO-JIRA: Move sdn to RHEL9 base image [#598](https://github.com/openshift/sdn/pull/598)
* [OCPBUGS-25740](https://issues.redhat.com/browse/OCPBUGS-25740): Updating ose-node-container image to be consistent with ART for 4.16 [#599](https://github.com/openshift/sdn/pull/599)
* [OCPBUGS-23666](https://issues.redhat.com/browse/OCPBUGS-23666): Add Snyk file to exclude directories on scan [#604](https://github.com/openshift/sdn/pull/604)
* [OCPBUGS-25779](https://issues.redhat.com/browse/OCPBUGS-25779): Updating kube-proxy-container image to be consistent with ART for 4.16 [#600](https://github.com/openshift/sdn/pull/600)
* [SDN-4179](https://issues.redhat.com/browse/SDN-4179): Metrics: Add metric for multicast enabled netnamespaces [#603](https://github.com/openshift/sdn/pull/603)
* [OCPBUGS-25015](https://issues.redhat.com/browse/OCPBUGS-25015): Updating kube-proxy-container image to be consistent with ART [#596](https://github.com/openshift/sdn/pull/596)
* [OCPBUGS-25036](https://issues.redhat.com/browse/OCPBUGS-25036): Use openshift-clients rpm rather than cli image [#593](https://github.com/openshift/sdn/pull/593)
* [Full changelog](https://github.com/openshift/sdn/compare/f371b5be76a71a7f55f2e0b674f09a7f2ec5f5bf...c4dd04f7cece66d0a237f06cac9253d4e70103a7)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/c38f4734c6b6931c75d46674122fb4b838b6e64b)
* [OCPBUGS-30447](https://issues.redhat.com/browse/OCPBUGS-30447): protobuf bump [4.16] [#111](https://github.com/openshift/kube-rbac-proxy/pull/111)
* [OCPBUGS-31955](https://issues.redhat.com/browse/OCPBUGS-31955): Merge upstream v0.17.1 release [#98](https://github.com/openshift/kube-rbac-proxy/pull/98)
* [AUTH-486](https://issues.redhat.com/browse/AUTH-486): Add tests for the hardcoded-authorizer feature [#90](https://github.com/openshift/kube-rbac-proxy/pull/90)
* [OCPBUGS-29974](https://issues.redhat.com/browse/OCPBUGS-29974): Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/kube-rbac-proxy/pull/91)
* [OCPBUGS-24818](https://issues.redhat.com/browse/OCPBUGS-24818): Updating kube-rbac-proxy-container image to be consistent with ART [#88](https://github.com/openshift/kube-rbac-proxy/pull/88)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce...c38f4734c6b6931c75d46674122fb4b838b6e64b)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/9b67b8d1adbd63e27b622b3d050e0673766a6f2d)
* NO-JIRA: Merge `v2.11.0` and `v2.12.0` tags [#110](https://github.com/openshift/kube-state-metrics/pull/110)
* [OCPBUGS-25585](https://issues.redhat.com/browse/OCPBUGS-25585): Updating kube-state-metrics-container image to be consistent with ART [#109](https://github.com/openshift/kube-state-metrics/pull/109)
* [OCPBUGS-24993](https://issues.redhat.com/browse/OCPBUGS-24993): Updating kube-state-metrics-container image to be consistent with ART [#108](https://github.com/openshift/kube-state-metrics/pull/108)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/037b59c265454c599dfb0829a856e14b1ab07896...9b67b8d1adbd63e27b622b3d050e0673766a6f2d)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)
* [OCPBUGS-27929](https://issues.redhat.com/browse/OCPBUGS-27929): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 [#203](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/203)
* [OCPBUGS-24969](https://issues.redhat.com/browse/OCPBUGS-24969): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#202](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/202)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/e8749689edb8e7fea42eca5f2b67c3187192cdeb...969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/3db76104a38bd9160ca24e2ed4a33649843f210a)
* [OCPBUGS-30518](https://issues.redhat.com/browse/OCPBUGS-30518): Upstream rebase 18 04 2024 [#41](https://github.com/openshift/cloud-provider-kubevirt/pull/41)
* [OCPBUGS-24936](https://issues.redhat.com/browse/OCPBUGS-24936): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#30](https://github.com/openshift/cloud-provider-kubevirt/pull/30)
* [OCPBUGS-26182](https://issues.redhat.com/browse/OCPBUGS-26182): Upstream rebease 4 5 2024 [#40](https://github.com/openshift/cloud-provider-kubevirt/pull/40)
* [OCPBUGS-30303](https://issues.redhat.com/browse/OCPBUGS-30303): Merge github.com/kubevirt 03 06 2024 [#35](https://github.com/openshift/cloud-provider-kubevirt/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/dbaf9ea1edd5a953606a80cb45f723c934a73ded...3db76104a38bd9160ca24e2ed4a33649843f210a)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/0693093f773c5046e231f174e7930315feabd996)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Enable snapshot tests [#40](https://github.com/openshift/kubevirt-csi-driver/pull/40)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Sync upstream kubevirt-csi 2024-04-19 [#39](https://github.com/openshift/kubevirt-csi-driver/pull/39)
* "NO-JIRA: Sync upstream kubevirt-csi 2024-04-08" [#38](https://github.com/openshift/kubevirt-csi-driver/pull/38)
* [OCPBUGS-31276](https://issues.redhat.com/browse/OCPBUGS-31276): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/kubevirt-csi-driver/pull/37)
* [CNV-32073](https://issues.redhat.com/browse/CNV-32073): Sync upstream 2024-03-15 [#36](https://github.com/openshift/kubevirt-csi-driver/pull/36)
* NO-JIRA: Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#32](https://github.com/openshift/kubevirt-csi-driver/pull/32)
* NO-JIRA: Snapshot backport [#31](https://github.com/openshift/kubevirt-csi-driver/pull/31)
* NO-JIRA: Auto sync upstream 2024 01 05 18 36 [#27](https://github.com/openshift/kubevirt-csi-driver/pull/27)
* [OCPBUGS-24805](https://issues.redhat.com/browse/OCPBUGS-24805): Updating ose-kubevirt-csi-driver-container image to be consistent with ART [#26](https://github.com/openshift/kubevirt-csi-driver/pull/26)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3...0693093f773c5046e231f174e7930315feabd996)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/a336f0b5f7ee99c418aaab3d511707bd0064bd56)
* [OCPBUGS-26046](https://issues.redhat.com/browse/OCPBUGS-26046): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#281](https://github.com/openshift/cluster-api-provider-libvirt/pull/281)
* [OCPBUGS-25630](https://issues.redhat.com/browse/OCPBUGS-25630): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/cluster-api-provider-libvirt/pull/276)
* [OCPBUGS-25173](https://issues.redhat.com/browse/OCPBUGS-25173): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#275](https://github.com/openshift/cluster-api-provider-libvirt/pull/275)
* [OCPBUGS-25101](https://issues.redhat.com/browse/OCPBUGS-25101): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#274](https://github.com/openshift/cluster-api-provider-libvirt/pull/274)
* [OCPBUGS-24833](https://issues.redhat.com/browse/OCPBUGS-24833): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#273](https://github.com/openshift/cluster-api-provider-libvirt/pull/273)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a...a336f0b5f7ee99c418aaab3d511707bd0064bd56)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0967219612b43f35342c162f5b92733f946bd9be)
* [OCPBUGS-39028](https://issues.redhat.com/browse/OCPBUGS-39028): Updates message verbs to use %q where appropriate [#1282](https://github.com/openshift/machine-api-operator/pull/1282)
* [OCPBUGS-43433](https://issues.redhat.com/browse/OCPBUGS-43433): Vsphere: Handle cloned instance with lost taskID [#1298](https://github.com/openshift/machine-api-operator/pull/1298)
* [CORS-3648](https://issues.redhat.com/browse/CORS-3648): Add the hyperdisk-balanced disk type [#1279](https://github.com/openshift/machine-api-operator/pull/1279)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1263](https://github.com/openshift/machine-api-operator/pull/1263)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1220](https://github.com/openshift/machine-api-operator/pull/1220)
* [OCPCLOUD-2501](https://issues.redhat.com/browse/OCPCLOUD-2501): Update to set GpuType annotation to remove hardcoded value [#1226](https://github.com/openshift/machine-api-operator/pull/1226)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Bug fix in unit test [#1232](https://github.com/openshift/machine-api-operator/pull/1232)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add unit tests for the functions handling ScaleFromZero annotations [#1227](https://github.com/openshift/machine-api-operator/pull/1227)
* [OCPBUGS-31962](https://issues.redhat.com/browse/OCPBUGS-31962): Bump x/net to v.0.24.0 [#1228](https://github.com/openshift/machine-api-operator/pull/1228)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1219](https://github.com/openshift/machine-api-operator/pull/1219)
* [OCPBUGS-29874](https://issues.redhat.com/browse/OCPBUGS-29874): Apply hypershift cluster-profile for ibm-cloud-managed [#1218](https://github.com/openshift/machine-api-operator/pull/1218)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump IPAM types to v1beta1. [#1205](https://github.com/openshift/machine-api-operator/pull/1205)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Add build tags to tools.go file to solve linting issues when running Snyk scans [#1215](https://github.com/openshift/machine-api-operator/pull/1215)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add additional vnet join permission for Azure [#1212](https://github.com/openshift/machine-api-operator/pull/1212)
* [SPLAT-1386](https://issues.redhat.com/browse/SPLAT-1386): reconcile additional tags assigned to machine [#1204](https://github.com/openshift/machine-api-operator/pull/1204)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Fix formatting in snyk vendor exclusions [#1201](https://github.com/openshift/machine-api-operator/pull/1201)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1211](https://github.com/openshift/machine-api-operator/pull/1211)
* [CFE-684](https://issues.redhat.com/browse/CFE-684), [OCPCLOUD-2430](https://issues.redhat.com/browse/OCPCLOUD-2430): Rebase k8s 1.29 and update dependencies [#1208](https://github.com/openshift/machine-api-operator/pull/1208)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Update GCPCloudCredentials with TagUser role [#1158](https://github.com/openshift/machine-api-operator/pull/1158)
* [OCPBUGS-27385](https://issues.redhat.com/browse/OCPBUGS-27385): Add useExternalIp gcp permission [#1206](https://github.com/openshift/machine-api-operator/pull/1206)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Set --max-concurrent-reconciles=10 for Azure machine controller [#1203](https://github.com/openshift/machine-api-operator/pull/1203)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Add AddWithActuatorOpts to allow overriding Machine controller options [#1202](https://github.com/openshift/machine-api-operator/pull/1202)
* [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1178](https://github.com/openshift/machine-api-operator/pull/1178)
* [OCPBUGS-25580](https://issues.redhat.com/browse/OCPBUGS-25580): Updating ose-machine-api-operator-container image to be consistent with ART [#1190](https://github.com/openshift/machine-api-operator/pull/1190)
* [OCPBUGS-25735](https://issues.redhat.com/browse/OCPBUGS-25735): Add Snyk file to exclude vendor directory on scan [#1192](https://github.com/openshift/machine-api-operator/pull/1192)
* [OCPBUGS-24980](https://issues.redhat.com/browse/OCPBUGS-24980): Updating ose-machine-api-operator-container image to be consistent with ART [#1187](https://github.com/openshift/machine-api-operator/pull/1187)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/3ab953de1bdc5c1977222011ebc31254d06c98d2...0967219612b43f35342c162f5b92733f946bd9be)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4bb3364914c4dbcdfcc08b0914f402cdd38f014f)
* [OCPBUGS-44337](https://issues.redhat.com/browse/OCPBUGS-44337): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4688](https://github.com/openshift/machine-config-operator/pull/4688)
* [MCO-1342](https://issues.redhat.com/browse/MCO-1342): Backport Telemetry to 4.16 [#4649](https://github.com/openshift/machine-config-operator/pull/4649)
* [OCPBUGS-44043](https://issues.redhat.com/browse/OCPBUGS-44043): Disable ESP offload for OVS attached interfaces [#4676](https://github.com/openshift/machine-config-operator/pull/4676)
* [OCPBUGS-42109](https://issues.redhat.com/browse/OCPBUGS-42109): Do not use 'restart' for 'oneshot' service [#4616](https://github.com/openshift/machine-config-operator/pull/4616)
* [OCPBUGS-42744](https://issues.redhat.com/browse/OCPBUGS-42744): Check for kernel arg diff in updateOnClusterBuild [#4628](https://github.com/openshift/machine-config-operator/pull/4628)
* [OCPBUGS-42722](https://issues.redhat.com/browse/OCPBUGS-42722): Panic seen in CI job for MCC pod [#4626](https://github.com/openshift/machine-config-operator/pull/4626)
* [OCPBUGS-42719](https://issues.redhat.com/browse/OCPBUGS-42719): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4625](https://github.com/openshift/machine-config-operator/pull/4625)
* [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563)
* [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627)
* [OCPBUGS-41806](https://issues.redhat.com/browse/OCPBUGS-41806): When newly built images rolled out, the update progress is not displaying correctly (went 0 --> 3) [#4584](https://github.com/openshift/machine-config-operator/pull/4584)
* [OCPBUGS-41518](https://issues.redhat.com/browse/OCPBUGS-41518): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4569](https://github.com/openshift/machine-config-operator/pull/4569)
* [OCPBUGS-38997](https://issues.redhat.com/browse/OCPBUGS-38997): Machine-config daemon ListPools panic during tech-preview CI runs [#4550](https://github.com/openshift/machine-config-operator/pull/4550)
* [OCPBUGS-38711](https://issues.redhat.com/browse/OCPBUGS-38711): SCC-pinning for openshift workloads [#4539](https://github.com/openshift/machine-config-operator/pull/4539)
* [OCPBUGS-36850](https://issues.redhat.com/browse/OCPBUGS-36850): Port number 22623 exposing weak ciphers to external client from master node IP [#4556](https://github.com/openshift/machine-config-operator/pull/4556)
* [OCPBUGS-38373](https://issues.redhat.com/browse/OCPBUGS-38373): Revert "MCD-pull: run after network-online.target in Azure" [#4528](https://github.com/openshift/machine-config-operator/pull/4528)
* [OCPBUGS-36171](https://issues.redhat.com/browse/OCPBUGS-36171), [OCPBUGS-36172](https://issues.redhat.com/browse/OCPBUGS-36172): fix secret canonicalization [#4432](https://github.com/openshift/machine-config-operator/pull/4432)
* [OCPBUGS-37759](https://issues.redhat.com/browse/OCPBUGS-37759): Guard MachineOSBuild & MachineOSConfig informers with feature gates [#4505](https://github.com/openshift/machine-config-operator/pull/4505)
* [OCPBUGS-37550](https://issues.redhat.com/browse/OCPBUGS-37550): On-Prem resolv prepender to watch for NM changes [#4498](https://github.com/openshift/machine-config-operator/pull/4498)
* [OCPBUGS-37485](https://issues.redhat.com/browse/OCPBUGS-37485): kubelet: boot without PSI for performance concerns [#4486](https://github.com/openshift/machine-config-operator/pull/4486)
* [OCPBUGS-37840](https://issues.redhat.com/browse/OCPBUGS-37840): [release-4.16] Introduce versioning for Auto Node Sizing feature [#4382](https://github.com/openshift/machine-config-operator/pull/4382)
* [OCPBUGS-35891](https://issues.redhat.com/browse/OCPBUGS-35891): Make logging configurable for on-prem components [#4418](https://github.com/openshift/machine-config-operator/pull/4418)
* [OCPBUGS-37470](https://issues.redhat.com/browse/OCPBUGS-37470): Nodes are drained twice when an OCB image is applied [#4484](https://github.com/openshift/machine-config-operator/pull/4484)
* [OCPBUGS-37460](https://issues.redhat.com/browse/OCPBUGS-37460): Openshift uncordoned compute-node that was intentionally cordoned [#4483](https://github.com/openshift/machine-config-operator/pull/4483)
* [OCPBUGS-37428](https://issues.redhat.com/browse/OCPBUGS-37428): Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events [#4482](https://github.com/openshift/machine-config-operator/pull/4482)
* [OCPBUGS-36775](https://issues.redhat.com/browse/OCPBUGS-36775): templates: run disable-mglru conditionally [#4462](https://github.com/openshift/machine-config-operator/pull/4462)
* [OCPBUGS-36330](https://issues.redhat.com/browse/OCPBUGS-36330): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4445](https://github.com/openshift/machine-config-operator/pull/4445)
* [OCPBUGS-36536](https://issues.redhat.com/browse/OCPBUGS-36536): MCD-pull: run after network-online.target in Azure [#4453](https://github.com/openshift/machine-config-operator/pull/4453)
* [OCPBUGS-35929](https://issues.redhat.com/browse/OCPBUGS-35929): The MCD can override a restart crio action with a reload crio action [#4420](https://github.com/openshift/machine-config-operator/pull/4420)
* [OCPBUGS-36165](https://issues.redhat.com/browse/OCPBUGS-36165), [OCPBUGS-36166](https://issues.redhat.com/browse/OCPBUGS-36166): CurrentImagePullSecret should be consumed by the MCD [#4430](https://github.com/openshift/machine-config-operator/pull/4430)
* [OCPBUGS-35753](https://issues.redhat.com/browse/OCPBUGS-35753): Fix reference to $host_file [#4413](https://github.com/openshift/machine-config-operator/pull/4413)
* [OCPBUGS-36198](https://issues.redhat.com/browse/OCPBUGS-36198): daemon/update: disable systemd unit before overwriting [#4436](https://github.com/openshift/machine-config-operator/pull/4436)
* [OCPBUGS-35806](https://issues.redhat.com/browse/OCPBUGS-35806): Revert "Azure: add Azure specific dnsmasq ordering" [#4414](https://github.com/openshift/machine-config-operator/pull/4414)
* [OCPBUGS-35992](https://issues.redhat.com/browse/OCPBUGS-35992): disable mglru service [#4427](https://github.com/openshift/machine-config-operator/pull/4427)
* [OCPBUGS-35291](https://issues.redhat.com/browse/OCPBUGS-35291): Default ipv4 NODE_IP to 0.0.0.0 [#4409](https://github.com/openshift/machine-config-operator/pull/4409)
* [OCPBUGS-35364](https://issues.redhat.com/browse/OCPBUGS-35364): Azure: add Azure specific dnsmasq ordering [#4406](https://github.com/openshift/machine-config-operator/pull/4406)
* [OCPBUGS-35299](https://issues.redhat.com/browse/OCPBUGS-35299): Panic when we remove an OCB infra MCP and we try to create new ones with different names [#4403](https://github.com/openshift/machine-config-operator/pull/4403)
* [OCPBUGS-35042](https://issues.redhat.com/browse/OCPBUGS-35042): ensure event handlers are registered after queue is configured [#4394](https://github.com/openshift/machine-config-operator/pull/4394)
* [OCPBUGS-34799](https://issues.redhat.com/browse/OCPBUGS-34799): set required-scc for openshift workloads [#4384](https://github.com/openshift/machine-config-operator/pull/4384)
* [OCPBUGS-33901](https://issues.redhat.com/browse/OCPBUGS-33901): machine-os-puller SA refreshes every hour, causing machine config regeneration [#4374](https://github.com/openshift/machine-config-operator/pull/4374)
* [OCPBUGS-10498](https://issues.redhat.com/browse/OCPBUGS-10498): If multiple hostnames are returned, use the first one for the Node name [#4368](https://github.com/openshift/machine-config-operator/pull/4368)
* [OKD-212](https://issues.redhat.com/browse/OKD-212): Reference `stream-coreos` instead of `centos-stream-coreos-9` [#4349](https://github.com/openshift/machine-config-operator/pull/4349)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821), [OCPBUGS-31381](https://issues.redhat.com/browse/OCPBUGS-31381): certificate_writer: clean up disk-write logic [#4343](https://github.com/openshift/machine-config-operator/pull/4343)
* [MCO-1131](https://issues.redhat.com/browse/MCO-1131): Merge implementation machineOSBuild and machineOSConfig in MCO [#4327](https://github.com/openshift/machine-config-operator/pull/4327)
* [OCPBUGS-33357](https://issues.redhat.com/browse/OCPBUGS-33357): Check both ready and health ingress endpoints [#4356](https://github.com/openshift/machine-config-operator/pull/4356)
* [OCPBUGS-32583](https://issues.redhat.com/browse/OCPBUGS-32583): daemon/pinned-image-set: refactor mirrored registry auth [#4345](https://github.com/openshift/machine-config-operator/pull/4345)
* [OCPBUGS-33046](https://issues.redhat.com/browse/OCPBUGS-33046): improve status reporting for pinned image sets [#4339](https://github.com/openshift/machine-config-operator/pull/4339)
* [OPNET-282](https://issues.redhat.com/browse/OPNET-282): Configure-ovs alternative implementation [#4249](https://github.com/openshift/machine-config-operator/pull/4249)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Only re-bootstrap kubelet on X.509 errors [#4351](https://github.com/openshift/machine-config-operator/pull/4351)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: logSystem the Kube API errors that trigger a re-bootstrap [#4342](https://github.com/openshift/machine-config-operator/pull/4342)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix CoreDNS pod definition on bootstrap nodes on cloud platforms [#4238](https://github.com/openshift/machine-config-operator/pull/4238)
* [OCPBUGS-11936](https://issues.redhat.com/browse/OCPBUGS-11936): Wait for OpenStack Metadata service [#4092](https://github.com/openshift/machine-config-operator/pull/4092)
* NO-ISSUE: API bump & reconcile feature gates move [#4335](https://github.com/openshift/machine-config-operator/pull/4335)
* NO-ISSUE: Add NodeDisruptionPolicy docs [#4336](https://github.com/openshift/machine-config-operator/pull/4336)
* [OCPBUGS-32739](https://issues.redhat.com/browse/OCPBUGS-32739): MachineConfigurations is only effective with name <cluster> [#4332](https://github.com/openshift/machine-config-operator/pull/4332)
* [MCO-1017](https://issues.redhat.com/browse/MCO-1017): MCO-1018 MCO-1019: MCO-1020: MCO-1021: OCPBUGS-32583: OCPBUGS-32679: Implement PinnedImageSets [#4303](https://github.com/openshift/machine-config-operator/pull/4303)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Ignore watch failure unless kubelet needs a rebootstrap [#4337](https://github.com/openshift/machine-config-operator/pull/4337)
* [MCO-1009](https://issues.redhat.com/browse/MCO-1009): MCO-1008: MCO-905: Implement NodeDisruptionPolicy API [#4267](https://github.com/openshift/machine-config-operator/pull/4267)
* [OCPBUGS-32138](https://issues.redhat.com/browse/OCPBUGS-32138): add cluster fleet evaluation support to mco [#4316](https://github.com/openshift/machine-config-operator/pull/4316)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): cleanup: update references in docs from machine-os-contenet to rhel-coreos [#4329](https://github.com/openshift/machine-config-operator/pull/4329)
* [MCO-1029](https://issues.redhat.com/browse/MCO-1029): MCO-678: Implement Boot Image update opt-in API [#4281](https://github.com/openshift/machine-config-operator/pull/4281)
* [MCO-1117](https://issues.redhat.com/browse/MCO-1117): Make local MCO image builds faster [#4296](https://github.com/openshift/machine-config-operator/pull/4296)
* [OCPBUGS-32278](https://issues.redhat.com/browse/OCPBUGS-32278): Fix configure-ip-forwarding.sh [#4323](https://github.com/openshift/machine-config-operator/pull/4323)
* [MCO-1102](https://issues.redhat.com/browse/MCO-1102): OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API [#4285](https://github.com/openshift/machine-config-operator/pull/4285)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4318](https://github.com/openshift/machine-config-operator/pull/4318)
