# 4.16.0
Created: 2024-06-25 20:17:15 +0000 UTC
Image Digest: `sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3`
## Changes from 4.16.0-rc.0
### Components
* Kubectl 1.29.1
* Kubernetes upgraded from 1.29.4 to 1.29.5
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202405010033-0 to 416.94.202406172220-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| ClusterAPIInstallAWS
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallNutanix
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallOpenStack
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallVSphere
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| HardwareSpeed
(1 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| MetricsServer
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NetworkDiagnosticsConfig
(6 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereDriverConfiguration
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallGCP
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallPowerVS
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| GatewayAPI
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| ChunkSizeMiB
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| EtcdBackendQuota
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenters
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [da90fb7c](https://github.com/openshift/aws-encryption-provider/commit/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0) `sha256:5668f00f71bfceb7bb7966d7a9f432f2193436bbfa1ebcefaadfe2f48a2be55b`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [bc92347b](https://github.com/openshift/azure-kubernetes-kms/commit/bc92347bcd3863db05ce6c79f0b71145a3185e12) `sha256:e29c1cf827ee8834c8d87d5661b70b7331a5d78456440478e4a31314ae96433a`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [f5039976](https://github.com/openshift/containernetworking-plugins/commit/f503997690a236f322ae062ab2ebcf720b0457bf) `sha256:f1776c5c20353bd9ed42b8c118271d4652cd8e2e84b80aeb1896a763ea24c2fe`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:454fcc7d474271d13b864fda2e7ae7b7b5235799f1423ba79cb3f2b52c05ba57`
### Removed images
* cluster-platform-operators-manager
### Rebuilt images without code change
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:ea2c9addb1026f05f373585f0ad86e7d3ede8be64d70726c5624d279cf124f55`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:c9ede35d40f2292cdefc202374658b927d67386baa146e8db050c8fd6cb0d40a`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [9a6028c4](https://github.com/openshift/apiserver-network-proxy/commit/9a6028c48ae73bd8227f014635ce744452e70348) `sha256:bfe6348d1537d0618771812f2a3f7e1d6c2a543948a99a80b373186044d77794`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:3c46d147deb9f93d703339c07598f959792b50cadbfa2d22f1c744f6dae19f92`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [61d60f6c](https://github.com/openshift/machine-api-provider-aws/commit/61d60f6ca20443df434456c2f3eeba859634e6a2) `sha256:c9a16f74c05aac14c7e7375420e4f75bba23ce5c9a17ca4b726ce173399d350b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [746491a6](https://github.com/openshift/aws-pod-identity-webhook/commit/746491a64a4efc04132ceb641cee52c2ead3facd) `sha256:bdf22eb19a391efde539f7d4727a840014e6386edbe90b78b5ead5d216506f4a`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:f84568509ed17d7b43d484534e6438f8c6751494c39947b7b40cdc97d42ea8e3`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:b7818892fdf53da13ee04bca2c47aed08d9acd107f51ba93b3441ce69048bd7f`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [face7da9](https://github.com/openshift/cluster-api-provider-azure/commit/face7da9972351de9a8d230b2a72af9dfe7facf7) `sha256:a348e68c48c9a71eb952f7fe1a25d975682b2a686dd48aebd6473a1f06ba892a`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:532ced1ff6864578ef88be69158c4e8a93bb0e32c5b918dfe7450f24a4b488df`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [5ceb190a](https://github.com/openshift/azure-file-csi-driver/commit/5ceb190a24730e4a3f951fa3e186e3cde9d86889) `sha256:ecaf5fc70e391785946f69846ca4eabaaf553de57bdd6f2c1133f518e46ff3c9`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [d6be293a](https://github.com/openshift/machine-api-provider-azure/commit/d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe) `sha256:8322a01cc8a639ffa7098f2e5f3abef8dfcd9eae7910abbdbe7b090384495bb4`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [4aca092a](https://github.com/openshift/azure-workload-identity/commit/4aca092a13f62e48c700a910e8f3f0f228a7d822) `sha256:23d9f2fbf4f5f35988b945ba599f0f84b1fc4d2f1daf17725f6fca2a1c90b4cf`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [11ba601f](https://github.com/openshift/cluster-api-provider-baremetal/commit/11ba601fbca58557176fcc67ffe8d7d64b697a4a) `sha256:79148057b74d9815e0dcb01b8693c870d24bd2e0cd8782c63ed94c8d66642e68`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:f929ddc3033f4e54e8505f841c4df75ea428d765c74f2696a927223aaf4283a8`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:c1def799d510853ff49afe92fbc5d10bdcc48e8e57b3cc886ff6067a515cf34b`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:fcfcd442b37827a1acbd2953c1e4f8103f31fec151e6666b9c5bb0045feada8f`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [bf6afbb8](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