* [MCO-1129](https://issues.redhat.com/browse/MCO-1129): Re-land Adapting the MCO featuregate usage to new API [#4315](https://github.com/openshift/machine-config-operator/pull/4315)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4319](https://github.com/openshift/machine-config-operator/pull/4319)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Support Cluster ImagePolicy CRD [#4160](https://github.com/openshift/machine-config-operator/pull/4160)
* [OCPBUGS-32028](https://issues.redhat.com/browse/OCPBUGS-32028): Decrease logs of haproxy [#4245](https://github.com/openshift/machine-config-operator/pull/4245)
* [OCPBUGS-30192](https://issues.redhat.com/browse/OCPBUGS-30192): Move StartLimitIntervalSec to Unit section [#4304](https://github.com/openshift/machine-config-operator/pull/4304)
* [OCPBUGS-28577](https://issues.redhat.com/browse/OCPBUGS-28577): MCO-1030, MCO-910: Updating MCO base image to RHEL9 [#4241](https://github.com/openshift/machine-config-operator/pull/4241)
* [OCPBUGS-22910](https://issues.redhat.com/browse/OCPBUGS-22910): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4016](https://github.com/openshift/machine-config-operator/pull/4016)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955): make sure CO degrades if OCL config is invalid [#4294](https://github.com/openshift/machine-config-operator/pull/4294)
* [OCPBUGS-31630](https://issues.redhat.com/browse/OCPBUGS-31630): fix: resources were in the wrong indentation level [#4299](https://github.com/openshift/machine-config-operator/pull/4299)
* [TRT-1587](https://issues.redhat.com/browse/TRT-1587): Revert #4275 "MCO-1092: Adapt the MCO's featuregate usage to new API" [#4295](https://github.com/openshift/machine-config-operator/pull/4295)
* [OCPBUGS-31376](https://issues.redhat.com/browse/OCPBUGS-31376): kubelet: restorecon necessary files on kubelet's prestart [#4287](https://github.com/openshift/machine-config-operator/pull/4287)
* [MCO-1092](https://issues.redhat.com/browse/MCO-1092): Adapt the MCO's featuregate usage to new API [#4275](https://github.com/openshift/machine-config-operator/pull/4275)
* [OCPBUGS-31067](https://issues.redhat.com/browse/OCPBUGS-31067): server: still serve kubeconfig with node-bootstrapper-token [#4276](https://github.com/openshift/machine-config-operator/pull/4276)
* [OCPBUGS-9108](https://issues.redhat.com/browse/OCPBUGS-9108): OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading [#4240](https://github.com/openshift/machine-config-operator/pull/4240)
* [OCPBUGS-27316](https://issues.redhat.com/browse/OCPBUGS-27316): configure-ovs: generate profiles directly in /run [#4042](https://github.com/openshift/machine-config-operator/pull/4042)
* [OCPBUGS-25744](https://issues.redhat.com/browse/OCPBUGS-25744), [OPNET-303](https://issues.redhat.com/browse/OPNET-303): Remove weights from ingress check script [#3698](https://github.com/openshift/machine-config-operator/pull/3698)
* [OCPBUGS-31365](https://issues.redhat.com/browse/OCPBUGS-31365): make verify should use MCO's kube version [#4280](https://github.com/openshift/machine-config-operator/pull/4280)
* [MCO-760](https://issues.redhat.com/browse/MCO-760): add rebuild mechanism to ocb [#4189](https://github.com/openshift/machine-config-operator/pull/4189)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Updates GCR CredentialProviderConfig [#4260](https://github.com/openshift/machine-config-operator/pull/4260)
* [OCPBUGS-30852](https://issues.redhat.com/browse/OCPBUGS-30852): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4261](https://github.com/openshift/machine-config-operator/pull/4261)
* [MCO-909](https://issues.redhat.com/browse/MCO-909): Openshift/Kubernetes 1.29 Rebase Updates [#4256](https://github.com/openshift/machine-config-operator/pull/4256)
* [OCPBUGS-30239](https://issues.redhat.com/browse/OCPBUGS-30239): Prevent OVS-configuration to run before kdump [#4213](https://github.com/openshift/machine-config-operator/pull/4213)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514), [OCPCLOUD-2516](https://issues.redhat.com/browse/OCPCLOUD-2516): Remove reliance on feature gates for cloud provider flags [#4228](https://github.com/openshift/machine-config-operator/pull/4228)
* NO-JIRA: Sync CRI-O owners [#4234](https://github.com/openshift/machine-config-operator/pull/4234)
* [OCPNODE-2098](https://issues.redhat.com/browse/OCPNODE-2098): Add static pod for kube-rbac-proxy-crio [#4175](https://github.com/openshift/machine-config-operator/pull/4175)
* [OCPCLOUD-2462](https://issues.redhat.com/browse/OCPCLOUD-2462): Add Image Credential Provider flags for Kubelet on Azure [#4222](https://github.com/openshift/machine-config-operator/pull/4222)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821): backportable version of api-int cert work [#4106](https://github.com/openshift/machine-config-operator/pull/4106)
* [MCO-898](https://issues.redhat.com/browse/MCO-898): OCPBUGS-29857: OCPBUGS-29819: Implement an alerting mechanism for boot image update failures [#4194](https://github.com/openshift/machine-config-operator/pull/4194)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Add Image Credential Provider flags for Kubelet on GCP [#4224](https://github.com/openshift/machine-config-operator/pull/4224)
* [OCPBUGS-30136](https://issues.redhat.com/browse/OCPBUGS-30136): APIVersion and Kind sometimes are empty when listing objects [#4231](https://github.com/openshift/machine-config-operator/pull/4231)
* [OCPBUGS-29946](https://issues.redhat.com/browse/OCPBUGS-29946): Prevent pull images in podmanCopy if they are present [#4216](https://github.com/openshift/machine-config-operator/pull/4216)
* [OCPBUGS-18670](https://issues.redhat.com/browse/OCPBUGS-18670): OCPBUGS-18535: MCO-809: rendercontroller should also reconcile machineconfigs [#4158](https://github.com/openshift/machine-config-operator/pull/4158)
* [OCPBUGS-30090](https://issues.redhat.com/browse/OCPBUGS-30090): add node owner to MCN [#4223](https://github.com/openshift/machine-config-operator/pull/4223)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Add HostToContainer propogataion for coreDNS pods on cloud platforms [#4218](https://github.com/openshift/machine-config-operator/pull/4218)
* NO-JIRA: ovs-configfuration, run after nmstate.service [#4212](https://github.com/openshift/machine-config-operator/pull/4212)
* [OCPBUGS-29713](https://issues.redhat.com/browse/OCPBUGS-29713): set nodeStatusReportFrequency [#4204](https://github.com/openshift/machine-config-operator/pull/4204)
* [MCO-998](https://issues.redhat.com/browse/MCO-998): sets up MCO repository for Snyk CI scans [#4197](https://github.com/openshift/machine-config-operator/pull/4197)
* [OCPBUGS-29732](https://issues.redhat.com/browse/OCPBUGS-29732): Always touch resolv-prepender file at end of script [#4207](https://github.com/openshift/machine-config-operator/pull/4207)
* [OCPBUGS-29659](https://issues.redhat.com/browse/OCPBUGS-29659): Apply new DNS configuration only if changed [#4196](https://github.com/openshift/machine-config-operator/pull/4196)
* [OCPBUGS-29624](https://issues.redhat.com/browse/OCPBUGS-29624): Restart resolv-prepender on failure [#4201](https://github.com/openshift/machine-config-operator/pull/4201)
* [OCPNODE-1877](https://issues.redhat.com/browse/OCPNODE-1877): Delete image openshift/openshift-proxy-pull-test [#4047](https://github.com/openshift/machine-config-operator/pull/4047)
* NO-JIRA: nmstate, configure nmstate to keep service yamls [#4190](https://github.com/openshift/machine-config-operator/pull/4190)
* NO-ISSUE: OWNERS: Remove myself from reviewers [#3628](https://github.com/openshift/machine-config-operator/pull/3628)
* NO-ISSUE: add e2e-techpreview-shared, remove layering test target [#4183](https://github.com/openshift/machine-config-operator/pull/4183)
* [OCPBUGS-27162](https://issues.redhat.com/browse/OCPBUGS-27162): Add dependency on crio-wipe to resolv-prepender [#4146](https://github.com/openshift/machine-config-operator/pull/4146)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Revert "Revert "Merge pull request #4028 from cybertron/wait-for-br-ex"" [#4079](https://github.com/openshift/machine-config-operator/pull/4079)
* [OPNET-355](https://issues.redhat.com/browse/OPNET-355): Use NM's dns-change event for resolv.conf [#4133](https://github.com/openshift/machine-config-operator/pull/4133)
* [OCPBUGS-18940](https://issues.redhat.com/browse/OCPBUGS-18940): Add keepalived healthcheck for machine-config-server [#4129](https://github.com/openshift/machine-config-operator/pull/4129)
* [MCO-774](https://issues.redhat.com/browse/MCO-774): Write e2e tests for bootimage management [#4177](https://github.com/openshift/machine-config-operator/pull/4177)
* NO-JIRA: remove kube-rbac-proxy for crio port [#4181](https://github.com/openshift/machine-config-operator/pull/4181)
* [OCPBUGS-26951](https://issues.redhat.com/browse/OCPBUGS-26951): annotate on-prem static pods for workload partitioning [#4143](https://github.com/openshift/machine-config-operator/pull/4143)
* NO-JIRA: Fix patch comparison bug in test [#4176](https://github.com/openshift/machine-config-operator/pull/4176)
* docs/HACKING: Update command for building customize OCP release [#4023](https://github.com/openshift/machine-config-operator/pull/4023)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955), [OCPBUGS-18989](https://issues.redhat.com/browse/OCPBUGS-18989), [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): add capability to react to OCB ImageBuilderType changes [#4127](https://github.com/openshift/machine-config-operator/pull/4127)
* [OCPBUGS-29098](https://issues.redhat.com/browse/OCPBUGS-29098): Revert "OCPNODE-2024: crio: migrate metrics port to localhost only" [#4168](https://github.com/openshift/machine-config-operator/pull/4168)
* [OCPBUGS-28969](https://issues.redhat.com/browse/OCPBUGS-28969): On-prem coredns manifests should not be generated for GCP [#4165](https://github.com/openshift/machine-config-operator/pull/4165)
* [OCPBUGS-26557](https://issues.redhat.com/browse/OCPBUGS-26557): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4111](https://github.com/openshift/machine-config-operator/pull/4111)
* [OCPNODE-2024](https://issues.redhat.com/browse/OCPNODE-2024): crio: migrate metrics port to localhost only [#4164](https://github.com/openshift/machine-config-operator/pull/4164)
* [OCPBUGS-24356](https://issues.redhat.com/browse/OCPBUGS-24356): ovs-configure: fix `vlan_parent` calculation [#4055](https://github.com/openshift/machine-config-operator/pull/4055)
* [OCPBUGS-24705](https://issues.redhat.com/browse/OCPBUGS-24705): consider currentImage and desiredImage annotations [#4135](https://github.com/openshift/machine-config-operator/pull/4135)
* [CORS-2814](https://issues.redhat.com/browse/CORS-2814): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4018](https://github.com/openshift/machine-config-operator/pull/4018)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721), [OCPBUGS-25753](https://issues.redhat.com/browse/OCPBUGS-25753): Run resolv-prepender entirely async [#4102](https://github.com/openshift/machine-config-operator/pull/4102)
* [OCPBUGS-26489](https://issues.redhat.com/browse/OCPBUGS-26489): feat: enable nodeip service for single node [#4142](https://github.com/openshift/machine-config-operator/pull/4142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#4147](https://github.com/openshift/machine-config-operator/pull/4147)
* [OCPBUGS-24366](https://issues.redhat.com/browse/OCPBUGS-24366): Delete state files on reboot only [#4124](https://github.com/openshift/machine-config-operator/pull/4124)
* [OCPBUGS-17788](https://issues.redhat.com/browse/OCPBUGS-17788): Improved error handling for missing MC [#4096](https://github.com/openshift/machine-config-operator/pull/4096)
* [OCPBUGS-27508](https://issues.redhat.com/browse/OCPBUGS-27508): daemon: allow the user to override drains on IR changes [#4139](https://github.com/openshift/machine-config-operator/pull/4139)
* [MCO-831](https://issues.redhat.com/browse/MCO-831): added feature gate to mco for on cluster builds [#4060](https://github.com/openshift/machine-config-operator/pull/4060)
* [OCPNODE-2005](https://issues.redhat.com/browse/OCPNODE-2005): crio: add support for LinkLogs annotation by default [#4116](https://github.com/openshift/machine-config-operator/pull/4116)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Bump k8s api to v0.29.0 [#4119](https://github.com/openshift/machine-config-operator/pull/4119)
* [OCPBUGS-27190](https://issues.redhat.com/browse/OCPBUGS-27190): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4125](https://github.com/openshift/machine-config-operator/pull/4125)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Add Image Credential Provider flags for Kubelet on AWS [#4103](https://github.com/openshift/machine-config-operator/pull/4103)
* [OCPNODE-2021](https://issues.redhat.com/browse/OCPNODE-2021): add crio-kube-rbac-proxy [#4108](https://github.com/openshift/machine-config-operator/pull/4108)
* [OCPBUGS-24831](https://issues.redhat.com/browse/OCPBUGS-24831): Updating ose-machine-config-operator-container image to be consistent with ART [#4070](https://github.com/openshift/machine-config-operator/pull/4070)
* [OCPBUGS-22664](https://issues.redhat.com/browse/OCPBUGS-22664): Mount /run/nodeip-configuration into coredns containers [#4058](https://github.com/openshift/machine-config-operator/pull/4058)
* [OCPBUGS-27261](https://issues.redhat.com/browse/OCPBUGS-27261): Fix typo in AWS node env unit [#4126](https://github.com/openshift/machine-config-operator/pull/4126)
* NO-ISSUE: Update the design doc dual support icsp and idms [#4085](https://github.com/openshift/machine-config-operator/pull/4085)
* NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets [#4089](https://github.com/openshift/machine-config-operator/pull/4089)
* [OCPBUGS-25725](https://issues.redhat.com/browse/OCPBUGS-25725): ManagedBootImages: failed to fetch architecture type of machineset no linked machine found [#4088](https://github.com/openshift/machine-config-operator/pull/4088)
* [OCPBUGS-26605](https://issues.redhat.com/browse/OCPBUGS-26605): use machine client instead of oc for teardown [#4110](https://github.com/openshift/machine-config-operator/pull/4110)
* [OCPBUGS-5452](https://issues.redhat.com/browse/OCPBUGS-5452): If node is not in pool, error [#4097](https://github.com/openshift/machine-config-operator/pull/4097)
* [OCPBUGS-24416](https://issues.redhat.com/browse/OCPBUGS-24416): Sync MCN with node creation and deletion [#4062](https://github.com/openshift/machine-config-operator/pull/4062)
* NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports [#4091](https://github.com/openshift/machine-config-operator/pull/4091)
* [MCO-679](https://issues.redhat.com/browse/MCO-679): MCO-830: Managed boot images MVP [#4083](https://github.com/openshift/machine-config-operator/pull/4083)
* [OCPBUGS-25406](https://issues.redhat.com/browse/OCPBUGS-25406): Azure Run ovs-configuration.service before dnsmasq.service [#4087](https://github.com/openshift/machine-config-operator/pull/4087)
* [OCPBUGS-19628](https://issues.redhat.com/browse/OCPBUGS-19628): Log network service output to console [#3927](https://github.com/openshift/machine-config-operator/pull/3927)
* [OCPBUGS-25362](https://issues.redhat.com/browse/OCPBUGS-25362): kubelet: fix kubelet labels [#4074](https://github.com/openshift/machine-config-operator/pull/4074)
* [OCPBUGS-19427](https://issues.redhat.com/browse/OCPBUGS-19427): Add source and mirror format regex validation [#4064](https://github.com/openshift/machine-config-operator/pull/4064)
* docs/MachineOSBuilderDesign: 'Known Limitations' links [#4086](https://github.com/openshift/machine-config-operator/pull/4086)
* [OCPBUGS-25412](https://issues.redhat.com/browse/OCPBUGS-25412): APIServer URL env should exist on all nodes [#4076](https://github.com/openshift/machine-config-operator/pull/4076)
* [OCPBUGS-25245](https://issues.redhat.com/browse/OCPBUGS-25245): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4073](https://github.com/openshift/machine-config-operator/pull/4073)
* [OCPBUGS-24030](https://issues.redhat.com/browse/OCPBUGS-24030): add uncordon to mcn [#4065](https://github.com/openshift/machine-config-operator/pull/4065)
* [OCPBUGS-23085](https://issues.redhat.com/browse/OCPBUGS-23085): MCO duplicates kernel arguments during firstboot [#4046](https://github.com/openshift/machine-config-operator/pull/4046)
* [OCPBUGS-25144](https://issues.redhat.com/browse/OCPBUGS-25144): Remove MCN lister and informer from MCO struct [#4071](https://github.com/openshift/machine-config-operator/pull/4071)
* [OCPBUGS-24743](https://issues.redhat.com/browse/OCPBUGS-24743): crio: drop automatic image cleanup on upgrades [#4068](https://github.com/openshift/machine-config-operator/pull/4068)
* [OCPNODE-1943](https://issues.redhat.com/browse/OCPNODE-1943): crio: add crun handler to template [#4054](https://github.com/openshift/machine-config-operator/pull/4054)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/657ab58b76a99f2e566714bead33674c08ff9301...4bb3364914c4dbcdfcc08b0914f402cdd38f014f)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/394809633b6b2e33ea1af444f7237f066bf0abb1)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): drop the default for inspector URL [#124](https://github.com/openshift/image-customization-controller/pull/124)
* [OCPBUGS-28728](https://issues.redhat.com/browse/OCPBUGS-28728): Updating ose-image-customization-controller-container image to be consistent with ART for 4.16 [#122](https://github.com/openshift/image-customization-controller/pull/122)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): account for more cases when handling base URLs [#120](https://github.com/openshift/image-customization-controller/pull/120)
* [METAL-834](https://issues.redhat.com/browse/METAL-834): Add --metrics-addr argument to controller [#110](https://github.com/openshift/image-customization-controller/pull/110)
* [OCPBUGS-25538](https://issues.redhat.com/browse/OCPBUGS-25538): Updating ose-image-customization-controller-container image to be consistent with ART [#116](https://github.com/openshift/image-customization-controller/pull/116)
* [METAL-835](https://issues.redhat.com/browse/METAL-835): Get secret from mounted file when envvar empty [#115](https://github.com/openshift/image-customization-controller/pull/115)
* [OCPBUGS-25099](https://issues.redhat.com/browse/OCPBUGS-25099): Updating ose-image-customization-controller-container image to be consistent with ART [#114](https://github.com/openshift/image-customization-controller/pull/114)
* [OCPBUGS-24832](https://issues.redhat.com/browse/OCPBUGS-24832): Updating ose-image-customization-controller-container image to be consistent with ART [#113](https://github.com/openshift/image-customization-controller/pull/113)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/97d87657caab4323f82f9d0958e6d30fc8fd1846...394809633b6b2e33ea1af444f7237f066bf0abb1)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)
* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): Image to rhel9 [#36](https://github.com/openshift/machine-os-images/pull/36)
* [OCPBUGS-24816](https://issues.redhat.com/browse/OCPBUGS-24816): Updating ose-machine-os-images-container image to be consistent with ART [#34](https://github.com/openshift/machine-os-images/pull/34)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e9c920f985a375536e8d4caafd2d7ed579e27f3...3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/442ccd10ad05a04f510932082cd5a791d66a997e)
* [OCPBUGS-43239](https://issues.redhat.com/browse/OCPBUGS-43239): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 [#217](https://github.com/openshift/monitoring-plugin/pull/217)
* [OCPBUGS-42424](https://issues.redhat.com/browse/OCPBUGS-42424): fix path-to-regexp dependency [#197](https://github.com/openshift/monitoring-plugin/pull/197)
* NO-JIRA: Use rhel9 base image in Dockerfile [#122](https://github.com/openshift/monitoring-plugin/pull/122)
* [OU-416](https://issues.redhat.com/browse/OU-416): throw an error when a custom datasource is not found [#117](https://github.com/openshift/monitoring-plugin/pull/117)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Gracefully Handle NaN values in stacked graphs [#111](https://github.com/openshift/monitoring-plugin/pull/111)
* [OU-395](https://issues.redhat.com/browse/OU-395): Alert detail page renders buttons and links from the plugin extension [#114](https://github.com/openshift/monitoring-plugin/pull/114)
* [OCPBUGS-31931](https://issues.redhat.com/browse/OCPBUGS-31931): make createdBy mandatory and auto fill with the current user [#113](https://github.com/openshift/monitoring-plugin/pull/113)
* [OU-379](https://issues.redhat.com/browse/OU-379): Add datasource parameter to handle metrics from custom datasources [#112](https://github.com/openshift/monitoring-plugin/pull/112)
* [OU-370](https://issues.redhat.com/browse/OU-370): Split Dashboard Label and Line Chart Queries [#109](https://github.com/openshift/monitoring-plugin/pull/109)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Disable nginx module for rhel9 [#110](https://github.com/openshift/monitoring-plugin/pull/110)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#108](https://github.com/openshift/monitoring-plugin/pull/108)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/monitoring-plugin/pull/103)
* [OCPBUGS-29947](https://issues.redhat.com/browse/OCPBUGS-29947): upgrade sanitize-html vulnerable dependency [#105](https://github.com/openshift/monitoring-plugin/pull/105)
* [OCPBUGS-31291](https://issues.redhat.com/browse/OCPBUGS-31291): Upgrade Webpack dev server [#104](https://github.com/openshift/monitoring-plugin/pull/104)
* NO-ISSUE: Add peteryurkovich to OWNERS [#102](https://github.com/openshift/monitoring-plugin/pull/102)
* [OU-321](https://issues.redhat.com/browse/OU-321): Fix `monitoring-alert-list-item` extension action to pass alert object [#101](https://github.com/openshift/monitoring-plugin/pull/101)
* NO-ISSUE: Update README.md [#100](https://github.com/openshift/monitoring-plugin/pull/100)
* [OU-236](https://issues.redhat.com/browse/OU-236): Add CSV export option to dashboards and metrics tables [#98](https://github.com/openshift/monitoring-plugin/pull/98)
* [OU-310](https://issues.redhat.com/browse/OU-310): Add an extension point for alerts, to be able to add an inspect link [#95](https://github.com/openshift/monitoring-plugin/pull/95)
* [OU-309](https://issues.redhat.com/browse/OU-309): consider all metric keys to display all results on dashboards tables [#96](https://github.com/openshift/monitoring-plugin/pull/96)
* [OCPBUGS-27201](https://issues.redhat.com/browse/OCPBUGS-27201): upgrade follow-redirects parent dependency [#92](https://github.com/openshift/monitoring-plugin/pull/92)
* [OU-311](https://issues.redhat.com/browse/OU-311): Add Dockerfile for local testing [#91](https://github.com/openshift/monitoring-plugin/pull/91)
* [OU-308](https://issues.redhat.com/browse/OU-308): Revert "fix default nginx path to look for static files" [#90](https://github.com/openshift/monitoring-plugin/pull/90)