/bf6afbb820531b4adc3a52f78a90f317c5580bad) `sha256:730f5b20164dd87b074b356636cdfa4848f1159b412ccf7e09ab0c4554232730`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:3e2c5a70fe7e9b625f5ef26f458c54d20eb41da9ac60e96442f3a33dacfae5ce`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:d1ce9342b0ceac619a262bd0894094be1e318f913e06ed5392b9e45dfc973791`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [d4dd8439](https://github.com/openshift/cluster-samples-operator/commit/d4dd84396472c5e974f0562046a6ad068b6f20f8) `sha256:bd9205b185124b3b67669bb3166734f9e22831957c457aa1083f4f2bc4750312`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c0641e08](https://github.com/openshift/cluster-update-keys/commit/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24) `sha256:10aed32867a3e2138d6006426a84160c5bb428b86b686a0770d3c536714b0855`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:5dda85af9197d3905c67a31effbae5047eeca678c8065229bc45088426a338e8`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [f5039976](https://github.com/openshift/containernetworking-plugins/commit/f503997690a236f322ae062ab2ebcf720b0457bf) `sha256:1b752ed92e0354fc8b4316fc7fc482d136a19212ae4a886515db81e8f0b37648`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:334920a064a5dee9cce98c570674c8ac03e47b3acdb9e4040dae6736c329c36b`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [6de0dc79](https://github.com/openshift/csi-driver-manila-operator/commit/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751) `sha256:44f59ae794834bf05f9fc5ecfc72900557e1865688a5922346cb6c0c9191fa51`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:0c26bac463c2c1dd60c32d4b012747a50bb9d11a6cee0aa3f6b12d0ceab6e2b9`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:2c9f84bf28a0af4f3ba5019575058316abaeda1dd5c1c85e48745067b8b5d961`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:7e1b0878754a15723c3c7d41bf16a2ab75c2a5409cd74a324298ae5f8ea03969`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:b6b007b3c711b05bcc4eb4423771119a06aa4b99807c3f931419c9e7d24506b3`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:e80b8f5c299001d63af519280501352c163e490b60ccbf25ad6e7b14c2699a89`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:aafb1ff11acc4a86441ecf1ec90dce94add1ab17b4d8b75d3daff942488683ed`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:a8f10de71f86a86f33a184ff494a8d5b8d9b0de38314390c048e13c6d37767e8`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:2ea9fdddc0443ded9cdaf50b8f74747b100a710b1b602b38d4205fd2497c0f21`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:2860f4cd96d390433759df75b68cacd2449f4a690f06e12efa42a0adc6f3f8f6`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:6241d7b00a85a01f1ea042e4c1145eaad9381ed2d20c3f6f908f13cbfa3614ea`
* [docker-builder](https://github.com/openshift/builder) git [ca2b36ac](https://github.com/openshift/builder/commit/ca2b36ac7f38efc76bedc87cc81f9464f52bf332) `sha256:f69708d7711c9fdc19d1b60591f04a3061fe1f796853e2daea9edea688b2e086`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7534ab90](https://github.com/openshift/egress-router-cni/commit/7534ab906e5f9d38defbbbc6b169e5d829463bb5) `sha256:476d419f3e57548b58f62712e3994b6e6d4a6ca45c5a462f71b7b8e5f137a208`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:918dd6674f3a3b27a89f854d2804c5b020fd1c4d3d06cd855019881985e23ba7`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:412ce22f48c834522a76ed6885573089bc577d57aaa91cf816b46d4db5815bdf`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:53e329ebf6028eb4e9fa649b11837c26de29d7b54de71cdff7eef67dacbc8407`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:e7d51eddc9956a1bc70272958315c0f15d0e7cd5baa4f1b5b6dbaefd0cc7ef63`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [32b4c005](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/32b4c00517de0f54bf738380064a12d58b031eec) `sha256:26723933f3e379b2ab33043d5acc1970a4cb4589eb06cebf5757fe7881351a78`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [1a3a3030](https://github.com/openshift/machine-api-provider-ibmcloud/commit/1a3a3030afcbbc0a26e794050d300b818069ba16) `sha256:a064f3f3370f777756981b8b3e51ee32cbc4c26a0cd44548f5afaffddb9e1e0f`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [63681a46](https://github.com/openshift/ironic-agent-image/commit/63681a469fdba2f223373ff36350bf2462b997a3) `sha256:70b6121b4a8323b124b8570ecb8f9d74940f5e6a20939181792e486ccad0b930`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:277940ca6a06a87c98a39aeb1508a06dc8e04e5d0b73594ec704b2597775d65f`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e78e4c3e](https://github.com/openshift/ironic-static-ip-manager/commit/e78e4c3e6db1805816308197eb9002dfbca27560) `sha256:41966d85320e3961e589b180125b2f54e8323446b8a1039055265fc9e07184f0`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:9dfd59d8c7eda6a08fbdfbed0df1a0ac741fb07c2a9380751b5a15f713e300bc`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [7938f253](https://github.com/openshift/kubernetes-metrics-server/commit/7938f253e74f2259951cc882f2879a9860a38481) `sha256:8c1f690970ce6e1457238c76bcee59f83c50c02a9b07b2ee9baca4fcee819fb0`
* [kube-proxy](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:ce3a9355a4497b51899867170943d34bbc2d2b7996d9a002c103797bd828d71b`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:26765b7a91c1c755b0761315e7ef9243856073900095aff9cc95f7cf2a7161ee`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [969a60e9](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51) `sha256:30f6d30b6bd801c455b91dc3c00333ffa9eec698082510d7abd3ad266d0de5a1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:fe445bb9d26629f7239247c0805261f409ee52ed1289fb5eb74e69270eb6ebfc`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:3de4d979b4663c60e8d80857fd53f774d9915180c9f4400cc07719175196d264`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:0154a167337c7eaf3f5c9533101ba849ce5fd3b0d936e2fa4bd081460fbfd952`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:0af828e31b52e9d20ba73d19017ac7e982a6777bc65ddb325271f7ce344d7e85`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [f1fc4315](https://github.com/openshift/monitoring-plugin/commit/f1fc4315bffa538d0a18e581866093a004db460b) `sha256:913d1090848aa4e87f11a1a3c5a287f17a0b06b64dd05694d1ee997270e7d365`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [2591682f](https://github.com/openshift/multus-admission-controller/commit/2591682f2d409eea29cced23bf355ca8f27fcec8) `sha256:b589a20426aa14440a5e226ccd7f08c3efb23f45a2d687d71c9b399967adfa45`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [c9a6ba24](https://github.com/openshift/multus-networkpolicy/commit/c9a6ba24e92dad55e00fc17815a3e9988ee14d2d) `sha256:f0791454224e2ec76fd43916220bd5ae55bf18f37f0cd571cb05c76e1d791453`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [6a04feea](https://github.com/openshift/route-override-cni/commit/6a04feea1b1ab85914d9793a3bb8502c54bef172) `sha256:f410c53f8634b7827203f15862c05b6872e3d2e7ec59799b27a6b414943469d8`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [bb911451](https://github.com/openshift/bond-cni/commit/bb911451158fc06f193917863778434944e88ae1) `sha256:329299206a95c4bc22e9175de3c3dbedc8e44048aaa7d07e83eafb3e14a3a30f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [710bd872](https://github.com/openshift/network-metrics-daemon/commit/710bd872934572584eff4987eb638764afd04cdb) `sha256:cc389b05ef555b742646390ef180ad25a8f5111c68fec6df1cfa1c6c492e98da`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9bbc44c](https://github.com/openshift/cloud-provider-nutanix/commit/c9bbc44c0200c8061506c465d0eb3c97fe94e197) `sha256:5974ca9365fc6258c2bbeb23172eae24cefbb28a1d55493022972b5ed5db3379`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [fa1f097c](https://github.com/openshift/oauth-apiserver/commit/fa1f097c2800b06b3b56537651294d023762a4eb) `sha256:26660173efd872a01c061efc0bd4a2b08beb4e5d63e3d7636ec35ddcf5d3c1fa`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:c9baff203ca8c8f3726f2191b9378dbb1523ce1dd8bf2f4e9607d276b39370ba`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:0212f125ddc0db88b64ed8bb60de7c93f99d08ba8f95efab58f9d2b000ed4b8a`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:5996d1ad20317f36c857cb499e1a8c87a2f82545df14e98d0fc655358b13836c`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:83490e1054615f801a599f2a2167b3400abd58dba607b9efbeb4f09c0eed7442`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:e7c4135554bb35e39c20ce1f66380a22b57db849c9b4aefd3ff50177089b43a0`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:31c03b6d58b3aea8b4fda1969a1623e50506a72838a58a152a0cbc69222ab62f`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [730a473c](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/730a473cf60d5de4d4543ea71ff5f3c6c1010980) `sha256:6a5d2c0a3f9057bfdcf30f994c346962aff065c5d583cd148015ef1b7215afd8`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [87386cd4](https://github.com/openshift/cloud-provider-powervs/commit/87386cd444b4b9fe745d0198ab959ccedb5e318a) `sha256:51535fa1087dbc8ecb44b29e998df888b6d7bc8fa0c0c6fa2a768dfd4c1bea2c`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [6b57e6c1](https://github.com/openshift/machine-api-provider-powervs/commit/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1) `sha256:b2d4cce31e3f185d1f61e68a952dd66b2e4c5b8022a41a25046296cc99027361`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:7b6f207289ca16648d5ac95d1ae3f8bdbe91b4f5943a16fd97317798a9d7ee90`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:0f03a4ee4a7772aed369a72badb20e66e6157fd6bff5b92b527f0c0083e41907`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:4b894460cc73907bdaf520b88864d95816482d19fa090757458533da31ae35d1`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:9b8349d3e622370f71c09088c37938b0b41088c5fa7259ee405cc463a83f0253`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:861a154582c8f46c99f54d5308b933dc6d5b57723ec69006545e4812650c8779`
* rhel-coreos `sha256:eaa7835f2ec7d2513a76e30a41c21ce62ec11313fab2f8f3f46dd4999957a883`
* rhel-coreos-extensions `sha256:187be439d39bbf12201dc98a198b399d0ef819ae472b27808153824d16b6f09c`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [3112b458](https://github.com/openshift/route-controller-manager/commit/3112b458983c6fca6f77d5a945fb0026186dace6) `sha256:1fd628f40d321354832b0f409d2bf9b89910de27bc6263a4fb5a55c25e160a99`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:9ec002699d6fa111b93b08bda974586ae4018f4a52d1cbfd0995e6dc9c732151`