* [OCPBUGS-25313](https://issues.redhat.com/browse/OCPBUGS-25313): On the alert details page, don't require all alert labels in URL [#88](https://github.com/openshift/monitoring-plugin/pull/88)
* [OCPBUGS-24848](https://issues.redhat.com/browse/OCPBUGS-24848): Updating monitoring-plugin-container image to be consistent with ART [#86](https://github.com/openshift/monitoring-plugin/pull/86)
* [OCPBUGS-24515](https://issues.redhat.com/browse/OCPBUGS-24515): remove regex from console page route path so plugin pages are found [#84](https://github.com/openshift/monitoring-plugin/pull/84)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/e40b085a258b5762532875bbd9ce34d1f75a90b4...442ccd10ad05a04f510932082cd5a791d66a997e)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/88c596ed782cf6c3f94efa286b3568d12acde436)
* [OCPBUGS-36341](https://issues.redhat.com/browse/OCPBUGS-36341): Update owners [#87](https://github.com/openshift/multus-admission-controller/pull/87)
* [OCPBUGS-32303](https://issues.redhat.com/browse/OCPBUGS-32303): Add .snyk file to fix SAST warning messages [#84](https://github.com/openshift/multus-admission-controller/pull/84)
* [OCPBUGS-32219](https://issues.redhat.com/browse/OCPBUGS-32219): Upstream sync 2024 04 [#83](https://github.com/openshift/multus-admission-controller/pull/83)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#80](https://github.com/openshift/multus-admission-controller/pull/80)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#79](https://github.com/openshift/multus-admission-controller/pull/79)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#78](https://github.com/openshift/multus-admission-controller/pull/78)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9ea52de962dd644573c99b2f9554a6c4dfaacf62...88c596ed782cf6c3f94efa286b3568d12acde436)
### [multus-cni](https://github.com/openshift/multus-cni/tree/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
* [OCPBUGS-34910](https://issues.redhat.com/browse/OCPBUGS-34910): Thick plugin should not wait for API readiness on CNI DEL [#238](https://github.com/openshift/multus-cni/pull/238)
* [OCPBUGS-34924](https://issues.redhat.com/browse/OCPBUGS-34924): Update owners file [#239](https://github.com/openshift/multus-cni/pull/239)
* [OCPBUGS-33256](https://issues.redhat.com/browse/OCPBUGS-33256): Fix CNI cache update function to prevent nil access [#230](https://github.com/openshift/multus-cni/pull/230)
* [OCPBUGS-32440](https://issues.redhat.com/browse/OCPBUGS-32440): Update snyk file to add exclude vendor [#229](https://github.com/openshift/multus-cni/pull/229)
* [OCPBUGS-32393](https://issues.redhat.com/browse/OCPBUGS-32393): April 2024 [#228](https://github.com/openshift/multus-cni/pull/228)
* [OCPBUGS-30449](https://issues.redhat.com/browse/OCPBUGS-30449): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [#226](https://github.com/openshift/multus-cni/pull/226)
* [USHIFT-2218](https://issues.redhat.com/browse/USHIFT-2218): Dockerfile for MicroShift [#222](https://github.com/openshift/multus-cni/pull/222)
* [OCPBUGS-29856](https://issues.redhat.com/browse/OCPBUGS-29856): Upstream sync to 2024 02 22 [#221](https://github.com/openshift/multus-cni/pull/221)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Fix SAST scan issues for multus-cni-container [#217](https://github.com/openshift/multus-cni/pull/217)
* [OCPBUGS-27429](https://issues.redhat.com/browse/OCPBUGS-27429): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#216](https://github.com/openshift/multus-cni/pull/216)
* [OCPBUGS-29162](https://issues.redhat.com/browse/OCPBUGS-29162): Upstream sync to 20240207 [#214](https://github.com/openshift/multus-cni/pull/214)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Remove unused webhook related yamls [#213](https://github.com/openshift/multus-cni/pull/213)
* [OCPBUGS-28583](https://issues.redhat.com/browse/OCPBUGS-28583): Updating multus-cni-container image to be consistent with ART for 4.16 [#212](https://github.com/openshift/multus-cni/pull/212)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait to account for the possiblity of a not ready unix socket [#208](https://github.com/openshift/multus-cni/pull/208)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#204](https://github.com/openshift/multus-cni/pull/204)
* [OCPBUGS-26397](https://issues.redhat.com/browse/OCPBUGS-26397): Revert #205 "Adds a wait on unix socket readiness" [#207](https://github.com/openshift/multus-cni/pull/207)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait on unix socket readiness [#205](https://github.com/openshift/multus-cni/pull/205)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#203](https://github.com/openshift/multus-cni/pull/203)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#202](https://github.com/openshift/multus-cni/pull/202)
* [Full changelog](https://github.com/openshift/multus-cni/compare/05497ad135c629de9b4ffb0a13fb91d58a335d25...c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/f988f894ded7e6645a1b3cc0d6090601809d4e7c)
* Update owners (#57) [#57](https://github.com/openshift/multus-networkpolicy/pull/57)
* WIP: test for SAST security fix (#53) [#53](https://github.com/openshift/multus-networkpolicy/pull/53)
* [OCPBUGS-32030](https://issues.redhat.com/browse/OCPBUGS-32030): Upstream sync 2404 (#52) [#52](https://github.com/openshift/multus-networkpolicy/pull/52)
* Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 (#61) (#50) [#61](https://github.com/openshift/multus-networkpolicy/pull/61)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#47) [#47](https://github.com/openshift/multus-networkpolicy/pull/47)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#46) [#46](https://github.com/openshift/multus-networkpolicy/pull/46)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#45) [#45](https://github.com/openshift/multus-networkpolicy/pull/45)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7...f988f894ded7e6645a1b3cc0d6090601809d4e7c)
### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/73594f7759e76600c95601138ab5be4969978f63)
* [OCPBUGS-37726](https://issues.redhat.com/browse/OCPBUGS-37726): Update owners [#58](https://github.com/openshift/route-override-cni/pull/58)
* [OCPBUGS-28557](https://issues.redhat.com/browse/OCPBUGS-28557): Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 [#54](https://github.com/openshift/route-override-cni/pull/54)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#53](https://github.com/openshift/route-override-cni/pull/53)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#52](https://github.com/openshift/route-override-cni/pull/52)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#51](https://github.com/openshift/route-override-cni/pull/51)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee...73594f7759e76600c95601138ab5be4969978f63)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dab1dd29b18521916c18a278faa734f038eccdf1)
* [OCPBUGS-37707](https://issues.redhat.com/browse/OCPBUGS-37707), [OCPBUGS-37708](https://issues.redhat.com/browse/OCPBUGS-37708): [release-4.16] align api calls timeout and skip pods marked for deletion [#304](https://github.com/openshift/whereabouts-cni/pull/304)
* [OCPBUGS-37723](https://issues.redhat.com/browse/OCPBUGS-37723): Update owners [#294](https://github.com/openshift/whereabouts-cni/pull/294)
* [OCPBUGS-35923](https://issues.redhat.com/browse/OCPBUGS-35923): [release-4.16] Return previous IP allocation for add cmd [#293](https://github.com/openshift/whereabouts-cni/pull/293)
* [OCPBUGS-34929](https://issues.redhat.com/browse/OCPBUGS-34929): [release-4.16] Use IP to identify orphaned allocation to be deleted [#286](https://github.com/openshift/whereabouts-cni/pull/286)
* [OCPBUGS-33565](https://issues.redhat.com/browse/OCPBUGS-33565): Upstream sync may24 [#278](https://github.com/openshift/whereabouts-cni/pull/278)
* [OCPBUGS-32931](https://issues.redhat.com/browse/OCPBUGS-32931): Add .snyk file [#254](https://github.com/openshift/whereabouts-cni/pull/254)
* [OCPBUGS-28556](https://issues.redhat.com/browse/OCPBUGS-28556): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART for 4.16 [#242](https://github.com/openshift/whereabouts-cni/pull/242)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Downstream sync - includes configurable schedule for reconciler [#227](https://github.com/openshift/whereabouts-cni/pull/227)
* [OCPBUGS-26017](https://issues.redhat.com/browse/OCPBUGS-26017): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#223](https://github.com/openshift/whereabouts-cni/pull/223)
* [OCPBUGS-24608](https://issues.redhat.com/browse/OCPBUGS-24608): Downstream sync - includes assignment error fix [#211](https://github.com/openshift/whereabouts-cni/pull/211)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#213](https://github.com/openshift/whereabouts-cni/pull/213)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#212](https://github.com/openshift/whereabouts-cni/pull/212)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d80fe46e1895698f3d1073ab965c859a89be2a47...dab1dd29b18521916c18a278faa734f038eccdf1)
### [must-gather](https://github.com/openshift/must-gather/tree/a30f939e9fec211253eaf1c91d4b5c7401f300a4)
* [OCPBUGS-43056](https://issues.redhat.com/browse/OCPBUGS-43056): Open [Release-4.16] Multus is now a Pod and will be captured by normal [#449](https://github.com/openshift/must-gather/pull/449)
* [OCPBUGS-35357](https://issues.redhat.com/browse/OCPBUGS-35357): Run ppc node collection in parallel [#426](https://github.com/openshift/must-gather/pull/426)
* [WRKLDS-1257](https://issues.redhat.com/browse/WRKLDS-1257): Switch must-gather to RHEL9 as base image [#421](https://github.com/openshift/must-gather/pull/421)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Use oc.rhel8 based on the target arch of image [#420](https://github.com/openshift/must-gather/pull/420)
* NO-JIRA: Use oc rhel8 binary explicitly until base image is rhel9 [#418](https://github.com/openshift/must-gather/pull/418)
* [MON-3754](https://issues.redhat.com/browse/MON-3754): Enable metrics-server audit log collection [#413](https://github.com/openshift/must-gather/pull/413)
* [OCPBUGS-32210](https://issues.redhat.com/browse/OCPBUGS-32210): Collect Assisted Installer Namespace Logs [#417](https://github.com/openshift/must-gather/pull/417)
* [CNF-9168](https://issues.redhat.com/browse/CNF-9168): MetalLB: adjust to support frrk8s and small fix [#412](https://github.com/openshift/must-gather/pull/412)
* [OCPBUGS-31900](https://issues.redhat.com/browse/OCPBUGS-31900): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#409](https://github.com/openshift/must-gather/pull/409)
* [SDN-4597](https://issues.redhat.com/browse/SDN-4597): Add cluster scoped ANP resource to collection [#411](https://github.com/openshift/must-gather/pull/411)
* NO-JIRA: Add ARO support to must-gather client [#392](https://github.com/openshift/must-gather/pull/392)
* [OCPBUGS-30349](https://issues.redhat.com/browse/OCPBUGS-30349): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#406](https://github.com/openshift/must-gather/pull/406)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): use must-gather since and since time env vars on inspect cmds [#400](https://github.com/openshift/must-gather/pull/400)
* [OCPBUGS-25054](https://issues.redhat.com/browse/OCPBUGS-25054): Updating ose-must-gather-container image to be consistent with ART [#395](https://github.com/openshift/must-gather/pull/395)
* [Full changelog](https://github.com/openshift/must-gather/compare/48de487eb38d1434440e4fb8164022b2b708332a...a30f939e9fec211253eaf1c91d4b5c7401f300a4)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/bb911451158fc06f193917863778434944e88ae1)
* [OCPBUGS-28578](https://issues.redhat.com/browse/OCPBUGS-28578): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/bond-cni/pull/62)
* [OCPBUGS-24835](https://issues.redhat.com/browse/OCPBUGS-24835): Updating ose-network-interface-bond-cni-container image to be consistent with ART [#60](https://github.com/openshift/bond-cni/pull/60)
* [Full changelog](https://github.com/openshift/bond-cni/compare/f91decaa10cfa233c9e680c96ec7ae642e30a03c...bb911451158fc06f193917863778434944e88ae1)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/48059263880572c52fb8b21f1441370100dc167a)
* Correct 4.16 owners file (#98) [#98](https://github.com/openshift/network-metrics-daemon/pull/98)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#91) [#91](https://github.com/openshift/network-metrics-daemon/pull/91)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#89) [#89](https://github.com/openshift/network-metrics-daemon/pull/89)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9e21740225af47318a9ed6d03c2eb9ee2aaea883...48059263880572c52fb8b21f1441370100dc167a)
### [network-tools](https://github.com/openshift/network-tools/tree/39eca100c0978fb59234e21bf549b130914616ac)
* [OCPBUGS-33388](https://issues.redhat.com/browse/OCPBUGS-33388): Updating ose-network-tools-container image to be consistent with ART for 4.16 [#125](https://github.com/openshift/network-tools/pull/125)
* NO-JIRA: New label for CI flakes [#124](https://github.com/openshift/network-tools/pull/124)
* NO-JIRA: Fix alphabetical ordering of packages in Dockerfiles [#123](https://github.com/openshift/network-tools/pull/123)
* [OCPBUGS-31699](https://issues.redhat.com/browse/OCPBUGS-31699): replace wireshark with wireshark-cli [#116](https://github.com/openshift/network-tools/pull/116)
* NO-JIRA:Add sdn-team-bot [#115](https://github.com/openshift/network-tools/pull/115)
* NO-JIRA:Fix bug list formatting in verbose mode and remove metal lb component [#114](https://github.com/openshift/network-tools/pull/114)
* NO-JIRA: add total and external rows + misc fixes [#113](https://github.com/openshift/network-tools/pull/113)
* NO-JIRA: Remove SAST,ART,backport bugs from bug count & show them separately [#112](https://github.com/openshift/network-tools/pull/112)
* NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional [#101](https://github.com/openshift/network-tools/pull/101)
* [OCPBUGS-26490](https://issues.redhat.com/browse/OCPBUGS-26490): Updating ose-network-tools-container image to be consistent with ART [#108](https://github.com/openshift/network-tools/pull/108)
* NO-JIRA: jira-scripts: disable flavio [#111](https://github.com/openshift/network-tools/pull/111)
* NO-JIRA: Update docs after adding a new command. [#110](https://github.com/openshift/network-tools/pull/110)
* [SDN-4194](https://issues.redhat.com/browse/SDN-4194): Add a script to find OVN perf problems [#107](https://github.com/openshift/network-tools/pull/107)
* [OCPBUGS-25040](https://issues.redhat.com/browse/OCPBUGS-25040): Updating ose-network-tools-container image to be consistent with ART [#105](https://github.com/openshift/network-tools/pull/105)
* [Full changelog](https://github.com/openshift/network-tools/compare/17536c8dff76d50efb604187ba763020bd084771...39eca100c0978fb59234e21bf549b130914616ac)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/28bf5963c7f82ae8d966a69562a19f038d819950)
* [OCPBUGS-30524](https://issues.redhat.com/browse/OCPBUGS-30524): bump google.golang.org/protobuf to v1.33.0 [#38](https://github.com/openshift/cloud-provider-nutanix/pull/38)
* [OCPCLOUD-2418](https://issues.redhat.com/browse/OCPCLOUD-2418): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (b009266) into main [#21](https://github.com/openshift/cloud-provider-nutanix/pull/21)
* [OCPBUGS-22623](https://issues.redhat.com/browse/OCPBUGS-22623): Bumps otehttp to v0.44.0 [#29](https://github.com/openshift/cloud-provider-nutanix/pull/29)
* [OCPBUGS-25629](https://issues.redhat.com/browse/OCPBUGS-25629): Add Snyk file to exclude vendor directory on scan [#26](https://github.com/openshift/cloud-provider-nutanix/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/040d4e016058c188d2ba0a7575054ee44b94af9e...28bf5963c7f82ae8d966a69562a19f038d819950)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/f053e5a0ee58d20066efff8db01578785ea83dad)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#73](https://github.com/openshift/machine-api-provider-nutanix/pull/73)
* [OCPBUGS-27390](https://issues.redhat.com/browse/OCPBUGS-27390): IPI install fails on Nutanix when using DHCP [#66](https://github.com/openshift/machine-api-provider-nutanix/pull/66)
* [OCPBUGS-27874](https://issues.redhat.com/browse/OCPBUGS-27874): Update Snyk file to exclude other vendor folders [#65](https://github.com/openshift/machine-api-provider-nutanix/pull/65)
* [OCPCLOUD-2425](https://issues.redhat.com/browse/OCPCLOUD-2425): Rebase to k8s 129 [#64](https://github.com/openshift/machine-api-provider-nutanix/pull/64)
* [OCPBUGS-26184](https://issues.redhat.com/browse/OCPBUGS-26184): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/machine-api-provider-nutanix/pull/63)
* [OCPBUGS-24949](https://issues.redhat.com/browse/OCPBUGS-24949): Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-nutanix/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/8de6f944d35b2fefaf926006aecf8445be4e6149...f053e5a0ee58d20066efff8db01578785ea83dad)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/fa1f097c2800b06b3b56537651294d023762a4eb)
* NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig [#111](https://github.com/openshift/oauth-apiserver/pull/111)
* [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#108](https://github.com/openshift/oauth-apiserver/pull/108)
* NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness [#106](https://github.com/openshift/oauth-apiserver/pull/106)
* NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration [#105](https://github.com/openshift/oauth-apiserver/pull/105)
* [OCPBUGS-29176](https://issues.redhat.com/browse/OCPBUGS-29176): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/oauth-apiserver/pull/101)
* [OCPBUGS-28658](https://issues.redhat.com/browse/OCPBUGS-28658): bump k8s.io and others (master) [#98](https://github.com/openshift/oauth-apiserver/pull/98)
* [OCPBUGS-24954](https://issues.redhat.com/browse/OCPBUGS-24954): Updating ose-oauth-apiserver-container image to be consistent with ART [#94](https://github.com/openshift/oauth-apiserver/pull/94)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#95](https://github.com/openshift/oauth-apiserver/pull/95)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb...fa1f097c2800b06b3b56537651294d023762a4eb)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/30f8012482023689655252dc2af2f17fe6a09253)
* [OCPBUGS-24791](https://issues.redhat.com/browse/OCPBUGS-24791): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#270](https://github.com/openshift/oauth-proxy/pull/270)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e...30f8012482023689655252dc2af2f17fe6a09253)
### [oauth-server](https://github.com/openshift/oauth-server/tree/3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
* [OCPBUGS-35374](https://issues.redhat.com/browse/OCPBUGS-35374): p/o/handlers - fix nil-pointer, if ResStatus is nil [#152](https://github.com/openshift/oauth-server/pull/152)
* NO-JIRA: bump go-jose to a newer version [#147](https://github.com/openshift/oauth-server/pull/147)
* [OCPBUGS-32331](https://issues.redhat.com/browse/OCPBUGS-32331): Updating oauth-server-container image to be consistent with ART for 4.16 [#145](https://github.com/openshift/oauth-server/pull/145)
* [OCPBUGS-24987](https://issues.redhat.com/browse/OCPBUGS-24987), [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#142](https://github.com/openshift/oauth-server/pull/142)
* [Full changelog](https://github.com/openshift/oauth-server/compare/c055dbb9a84e04575ade106e9a43cc638a8aeaef...3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/819f0115e4be3f55ed7d4edae1c38035811771ae)
* [OCPBUGS-38035](https://issues.redhat.com/browse/OCPBUGS-38035): Rebuild catalogs -- without cache generation (#905) [#905](https://github.com/openshift/oc-mirror/pull/905)
* [OCPBUGS-36410](https://issues.redhat.com/browse/OCPBUGS-36410): fix: creates tags for release images (#901) [#901](https://github.com/openshift/oc-mirror/pull/901)
* [OCPBUGS-37055](https://issues.redhat.com/browse/OCPBUGS-37055): Use proxy for HTTP request release signatures (#893) [#893](https://github.com/openshift/oc-mirror/pull/893)
* [OCPBUGS-37040](https://issues.redhat.com/browse/OCPBUGS-37040): use current working-dir for fetching release content for disk to mirror (#892) [#892](https://github.com/openshift/oc-mirror/pull/892)
* [OCPBUGS-36498](https://issues.redhat.com/browse/OCPBUGS-36498): Fix to ensure invalid catalogs are skipped (#889) [#889](https://github.com/openshift/oc-mirror/pull/889)
* [OCPBUGS-362214](https://issues.redhat.com/browse/OCPBUGS-362214): Fix V2 DiskToMirror should not require internet access (#884) [#884](https://github.com/openshift/oc-mirror/pull/884)
* [OCPBUGS-35279](https://issues.redhat.com/browse/OCPBUGS-35279): Fix spelling error in delete console message (#881) [#881](https://github.com/openshift/oc-mirror/pull/881)
* [OCPBUGS-35409](https://issues.redhat.com/browse/OCPBUGS-35409): Implement fail safe / fail fast in workers (#879) [#879](https://github.com/openshift/oc-mirror/pull/879)
* [OCPBUGS-33775](https://issues.redhat.com/browse/OCPBUGS-33775): Do not generate idms & itms if nothing has been mirrored (#871) [#871](https://github.com/openshift/oc-mirror/pull/871)
* [CLID-122](https://issues.redhat.com/browse/CLID-122): upgrades distribution/distribution for a released version (#864) (#868) [#864](https://github.com/openshift/oc-mirror/pull/864)
* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#863) [#863](https://github.com/openshift/oc-mirror/pull/863)
* [OCPBUGS-33081](https://issues.redhat.com/browse/OCPBUGS-33081): Skip images that don't follow standards, semver and naming (#861) [#861](https://github.com/openshift/oc-mirror/pull/861)
* [OCPBUGS-33196](https://issues.redhat.com/browse/OCPBUGS-33196): skip images with both tag and digest (#853) [#853](https://github.com/openshift/oc-mirror/pull/853)
* [OCPBUGS-31608](https://issues.redhat.com/browse/OCPBUGS-31608): Fix IDMS/ITMS generated source repository in case of empty namespace (#850) [#850](https://github.com/openshift/oc-mirror/pull/850)
* [OCPBUGS-31858](https://issues.redhat.com/browse/OCPBUGS-31858): CLID-97: Provide a way to skip failing images (#854) [#854](https://github.com/openshift/oc-mirror/pull/854)
* [OCPBUGS-31622](https://issues.redhat.com/browse/OCPBUGS-31622): Fix operator related image has empty reference (#851) [#851](https://github.com/openshift/oc-mirror/pull/851)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) [#852](https://github.com/openshift/oc-mirror/pull/852)
* [OCPBUGS-32547](https://issues.redhat.com/browse/OCPBUGS-32547): Fix delete generation for mirror to mirror flow (#848) [#848](https://github.com/openshift/oc-mirror/pull/848)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 - 2 (#847) [#847](https://github.com/openshift/oc-mirror/pull/847)
* Fix golint errors (#845) [#845](https://github.com/openshift/oc-mirror/pull/845)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 (#844) [#844](https://github.com/openshift/oc-mirror/pull/844)
* [OCPBUGS-33098](https://issues.redhat.com/browse/OCPBUGS-33098): feat: generates a file with errors during mirroring (#843) [#843](https://github.com/openshift/oc-mirror/pull/843)