* [telemeter](https://github.com/openshift/telemeter) git [6ab43e48](https://github.com/openshift/telemeter/commit/6ab43e488013b2383d594b3a8837e3800ce01c04) `sha256:378c3dae496ba03b5d05c4550196cf4b576289eb751f9a834c513bbae2728900`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [d674e6d8](https://github.com/openshift/vsphere-problem-detector/commit/d674e6d8b4b814b1544e7d2fc9177e5e0f90484b) `sha256:203f934f8714eec40ee529373e41d4eff754091413db76098f8826a0177a39e6`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
* [OCPBUGS-31727](https://issues.redhat.com/browse/OCPBUGS-31727): Invalid Pull-Secret when using password which contains a colon character (#6362) [#6362](https://github.com/openshift/assisted-service/pull/6362)
* [MGMT-17850](https://issues.redhat.com/browse/MGMT-17850): Bump k8s.io modules to v0.29 (#6345) (#6372) [#6345](https://github.com/openshift/assisted-service/pull/6345)
* [OCPBUGS-34278](https://issues.redhat.com/browse/OCPBUGS-34278): Don't use the statically linked installer if FIPS is enabled (#6357) [#6357](https://github.com/openshift/assisted-service/pull/6357)
* Use openshift-install binary for releases >= 4.16 (#6304) [#6304](https://github.com/openshift/assisted-service/pull/6304)
* [MGMT-17775](https://issues.redhat.com/browse/MGMT-17775): Ensure that patch manifest filenames are consistent and correct (#6289) [#6289](https://github.com/openshift/assisted-service/pull/6289)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure that we improve error messages for mirror registry tagged images (#6266) [#6266](https://github.com/openshift/assisted-service/pull/6266)
* [MGMT-17764](https://issues.redhat.com/browse/MGMT-17764): Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) [#6276](https://github.com/openshift/assisted-service/pull/6276)
* NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) [#6255](https://github.com/openshift/assisted-service/pull/6255)
* Revert "MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)" (#6268) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure releaseImage is not tag based when mirror registry enabled. (#6260) [#6260](https://github.com/openshift/assisted-service/pull/6260)
* [MGMT-17523](https://issues.redhat.com/browse/MGMT-17523): Fail when OS images CPU architecture is missing instead of giving it default value (#6256) [#6256](https://github.com/openshift/assisted-service/pull/6256)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) [#6259](https://github.com/openshift/assisted-service/pull/6259)
* [OCPBUGS-31733](https://issues.redhat.com/browse/OCPBUGS-31733): Remove CPMS manifest for vsphere platform (#6239) [#6239](https://github.com/openshift/assisted-service/pull/6239)
* NO-ISSUE: Bump OCP versions: 4.16 (#6254) [#6254](https://github.com/openshift/assisted-service/pull/6254)
* [MGMT-17697](https://issues.redhat.com/browse/MGMT-17697): Change L3 connectivity to use connected addresses instead of majority groups (#6252) [#6252](https://github.com/openshift/assisted-service/pull/6252)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) [#6250](https://github.com/openshift/assisted-service/pull/6250)
* NO-ISSUE: Fix hypershift destroy in CI test script (#6246) [#6246](https://github.com/openshift/assisted-service/pull/6246)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6a70f7090423993b0b7e360fd45e791466fbe7ce...6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/373c87ad8f0d88816031b5c39764c80d900228d9)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#850) [#850](https://github.com/openshift/assisted-installer/pull/850)
* [OCPBUGS-32105](https://issues.redhat.com/browse/OCPBUGS-32105): Fix race to mark node Joined (#823) [#823](https://github.com/openshift/assisted-installer/pull/823)
* NO-ISSUE: Bump github.com/onsi/gomega (#841) [#841](https://github.com/openshift/assisted-installer/pull/841)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Moving disk operations to new repo (#840) [#840](https://github.com/openshift/assisted-installer/pull/840)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27e1b0d2880ab06cd7165415fd6e1ebb7cf1db80...373c87ad8f0d88816031b5c39764c80d900228d9)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9ca7b58d937c413f670a26c02435829b1fb3a196)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#717) [#717](https://github.com/openshift/assisted-installer-agent/pull/717)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) [#637](https://github.com/openshift/assisted-installer-agent/pull/637)
* NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) [#710](https://github.com/openshift/assisted-installer-agent/pull/710)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/657a3c7874eb3f6d695aab33ce8ce751f7bf3a6c...9ca7b58d937c413f670a26c02435829b1fb3a196)
### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/064d4624c74d417dd31cf1c173c00c3fa98ffade)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#50](https://github.com/openshift/cluster-api-provider-alibaba/pull/50)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/a57f2023035a80c8799edf4e105f11cabe6180a4...064d4624c74d417dd31cf1c173c00c3fa98ffade)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/a53e9def2e60eecd390575b59c85d54c5412ecd3)
* [OCPBUGS-31968](https://issues.redhat.com/browse/OCPBUGS-31968): update for CVE-2023-45288 [release-4.16] [#82](https://github.com/openshift/cloud-provider-aws/pull/82)