* [OCPBUGS-31092](https://issues.redhat.com/browse/OCPBUGS-31092): Fix archive tar file size to respect the archiveSize setting when mirror with V2 format (#842) [#842](https://github.com/openshift/oc-mirror/pull/842)
* [OCPBUGS-31083](https://issues.redhat.com/browse/OCPBUGS-31083): Fix help for --strict-archive flag (#841) [#841](https://github.com/openshift/oc-mirror/pull/841)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix graph image mirroring during MirrorToDisk (#840) [#840](https://github.com/openshift/oc-mirror/pull/840)
* [CLID-63](https://issues.redhat.com/browse/CLID-63): moves pkg dir to internal dir (#839) [#839](https://github.com/openshift/oc-mirror/pull/839)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix TlsVerify always set to false (#838) [#838](https://github.com/openshift/oc-mirror/pull/838)
* [CLID-80](https://issues.redhat.com/browse/CLID-80): changes README.md (#837) [#837](https://github.com/openshift/oc-mirror/pull/837)
* Exit if release is unsigned (#834) [#834](https://github.com/openshift/oc-mirror/pull/834)
* OCPBUGS-23479 (#835) [#835](https://github.com/openshift/oc-mirror/pull/835)
* [CLID-81](https://issues.redhat.com/browse/CLID-81): refines v2 --help (#836) [#836](https://github.com/openshift/oc-mirror/pull/836)
* CLID5: Create API v2alpha1 for oc-mirror v2 TP (#830) [#830](https://github.com/openshift/oc-mirror/pull/830)
* [CLID-19](https://issues.redhat.com/browse/CLID-19): Replace the prepare subcommand by dry-run flag (#829) [#829](https://github.com/openshift/oc-mirror/pull/829)
* CLID-95 removes the concurrency and adds a progress bar on batch pkg (#832) [#832](https://github.com/openshift/oc-mirror/pull/832)
* [CLID-53](https://issues.redhat.com/browse/CLID-53): Introduce env var to provide OCP release signature verification key (#831) [#831](https://github.com/openshift/oc-mirror/pull/831)
* [CLID-35](https://issues.redhat.com/browse/CLID-35): introduce filtering operators by selecting specific bundles (#824) [#824](https://github.com/openshift/oc-mirror/pull/824)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024), [OCPBUGS-31529](https://issues.redhat.com/browse/OCPBUGS-31529), [OCPBUGS-31530](https://issues.redhat.com/browse/OCPBUGS-31530): Remove creationTimestamp from the generated yaml catalogSource (#826) [#826](https://github.com/openshift/oc-mirror/pull/826)
* [CLID-46](https://issues.redhat.com/browse/CLID-46), [CLID-47](https://issues.redhat.com/browse/CLID-47): Use of TargetCatalog and TargetTag on all catalogs (#827) [#827](https://github.com/openshift/oc-mirror/pull/827)
* [CLID-20](https://issues.redhat.com/browse/CLID-20): feat: Delete functionality for v2 enclave support (#812) [#812](https://github.com/openshift/oc-mirror/pull/812)
* [CLID-85](https://issues.redhat.com/browse/CLID-85): Change string replacement in registry config to use templates (#828) [#828](https://github.com/openshift/oc-mirror/pull/828)
* [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#815) [#815](https://github.com/openshift/oc-mirror/pull/815)
* Bump version to include v5.11.0 of go-git (#821) [#821](https://github.com/openshift/oc-mirror/pull/821)
* [CLID-54](https://issues.redhat.com/browse/CLID-54): Mirror to mirror workflow (#811) [#811](https://github.com/openshift/oc-mirror/pull/811)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024): Ommit icon from catalogSource if empty (#816) [#816](https://github.com/openshift/oc-mirror/pull/816)
* [OCPBUGS-31344](https://issues.redhat.com/browse/OCPBUGS-31344): fix: issue when different versions of the same operator catalog (#820) [#820](https://github.com/openshift/oc-mirror/pull/820)
* [OCPBUGS-31084](https://issues.redhat.com/browse/OCPBUGS-31084): feat: changes the code to have retro-compatible version command with v1 (#817) [#817](https://github.com/openshift/oc-mirror/pull/817)
* [CLID-8](https://issues.redhat.com/browse/CLID-8): Initial E2E test (#798) [#798](https://github.com/openshift/oc-mirror/pull/798)
* [OCPBUGS-19853](https://issues.redhat.com/browse/OCPBUGS-19853): improve support for multiarch (#813) [#813](https://github.com/openshift/oc-mirror/pull/813)
* [CLID-17](https://issues.redhat.com/browse/CLID-17): feat: docker v2s2 manifest list (fat manifest) / oci image index implementation (#810) [#810](https://github.com/openshift/oc-mirror/pull/810)
* [CLID-70](https://issues.redhat.com/browse/CLID-70): fix: issue when mirroring multiple catalogs (#807) [#807](https://github.com/openshift/oc-mirror/pull/807)
* [CLID-67](https://issues.redhat.com/browse/CLID-67): feat: adds --v1 flag to redirect to legacy code (#806) [#806](https://github.com/openshift/oc-mirror/pull/806)
* [CLID-27](https://issues.redhat.com/browse/CLID-27): Update to include oci (disk based layout) for v2 (#800) [#800](https://github.com/openshift/oc-mirror/pull/800)
* changes to support pulling charts from URL (#723) [#723](https://github.com/openshift/oc-mirror/pull/723)
* [CLID-9](https://issues.redhat.com/browse/CLID-9): feat: hide unnecessary flags (#801) [#801](https://github.com/openshift/oc-mirror/pull/801)
* [CLID-7](https://issues.redhat.com/browse/CLID-7): feat: load operator catalog using LoadFS (#799) [#799](https://github.com/openshift/oc-mirror/pull/799)
* [CLID-24](https://issues.redhat.com/browse/CLID-24), [CLID-9](https://issues.redhat.com/browse/CLID-9): Support incremental mirroring using archives by date (#795) [#795](https://github.com/openshift/oc-mirror/pull/795)
* [CLID-21](https://issues.redhat.com/browse/CLID-21), [CLID-22](https://issues.redhat.com/browse/CLID-22), [CLID-9](https://issues.redhat.com/browse/CLID-9): Respect archive max size (#789) [#789](https://github.com/openshift/oc-mirror/pull/789)
* Fix documentation diagram (#792) [#792](https://github.com/openshift/oc-mirror/pull/792)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): feat: operator catalog filtering on v2 (#787) [#787](https://github.com/openshift/oc-mirror/pull/787)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate CatalogSource files (#784) [#784](https://github.com/openshift/oc-mirror/pull/784)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate ITMS along with IDMS (#781) [#781](https://github.com/openshift/oc-mirror/pull/781)
* [CLID-30](https://issues.redhat.com/browse/CLID-30): Update overall code coverage in v2 (#783) [#783](https://github.com/openshift/oc-mirror/pull/783)
* Make EnclaveSupport a DevPreview (#788) [#788](https://github.com/openshift/oc-mirror/pull/788)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: adds 2 new scenarios (#785) [#785](https://github.com/openshift/oc-mirror/pull/785)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: add 3 new scenarios for catalog filtering (#782) [#782](https://github.com/openshift/oc-mirror/pull/782)
* [OCPBUGS-26513](https://issues.redhat.com/browse/OCPBUGS-26513): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) [#772](https://github.com/openshift/oc-mirror/pull/772)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): Add study results in docs (#778) [#778](https://github.com/openshift/oc-mirror/pull/778)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both binaries for rhel8 and rhel9 (#767) [#767](https://github.com/openshift/oc-mirror/pull/767)
* Add documentation for enclave support (#771) [#771](https://github.com/openshift/oc-mirror/pull/771)
* [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#773) [#773](https://github.com/openshift/oc-mirror/pull/773)
* Fix to ensure operator not found error exits with correct status (#770) [#770](https://github.com/openshift/oc-mirror/pull/770)
* Fix to ensure tar sequence is ignored using --skip-pruning (#760) [#760](https://github.com/openshift/oc-mirror/pull/760)
* Updating oc-mirror-plugin-container image to be consistent with ART (#763) [#763](https://github.com/openshift/oc-mirror/pull/763)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-21865](https://issues.redhat.com/browse/OCPBUGS-21865): Honor IncludeChannel.MaxVersion when mirroring differentially (#761) [#761](https://github.com/openshift/oc-mirror/pull/761)
* [OCPBUGS-24357](https://issues.redhat.com/browse/OCPBUGS-24357): Move logs folder under workingDir (#750) [#750](https://github.com/openshift/oc-mirror/pull/750)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#753) [#753](https://github.com/openshift/oc-mirror/pull/753)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): - oc-mirror on RHEL9 Host with FIPS enabled (#751) [#751](https://github.com/openshift/oc-mirror/pull/751)
* Add generation of updateService.yaml (#746) [#746](https://github.com/openshift/oc-mirror/pull/746)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#752) [#752](https://github.com/openshift/oc-mirror/pull/752)
* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#748) [#748](https://github.com/openshift/oc-mirror/pull/748)
* Make A.Guidi approver on oc-mirror (#755) [#755](https://github.com/openshift/oc-mirror/pull/755)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91f573c771182f7fd4a2d3513ed49562dee6b38...819f0115e4be3f55ed7d4edae1c38035811771ae)
### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/79975a511e1d31a09ef9b3b9e01262c8c69ff633)
* [OCPBUGS-31286](https://issues.redhat.com/browse/OCPBUGS-31286): Updating ose-olm-catalogd-container image to be consistent with ART for 4.16 [#48](https://github.com/openshift/operator-framework-catalogd/pull/48)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#47](https://github.com/openshift/operator-framework-catalogd/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-catalogd/pull/46)
* [OCPBUGS-29453](https://issues.redhat.com/browse/OCPBUGS-29453): UPSTREAM: 231: make garbage collection a runnable [#42](https://github.com/openshift/operator-framework-catalogd/pull/42)
* NO-ISSUE: Remove ncdc from OWNERS [#41](https://github.com/openshift/operator-framework-catalogd/pull/41)
* NO-ISSUE: Synchronize From Upstream Repositories [#38](https://github.com/openshift/operator-framework-catalogd/pull/38)
* [OCPBUGS-25172](https://issues.redhat.com/browse/OCPBUGS-25172): Updating ose-olm-catalogd-container image to be consistent with ART [#37](https://github.com/openshift/operator-framework-catalogd/pull/37)
* NO-JIRA: add tmshort to approvers [#34](https://github.com/openshift/operator-framework-catalogd/pull/34)
* [OCPBUGS-24806](https://issues.redhat.com/browse/OCPBUGS-24806): Updating ose-olm-catalogd-container image to be consistent with ART [#36](https://github.com/openshift/operator-framework-catalogd/pull/36)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd...79975a511e1d31a09ef9b3b9e01262c8c69ff633)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/80b8649cf7a57098d03eff0d155531cf63728f41)
* NO-ISSUE: Synchronize From Upstream Repositories [#102](https://github.com/openshift/operator-framework-operator-controller/pull/102)
* NO-ISSUE: Synchronize From Upstream Repositories [#101](https://github.com/openshift/operator-framework-operator-controller/pull/101)
* NO-ISSUE: Synchronize From Upstream Repositories [#99](https://github.com/openshift/operator-framework-operator-controller/pull/99)
* [OCPBUGS-31459](https://issues.redhat.com/browse/OCPBUGS-31459): Synchronize From Upstream Repositories [#97](https://github.com/openshift/operator-framework-operator-controller/pull/97)
* [OPRUN-3268](https://issues.redhat.com/browse/OPRUN-3268): Add pointer to tooling README for downstreaming info [#94](https://github.com/openshift/operator-framework-operator-controller/pull/94)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#89](https://github.com/openshift/operator-framework-operator-controller/pull/89)
* NO-ISSUE: Synchronize From Upstream Repositories [#92](https://github.com/openshift/operator-framework-operator-controller/pull/92)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#91](https://github.com/openshift/operator-framework-operator-controller/pull/91)
* NO-ISSUE: Synchronize From Upstream Repositories [#90](https://github.com/openshift/operator-framework-operator-controller/pull/90)
* NO-ISSUE: Synchronize From Upstream Repositories [#88](https://github.com/openshift/operator-framework-operator-controller/pull/88)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#86](https://github.com/openshift/operator-framework-operator-controller/pull/86)
* NO-ISSUE: Synchronize From Upstream Repositories [#87](https://github.com/openshift/operator-framework-operator-controller/pull/87)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-operator-controller/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-operator-controller/pull/83)
* NO-ISSUE: Synchronize From Upstream Repositories [#82](https://github.com/openshift/operator-framework-operator-controller/pull/82)
* NO-ISSUE: Synchronize From Upstream Repositories [#81](https://github.com/openshift/operator-framework-operator-controller/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-operator-controller/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#79](https://github.com/openshift/operator-framework-operator-controller/pull/79)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-operator-controller/pull/78)
* NO-ISSUE: Synchronize From Upstream Repositories [#77](https://github.com/openshift/operator-framework-operator-controller/pull/77)
* NO-ISSUE: Synchronize From Upstream Repositories [#76](https://github.com/openshift/operator-framework-operator-controller/pull/76)
* NO-ISSUE: Synchronize From Upstream Repositories [#75](https://github.com/openshift/operator-framework-operator-controller/pull/75)
* NO-ISSUE: Synchronize From Upstream Repositories [#74](https://github.com/openshift/operator-framework-operator-controller/pull/74)
* NO-ISSUE: Synchronize From Upstream Repositories [#73](https://github.com/openshift/operator-framework-operator-controller/pull/73)
* NO-ISSUE: Synchronize From Upstream Repositories [#72](https://github.com/openshift/operator-framework-operator-controller/pull/72)
* NO-ISSUE: Synchronize From Upstream Repositories [#70](https://github.com/openshift/operator-framework-operator-controller/pull/70)
* NO-ISSUE: Synchronize From Upstream Repositories [#67](https://github.com/openshift/operator-framework-operator-controller/pull/67)
* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-operator-controller/pull/66)
* NO-ISSUE: Synchronize From Upstream Repositories [#65](https://github.com/openshift/operator-framework-operator-controller/pull/65)
* NO-ISSUE: Synchronize From Upstream Repositories [#64](https://github.com/openshift/operator-framework-operator-controller/pull/64)
* NO-ISSUE: Synchronize From Upstream Repositories [#63](https://github.com/openshift/operator-framework-operator-controller/pull/63)
* NO-ISSUE: Synchronize From Upstream Repositories [#62](https://github.com/openshift/operator-framework-operator-controller/pull/62)
* NO-ISSUE: Synchronize From Upstream Repositories [#61](https://github.com/openshift/operator-framework-operator-controller/pull/61)
* NO-ISSUE: Synchronize From Upstream Repositories [#60](https://github.com/openshift/operator-framework-operator-controller/pull/60)
* NO-ISSUE: Synchronize From Upstream Repositories [#59](https://github.com/openshift/operator-framework-operator-controller/pull/59)
* [OCPBUGS-24795](https://issues.redhat.com/browse/OCPBUGS-24795): Updating ose-olm-operator-controller-container image to be consistent with ART [#51](https://github.com/openshift/operator-framework-operator-controller/pull/51)
* NO-ISSUE: Synchronize From Upstream Repositories [#56](https://github.com/openshift/operator-framework-operator-controller/pull/56)
* NO-ISSUE: Synchronize From Upstream Repositories [#55](https://github.com/openshift/operator-framework-operator-controller/pull/55)
* NO-ISSUE: Synchronize From Upstream Repositories [#54](https://github.com/openshift/operator-framework-operator-controller/pull/54)
* NO-ISSUE: Synchronize From Upstream Repositories [#53](https://github.com/openshift/operator-framework-operator-controller/pull/53)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/303b954fa5a92e810aebbe55ab8fafe8dbc06c58...80b8649cf7a57098d03eff0d155531cf63728f41)
### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-rukpak/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-rukpak/pull/83)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#82](https://github.com/openshift/operator-framework-rukpak/pull/82)
* [OCPBUGS-31278](https://issues.redhat.com/browse/OCPBUGS-31278): Updating ose-olm-rukpak-container image to be consistent with ART for 4.16 [#81](https://github.com/openshift/operator-framework-rukpak/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-rukpak/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-rukpak/pull/78)
* NO-ISSUE: UPSTREAM: <carry>: Remove ncdc from OWNERS [#74](https://github.com/openshift/operator-framework-rukpak/pull/74)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): Synchronize From Upstream Repositories [#69](https://github.com/openshift/operator-framework-rukpak/pull/69)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): UPSTREAM: revert "UPSTREAM: <carry>: Update go-git to v5.11.0" [#71](https://github.com/openshift/operator-framework-rukpak/pull/71)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): [Upstream]: <carry>: Update go-git to v5.11.0 [#70](https://github.com/openshift/operator-framework-rukpak/pull/70)
* [OCPBUGS-25535](https://issues.redhat.com/browse/OCPBUGS-25535): Updating ose-olm-rukpak-container image to be consistent with ART [#68](https://github.com/openshift/operator-framework-rukpak/pull/68)
* [OCPBUGS-24825](https://issues.redhat.com/browse/OCPBUGS-24825): Updating ose-olm-rukpak-container image to be consistent with ART [#67](https://github.com/openshift/operator-framework-rukpak/pull/67)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3...282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f09402cfac07d6e5040ac8b6f068703eba3c700f)
* [OCPBUGS-42724](https://issues.redhat.com/browse/OCPBUGS-42724): fail image import when both image and error are nil [#455](https://github.com/openshift/openshift-apiserver/pull/455)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): Bump library-go [#434](https://github.com/openshift/openshift-apiserver/pull/434)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): Bump openshift/api for Route API godoc fix [#433](https://github.com/openshift/openshift-apiserver/pull/433)
* [CFE-885](https://issues.redhat.com/browse/CFE-885): Feature route external certificate validation [#407](https://github.com/openshift/openshift-apiserver/pull/407)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): remove unauthenticated group from any cluster role binding [#423](https://github.com/openshift/openshift-apiserver/pull/423)
* [OCPBUGS-31957](https://issues.redhat.com/browse/OCPBUGS-31957): Bump golang/x/net to v0.23.0 [#427](https://github.com/openshift/openshift-apiserver/pull/427)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): make GarbageCollection supported for ClusterResourceQuotas as it is backed by a CRD [#405](https://github.com/openshift/openshift-apiserver/pull/405)
* [CFE-1048](https://issues.redhat.com/browse/CFE-1048): Bump Kubernetes to 1.29.2 [#425](https://github.com/openshift/openshift-apiserver/pull/425)
* NO-ISSUE: go mod tidy && go mod vendor [#420](https://github.com/openshift/openshift-apiserver/pull/420)
* [OCPBUGS-30279](https://issues.redhat.com/browse/OCPBUGS-30279): vendor upgrade runtime-utils [#419](https://github.com/openshift/openshift-apiserver/pull/419)
* [OCPBUGS-27927](https://issues.redhat.com/browse/OCPBUGS-27927): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 [#415](https://github.com/openshift/openshift-apiserver/pull/415)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#410](https://github.com/openshift/openshift-apiserver/pull/410)
* [OCPBUGS-24895](https://issues.redhat.com/browse/OCPBUGS-24895): Updating ose-openshift-apiserver-container image to be consistent with ART [#409](https://github.com/openshift/openshift-apiserver/pull/409)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/08f4c422eed5d9584799244c0d9755708686c0c8...f09402cfac07d6e5040ac8b6f068703eba3c700f)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/05ca43957983cd8ea5a5890c5271d7cb228ecdd0)
* NO-JIRA: cleanup root and app OWNERS [#347](https://github.com/openshift/openshift-controller-manager/pull/347)
* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#343](https://github.com/openshift/openshift-controller-manager/pull/343)
* [OCPBUGS-39191](https://issues.redhat.com/browse/OCPBUGS-39191): replaces deprecated square/go-jose wtih go-jose/go-jose [#329](https://github.com/openshift/openshift-controller-manager/pull/329)
* [OCPBUGS-37526](https://issues.redhat.com/browse/OCPBUGS-37526): Race condition when deleting ServiceAccount [#324](https://github.com/openshift/openshift-controller-manager/pull/324)
* [OCPBUGS-36862](https://issues.redhat.com/browse/OCPBUGS-36862): 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#323](https://github.com/openshift/openshift-controller-manager/pull/323)
* [OCPBUGS-34825](https://issues.redhat.com/browse/OCPBUGS-34825): Whitelists lower-case proxy envs to pod proxydefaults [#314](https://github.com/openshift/openshift-controller-manager/pull/314)
* [OCPBUGS-33893](https://issues.redhat.com/browse/OCPBUGS-33893): openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets [#309](https://github.com/openshift/openshift-controller-manager/pull/309)
* [OCPBUGS-33876](https://issues.redhat.com/browse/OCPBUGS-33876): filter delete events [#308](https://github.com/openshift/openshift-controller-manager/pull/308)
* [OCPBUGS-33600](https://issues.redhat.com/browse/OCPBUGS-33600): revert revert and fix for hypershift [#305](https://github.com/openshift/openshift-controller-manager/pull/305)
* Revert #288 "API-1644: Use bound service account tokens when generating pull secrets" [#304](https://github.com/openshift/openshift-controller-manager/pull/304)
* [API-1644](https://issues.redhat.com/browse/API-1644): Use bound service account tokens when generating pull secrets [#288](https://github.com/openshift/openshift-controller-manager/pull/288)
* [OCPBUGS-33241](https://issues.redhat.com/browse/OCPBUGS-33241): panic in image trigger controller [#302](https://github.com/openshift/openshift-controller-manager/pull/302)
* [OCPBUGS-30688](https://issues.redhat.com/browse/OCPBUGS-30688): bump go-jose to fix CVE-2024-28176 [#297](https://github.com/openshift/openshift-controller-manager/pull/297)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds roleBinding controllers to the controllerInitializers [#296](https://github.com/openshift/openshift-controller-manager/pull/296)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade [#300](https://github.com/openshift/openshift-controller-manager/pull/300)
* [TRT-1632](https://issues.redhat.com/browse/TRT-1632): Revert #298 "OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade." [#301](https://github.com/openshift/openshift-controller-manager/pull/301)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade. [#298](https://github.com/openshift/openshift-controller-manager/pull/298)
* [OCPBUGS-31213](https://issues.redhat.com/browse/OCPBUGS-31213): Unable to look up the service account secrets for build [#292](https://github.com/openshift/openshift-controller-manager/pull/292)