* [OCPBUGS-34046](https://issues.redhat.com/browse/OCPBUGS-34046): Ensure that addresses are added in network device index order [#88](https://github.com/openshift/cloud-provider-aws/pull/88)
* [OCPBUGS-8213](https://issues.redhat.com/browse/OCPBUGS-8213): Ensure removal of security group rules on deleting load balancers [#57](https://github.com/openshift/cloud-provider-aws/pull/57)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/c18f7e773f1cde578af70a25f6bf597797289309...a53e9def2e60eecd390575b59c85d54c5412ecd3)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#510](https://github.com/openshift/cluster-api-provider-aws/pull/510)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/63025f8fdfc1a53d5d37354c49b210754873667d...aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [Full changelog](https://github.com/openshift/csi-operator/compare/0a77e596f573853126504c2159b67ac352275c83...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/0dc3033888f4cae22e5e5897921422f7180c4033)
* [OCPBUGS-35706](https://issues.redhat.com/browse/OCPBUGS-35706): capi/aws: allow 6443 for private cluster NLB [#8622](https://github.com/openshift/installer/pull/8622)
* [OCPBUGS-35570](https://issues.redhat.com/browse/OCPBUGS-35570): capi/aws: retry SSH ingress rule removal [#8618](https://github.com/openshift/installer/pull/8618)
* [OCPBUGS-35515](https://issues.redhat.com/browse/OCPBUGS-35515): SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool [#8608](https://github.com/openshift/installer/pull/8608)
* [OCPBUGS-35493](https://issues.redhat.com/browse/OCPBUGS-35493): Validate OnHostMaintenance and ConfidentialCompute [#8606](https://github.com/openshift/installer/pull/8606)
* [OCPBUGS-35435](https://issues.redhat.com/browse/OCPBUGS-35435): vsphere - allow network selection on cluster name [#8595](https://github.com/openshift/installer/pull/8595)
* [OCPBUGS-35527](https://issues.redhat.com/browse/OCPBUGS-35527): [release-4.16] bump github.com/container/images for CVE fix [#8611](https://github.com/openshift/installer/pull/8611)
* [OCPBUGS-35471](https://issues.redhat.com/browse/OCPBUGS-35471): capi/aws: disable CAPA's TagUnmanagedNetworkResources feature gate [#8604](https://github.com/openshift/installer/pull/8604)
* [OCPBUGS-35023](https://issues.redhat.com/browse/OCPBUGS-35023): azure: bump profile used for network [#8537](https://github.com/openshift/installer/pull/8537)
* [OCPBUGS-35448](https://issues.redhat.com/browse/OCPBUGS-35448): [release-4.16] capi/aws: bump provider for fixes [#8598](https://github.com/openshift/installer/pull/8598)
* [OCPBUGS-35460](https://issues.redhat.com/browse/OCPBUGS-35460): save etcd data to its own directory [#8600](https://github.com/openshift/installer/pull/8600)
* [OCPBUGS-35384](https://issues.redhat.com/browse/OCPBUGS-35384): Add ELB V2 permission to set security groups on API server load balancer [#8589](https://github.com/openshift/installer/pull/8589)
* [OCPBUGS-35344](https://issues.redhat.com/browse/OCPBUGS-35344): baremetal: check if HardwareDetails is nil [#8579](https://github.com/openshift/installer/pull/8579)
* [OCPBUGS-35392](https://issues.redhat.com/browse/OCPBUGS-35392): aws: delete ignition bucket on bootstrap destroy [#8590](https://github.com/openshift/installer/pull/8590)
* [OCPBUGS-35383](https://issues.redhat.com/browse/OCPBUGS-35383): capi: use polling instead of exponential backoff [#8588](https://github.com/openshift/installer/pull/8588)
* [OCPBUGS-35372](https://issues.redhat.com/browse/OCPBUGS-35372): openstack: Attach a bootstrap FIP to the cluster network port [#8585](https://github.com/openshift/installer/pull/8585)
* [OCPBUGS-35323](https://issues.redhat.com/browse/OCPBUGS-35323): Add S3 permission to allow attaching S3 bucket policy [#8576](https://github.com/openshift/installer/pull/8576)
* [OCPBUGS-35379](https://issues.redhat.com/browse/OCPBUGS-35379): capi/aws: do not set proxy for masters [#8586](https://github.com/openshift/installer/pull/8586)
* [OCPBUGS-35253](https://issues.redhat.com/browse/OCPBUGS-35253): AWS remove extra tags from awsmachines for security groups and subnets [#8569](https://github.com/openshift/installer/pull/8569)
* [OCPBUGS-35235](https://issues.redhat.com/browse/OCPBUGS-35235): baremetal: Don't always enable provisioning-interface.service [#8563](https://github.com/openshift/installer/pull/8563)
* [OCPBUGS-35302](https://issues.redhat.com/browse/OCPBUGS-35302): Prevent multiple invocations on CAPI [#8571](https://github.com/openshift/installer/pull/8571)
* [OCPBUGS-35101](https://issues.redhat.com/browse/OCPBUGS-35101): [release-4.16] Add 4 new regions for PowerVS [#8533](https://github.com/openshift/installer/pull/8533)
* [OCPBUGS-35312](https://issues.redhat.com/browse/OCPBUGS-35312): capi/aws: rename `preserveBootstrapIgnition` [#8574](https://github.com/openshift/installer/pull/8574)
* [OCPBUGS-35192](https://issues.redhat.com/browse/OCPBUGS-35192): write etcd and kube-apiserver logs [#8558](https://github.com/openshift/installer/pull/8558)
* [OCPBUGS-34760](https://issues.redhat.com/browse/OCPBUGS-34760): capi/aws: fix setting custom AMI [#8520](https://github.com/openshift/installer/pull/8520)
* [OCPBUGS-35243](https://issues.redhat.com/browse/OCPBUGS-35243): capi: do not override KUBECONFIG [#8566](https://github.com/openshift/installer/pull/8566)
* [OCPBUGS-35224](https://issues.redhat.com/browse/OCPBUGS-35224): PowerVS: Destroy DHCP in ERROR state [#8561](https://github.com/openshift/installer/pull/8561)
* [OCPBUGS-35151](https://issues.redhat.com/browse/OCPBUGS-35151): wait for ip addresses to be present on machines [#8554](https://github.com/openshift/installer/pull/8554)
* [OCPBUGS-34499](https://issues.redhat.com/browse/OCPBUGS-34499): unique AWS HostedZone Caller Ref [#8476](https://github.com/openshift/installer/pull/8476)
* [OCPBUGS-35103](https://issues.redhat.com/browse/OCPBUGS-35103): OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas [#8553](https://github.com/openshift/installer/pull/8553)
* [OCPBUGS-35098](https://issues.redhat.com/browse/OCPBUGS-35098): capi/aws: add BootstrapDestroyer guard [#8552](https://github.com/openshift/installer/pull/8552)
* [OCPBUGS-35088](https://issues.redhat.com/browse/OCPBUGS-35088): PowerVS: fix AddIPToLoadBalancerPool [#8551](https://github.com/openshift/installer/pull/8551)
* [OCPBUGS-35030](https://issues.redhat.com/browse/OCPBUGS-35030): Increase timeout for bootstrap complete [#8539](https://github.com/openshift/installer/pull/8539)
* [OCPBUGS-35049](https://issues.redhat.com/browse/OCPBUGS-35049): capi/aws: don't use S3 stub for masters [#8548](https://github.com/openshift/installer/pull/8548)
* [OCPBUGS-35044](https://issues.redhat.com/browse/OCPBUGS-35044): aws: don't always require s3:Delete* permissions [#8547](https://github.com/openshift/installer/pull/8547)
* [OCPBUGS-34620](https://issues.redhat.com/browse/OCPBUGS-34620): Use infrastructure API to detect cluster topology [#8499](https://github.com/openshift/installer/pull/8499)
* [OCPBUGS-34822](https://issues.redhat.com/browse/OCPBUGS-34822): [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled [#8524](https://github.com/openshift/installer/pull/8524)
* [OCPBUGS-34976](https://issues.redhat.com/browse/OCPBUGS-34976): [release-4.16] aws: terraform: add spot instance support for masters [#8526](https://github.com/openshift/installer/pull/8526)
* [OCPBUGS-34707](https://issues.redhat.com/browse/OCPBUGS-34707): attach tag to folder,fix folder destroy [#8509](https://github.com/openshift/installer/pull/8509)
* [OCPBUGS-33794](https://issues.redhat.com/browse/OCPBUGS-33794): Make Ingress capability required for standalone OpenShift [#8528](https://github.com/openshift/installer/pull/8528)
* [OCPBUGS-34628](https://issues.redhat.com/browse/OCPBUGS-34628): tfvars: change asset's name [#8501](https://github.com/openshift/installer/pull/8501)
* [OCPBUGS-34388](https://issues.redhat.com/browse/OCPBUGS-34388): Add --dir /tmp to node-joiner-monitor.sh [#8461](https://github.com/openshift/installer/pull/8461)
* [OCPBUGS-34728](https://issues.redhat.com/browse/OCPBUGS-34728): [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix [#8506](https://github.com/openshift/installer/pull/8506)
* [OCPBUGS-34693](https://issues.redhat.com/browse/OCPBUGS-34693): update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 [#8517](https://github.com/openshift/installer/pull/8517)
* [OCPBUGS-34419](https://issues.redhat.com/browse/OCPBUGS-34419): PowerVS: update capi ibmcloud to release 0 8 0 [#8465](https://github.com/openshift/installer/pull/8465)
* [OCPBUGS-34623](https://issues.redhat.com/browse/OCPBUGS-34623), [OCPBUGS-34625](https://issues.redhat.com/browse/OCPBUGS-34625): capv - missing cores/socket,disk type [#8500](https://github.com/openshift/installer/pull/8500)
* [OCPBUGS-34427](https://issues.redhat.com/browse/OCPBUGS-34427): aws/cluster: restrict SSH on private clusters [#8467](https://github.com/openshift/installer/pull/8467)
* [OCPBUGS-34528](https://issues.redhat.com/browse/OCPBUGS-34528): Nutanix IPI install with capi failed to set bootType [#8481](https://github.com/openshift/installer/pull/8481)
* [OCPBUGS-31845](https://issues.redhat.com/browse/OCPBUGS-31845): Detect Release Image Arch in a Disconnected Env [#8490](https://github.com/openshift/installer/pull/8490)
* [OCPBUGS-33962](https://issues.redhat.com/browse/OCPBUGS-33962): [release-4.16] Remove vSphere Terraform [#8431](https://github.com/openshift/installer/pull/8431)
* [OCPBUGS-34506](https://issues.redhat.com/browse/OCPBUGS-34506): [release-4.16] bump golang-protobuf for CVE fix [#8478](https://github.com/openshift/installer/pull/8478)
* [OCPBUGS-34417](https://issues.redhat.com/browse/OCPBUGS-34417): capi/aws: don't modify BYO role's policy [#8463](https://github.com/openshift/installer/pull/8463)
* [OCPBUGS-34220](https://issues.redhat.com/browse/OCPBUGS-34220): Reintroduce CAPI-installer to 4.16 [#8451](https://github.com/openshift/installer/pull/8451)
* [OCPBUGS-33976](https://issues.redhat.com/browse/OCPBUGS-33976): Enable leader election for baremetal operator [#8435](https://github.com/openshift/installer/pull/8435)
* Trt-1674: 4.16 capi revert 1 [#8434](https://github.com/openshift/installer/pull/8434)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): [release-4.16] GA CAPI Installer [#8428](https://github.com/openshift/installer/pull/8428)
* [OCPBUGS-33668](https://issues.redhat.com/browse/OCPBUGS-33668): Changed folder name to match cluster name instead of infra-id. [#8414](https://github.com/openshift/installer/pull/8414)