* [BUILD-725](https://issues.redhat.com/browse/BUILD-725): Adds build & deployer controller [#289](https://github.com/openshift/openshift-controller-manager/pull/289)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps otelgrpc version & dependencies [#293](https://github.com/openshift/openshift-controller-manager/pull/293)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#290](https://github.com/openshift/openshift-controller-manager/pull/290)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#283](https://github.com/openshift/openshift-controller-manager/pull/283)
* [OCPBUGS-28665](https://issues.redhat.com/browse/OCPBUGS-28665): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#284](https://github.com/openshift/openshift-controller-manager/pull/284)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f2afd434358966ccc09f55d4915d2689ed2cb1b6...05ca43957983cd8ea5a5890c5271d7cb228ecdd0)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/59b8a0ffc0a472e819e0c30911201c34c85a4684)
* [OCPBUGS-24878](https://issues.redhat.com/browse/OCPBUGS-24878): Updating openshift-state-metrics-container image to be consistent with ART [#112](https://github.com/openshift/openshift-state-metrics/pull/112)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/1915f64591a18c11138d10c00c50b3f5cff632ce...59b8a0ffc0a472e819e0c30911201c34c85a4684)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7)
* [OCPBUGS-35730](https://issues.redhat.com/browse/OCPBUGS-35730): Add config map hooks [#174](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/174)
* [OCPBUGS-34882](https://issues.redhat.com/browse/OCPBUGS-34882): Correct out-of-bounds check [#171](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/171)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#166](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/166)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healtcheck for node-registrar [#161](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/161)
* [OCPBUGS-30951](https://issues.redhat.com/browse/OCPBUGS-30951): Relax requirement to enable topology [#164](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/164)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#159](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/159)
* [OCPBUGS-28937](https://issues.redhat.com/browse/OCPBUGS-28937): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 [#160](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/160)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#158](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/158)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#155](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/155)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#152](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/152)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#151](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/151)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#150](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/150)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#149](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/149)
* [OCPBUGS-24844](https://issues.redhat.com/browse/OCPBUGS-24844): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#145](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/145)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#146](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/146)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d0c24077b4e4ac1e00a6a529a814066cd9b5521c...85b52097dda6b8a5f64ceb662d477a9ae28c4ca7)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/10aa50e3b19a233c77f18fe6aa616e03874fa511)
* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): rebase on release-0.10 (to fix trunks deletion) [#321](https://github.com/openshift/cluster-api-provider-openstack/pull/321)
* [OCPBUGS-37967](https://issues.redhat.com/browse/OCPBUGS-37967): rebase CAPO for 4.16 [#319](https://github.com/openshift/cluster-api-provider-openstack/pull/319)
* NO-JIRA: Bump to latest CAPO v0.10 [#312](https://github.com/openshift/cluster-api-provider-openstack/pull/312)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): openshift: Set FallbackToLogsOnError on infra-cluster controller [#311](https://github.com/openshift/cluster-api-provider-openstack/pull/311)
* [OSASINFRA-3437](https://issues.redhat.com/browse/OSASINFRA-3437): Rebase on CAPO v0.10 [#305](https://github.com/openshift/cluster-api-provider-openstack/pull/305)
* [OCPBUGS-31277](https://issues.redhat.com/browse/OCPBUGS-31277): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 [#301](https://github.com/openshift/cluster-api-provider-openstack/pull/301)
* 🐛 Persist API FloatingIP immediately on creation [#1831](https://github.com/openshift/cluster-api-provider-openstack/pull/1831)
* :bug: Fix patching OpenstackMachine's immutable spec during reconcile [#1819](https://github.com/openshift/cluster-api-provider-openstack/pull/1819)
* ✨ Add flags for configuring rate limits [#1817](https://github.com/openshift/cluster-api-provider-openstack/pull/1817)
* :bug: Fix potential panic during instance create [#1806](https://github.com/openshift/cluster-api-provider-openstack/pull/1806)
* 🐛 Revert "Move FloatingIP to Bastion spec" [#1783](https://github.com/openshift/cluster-api-provider-openstack/pull/1783)
* 🌱 Import CAPI v1.6.0 [#1780](https://github.com/openshift/cluster-api-provider-openstack/pull/1780)
* 🌱 Bump version artifacts for release-0.9 [#1775](https://github.com/openshift/cluster-api-provider-openstack/pull/1775)
* 🐛 Verify success of parsing OpenStack cloud cacert [#1770](https://github.com/openshift/cluster-api-provider-openstack/pull/1770)
* 📖 Fix network-related docs for API v1alpha7 [#1764](https://github.com/openshift/cluster-api-provider-openstack/pull/1764)
* 🌱 Remove Containerfile and Dockerfile experimental [#1760](https://github.com/openshift/cluster-api-provider-openstack/pull/1760)
* 🌱 Fix log message typo [#1758](https://github.com/openshift/cluster-api-provider-openstack/pull/1758)
* 🐛 Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 [#1754](https://github.com/openshift/cluster-api-provider-openstack/pull/1754)
* 🐛Fix missing endpoint type in OpenStack endpoint clients configuration [#1744](https://github.com/openshift/cluster-api-provider-openstack/pull/1744)
* ✨remove flavor check to relief restrictions to CPU [#1745](https://github.com/openshift/cluster-api-provider-openstack/pull/1745)
* ⚠️ Move FloatingIP to Bastion spec [#1739](https://github.com/openshift/cluster-api-provider-openstack/pull/1739)
* ⚠️ Bump Go to 1.20.10 [#1740](https://github.com/openshift/cluster-api-provider-openstack/pull/1740)
* ✨ Add ephemeral storage support to the AdditionalBlockDevices [#1696](https://github.com/openshift/cluster-api-provider-openstack/pull/1696)
* ✨ Use kustomize new syntax for patches [#1735](https://github.com/openshift/cluster-api-provider-openstack/pull/1735)
* ✨ Add cache on provider scope [#1688](https://github.com/openshift/cluster-api-provider-openstack/pull/1688)
* 🌱 deps: Bump dependencies [#1733](https://github.com/openshift/cluster-api-provider-openstack/pull/1733)
* 🌱 Enable k8s upgrade in self hosted test [#1732](https://github.com/openshift/cluster-api-provider-openstack/pull/1732)
* 🌱 Use k8s v1.28 in tests [#1723](https://github.com/openshift/cluster-api-provider-openstack/pull/1723)
* 🐛 Don't remove BYO api server loadbalancer floating IP [#1728](https://github.com/openshift/cluster-api-provider-openstack/pull/1728)
* 🌱 Replace kustomize vars with replacements [#1726](https://github.com/openshift/cluster-api-provider-openstack/pull/1726)
* 🌱 e2e: dump cinder volumes [#1722](https://github.com/openshift/cluster-api-provider-openstack/pull/1722)
* 🌱 Ignore go workspaces [#1724](https://github.com/openshift/cluster-api-provider-openstack/pull/1724)
* 🌱 E2e: Use pre-build node images [#1699](https://github.com/openshift/cluster-api-provider-openstack/pull/1699)
* ✨ Add option to customize private network MTU [#1701](https://github.com/openshift/cluster-api-provider-openstack/pull/1701)
* :seedling: ci: bump Flatcar tested version [#1713](https://github.com/openshift/cluster-api-provider-openstack/pull/1713)
* 🌱 ci: Several CI fixes [#1718](https://github.com/openshift/cluster-api-provider-openstack/pull/1718)
* ✨ Add server name for the Machine InternalDNS [#1715](https://github.com/openshift/cluster-api-provider-openstack/pull/1715)
* 🌱 Bump devstack image to ubuntu 22.04 [#1716](https://github.com/openshift/cluster-api-provider-openstack/pull/1716)
* 🌱 Add explicit dependency on github.com/golang/mock/mockgen/model [#1712](https://github.com/openshift/cluster-api-provider-openstack/pull/1712)
* 🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests [#1710](https://github.com/openshift/cluster-api-provider-openstack/pull/1710)
* 🌱 Ignore vendor directories in boilerplate check [#1709](https://github.com/openshift/cluster-api-provider-openstack/pull/1709)
* 🌱 Build setup-envtest in hack/tools [#1707](https://github.com/openshift/cluster-api-provider-openstack/pull/1707)
* 🌱 Bump ginkgo [#1705](https://github.com/openshift/cluster-api-provider-openstack/pull/1705)
* :sparkles: Additional data volumes for machines [#1668](https://github.com/openshift/cluster-api-provider-openstack/pull/1668)
* 🌱 gitignore: ignore vendor/ directory [#1690](https://github.com/openshift/cluster-api-provider-openstack/pull/1690)
* 🌱 Move webhook CA injection into webhook resource [#1686](https://github.com/openshift/cluster-api-provider-openstack/pull/1686)
* Update Gophercloud to 1.7.0 [#1682](https://github.com/openshift/cluster-api-provider-openstack/pull/1682)
* 🐛 Only delete all ports when deleting cluster network [#1680](https://github.com/openshift/cluster-api-provider-openstack/pull/1680)
* :book: Clarify release notes content for releases and pre-releases [#1678](https://github.com/openshift/cluster-api-provider-openstack/pull/1678)
* 🌱 Remove defaulter-gen [#1677](https://github.com/openshift/cluster-api-provider-openstack/pull/1677)
* :book: doc/development: add devstack notes [#1569](https://github.com/openshift/cluster-api-provider-openstack/pull/1569)
* 🌱 Add test for getOrCreate [#1673](https://github.com/openshift/cluster-api-provider-openstack/pull/1673)
* Set failure only on instance error when no nodeRef [#1637](https://github.com/openshift/cluster-api-provider-openstack/pull/1637)
* 🌱Fix various issues with CRD generation [#1669](https://github.com/openshift/cluster-api-provider-openstack/pull/1669)
* ✨Allow changing allowAllInClusterTraffic in a deployed cluster [#1663](https://github.com/openshift/cluster-api-provider-openstack/pull/1663)
* avoid duplicate error event [#1655](https://github.com/openshift/cluster-api-provider-openstack/pull/1655)
* 🌱Bump CAPI to v1.5.1 [#1666](https://github.com/openshift/cluster-api-provider-openstack/pull/1666)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/232472ea527aa86764d93e77dc67b0c7db9cc050...10aa50e3b19a233c77f18fe6aa616e03874fa511)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5ada1cbab3a9354488b1e74e85c36285302c3382)
* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): bump CAPO to v0.9.2 [#124](https://github.com/openshift/machine-api-provider-openstack/pull/124)
* [OCPBUGS-34158](https://issues.redhat.com/browse/OCPBUGS-34158): Failure to get bootstrap is non-fatal [#115](https://github.com/openshift/machine-api-provider-openstack/pull/115)
* [OCPBUGS-34155](https://issues.redhat.com/browse/OCPBUGS-34155): Fix panic deleting Machine in ERROR state [#114](https://github.com/openshift/machine-api-provider-openstack/pull/114)
* [OCPBUGS-30855](https://issues.redhat.com/browse/OCPBUGS-30855): Ensure portSecurity is correctly set in the Port [#107](https://github.com/openshift/machine-api-provider-openstack/pull/107)
* [OCPBUGS-24904](https://issues.redhat.com/browse/OCPBUGS-24904): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#100](https://github.com/openshift/machine-api-provider-openstack/pull/100)
* [OSASINFRA-3368](https://issues.redhat.com/browse/OSASINFRA-3368): Revendor CAPO [#103](https://github.com/openshift/machine-api-provider-openstack/pull/103)
* NO-JIRA: Stop setting logtostderr flag and rely on defaults [#102](https://github.com/openshift/machine-api-provider-openstack/pull/102)
* NO-JIRA: Add snyk configuration file [#101](https://github.com/openshift/machine-api-provider-openstack/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/396a09fffe401679f18e8a7db56c77bbf2dee246...5ada1cbab3a9354488b1e74e85c36285302c3382)
### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d718c4c564975f3d4fac468987c4424691201790)
* [OCPBUGS-44802](https://issues.redhat.com/browse/OCPBUGS-44802): fix: call TokenRequest API when service account token secret is missing [#900](https://github.com/openshift/operator-framework-olm/pull/900)
* [OCPBUGS-41540](https://issues.redhat.com/browse/OCPBUGS-41540): [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#859](https://github.com/openshift/operator-framework-olm/pull/859)
* [OCPBUGS-41677](https://issues.redhat.com/browse/OCPBUGS-41677): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#863](https://github.com/openshift/operator-framework-olm/pull/863)
* [OCPBUGS-41557](https://issues.redhat.com/browse/OCPBUGS-41557): Fix e2e flake: upgrade CRD with deprecated version [#861](https://github.com/openshift/operator-framework-olm/pull/861)
* [OCPBUGS-41217](https://issues.redhat.com/browse/OCPBUGS-41217): (fix) registry pods do not come up again after node failure (#3366) [#854](https://github.com/openshift/operator-framework-olm/pull/854)
* [OCPBUGS-38290](https://issues.redhat.com/browse/OCPBUGS-38290): [release-4.16] (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#838](https://github.com/openshift/operator-framework-olm/pull/838)
* [OCPBUGS-38129](https://issues.redhat.com/browse/OCPBUGS-38129): [release-4.16] Update junit report file name to show spec results on Test Grid [#833](https://github.com/openshift/operator-framework-olm/pull/833)
* [OCPBUGS-37456](https://issues.redhat.com/browse/OCPBUGS-37456): Updating ose-operator-framework-tools-container image to be consistent with ART for 4.16 [#826](https://github.com/openshift/operator-framework-olm/pull/826)
* [OCPBUGS-37559](https://issues.redhat.com/browse/OCPBUGS-37559): [release-4.16] Update e2e config and backport list of flakes [#814](https://github.com/openshift/operator-framework-olm/pull/814)
* [OCPBUGS-37018](https://issues.redhat.com/browse/OCPBUGS-37018): Bump github.com/containers/image/v5 [#822](https://github.com/openshift/operator-framework-olm/pull/822)
* [OCPBUGS-36450](https://issues.redhat.com/browse/OCPBUGS-36450): Can't install operator on 4.15 after uninstalling it on a prior version [#809](https://github.com/openshift/operator-framework-olm/pull/809)
* [OCPBUGS-25019](https://issues.redhat.com/browse/OCPBUGS-25019): fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image [#793](https://github.com/openshift/operator-framework-olm/pull/793)
* [OCPBUGS-36137](https://issues.redhat.com/browse/OCPBUGS-36137): fix sorting unpack jobs [#799](https://github.com/openshift/operator-framework-olm/pull/799)
* [OCPBUGS-34979](https://issues.redhat.com/browse/OCPBUGS-34979): Updates default security context behavior for catalog source pods [#788](https://github.com/openshift/operator-framework-olm/pull/788)
* [OCPBUGS-36138](https://issues.redhat.com/browse/OCPBUGS-36138): perform operator apiService certificate validity checks directly [#798](https://github.com/openshift/operator-framework-olm/pull/798)
* [OCPBUGS-35373](https://issues.redhat.com/browse/OCPBUGS-35373): [release-4.16] Warn and allow CRD upgrade if validation fails but webhook is specified [#781](https://github.com/openshift/operator-framework-olm/pull/781)
* [OCPBUGS-35219](https://issues.redhat.com/browse/OCPBUGS-35219): Unblock CI [#767](https://github.com/openshift/operator-framework-olm/pull/767)
* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-olm/pull/741)
* NO-ISSUE: Synchronize From Upstream Repositories [#739](https://github.com/openshift/operator-framework-olm/pull/739)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#703](https://github.com/openshift/operator-framework-olm/pull/703)
* [OCPBUGS-31073](https://issues.redhat.com/browse/OCPBUGS-31073): Synchronize From Upstream Repositories [#737](https://github.com/openshift/operator-framework-olm/pull/737)
* NO-ISSUE: Synchronize From Upstream Repositories [#735](https://github.com/openshift/operator-framework-olm/pull/735)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#733](https://github.com/openshift/operator-framework-olm/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#734](https://github.com/openshift/operator-framework-olm/pull/734)
* NO-ISSUE: Synchronize From Upstream Repositories [#732](https://github.com/openshift/operator-framework-olm/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#729](https://github.com/openshift/operator-framework-olm/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#727](https://github.com/openshift/operator-framework-olm/pull/727)
* NO-ISSUE: Synchronize From Upstream Repositories [#723](https://github.com/openshift/operator-framework-olm/pull/723)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-olm/pull/722)
* [OCPBUGS-31080](https://issues.redhat.com/browse/OCPBUGS-31080), [OCPBUGS-31438](https://issues.redhat.com/browse/OCPBUGS-31438): Manual downstream sync [#719](https://github.com/openshift/operator-framework-olm/pull/719)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#720](https://github.com/openshift/operator-framework-olm/pull/720)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): rename from 'clis' to 'tools' [#718](https://github.com/openshift/operator-framework-olm/pull/718)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#700](https://github.com/openshift/operator-framework-olm/pull/700)
* NO-ISSUE: Synchronize From Upstream Repositories [#717](https://github.com/openshift/operator-framework-olm/pull/717)
* NO-ISSUE: Synchronize From Upstream Repositories [#716](https://github.com/openshift/operator-framework-olm/pull/716)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): image just as a cli source for mirror publishing [#713](https://github.com/openshift/operator-framework-olm/pull/713)
* NO-ISSUE: Semver lastedge error (#1169) [sync] [#714](https://github.com/openshift/operator-framework-olm/pull/714)
* [OCPBUGS-25019](https://issues.redhat.com/browse/OCPBUGS-25019): building rhel8/rhel9/static clis in payload image [#704](https://github.com/openshift/operator-framework-olm/pull/704)
* [OCPBUGS-30132](https://issues.redhat.com/browse/OCPBUGS-30132): Synchronize From Upstream Repositories [#709](https://github.com/openshift/operator-framework-olm/pull/709)
* [OCPBUGS-23744](https://issues.redhat.com/browse/OCPBUGS-23744): Wait for required RBAC before creating packageserver CSV [#708](https://github.com/openshift/operator-framework-olm/pull/708)
* NO-ISSUE: Synchronize From Upstream Repositories [#706](https://github.com/openshift/operator-framework-olm/pull/706)
* NO-ISSUE: Synchronize From Upstream Repositories [#702](https://github.com/openshift/operator-framework-olm/pull/702)
* NO-ISSUE: Synchronize From Upstream Repositories [#701](https://github.com/openshift/operator-framework-olm/pull/701)
* NO-ISSUE: Synchronize From Upstream Repositories [#695](https://github.com/openshift/operator-framework-olm/pull/695)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#697](https://github.com/openshift/operator-framework-olm/pull/697)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-olm/pull/693)
* NO-ISSUE: Synchronize From Upstream Repositories [#687](https://github.com/openshift/operator-framework-olm/pull/687)
* NO-ISSUE: Remove ncdc from OWNERS #68 [#681](https://github.com/openshift/operator-framework-olm/pull/681)
* [OCPBUGS-24587](https://issues.redhat.com/browse/OCPBUGS-24587), [OCPBUGS-28744](https://issues.redhat.com/browse/OCPBUGS-28744): Synchronize From Upstream Repositories [#679](https://github.com/openshift/operator-framework-olm/pull/679)
* NO-ISSUE: Synchronize From Upstream Repositories [#678](https://github.com/openshift/operator-framework-olm/pull/678)
* NO-ISSUE: Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-olm/pull/676)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-olm/pull/667)
* [OCPBUGS-27140](https://issues.redhat.com/browse/OCPBUGS-27140): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 [#658](https://github.com/openshift/operator-framework-olm/pull/658)
* [OCPBUGS-25989](https://issues.redhat.com/browse/OCPBUGS-25989): Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-olm/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-olm/pull/659)
* [OCPBUGS-25262](https://issues.redhat.com/browse/OCPBUGS-25262): Updating operator-registry-container image to be consistent with ART for 4.16 [#657](https://github.com/openshift/operator-framework-olm/pull/657)
* [OCPBUGS-24526](https://issues.redhat.com/browse/OCPBUGS-24526), [OPRUN-3182](https://issues.redhat.com/browse/OPRUN-3182): Sync with upstream [#654](https://github.com/openshift/operator-framework-olm/pull/654)
* [OCPBUGS-24994](https://issues.redhat.com/browse/OCPBUGS-24994): Updating operator-lifecycle-manager-container image to be consistent with ART [#631](https://github.com/openshift/operator-framework-olm/pull/631)
* NO-ISSUE: Synchronize From Upstream Repositories [#650](https://github.com/openshift/operator-framework-olm/pull/650)
* NO-ISSUE: Synchronize From Upstream Repositories [#646](https://github.com/openshift/operator-framework-olm/pull/646)
* [OCPBUGS-25673](https://issues.redhat.com/browse/OCPBUGS-25673): NO-ISSUE: Synchronize From Upstream Repositories [#641](https://github.com/openshift/operator-framework-olm/pull/641)
* NO-ISSUE: Synchronize From Upstream Repositories [#627](https://github.com/openshift/operator-framework-olm/pull/627)
* NO-ISSUE: Update verified directories for microshift-manifests [#638](https://github.com/openshift/operator-framework-olm/pull/638)
* [OCPBUGS-25339](https://issues.redhat.com/browse/OCPBUGS-25339): [CARRY] Fix panic issue when annotations map is nil [#634](https://github.com/openshift/operator-framework-olm/pull/634)
* [OCPBUGS-24942](https://issues.redhat.com/browse/OCPBUGS-24942): Updating operator-registry-container image to be consistent with ART [#630](https://github.com/openshift/operator-framework-olm/pull/630)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/2a0924f9655371f636d16b60e9ae7e49934c5640...d718c4c564975f3d4fac468987c4424691201790)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
* [OCPBUGS-24971](https://issues.redhat.com/browse/OCPBUGS-24971): bump golang to 1.21 [#560](https://github.com/operator-framework/operator-marketplace/pull/560)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#561](https://github.com/operator-framework/operator-marketplace/pull/561)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#559](https://github.com/operator-framework/operator-marketplace/pull/559)
* [OCPBUGS-29575](https://issues.redhat.com/browse/OCPBUGS-29575): Apply hypershift cluster-profile for ibm-cloud-managed [#556](https://github.com/operator-framework/operator-marketplace/pull/556)
* [OPECO-3031](https://issues.redhat.com/browse/OPECO-3031): Update community index to 4.16 [#558](https://github.com/operator-framework/operator-marketplace/pull/558)