* [AGENT-903](https://issues.redhat.com/browse/AGENT-903): monitor-add-nodes should only show CSRs matching node [#8376](https://github.com/openshift/installer/pull/8376)
* [CORS-3480](https://issues.redhat.com/browse/CORS-3480): aws/sdk: remove sdk provisioner [#8358](https://github.com/openshift/installer/pull/8358)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): Always collect clusterapi manifests [#8411](https://github.com/openshift/installer/pull/8411)
* [OCPBUGS-33709](https://issues.redhat.com/browse/OCPBUGS-33709): GCP mixup when using the ignition shim vs the signed url [#8342](https://github.com/openshift/installer/pull/8342)
* [CORS-3297](https://issues.redhat.com/browse/CORS-3297): Add GCP firewall rule to access bootstrap node via ssh [#8374](https://github.com/openshift/installer/pull/8374)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi-aws delete bootstrap ssh rule [#8359](https://github.com/openshift/installer/pull/8359)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): baremetal: always write masters file [#8365](https://github.com/openshift/installer/pull/8365)
* [OCPBUGS-33531](https://issues.redhat.com/browse/OCPBUGS-33531): update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 [#8409](https://github.com/openshift/installer/pull/8409)
* no-jira: Vendor api changes for tech preview with capg [#8407](https://github.com/openshift/installer/pull/8407)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure ignite control plane machines [#8126](https://github.com/openshift/installer/pull/8126)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add missing permission for IPv4 pools [#8408](https://github.com/openshift/installer/pull/8408)
* [OCPBUGS-33649](https://issues.redhat.com/browse/OCPBUGS-33649): add quota support to ca-west-1 [#8406](https://github.com/openshift/installer/pull/8406)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): capi: collect generated assets in hidden dir and save into log bundle [#8387](https://github.com/openshift/installer/pull/8387)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: aarch64-related fixes [#8385](https://github.com/openshift/installer/pull/8385)
* [OCPBUGS-33610](https://issues.redhat.com/browse/OCPBUGS-33610): fix API detection, azure bootstrap disk size, and use get to verify endpoint [#8371](https://github.com/openshift/installer/pull/8371)
* no-jira: Removing unused terraform variables [#8360](https://github.com/openshift/installer/pull/8360)
* [OCPBUGS-33502](https://issues.redhat.com/browse/OCPBUGS-33502): capi/aws: fix setting IMDSv2 value [#8399](https://github.com/openshift/installer/pull/8399)
* [CORS-3516](https://issues.redhat.com/browse/CORS-3516): hack: do not execute cross-compiled binaries [#8397](https://github.com/openshift/installer/pull/8397)
* [OCPBUGS-33578](https://issues.redhat.com/browse/OCPBUGS-33578): capi/aws: fix HostedZone ID lookup [#8396](https://github.com/openshift/installer/pull/8396)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): improve bootstrap logic to wait for at least 2 apiserver instances [#8394](https://github.com/openshift/installer/pull/8394)
* [OKD-213](https://issues.redhat.com/browse/OKD-213): Reference stream-coreos instead of centos-stream-coreos-9 [#8356](https://github.com/openshift/installer/pull/8356)
* [OCPBUGS-33470](https://issues.redhat.com/browse/OCPBUGS-33470): use read/write cache on azure masters [#8380](https://github.com/openshift/installer/pull/8380)
* no-jira: AzureMachines: set disk caching to ReadWrite [#8390](https://github.com/openshift/installer/pull/8390)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): Change $@ to "$*" to fix shellcheck [#8402](https://github.com/openshift/installer/pull/8402)
* [OCPBUGS-33481](https://issues.redhat.com/browse/OCPBUGS-33481): set the node tag used by CAPG for CloudProviderConfig [#8386](https://github.com/openshift/installer/pull/8386)
* [OCPBUGS-23022](https://issues.redhat.com/browse/OCPBUGS-23022): Installer should not complain when API and API-INT are resolved. [#7701](https://github.com/openshift/installer/pull/7701)
* no-jira: vendor: capi-installer in tech preview [#8372](https://github.com/openshift/installer/pull/8372)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): capa/machines: fix zone placement for control planes [#8347](https://github.com/openshift/installer/pull/8347)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Changed vsphere CPMS to not include fields controlled by failure domains. [#8354](https://github.com/openshift/installer/pull/8354)
* [AGENT-872](https://issues.redhat.com/browse/AGENT-872): Generate JWT token [#8110](https://github.com/openshift/installer/pull/8110)
* no-jira: vSphere - update owners aliases [#8384](https://github.com/openshift/installer/pull/8384)
* [AGENT-906](https://issues.redhat.com/browse/AGENT-906): Script to run monitor-add-nodes in cluster [#8294](https://github.com/openshift/installer/pull/8294)
* [OCPBUGS-33430](https://issues.redhat.com/browse/OCPBUGS-33430): Fix CAPI installation typo [#8375](https://github.com/openshift/installer/pull/8375)
* [CORS-3471](https://issues.redhat.com/browse/CORS-3471): standalone destroy bootstrap support with capi [#8350](https://github.com/openshift/installer/pull/8350)
* [CORS-3477](https://issues.redhat.com/browse/CORS-3477): hack: build capi + providers by default [#8357](https://github.com/openshift/installer/pull/8357)