* synching dco policy across v0 repos [#557](https://github.com/operator-framework/operator-marketplace/pull/557)
* [OPECO-3029](https://issues.redhat.com/browse/OPECO-3029): Update image tag to 4.16 for all indexes except community-operators [#555](https://github.com/operator-framework/operator-marketplace/pull/555)
* Delete deploy dir [#529](https://github.com/operator-framework/operator-marketplace/pull/529)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/1f1bc1988527f01b7326f63953aacbd400fd8426...7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/1db726a940d5ec150fd185a215f1368990653082)
* [OCPBUGS-24868](https://issues.redhat.com/browse/OCPBUGS-24868): Updating ose-ovirt-csi-driver-container image to be consistent with ART [#132](https://github.com/openshift/ovirt-csi-driver/pull/132)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/b8d25ad6d140a198e96527b46a9dbde65aae41ce...1db726a940d5ec150fd185a215f1368990653082)
### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/ac852f3eb077c877e998fee0359534349d07c604)
* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.16 [#130](https://github.com/openshift/ovirt-csi-driver-operator/pull/130)
* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART [#129](https://github.com/openshift/ovirt-csi-driver-operator/pull/129)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e9b0fa233d75a97e6d29106265938b42bc16d677...ac852f3eb077c877e998fee0359534349d07c604)
### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/abb91c84083dd139780921673da64fa5cd13bccb)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/cluster-api-provider-ovirt/pull/177)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART [#176](https://github.com/openshift/cluster-api-provider-ovirt/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47...abb91c84083dd139780921673da64fa5cd13bccb)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/cb50d1472dc0bd6ff8d96aa3dd9b68897be85479)
* [OCPBUGS-42244](https://issues.redhat.com/browse/OCPBUGS-42244): Add hybird overlay pod IPs to the namespace address_set [#2352](https://github.com/openshift/ovn-kubernetes/pull/2352)
* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): Add SDN node subnet gateway IP to host-network address_set [#2328](https://github.com/openshift/ovn-kubernetes/pull/2328)
* [OCPBUGS-42942](https://issues.redhat.com/browse/OCPBUGS-42942): Fix egress gateway pod cleanup for remote zone pods. [#2341](https://github.com/openshift/ovn-kubernetes/pull/2341)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Implementation required to enable Forwarding if it is already disabled [#2212](https://github.com/openshift/ovn-kubernetes/pull/2212)
* [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306)
* [OCPBUGS-38697](https://issues.redhat.com/browse/OCPBUGS-38697): Use more exact name match when deleting static routes to HO nodes. [#2282](https://github.com/openshift/ovn-kubernetes/pull/2282)
* [OCPBUGS-24386](https://issues.redhat.com/browse/OCPBUGS-24386): [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW [#2278](https://github.com/openshift/ovn-kubernetes/pull/2278)
* [OCPBUGS-38705](https://issues.redhat.com/browse/OCPBUGS-38705): Delete EgressIP LRP stale nexthops when node is not found [#2271](https://github.com/openshift/ovn-kubernetes/pull/2271)
* [OCPBUGS-38054](https://issues.redhat.com/browse/OCPBUGS-38054): Fix per-pod MCS/metadata blocking [#2248](https://github.com/openshift/ovn-kubernetes/pull/2248)
* [OCPBUGS-38699](https://issues.redhat.com/browse/OCPBUGS-38699), [OCPBUGS-38704](https://issues.redhat.com/browse/OCPBUGS-38704): EgressIP VRF support & ignore localnet patch ports when bootstrapping [#2267](https://github.com/openshift/ovn-kubernetes/pull/2267)
* [OCPBUGS-37939](https://issues.redhat.com/browse/OCPBUGS-37939): [release-4.16] Bump OVSDBTimeout and make it configurable. [#2244](https://github.com/openshift/ovn-kubernetes/pull/2244)
* [OCPBUGS-37362](https://issues.redhat.com/browse/OCPBUGS-37362): Fix registering northd metrics on appropriate nodes [#2232](https://github.com/openshift/ovn-kubernetes/pull/2232)
* [OCPBUGS-36608](https://issues.redhat.com/browse/OCPBUGS-36608): [release-4.16] ovspinning: Set affinity of each thread [#2220](https://github.com/openshift/ovn-kubernetes/pull/2220)
* [OCPBUGS-36486](https://issues.redhat.com/browse/OCPBUGS-36486): Fix race condition when creating/deleting namespace address set [#2218](https://github.com/openshift/ovn-kubernetes/pull/2218)
* [OCPBUGS-35061](https://issues.redhat.com/browse/OCPBUGS-35061): Allow ANPs at same priority [#2205](https://github.com/openshift/ovn-kubernetes/pull/2205)
* [OCPBUGS-35835](https://issues.redhat.com/browse/OCPBUGS-35835): [release-4.16] bump OVN to ovn24.03-24.03.2-19.el9fdp [#2209](https://github.com/openshift/ovn-kubernetes/pull/2209)
* [OCPBUGS-34402](https://issues.redhat.com/browse/OCPBUGS-34402): [release-4.16] dns: fix deadlock in case of error [#2181](https://github.com/openshift/ovn-kubernetes/pull/2181)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2174](https://github.com/openshift/ovn-kubernetes/pull/2174)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Downstream Merge 16th May 2024 [#2171](https://github.com/openshift/ovn-kubernetes/pull/2171)
* [OCPBUGS-30224](https://issues.redhat.com/browse/OCPBUGS-30224), [OCPBUGS-33328](https://issues.redhat.com/browse/OCPBUGS-33328), [SDN-4388](https://issues.redhat.com/browse/SDN-4388): [DownstreamMerge] 10 may 2024 [#2162](https://github.com/openshift/ovn-kubernetes/pull/2162)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Downstream Merge May 2nd 2024 [#2152](https://github.com/openshift/ovn-kubernetes/pull/2152)
* [OCPBUGS-32925](https://issues.redhat.com/browse/OCPBUGS-32925), [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985): Dockerfile: Bump OVS to 3.3.0-2 [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142)
* [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419), [OCPBUGS-32461](https://issues.redhat.com/browse/OCPBUGS-32461), [SDN-4243](https://issues.redhat.com/browse/SDN-4243): Downstream Merge 22nd April 2024 [#2136](https://github.com/openshift/ovn-kubernetes/pull/2136)
* [SDN-4458](https://issues.redhat.com/browse/SDN-4458): Do per-pod MCS/metadata blocking with nftables rather than iptables [#1946](https://github.com/openshift/ovn-kubernetes/pull/1946)
* [SDN-4606](https://issues.redhat.com/browse/SDN-4606), [SDN-4688](https://issues.redhat.com/browse/SDN-4688): Downstream Merge April 18th 2024 [#2132](https://github.com/openshift/ovn-kubernetes/pull/2132)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419): [DownstreamMerge] 4-16-24 [#2129](https://github.com/openshift/ovn-kubernetes/pull/2129)
* [SDN-4403](https://issues.redhat.com/browse/SDN-4403): Downstream merge 20240415 [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889), [OCPBUGS-29952](https://issues.redhat.com/browse/OCPBUGS-29952), [SDN-3931](https://issues.redhat.com/browse/SDN-3931): Downstream merge 12 04 24 [#2120](https://github.com/openshift/ovn-kubernetes/pull/2120)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093), [OCPBUGS-29511](https://issues.redhat.com/browse/OCPBUGS-29511), [SDN-4157](https://issues.redhat.com/browse/SDN-4157): [DownstreamMerge] 4 April 2024 [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157): DownstreamMerge 25th march 2024 [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100)
* [OCPBUGS-31557](https://issues.redhat.com/browse/OCPBUGS-31557): Revert "Remove unnecessary rhel8 build layer" [#2104](https://github.com/openshift/ovn-kubernetes/pull/2104)
* [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089)
* [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081)
* [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066)
* [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063)
* [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057)
* [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051)
* [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048)
* [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038)
* [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027)
* [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995)
* [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979)
* [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010)
* [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978)
* [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000)
* [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980)
* [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990)
* [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0d35785ab8c4fccea85a0d2e6dc49fe1da2d11cd...cb50d1472dc0bd6ff8d96aa3dd9b68897be85479)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/26162badb8422f36d9b52fac8467d48bf6078f5a)
* [OCPBUGS-36097](https://issues.redhat.com/browse/OCPBUGS-36097): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#88](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/88)
* [MULTIARCH-4631](https://issues.redhat.com/browse/MULTIARCH-4631): Rebase with upstream: go modules updates [#78](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/78)
* [MULTIARCH-4581](https://issues.redhat.com/browse/MULTIARCH-4581): Rebase with upstream: go modules updates [#77](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/77)
* [OCPBUGS-30530](https://issues.redhat.com/browse/OCPBUGS-30530): fix govul with protobuf [#76](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/76)
* [MULTIARCH-4363](https://issues.redhat.com/browse/MULTIARCH-4363): Rebase with upstream: go modules updates [#75](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/75)
* [MULTIARCH-4092](https://issues.redhat.com/browse/MULTIARCH-4092): Rebase with upstream: v0.6.0 release [#74](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/74)
* [OCPBUGS-25513](https://issues.redhat.com/browse/OCPBUGS-25513): CVE-2023-48795 Update crypto lib [#73](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/73)
* [MULTIARCH-4059](https://issues.redhat.com/browse/MULTIARCH-4059): Rebase with upstream: Fix snyk code issue: Path Traversal [#69](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/69)
* [MULTIARCH-4058](https://issues.redhat.com/browse/MULTIARCH-4058): Rebase with upstream: go modules updates [#67](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/67)
* [OCPBUGS-24950](https://issues.redhat.com/browse/OCPBUGS-24950): Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#68](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/68)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5...26162badb8422f36d9b52fac8467d48bf6078f5a)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#70](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/70)
* [OCPBUGS-28738](https://issues.redhat.com/browse/OCPBUGS-28738): Fix 4.16 SAST scan issues for ose-powervs-block-csi-driver-operator-container [#68](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/68)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node-registrar healtcheck [#67](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/67)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#65](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/65)
* [OCPBUGS-28933](https://issues.redhat.com/browse/OCPBUGS-28933): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#66](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/66)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#64](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/64)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#63](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/63)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#57](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/57)
* [OCPBUGS-25710](https://issues.redhat.com/browse/OCPBUGS-25710): snyk: ignore vendor dir [#50](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/50)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#55](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/55)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#54](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/54)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#53](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/53)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951...9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/20e6dc70d665e5d085df17d757a07e17c0e18fe0)
* [OCPBUGS-36107](https://issues.redhat.com/browse/OCPBUGS-36107): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 [#73](https://github.com/openshift/cloud-provider-powervs/pull/73)
* [MULTIARCH-4610](https://issues.redhat.com/browse/MULTIARCH-4610): UPSTREAM: <carry>: Override service endpoints [#65](https://github.com/openshift/cloud-provider-powervs/pull/65)
* [OCPBUGS-30531](https://issues.redhat.com/browse/OCPBUGS-30531): fix govul with protobuf [#64](https://github.com/openshift/cloud-provider-powervs/pull/64)
* [OCPBUGS-25013](https://issues.redhat.com/browse/OCPBUGS-25013): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-powervs/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/1d6a7ed991427b1c8048b0b44b706228e5c2a001...20e6dc70d665e5d085df17d757a07e17c0e18fe0)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/60ebedf061fe1bb5279650fd637108b13b92d95f)
* [OCPBUGS-41976](https://issues.redhat.com/browse/OCPBUGS-41976): Update go.mod to fix CVE - 4.16 [#84](https://github.com/openshift/machine-api-provider-powervs/pull/84)
* [OCPBUGS-27881](https://issues.redhat.com/browse/OCPBUGS-27881): Update Snyk file to exclude other vendor folders [#74](https://github.com/openshift/machine-api-provider-powervs/pull/74)
* [MULTIARCH-4104](https://issues.redhat.com/browse/MULTIARCH-4104): Update go and k8s versions [#73](https://github.com/openshift/machine-api-provider-powervs/pull/73)
* [MULTIARCH-4066](https://issues.redhat.com/browse/MULTIARCH-4066): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#71](https://github.com/openshift/machine-api-provider-powervs/pull/71)
* [OCPBUGS-25555](https://issues.redhat.com/browse/OCPBUGS-25555): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#70](https://github.com/openshift/machine-api-provider-powervs/pull/70)
* [OCPBUGS-25047](https://issues.redhat.com/browse/OCPBUGS-25047): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#68](https://github.com/openshift/machine-api-provider-powervs/pull/68)
* [OCPBUGS-24894](https://issues.redhat.com/browse/OCPBUGS-24894): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#67](https://github.com/openshift/machine-api-provider-powervs/pull/67)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/4121cfc4304dcbb698993a388368f4025ab9c24a...60ebedf061fe1bb5279650fd637108b13b92d95f)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)
* [OCPBUGS-29980](https://issues.redhat.com/browse/OCPBUGS-29980): Updating prom-label-proxy-container image to be consistent with ART for 4.16 [#365](https://github.com/openshift/prom-label-proxy/pull/365)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): add machine424 and rexagod to OWNERS [#358](https://github.com/openshift/prom-label-proxy/pull/358)
* [MON-3698](https://issues.redhat.com/browse/MON-3698): Update to upstream prom-label-proxy 0.8.1 [#363](https://github.com/openshift/prom-label-proxy/pull/363)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Bump openshift/prom-label-proxy to v0.8.0 [#362](https://github.com/openshift/prom-label-proxy/pull/362)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#361](https://github.com/openshift/prom-label-proxy/pull/361)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#360](https://github.com/openshift/prom-label-proxy/pull/360)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#359](https://github.com/openshift/prom-label-proxy/pull/359)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4...5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)
### [prometheus](https://github.com/openshift/prometheus/tree/c5c08df947236f3917abf14de481eb2f99fb07de)
* [OCPBUGS-39179](https://issues.redhat.com/browse/OCPBUGS-39179): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#224](https://github.com/openshift/prometheus/pull/224)
* [OCPBUGS-36918](https://issues.redhat.com/browse/OCPBUGS-36918): cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. [#214](https://github.com/openshift/prometheus/pull/214)
* [OCPBUGS-37446](https://issues.redhat.com/browse/OCPBUGS-37446): backport of upstream fix [#217](https://github.com/openshift/prometheus/pull/217)
* [OCPBUGS-36854](https://issues.redhat.com/browse/OCPBUGS-36854): cherry-pick upstream remote-write fix [#212](https://github.com/openshift/prometheus/pull/212)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#202](https://github.com/openshift/prometheus/pull/202)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#201](https://github.com/openshift/prometheus/pull/201)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#200](https://github.com/openshift/prometheus/pull/200)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#199](https://github.com/openshift/prometheus/pull/199)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.51.1 [#198](https://github.com/openshift/prometheus/pull/198)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.50.1 [#196](https://github.com/openshift/prometheus/pull/196)
* [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188)
* [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187)
* [Full changelog](https://github.com/openshift/prometheus/compare/6828e4464c45f239a89c7965233c2fef49c6b1fb...c5c08df947236f3917abf14de481eb2f99fb07de)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/e9aea929f309f412678fdf1064e1f74db3ba08b4)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): Dockerfile.ocp: use common-build target [#91](https://github.com/openshift/prometheus-alertmanager/pull/91)
* [OCPBUGS-29969](https://issues.redhat.com/browse/OCPBUGS-29969): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.16 [#88](https://github.com/openshift/prometheus-alertmanager/pull/88)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#86](https://github.com/openshift/prometheus-alertmanager/pull/86)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#85](https://github.com/openshift/prometheus-alertmanager/pull/85)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/870ade52a6097bc55cec29c1a9cc028967c5d23c...e9aea929f309f412678fdf1064e1f74db3ba08b4)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/c7262a43c0ddf2adc6be3863ac9a5056cb89c177)
* [OCPBUGS-38399](https://issues.redhat.com/browse/OCPBUGS-38399): feat: sync proxy settings in Alertmanager configuration [#299](https://github.com/openshift/prometheus-operator/pull/299)
* [MON-3838](https://issues.redhat.com/browse/MON-3838): Bump openshift/prometheus-operator to v0.73.2 [#286](https://github.com/openshift/prometheus-operator/pull/286)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Bump openshift/prometheus-operator to v0.73.1 [#285](https://github.com/openshift/prometheus-operator/pull/285)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Bump openshift/prometheus-operator to v0.73.0 [#284](https://github.com/openshift/prometheus-operator/pull/284)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281)
* [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277)
* [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271)
* [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269)
* [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270)
* [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265)
* [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/902436ac6a8eec8f2f3f8b91f519a3d319924833...c7262a43c0ddf2adc6be3863ac9a5056cb89c177)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)
* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#145](https://github.com/openshift/node_exporter/pull/145)
* [OCPBUGS-20151](https://issues.redhat.com/browse/OCPBUGS-20151): [CHERRY PICK FROM UPSTREAM]: Take optional attributes into account for fibre_channel metrics [#144](https://github.com/openshift/node_exporter/pull/144)
* [OCPBUGS-29976](https://issues.redhat.com/browse/OCPBUGS-29976): golang-github-prometheus-node_exporter-container image… [#142](https://github.com/openshift/node_exporter/pull/142)
* [OCPBUGS-24722](https://issues.redhat.com/browse/OCPBUGS-24722): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART [#140](https://github.com/openshift/node_exporter/pull/140)
* [Full changelog](https://github.com/openshift/node_exporter/compare/aed837c322b6eb54d88956acada07b5b390b5c25...29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/3112b458983c6fca6f77d5a945fb0026186dace6)
* [OCPBUGS-30048](https://issues.redhat.com/browse/OCPBUGS-30048): Fix OWNERS file to reflect the correct team [#41](https://github.com/openshift/route-controller-manager/pull/41)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#38](https://github.com/openshift/route-controller-manager/pull/38)
* [OCPBUGS-26088](https://issues.redhat.com/browse/OCPBUGS-26088): Add .snyk file to exclude vendor and ignore unit tests [#37](https://github.com/openshift/route-controller-manager/pull/37)
* [OCPBUGS-24839](https://issues.redhat.com/browse/OCPBUGS-24839): Updating ose-route-controller-manager-container image to be consistent with ART [#36](https://github.com/openshift/route-controller-manager/pull/36)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/c5cc7a73705e4086759e2a36811b055b7716def4...3112b458983c6fca6f77d5a945fb0026186dace6)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/538c7b98a689e573b61e1abb1cb649da470c5fac)
* [OCPBUGS-24916](https://issues.redhat.com/browse/OCPBUGS-24916): Bump to rhel9 [#240](https://github.com/openshift/service-ca-operator/pull/240)
* [OCPBUGS-29583](https://issues.redhat.com/browse/OCPBUGS-29583): Apply hypershift cluster-profile for ibm-cloud-managed [#234](https://github.com/openshift/service-ca-operator/pull/234)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#235](https://github.com/openshift/service-ca-operator/pull/235)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#230](https://github.com/openshift/service-ca-operator/pull/230)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/19f312e96bb4e5b7da9f61ea4cab202b227a60c6...538c7b98a689e573b61e1abb1cb649da470c5fac)
### [telemeter](https://github.com/openshift/telemeter/tree/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a)
* [OCPBUGS-31552](https://issues.redhat.com/browse/OCPBUGS-31552): fix issuer check during JWT authentication 4.16 [#537](https://github.com/openshift/telemeter/pull/537)
* [RHOBS-1036](https://issues.redhat.com/browse/RHOBS-1036): Harden integration tests [#529](https://github.com/openshift/telemeter/pull/529)
* [MON-3819](https://issues.redhat.com/browse/MON-3819): Update tools go 1.21 [#526](https://github.com/openshift/telemeter/pull/526)
* [MON-3737](https://issues.redhat.com/browse/MON-3737): Update binaries to new version [#525](https://github.com/openshift/telemeter/pull/525)
* [OCPBUGS-30724](https://issues.redhat.com/browse/OCPBUGS-30724): CVE-2024-28180 bump go-jose to v3.0.3 [#524](https://github.com/openshift/telemeter/pull/524)
* [OCPBUGS-30832](https://issues.redhat.com/browse/OCPBUGS-30832): bump Go 1.21 [#521](https://github.com/openshift/telemeter/pull/521)
* [OCPBUGS-30544](https://issues.redhat.com/browse/OCPBUGS-30544): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#516](https://github.com/openshift/telemeter/pull/516)
* [MON-3175](https://issues.redhat.com/browse/MON-3175): README.md: update deprecated link [#512](https://github.com/openshift/telemeter/pull/512)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): remove obsolete targets from Makefile [#513](https://github.com/openshift/telemeter/pull/513)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Updating telemeter-container image to be consistent with ART [#497](https://github.com/openshift/telemeter/pull/497)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Force kill jobs after integration v2 test finish [#514](https://github.com/openshift/telemeter/pull/514)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): chore: bump dependencies [#511](https://github.com/openshift/telemeter/pull/511)
* [RHOBS-995](https://issues.redhat.com/browse/RHOBS-995): Simplify cluster:capacity_effective_cpu_cores, add tests [#506](https://github.com/openshift/telemeter/pull/506)
* [MON-3708](https://issues.redhat.com/browse/MON-3708): fix test/integration.sh [#509](https://github.com/openshift/telemeter/pull/509)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): fix join issue in cluster:capacity_effective_cpu_cores [#505](https://github.com/openshift/telemeter/pull/505)
* [OCPBUGS-16397](https://issues.redhat.com/browse/OCPBUGS-16397): update nutanix filter [#504](https://github.com/openshift/telemeter/pull/504)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Removing newlines from the jsonnet configuration for the recording rules.libsonnet [#503](https://github.com/openshift/telemeter/pull/503)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Add rule for effective CPU cores for subscription usage purposes [#501](https://github.com/openshift/telemeter/pull/501)
* [Full changelog](https://github.com/openshift/telemeter/compare/14489f7dc656175e11a3ef962fcbcd113b3651a9...c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a)
### [tests](https://github.com/openshift/origin/tree/c740dbdf225dfeef7fa9470ae61da2507302116c)
* [OCPBUGS-44105](https://issues.redhat.com/browse/OCPBUGS-44105): Adjust createDNSPod() to support hypershift dual-stack test [#29258](https://github.com/openshift/origin/pull/29258)
* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [OCPBUGS-41611](https://issues.redhat.com/browse/OCPBUGS-41611): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] [#29079](https://github.com/openshift/origin/pull/29079)
* [OCPBUGS-38707](https://issues.redhat.com/browse/OCPBUGS-38707): run vsphere driver config test on non techpreview clusters [#28992](https://github.com/openshift/origin/pull/28992)
* [OCPBUGS-38788](https://issues.redhat.com/browse/OCPBUGS-38788): [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28938](https://github.com/openshift/origin/pull/28938)
* [OCPBUGS-38015](https://issues.redhat.com/browse/OCPBUGS-38015): vertical scaling test should not rely on CPMS replicas [#28981](https://github.com/openshift/origin/pull/28981)
* [OCPBUGS-37771](https://issues.redhat.com/browse/OCPBUGS-37771): fix pod not returning success on 'Managed cluster should verify that nodes have no unexpected reboots [#28959](https://github.com/openshift/origin/pull/28959)
* [OCPBUGS-36744](https://issues.redhat.com/browse/OCPBUGS-36744): Expand allowance for kubelet metrics api endpoint outages during node upgrades [#28928](https://github.com/openshift/origin/pull/28928)
* [OCPBUGS-36182](https://issues.redhat.com/browse/OCPBUGS-36182): Removes dependency on samples operator images [#28904](https://github.com/openshift/origin/pull/28904)
* [OCPBUGS-36241](https://issues.redhat.com/browse/OCPBUGS-36241): remove unused in-cluster monitoring code [#28909](https://github.com/openshift/origin/pull/28909)
* [OCPBUGS-35842](https://issues.redhat.com/browse/OCPBUGS-35842): add Proxy config [#28894](https://github.com/openshift/origin/pull/28894)
* [TRT-1721](https://issues.redhat.com/browse/TRT-1721): Add new intervals for kubelet metrics endpoints down [#28901](https://github.com/openshift/origin/pull/28901)
* [TRT-1720](https://issues.redhat.com/browse/TRT-1720): Filter must-gather and truncate system node users [#28883](https://github.com/openshift/origin/pull/28883)
* [ETCD-578](https://issues.redhat.com/browse/ETCD-578): remove Tech Preview check from etcd profiles e2e test [#28819](https://github.com/openshift/origin/pull/28819)
* [OCPBUGS-35755](https://issues.redhat.com/browse/OCPBUGS-35755): Fix etcd profiles e2e test to check returned status for updated values [#28885](https://github.com/openshift/origin/pull/28885)
* bump 4.16 to latest o/k 4.16 release branch [#28888](https://github.com/openshift/origin/pull/28888)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Add a "limit" exception for iptables-alerter [#28859](https://github.com/openshift/origin/pull/28859)
* [OCPBUGS-34500](https://issues.redhat.com/browse/OCPBUGS-34500): add manual etcd signer cert rotation e2e test [#28830](https://github.com/openshift/origin/pull/28830)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#28831](https://github.com/openshift/origin/pull/28831)
* NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens [#28810](https://github.com/openshift/origin/pull/28810)
* [STOR-1838](https://issues.redhat.com/browse/STOR-1838): add test for vsphere driver snapshot configuration [#28717](https://github.com/openshift/origin/pull/28717)
* [OCPEDGE-1101](https://issues.redhat.com/browse/OCPEDGE-1101): skip etcd test for hardware speed on sno [#28800](https://github.com/openshift/origin/pull/28800)
* [SPLAT-1439](https://issues.redhat.com/browse/SPLAT-1439): Ignore edge workers when listing nodes [#28584](https://github.com/openshift/origin/pull/28584)
* NO-ISSUE: Automated - Update synthetic test data [#28795](https://github.com/openshift/origin/pull/28795)
* NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) [#28803](https://github.com/openshift/origin/pull/28803)
* [USHIFT-3143](https://issues.redhat.com/browse/USHIFT-3143): Skip metrics and adjust termination message policy monitor tests [#28799](https://github.com/openshift/origin/pull/28799)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): Pass namespace in function checkHostnameReady for monitortest [#28794](https://github.com/openshift/origin/pull/28794)
* [ETCD-488](https://issues.redhat.com/browse/ETCD-488): Fix feature gate for etcd profiles e2e test [#28782](https://github.com/openshift/origin/pull/28782)
* [OCPBUGS-31919](https://issues.redhat.com/browse/OCPBUGS-31919): Use proper pull-secret for getting openshift-tests image [#28764](https://github.com/openshift/origin/pull/28764)
* [OCPBUGS-33378](https://issues.redhat.com/browse/OCPBUGS-33378): Verify Build Webhooks on Upgrade [#28783](https://github.com/openshift/origin/pull/28783)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Increase IPsec timeout parameters [#28779](https://github.com/openshift/origin/pull/28779)
* [USHIFT-3142](https://issues.redhat.com/browse/USHIFT-3142): Automatically exclude FeatureGate tagged tests [#28786](https://github.com/openshift/origin/pull/28786)
* [USHIFT-3133](https://issues.redhat.com/browse/USHIFT-3133): Skip cloud provider disruption monitors for MicroShift [#28767](https://github.com/openshift/origin/pull/28767)
* NO-JIRA: enforce termination policy [#28777](https://github.com/openshift/origin/pull/28777)
* [TRT-1656](https://issues.redhat.com/browse/TRT-1656): Revert #28750 "OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks" [#28781](https://github.com/openshift/origin/pull/28781)
* [SDN-4783](https://issues.redhat.com/browse/SDN-4783): Add e2e tests for NetworkDiagnosticsConfig featuregate [#28719](https://github.com/openshift/origin/pull/28719)
* [API-1783](https://issues.redhat.com/browse/API-1783): Update etcd test data for 1.30 release [#28770](https://github.com/openshift/origin/pull/28770)
* NO-JIRA: verify tls artifacts [#28772](https://github.com/openshift/origin/pull/28772)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#28771](https://github.com/openshift/origin/pull/28771)
* [OCPEDGE-812](https://issues.redhat.com/browse/OCPEDGE-812): feat: add tests for cpu limits on workload partitioning [#28752](https://github.com/openshift/origin/pull/28752)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28739](https://github.com/openshift/origin/pull/28739)
* [MON-3513](https://issues.redhat.com/browse/MON-3513): Add availability test for Metrics API [#28737](https://github.com/openshift/origin/pull/28737)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Add IPsec e2e tests [#28658](https://github.com/openshift/origin/pull/28658)
* [OCPBUGS-33041](https://issues.redhat.com/browse/OCPBUGS-33041): Add RoleBinding for BuildConfig Webhooks [#28750](https://github.com/openshift/origin/pull/28750)
* [OCPBUGS-33317](https://issues.redhat.com/browse/OCPBUGS-33317): use tokenrequest api [#28769](https://github.com/openshift/origin/pull/28769)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): allow for some errors checking namespace delete [#28761](https://github.com/openshift/origin/pull/28761)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Add test for UpgradeValidation contention [#28710](https://github.com/openshift/origin/pull/28710)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): test/extended/router/http2: Use unique certs [#28757](https://github.com/openshift/origin/pull/28757)
* [OCPBUGS-33125](https://issues.redhat.com/browse/OCPBUGS-33125): Allow flexible rhel in tests [#28755](https://github.com/openshift/origin/pull/28755)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): feat: add buffer interval for SNO pathological events [#28709](https://github.com/openshift/origin/pull/28709)
* NO-JIRA: Adjust the method of get the apiServer [#28756](https://github.com/openshift/origin/pull/28756)
* NO-ISSUE: Automated - Update synthetic test data [#28744](https://github.com/openshift/origin/pull/28744)
* [TRT-1610](https://issues.redhat.com/browse/TRT-1610): Intervals, move over to new schema, finally... [#28727](https://github.com/openshift/origin/pull/28727)
* Revert "TRT-1625: Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering"" [#28748](https://github.com/openshift/origin/pull/28748)
* NO-JIRA: bump library-go [#28711](https://github.com/openshift/origin/pull/28711)
* NO-JIRA: Use bound prometheus-k8s API tokens [#28655](https://github.com/openshift/origin/pull/28655)
* [TRT-1625](https://issues.redhat.com/browse/TRT-1625): Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering" [#28747](https://github.com/openshift/origin/pull/28747)
* [OCPBUGS-32923](https://issues.redhat.com/browse/OCPBUGS-32923): Fix allowed firing alerts not triggering [#28741](https://github.com/openshift/origin/pull/28741)
* [TRT-1618](https://issues.redhat.com/browse/TRT-1618): Allow Upgradeable:False with OpenShiftSDN [#28738](https://github.com/openshift/origin/pull/28738)
* [ETCD-588](https://issues.redhat.com/browse/ETCD-588): Add e2e test for hardware speed profiles feature [#28726](https://github.com/openshift/origin/pull/28726)
* [OCPBUGS-32477](https://issues.redhat.com/browse/OCPBUGS-32477): Also rely on oomkilled exit code 137 in build test [#28725](https://github.com/openshift/origin/pull/28725)
* [OCPBUGS-32293](https://issues.redhat.com/browse/OCPBUGS-32293): Use In-Tree Template for Jenkins [#28732](https://github.com/openshift/origin/pull/28732)
* [OCPBUGS-31589](https://issues.redhat.com/browse/OCPBUGS-31589): e2e: use bound API token for prometheus-k8s SA [#28679](https://github.com/openshift/origin/pull/28679)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): Remove `system:anonymous` test cases [#28686](https://github.com/openshift/origin/pull/28686)
* NO-JIRA: Drop unused images and OWNERS files [#28736](https://github.com/openshift/origin/pull/28736)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#28733](https://github.com/openshift/origin/pull/28733)
* NO-JIRA: bump openshift/kubernetes [#28712](https://github.com/openshift/origin/pull/28712)
* NO-JIRA: Create autodl file for per user resource request audit entries [#28715](https://github.com/openshift/origin/pull/28715)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28728](https://github.com/openshift/origin/pull/28728)
* NO-JIRA: Record Kube event first/last timestamp in the resulting intervals [#28722](https://github.com/openshift/origin/pull/28722)
* [OCPBUGS-32484](https://issues.redhat.com/browse/OCPBUGS-32484): chart template: limit tooltip width to first word [#27965](https://github.com/openshift/origin/pull/27965)
* [OCPBUGS-31030](https://issues.redhat.com/browse/OCPBUGS-31030), [OCPBUGS-31032](https://issues.redhat.com/browse/OCPBUGS-31032): Reduce deploymentconfig test 3GBi memory size to reasonable [#28680](https://github.com/openshift/origin/pull/28680)
* NO-ISSUE: Automated - Update synthetic test data [#28723](https://github.com/openshift/origin/pull/28723)
* [OCPBUGS-32485](https://issues.redhat.com/browse/OCPBUGS-32485): upkeep: update test pinned workloads [#28704](https://github.com/openshift/origin/pull/28704)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use cli image, as the scratch image [#28695](https://github.com/openshift/origin/pull/28695)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Complete removal of non-structured locator/message use [#28663](https://github.com/openshift/origin/pull/28663)
* [OCPBUGS-32320](https://issues.redhat.com/browse/OCPBUGS-32320): revert: removing static pod skip for crio check [#28708](https://github.com/openshift/origin/pull/28708)
* Revert "OCPBUGS-28230: enforce termination message policy on all platform pods" [#28721](https://github.com/openshift/origin/pull/28721)
* [OCPBUGS-31860](https://issues.redhat.com/browse/OCPBUGS-31860): ppc64le without python-cinder [#28692](https://github.com/openshift/origin/pull/28692)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28547](https://github.com/openshift/origin/pull/28547)
* NO-JIRA: Unskip volume populator tests that were disabled in the test suite [#28475](https://github.com/openshift/origin/pull/28475)
* [USHIFT-2985](https://issues.redhat.com/browse/USHIFT-2985): Fix MicroShift crash and router tests skipping [#28716](https://github.com/openshift/origin/pull/28716)
* NO-JIRA: Remove test dir OWNERS file, rely on top-level instead [#28714](https://github.com/openshift/origin/pull/28714)
* NO-JIRA: split the per-user summary to include verbs for resources [#28705](https://github.com/openshift/origin/pull/28705)
* NO-JIRA: add to the operator list [#28703](https://github.com/openshift/origin/pull/28703)
* NO-ISSUE: Automated - Update synthetic test data [#28701](https://github.com/openshift/origin/pull/28701)
* NO-JIRA: need to make manifest dir to place content [#28700](https://github.com/openshift/origin/pull/28700)
* NO-JIRA: Record tests by feature [#28694](https://github.com/openshift/origin/pull/28694)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): Add debug logging for SLB monitortest cleanup [#28697](https://github.com/openshift/origin/pull/28697)
* [SO-121](https://issues.redhat.com/browse/SO-121): Samples Release, fix test cases [#28685](https://github.com/openshift/origin/pull/28685)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Reapply #28589 [#28660](https://github.com/openshift/origin/pull/28660)
* no-jira: Ignore alerts on CustomNoUpgrade clusters [#28678](https://github.com/openshift/origin/pull/28678)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28672](https://github.com/openshift/origin/pull/28672)
* NO-ISSUE: automated update synthetic test data [#28693](https://github.com/openshift/origin/pull/28693)
* NO-JIRA: add service accounts to resourcewatcher [#28689](https://github.com/openshift/origin/pull/28689)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use must-gather image in build multi-stage [#28687](https://github.com/openshift/origin/pull/28687)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Begin removing use of the legacy locator on intervals [#28597](https://github.com/openshift/origin/pull/28597)
* [OCPBUGS-31513](https://issues.redhat.com/browse/OCPBUGS-31513): feat: update regex for rt kernel version match [#28665](https://github.com/openshift/origin/pull/28665)
* [OCPBUGS-31492](https://issues.redhat.com/browse/OCPBUGS-31492): Add a test that will fail on over 10k etcd took too long messages [#28674](https://github.com/openshift/origin/pull/28674)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Use centos7 tag instead of latest for cmd images tests [#28675](https://github.com/openshift/origin/pull/28675)
* [OCPBUGS-30267](https://issues.redhat.com/browse/OCPBUGS-30267): Clarify a misleading message in patho event failures [#28667](https://github.com/openshift/origin/pull/28667)
* NO-JIRA: add conditional execution of featuregated tests [#28670](https://github.com/openshift/origin/pull/28670)
* [TRT-1494](https://issues.redhat.com/browse/TRT-1494): Add monitortest for cloud function on azure [#28582](https://github.com/openshift/origin/pull/28582)
* [OSD-21709](https://issues.redhat.com/browse/OSD-21709): Add temporary exceptions for managed services alerts [#28669](https://github.com/openshift/origin/pull/28669)
* [TRT-1559](https://issues.redhat.com/browse/TRT-1559): Remove two sets of logs to bring build-log.txt size down [#28654](https://github.com/openshift/origin/pull/28654)
* NO-JIRA: Add skip condition for Cluster-CSI-Snapshot-Controller-Operator feature [#28635](https://github.com/openshift/origin/pull/28635)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Add monitortest for cloud function on aws [#28581](https://github.com/openshift/origin/pull/28581)
* NO-JIRA: add simple test for server side apply to demonstrate field clearing [#28491](https://github.com/openshift/origin/pull/28491)
* [OCPBUGS-31074](https://issues.redhat.com/browse/OCPBUGS-31074): fix: add check for static container [#28662](https://github.com/openshift/origin/pull/28662)
* [TRT-1567](https://issues.redhat.com/browse/TRT-1567): Revert #28589 "AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads" [#28659](https://github.com/openshift/origin/pull/28659)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Add a monitor test to check the existence of required-scc annotation in platform workloads [#28589](https://github.com/openshift/origin/pull/28589)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Check idling annotation in services not endpoints [#28619](https://github.com/openshift/origin/pull/28619)
* [OCPBUGS-30604](https://issues.redhat.com/browse/OCPBUGS-30604): fix panic on non-standard node-role labels [#28650](https://github.com/openshift/origin/pull/28650)
* [TRT-1557](https://issues.redhat.com/browse/TRT-1557): Align three unknown tests to kube-apiserver [#28649](https://github.com/openshift/origin/pull/28649)
* [MULTIARCH-4352](https://issues.redhat.com/browse/MULTIARCH-4352): Censor private key from pod dump logs [#28638](https://github.com/openshift/origin/pull/28638)
* trt-1538: additional timeout bumps [#28644](https://github.com/openshift/origin/pull/28644)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update skipUnlessMachineAPIOperator function [#28625](https://github.com/openshift/origin/pull/28625)
* trt-1538: Bump context timeout to 20 minutes [#28641](https://github.com/openshift/origin/pull/28641)
* trt-1538: Wait for monitor resources cleanup [#28626](https://github.com/openshift/origin/pull/28626)
* [OCPNODE-2099](https://issues.redhat.com/browse/OCPNODE-2099): add kube-rbac-proxy-crio toleration change [#28636](https://github.com/openshift/origin/pull/28636)
* [OCPBUGS-29028](https://issues.redhat.com/browse/OCPBUGS-29028): Add function back to execute commands via pod [#28621](https://github.com/openshift/origin/pull/28621)
* NO-ISSUE: Automated - Update synthetic test data [#28600](https://github.com/openshift/origin/pull/28600)
* [OCPBUGS-27323](https://issues.redhat.com/browse/OCPBUGS-27323): Skip tests for image-registry operator with single replica [#28605](https://github.com/openshift/origin/pull/28605)
* NO-JIRA: Handle release info output streams separately [#28631](https://github.com/openshift/origin/pull/28631)
* [TRT-1539](https://issues.redhat.com/browse/TRT-1539): Do not let loki alerts fail tests [#28627](https://github.com/openshift/origin/pull/28627)
* Delete unneeded stale owners file, defer to top level owners [#28624](https://github.com/openshift/origin/pull/28624)
* [MULTIARCH-4160](https://issues.redhat.com/browse/MULTIARCH-4160): Stop using the DetermineFromRelease function [#28598](https://github.com/openshift/origin/pull/28598)
* trt-1530: specify deployment id for unique log names [#28613](https://github.com/openshift/origin/pull/28613)
* [TRT-1506](https://issues.redhat.com/browse/TRT-1506): Restore the tests looking for excess single-second disruptions [#28592](https://github.com/openshift/origin/pull/28592)
* [OCPBUGS-29858](https://issues.redhat.com/browse/OCPBUGS-29858): Only extract node role from properly formatted node-role label [#28585](https://github.com/openshift/origin/pull/28585)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update control plane machine set test [#28602](https://github.com/openshift/origin/pull/28602)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Re-introduce the GCP liveness endpoint test [#28608](https://github.com/openshift/origin/pull/28608)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28604](https://github.com/openshift/origin/pull/28604)
* NO-JIRA: Pass tail flag in adm node-logs to reduce log size [#28607](https://github.com/openshift/origin/pull/28607)
* NO-JIRA: Remove bare node-logs test to reduce logs size [#28606](https://github.com/openshift/origin/pull/28606)
* [TRT-1522](https://issues.redhat.com/browse/TRT-1522): Revert #28594 "TRT-1476: Re-introduce the GCP liveness endpoint test" [#28603](https://github.com/openshift/origin/pull/28603)
* [TRT-1501](https://issues.redhat.com/browse/TRT-1501): Add debug logging for decoding cluster provider [#28593](https://github.com/openshift/origin/pull/28593)
* [TRT-1515](https://issues.redhat.com/browse/TRT-1515): Revert #28587 "NO-JIRA: bump golang to 1.21 and to latest o/k master " [#28601](https://github.com/openshift/origin/pull/28601)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Re-introduce the GCP liveness endpoint test [#28594](https://github.com/openshift/origin/pull/28594)
* [OCPBUGS-29493](https://issues.redhat.com/browse/OCPBUGS-29493): fix: updated unit test to look for topology not node count [#28595](https://github.com/openshift/origin/pull/28595)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28587](https://github.com/openshift/origin/pull/28587)
* [TRT-1499](https://issues.redhat.com/browse/TRT-1499): Revert #28571 gcp-network-liveness until gcp resources are whitelisted [#28586](https://github.com/openshift/origin/pull/28586)
* [TRT-1477](https://issues.redhat.com/browse/TRT-1477): update IP for new gcp LB [#28583](https://github.com/openshift/origin/pull/28583)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router: HAProxy 2.8 Compatibility Enhancements for h2spec tests [#28514](https://github.com/openshift/origin/pull/28514)
* [TRT-1445](https://issues.redhat.com/browse/TRT-1445): Monitor test hangs during interrupt handling [#28580](https://github.com/openshift/origin/pull/28580)
* [TRT-1491](https://issues.redhat.com/browse/TRT-1491): Reorder interval groups to place most important/brief info higher up [#28576](https://github.com/openshift/origin/pull/28576)
* NO-JIRA: enforce only stable CRD versions accessible by default [#28570](https://github.com/openshift/origin/pull/28570)
* [SPLAT-1427](https://issues.redhat.com/browse/SPLAT-1427): fix/sig-net: ignoring edge when listing worker nodes [#28486](https://github.com/openshift/origin/pull/28486)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Add monitortest for cloud function on gcp [#28571](https://github.com/openshift/origin/pull/28571)
* [OCPBUGS-28662](https://issues.redhat.com/browse/OCPBUGS-28662): Replace 'coreydaley' with 'sayan-biswas' [#28564](https://github.com/openshift/origin/pull/28564)
* [OCPBUGS-23115](https://issues.redhat.com/browse/OCPBUGS-23115): Test builds with subscription content [#28560](https://github.com/openshift/origin/pull/28560)
* [TRT-1452](https://issues.redhat.com/browse/TRT-1452): Separate excessive Back-off restarting tests via namespace [#28543](https://github.com/openshift/origin/pull/28543)
* NO-JIRA: fix the static pod lifecycle failure test for more revisions [#28553](https://github.com/openshift/origin/pull/28553)
* [OCPNODE-2029](https://issues.redhat.com/browse/OCPNODE-2029): migrate crio metrics to https [#28536](https://github.com/openshift/origin/pull/28536)
* [TRT-1480](https://issues.redhat.com/browse/TRT-1480): Fix disruption analysis on /payload jobs [#28568](https://github.com/openshift/origin/pull/28568)
* [TRT-965](https://issues.redhat.com/browse/TRT-965): Add disruption to the risk analysis spyglass panel [#28558](https://github.com/openshift/origin/pull/28558)
* NO-JIRA: Skip external cloud provider test for HyperShift clusters [#28562](https://github.com/openshift/origin/pull/28562)
* [MON-3449](https://issues.redhat.com/browse/MON-3449): Ensure monitoring statefulsets are not recreated after upgr… [#28361](https://github.com/openshift/origin/pull/28361)
* NO-JIRA: techpreview can install unstable CRDs [#28532](https://github.com/openshift/origin/pull/28532)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): replace curl calls by net/http [#28546](https://github.com/openshift/origin/pull/28546)
* [MON-3693](https://issues.redhat.com/browse/MON-3693): Adding slashpai and machine424 to Prometheus owners [#28552](https://github.com/openshift/origin/pull/28552)
* [OCPBUGS-27892](https://issues.redhat.com/browse/OCPBUGS-27892): fix panic in service-poller [#28544](https://github.com/openshift/origin/pull/28544)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28538](https://github.com/openshift/origin/pull/28538)
* NO-JIRA: remove unnecessary setup code from monitor [#28534](https://github.com/openshift/origin/pull/28534)
* trt-1141: bump timeout values [#28527](https://github.com/openshift/origin/pull/28527)
* NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… [#28542](https://github.com/openshift/origin/pull/28542)
* [OCPBUGS-27465](https://issues.redhat.com/browse/OCPBUGS-27465): Do not assume there is just a single kubelet systemd service [#28529](https://github.com/openshift/origin/pull/28529)
* [OCPBUGS-27502](https://issues.redhat.com/browse/OCPBUGS-27502): collect certs on disk: set pause image [#28541](https://github.com/openshift/origin/pull/28541)
* NO-ISSUE: Automated - Update synthetic test data [#28537](https://github.com/openshift/origin/pull/28537)
* [OCPBUGS-27210](https://issues.redhat.com/browse/OCPBUGS-27210): Restore HTTP/2 tests in test/extended/router [#28540](https://github.com/openshift/origin/pull/28540)
* [OCPBUGS-20487](https://issues.redhat.com/browse/OCPBUGS-20487): update egressFWTestE2E image which contains ping binary [#28408](https://github.com/openshift/origin/pull/28408)
* NO-JIRA: Update Omer to be the SNO lead [#28451](https://github.com/openshift/origin/pull/28451)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Automated - Update synthetic test data [#28484](https://github.com/openshift/origin/pull/28484)
* NO-JIRA: Update WinC team lead [#28472](https://github.com/openshift/origin/pull/28472)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28530](https://github.com/openshift/origin/pull/28530)
* [OCPBUGS-27341](https://issues.redhat.com/browse/OCPBUGS-27341): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28480](https://github.com/openshift/origin/pull/28480)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router/http2: delete skipped tests [#28522](https://github.com/openshift/origin/pull/28522)
* NO-JIRA: Collect certs from disk [#28444](https://github.com/openshift/origin/pull/28444)
* [TRT-1370](https://issues.redhat.com/browse/TRT-1370): Track etcd leadership changes in etcd-leaders section of spyglass chart [#28441](https://github.com/openshift/origin/pull/28441)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Allow BestMatchDuration to pass even on fallback [#28526](https://github.com/openshift/origin/pull/28526)
* NO-JIRA: add kubernetes level to openshift tests image for payload [#28521](https://github.com/openshift/origin/pull/28521)
* [TRT-1441](https://issues.redhat.com/browse/TRT-1441): Stop uploading intervals to loki [#28525](https://github.com/openshift/origin/pull/28525)
* [NP-877](https://issues.redhat.com/browse/NP-877): Live migration suite e2e [#28462](https://github.com/openshift/origin/pull/28462)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Bump k8s api to v1.29.0 [#28473](https://github.com/openshift/origin/pull/28473)
* trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive [#28518](https://github.com/openshift/origin/pull/28518)
* add test to ensure all accessible-by-default apis are stable [#28467](https://github.com/openshift/origin/pull/28467)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28517](https://github.com/openshift/origin/pull/28517)
* [OCPBUGS-18577](https://issues.redhat.com/browse/OCPBUGS-18577): updated timeout to 3 seconds to account for network timing issues [#28300](https://github.com/openshift/origin/pull/28300)
* "NO-JIRA: Reduce top level origin approvers to TRT members only" [#28439](https://github.com/openshift/origin/pull/28439)
* watch the operator resources during resource watch [#28513](https://github.com/openshift/origin/pull/28513)
* add featureset into the raw-tls artifact names [#28509](https://github.com/openshift/origin/pull/28509)
* [OCPBUGS-25730](https://issues.redhat.com/browse/OCPBUGS-25730): Kuryr: Ignore Upgradeable=False on operators tests [#28478](https://github.com/openshift/origin/pull/28478)
* [OCPBUGS-26025](https://issues.redhat.com/browse/OCPBUGS-26025): Do not apply master label to make sure SNO jobs pass [#28499](https://github.com/openshift/origin/pull/28499)
* [OCPBUGS-25142](https://issues.redhat.com/browse/OCPBUGS-25142): Retry with different node port to make oc service test stable [#28495](https://github.com/openshift/origin/pull/28495)
* Refine explanation of meeting regenerate after expiry requirement [#28502](https://github.com/openshift/origin/pull/28502)
* Add README.md clarifying TLS registry purpose and processes [#28434](https://github.com/openshift/origin/pull/28434)
* [OCPBUGS-26069](https://issues.redhat.com/browse/OCPBUGS-26069): Update cluster-monitoring-operator request limits [#28498](https://github.com/openshift/origin/pull/28498)
* use the same collection options for tests so the certificate names wi… [#28497](https://github.com/openshift/origin/pull/28497)
* Update certs again [#28489](https://github.com/openshift/origin/pull/28489)
* e2e node label test to verify blocking forbidden labels [#28296](https://github.com/openshift/origin/pull/28296)
* [OCPBUGS-25943](https://issues.redhat.com/browse/OCPBUGS-25943): Adding test case for when exceed openshift.io/image-tags will ban to … [#28464](https://github.com/openshift/origin/pull/28464)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Update etcd test data for 1.29 release [#28485](https://github.com/openshift/origin/pull/28485)
* [OCPBUGS-25687](https://issues.redhat.com/browse/OCPBUGS-25687): Increase timeout for pod-network-service [#28474](https://github.com/openshift/origin/pull/28474)
* [PSAP-1210](https://issues.redhat.com/browse/PSAP-1210): Update code for automate OCPBUGS-18052 [#28382](https://github.com/openshift/origin/pull/28382)
* NO-JIRA: images: don't log entire image status on failure [#28469](https://github.com/openshift/origin/pull/28469)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: update missing ruby 3.0 ref [#28481](https://github.com/openshift/origin/pull/28481)
* [OCPBUGS-22438](https://issues.redhat.com/browse/OCPBUGS-22438): feat: add extra check for ready state on resiliency test [#28421](https://github.com/openshift/origin/pull/28421)
* [TRT-1403](https://issues.redhat.com/browse/TRT-1403): Finish porting ALL intervals to structured [#28463](https://github.com/openshift/origin/pull/28463)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: lane e2e-gcp-ovn-builds perma fail [#28471](https://github.com/openshift/origin/pull/28471)
* [NE-1477](https://issues.redhat.com/browse/NE-1477): Regenerate cert in 1024 key FIPs test to use SHA256 [#28457](https://github.com/openshift/origin/pull/28457)
* [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Add mechanism for creating flake junit for a monitor test [#28459](https://github.com/openshift/origin/pull/28459)
* NO-JIRA: Fix issue 28445 [#28446](https://github.com/openshift/origin/pull/28446)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28465](https://github.com/openshift/origin/pull/28465)
* Show how we can add new annotations using descriptions [#28461](https://github.com/openshift/origin/pull/28461)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update etcd test data for 1.29 release [#28458](https://github.com/openshift/origin/pull/28458)
* update-tls-artifacts: add AnnotationRequirement [#28460](https://github.com/openshift/origin/pull/28460)
* [OCPBUGS-25045](https://issues.redhat.com/browse/OCPBUGS-25045): Updating openshift-enterprise-tests-container image to be consistent with ART [#28452](https://github.com/openshift/origin/pull/28452)
* trt-1042: collect watch request counts [#28431](https://github.com/openshift/origin/pull/28431)
* [TRT-786](https://issues.redhat.com/browse/TRT-786): Relax the per-job disruption tests and fix bugs/improve consistency [#28453](https://github.com/openshift/origin/pull/28453)
* fix jira components to match actual jira components [#28454](https://github.com/openshift/origin/pull/28454)
* [OCPBUGS-24537](https://issues.redhat.com/browse/OCPBUGS-24537): Properly ignore kube guard probe events [#28448](https://github.com/openshift/origin/pull/28448)
* add pacevedom to the team-leads alias [#28449](https://github.com/openshift/origin/pull/28449)
* [TRT-1400](https://issues.redhat.com/browse/TRT-1400): Automated - Update synthetic test data [#28416](https://github.com/openshift/origin/pull/28416)
* [Full changelog](https://github.com/openshift/origin/compare/1ec96648894ae137d5d976aed612e203e2eb8184...c740dbdf225dfeef7fa9470ae61da2507302116c)
### [thanos](https://github.com/openshift/thanos/tree/85eee25c36702ec14b86dc3157856d2aa2634642)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#145](https://github.com/openshift/thanos/pull/145)
* [MON-3799](https://issues.redhat.com/browse/MON-3799): Bump openshift/thanos to v0.34.1 [#141](https://github.com/openshift/thanos/pull/141)
* [OCPBUGS-30537](https://issues.redhat.com/browse/OCPBUGS-30537): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#143](https://github.com/openshift/thanos/pull/143)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): Update OWNERS: move raptorsun out of reviewer [#140](https://github.com/openshift/thanos/pull/140)
* [MON-3753](https://issues.redhat.com/browse/MON-3753): Increase thanos tests timeout [#144](https://github.com/openshift/thanos/pull/144)
* [OCPBUGS-29982](https://issues.redhat.com/browse/OCPBUGS-29982): Updating ose-thanos-container image to be consistent with ART for 4.16 [#142](https://github.com/openshift/thanos/pull/142)
* [MON-3703](https://issues.redhat.com/browse/MON-3703): Bump openshift/thanos to v0.34.0 [#139](https://github.com/openshift/thanos/pull/139)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Bump openshift/thanos to v0.33.0 [#136](https://github.com/openshift/thanos/pull/136)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#135](https://github.com/openshift/thanos/pull/135)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#134](https://github.com/openshift/thanos/pull/134)
* [Full changelog](https://github.com/openshift/thanos/compare/66161ad4e03e5593f5a3a33aaaffbcd41555d62a...85eee25c36702ec14b86dc3157856d2aa2634642)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/44ea2b5825a5e200e12cb36f901393e97cbbf243)
* [OCPBUGS-37660](https://issues.redhat.com/browse/OCPBUGS-37660): Bump otelgrpc to v0.53.0 [#72](https://github.com/openshift/cloud-provider-vsphere/pull/72)
* [OCPBUGS-30538](https://issues.redhat.com/browse/OCPBUGS-30538): Bump protobuf to v1.33.0 [#67](https://github.com/openshift/cloud-provider-vsphere/pull/67)
* [OCPBUGS-27865](https://issues.redhat.com/browse/OCPBUGS-27865): Add snyk exclusion file [#63](https://github.com/openshift/cloud-provider-vsphere/pull/63)
* [OCPCLOUD-2420](https://issues.redhat.com/browse/OCPCLOUD-2420): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (46a5796) into master [#53](https://github.com/openshift/cloud-provider-vsphere/pull/53)
* [OCPBUGS-26125](https://issues.redhat.com/browse/OCPBUGS-26125): Add Snyk file to exclude vendor directory on scan [#61](https://github.com/openshift/cloud-provider-vsphere/pull/61)
* [OCPBUGS-25584](https://issues.redhat.com/browse/OCPBUGS-25584): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-vsphere/pull/60)
* [OCPBUGS-24991](https://issues.redhat.com/browse/OCPBUGS-24991): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-vsphere/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/81ad52ad7bcf37b225bc50a6e6150ca0572057b7...44ea2b5825a5e200e12cb36f901393e97cbbf243)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/be22f10a56a18cd94406eea442e0113d866618ea)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#37](https://github.com/openshift/cluster-api-provider-vsphere/pull/37)
* [OCPBUGS-30539](https://issues.redhat.com/browse/OCPBUGS-30539): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.3 (e50b9e2) into master [#36](https://github.com/openshift/cluster-api-provider-vsphere/pull/36)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Update manager binary path [#28](https://github.com/openshift/cluster-api-provider-vsphere/pull/28)
* [OCPBUGS-25627](https://issues.redhat.com/browse/OCPBUGS-25627): Add Snyk file to exclude vendor directory on scan [#31](https://github.com/openshift/cluster-api-provider-vsphere/pull/31)
* [OCPCLOUD-2447](https://issues.redhat.com/browse/OCPCLOUD-2447): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.0 (ea2dd15) into master [#34](https://github.com/openshift/cluster-api-provider-vsphere/pull/34)
* [OCPBUGS-25514](https://issues.redhat.com/browse/OCPBUGS-25514): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.7 (ba72420) into master [#33](https://github.com/openshift/cluster-api-provider-vsphere/pull/33)
* [OCPBUGS-24873](https://issues.redhat.com/browse/OCPBUGS-24873): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#29](https://github.com/openshift/cluster-api-provider-vsphere/pull/29)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/5611168658586d68b5a92c77c07304694fc2cc64...be22f10a56a18cd94406eea442e0113d866618ea)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/03b7e8ebf2c6347b40a340d892e1a66d47806300)
* [OCPBUGS-43881](https://issues.redhat.com/browse/OCPBUGS-43881): redact sensitive information when logging VCenter config [#134](https://github.com/openshift/vmware-vsphere-csi-driver/pull/134)
* [OCPBUGS-42878](https://issues.redhat.com/browse/OCPBUGS-42878): Add compute resource entity to consider a standalone cluster for volu… [#131](https://github.com/openshift/vmware-vsphere-csi-driver/pull/131)
* [OCPBUGS-13551](https://issues.redhat.com/browse/OCPBUGS-13551): FailedPrecondition volume does not appear staged [#88](https://github.com/openshift/vmware-vsphere-csi-driver/pull/88)
* [STOR-1698](https://issues.redhat.com/browse/STOR-1698): Fix volume provisioning when duplicate region or zone tags exist [#114](https://github.com/openshift/vmware-vsphere-csi-driver/pull/114)
* [OCPBUGS-30545](https://issues.redhat.com/browse/OCPBUGS-30545): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#115](https://github.com/openshift/vmware-vsphere-csi-driver/pull/115)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Rebase v3.1.2 [#113](https://github.com/openshift/vmware-vsphere-csi-driver/pull/113)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#112](https://github.com/openshift/vmware-vsphere-csi-driver/pull/112)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Revert "STOR-1396: Rebase to v3.1.1 for OCP 4.15" [#101](https://github.com/openshift/vmware-vsphere-csi-driver/pull/101)
* [OCPBUGS-22637](https://issues.redhat.com/browse/OCPBUGS-22637), [OCPBUGS-22648](https://issues.redhat.com/browse/OCPBUGS-22648), [OCPBUGS-23891](https://issues.redhat.com/browse/OCPBUGS-23891): Fix CVE-2023-45142 and CVE-2023-47108 [#108](https://github.com/openshift/vmware-vsphere-csi-driver/pull/108)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#105](https://github.com/openshift/vmware-vsphere-csi-driver/pull/105)
* [OCPBUGS-25516](https://issues.redhat.com/browse/OCPBUGS-25516): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#106](https://github.com/openshift/vmware-vsphere-csi-driver/pull/106)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#104](https://github.com/openshift/vmware-vsphere-csi-driver/pull/104)
* [OCPBUGS-24968](https://issues.redhat.com/browse/OCPBUGS-24968): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#103](https://github.com/openshift/vmware-vsphere-csi-driver/pull/103)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#102](https://github.com/openshift/vmware-vsphere-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4b15e93bd578484c4bfb1c124fa655c451bbd1ca...03b7e8ebf2c6347b40a340d892e1a66d47806300)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
* [OCPBUGS-24061](https://issues.redhat.com/browse/OCPBUGS-24061): Keep CSI operators progressing=true during DaemonSet rollout [#230](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/230)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#231](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/231)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/229)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): use new snapshot options from ClusterCSIDriver [#226](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/226)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Enable healthcheck for node-registrar containerPort [#220](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/220)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#221](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/221)
* [OCPBUGS-28936](https://issues.redhat.com/browse/OCPBUGS-28936): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.16 [#222](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/222)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Mark the operator as Disabled on connection error [#218](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/218)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Revert "Merge pull request #195 from gnufied/revert-192-enable-new-fe… [#212](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/212)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#213](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/213)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#217](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/217)
* [OCPBUGS-24421](https://issues.redhat.com/browse/OCPBUGS-24421): Rerun checks on reconnect [#215](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/215)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#206](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/206)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#195](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/195)
* [OCPBUGS-24838](https://issues.redhat.com/browse/OCPBUGS-24838): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART [#197](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/197)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#202](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/202)
* [OCPBUGS-23888](https://issues.redhat.com/browse/OCPBUGS-23888): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#196](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/196)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#201](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/201)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#198](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/198)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e0d46570a06caff3439b410b9c9f75cb383a3d2d...483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/3683c120278fb79a30340f66d22948aaddf3c16a)
* [OCPBUGS-37735](https://issues.redhat.com/browse/OCPBUGS-37735): Drop event when CheckDefaultDatastore fails [#168](https://github.com/openshift/vsphere-problem-detector/pull/168)
* [OCPBUGS-35446](https://issues.redhat.com/browse/OCPBUGS-35446): Fix missing failure-domains [#160](https://github.com/openshift/vsphere-problem-detector/pull/160)
* [OCPBUGS-30540](https://issues.redhat.com/browse/OCPBUGS-30540): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#156](https://github.com/openshift/vsphere-problem-detector/pull/156)
* [SPLAT-1209](https://issues.redhat.com/browse/SPLAT-1209): Enhance datacenter not found to contain list of known datacenters [#154](https://github.com/openshift/vsphere-problem-detector/pull/154)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#153](https://github.com/openshift/vsphere-problem-detector/pull/153)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#152](https://github.com/openshift/vsphere-problem-detector/pull/152)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#150](https://github.com/openshift/vsphere-problem-detector/pull/150)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Check if username contains a fully qualified domain name [#143](https://github.com/openshift/vsphere-problem-detector/pull/143)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#147](https://github.com/openshift/vsphere-problem-detector/pull/147)
* [OCPBUGS-25372](https://issues.redhat.com/browse/OCPBUGS-25372): Fix VPD crash when vm is not found [#148](https://github.com/openshift/vsphere-problem-detector/pull/148)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#146](https://github.com/openshift/vsphere-problem-detector/pull/146)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#145](https://github.com/openshift/vsphere-problem-detector/pull/145)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#144](https://github.com/openshift/vsphere-problem-detector/pull/144)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be...3683c120278fb79a30340f66d22948aaddf3c16a)