* [OCPBUGS-33189](https://issues.redhat.com/browse/OCPBUGS-33189): OCPBUGS-33006: baremetal: correct libvirt defaults [#8366](https://github.com/openshift/installer/pull/8366)
* [OCPBUGS-33157](https://issues.redhat.com/browse/OCPBUGS-33157): baremetal: pause provisioning [#8346](https://github.com/openshift/installer/pull/8346)
* NO-ISSUE: baremetal: disable bmo webhook on bootstrap [#8340](https://github.com/openshift/installer/pull/8340)
* [OCPBUGS-33240](https://issues.redhat.com/browse/OCPBUGS-33240): avoid FAT32 error messages when generating the agent ISO [#8353](https://github.com/openshift/installer/pull/8353)
* no-jira: Private domains in survey for PowerVS [#8303](https://github.com/openshift/installer/pull/8303)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images: use pre-built KAS/etcd binaries [#8343](https://github.com/openshift/installer/pull/8343)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Convert storage policy id to SpbmStoragePolicy. [#8352](https://github.com/openshift/installer/pull/8352)
* no-jira: Power VS: Refactor `InfraReady` to use metadata client [#8337](https://github.com/openshift/installer/pull/8337)
* [CORS-3466](https://issues.redhat.com/browse/CORS-3466): CAPG set instance group name [#8314](https://github.com/openshift/installer/pull/8314)
* [MULTIARCH-4633](https://issues.redhat.com/browse/MULTIARCH-4633): Power VS: Configure load balancers for the private scenario [#8331](https://github.com/openshift/installer/pull/8331)
* [OCPBUGS-26216](https://issues.redhat.com/browse/OCPBUGS-26216): Fix parameter used to disable smt for ppc64 systems [#8178](https://github.com/openshift/installer/pull/8178)
* [COS-2744](https://issues.redhat.com/browse/COS-2744): update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 [#8335](https://github.com/openshift/installer/pull/8335)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): baremetal: write masters.json file [#8336](https://github.com/openshift/installer/pull/8336)
* no-jira: azure: Add securityProfile to control plane machines [#8334](https://github.com/openshift/installer/pull/8334)
* [Full changelog](https://github.com/openshift/installer/compare/f6685042380d53ca31b78e47031327092d1c0b63...0dc3033888f4cae22e5e5897921422f7180c4033)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7673d14fc567c3621e8d5fdca69ff03bd99504ef)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Merge upstream [#354](https://github.com/openshift/baremetal-operator/pull/354)
* NO-ISSUE: Revert "downstream-only: Disable webhooks" [#335](https://github.com/openshift/baremetal-operator/pull/335)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/33cfa9fcf9a13a86ca8afe0433cef49ea062ad12...7673d14fc567c3621e8d5fdca69ff03bd99504ef)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/91e3cb724f9d14cf40f66d059cdac1578193cac0)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix generation of DNSUpstreams on cloud platforms [#308](https://github.com/openshift/baremetal-runtimecfg/pull/308)
* NO-ISSUE: Fix wrong golang version, bump to 1.21 [#311](https://github.com/openshift/baremetal-runtimecfg/pull/311)
* Revert "OCPBUGS-32348: Make log level configurable" [#310](https://github.com/openshift/baremetal-runtimecfg/pull/310)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/53bcc3aa6e5ef57743526150a7280b176404442c...91e3cb724f9d14cf40f66d059cdac1578193cac0)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
* [OCPBUGS-34886](https://issues.redhat.com/browse/OCPBUGS-34886): Hardcode resource groups/kinds for now [#1796](https://github.com/openshift/oc/pull/1796)
* [OCPBUGS-33917](https://issues.redhat.com/browse/OCPBUGS-33917): add alert data to upgrade health in oc adm upgrade status [#1794](https://github.com/openshift/oc/pull/1794)
* [OCPBUGS-33975](https://issues.redhat.com/browse/OCPBUGS-33975): pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK [#1776](https://github.com/openshift/oc/pull/1776)
* [OCPBUGS-34406](https://issues.redhat.com/browse/OCPBUGS-34406): Simplify output when not updating [#1781](https://github.com/openshift/oc/pull/1781)
* [OCPBUGS-33918](https://issues.redhat.com/browse/OCPBUGS-33918): `adm update status`: Show information about the upgrade target version [#1772](https://github.com/openshift/oc/pull/1772)
* [OCPBUGS-33916](https://issues.redhat.com/browse/OCPBUGS-33916): Add s390x based oc into extraction target [#1770](https://github.com/openshift/oc/pull/1770)
* [OCPNODE-2281](https://issues.redhat.com/browse/OCPNODE-2281): Support multiple icsps in migrate icsp [#1751](https://github.com/openshift/oc/pull/1751)
* [OCPNODE-2282](https://issues.redhat.com/browse/OCPNODE-2282): Support multiple ImageDigestMirrorSet objects in the th… [#1756](https://github.com/openshift/oc/pull/1756)
* [OTA-1275](https://issues.redhat.com/browse/OTA-1275): cli/admin/release/git: use optimized git flags [#1754](https://github.com/openshift/oc/pull/1754)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Switch cli image to RHEL9 base image [#1752](https://github.com/openshift/oc/pull/1752)
* [Full changelog](https://github.com/openshift/oc/compare/51e5705eaace0d3a8b359913cb82e69a8bf0eaf1...a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
* [OCPBUGS-32948](https://issues.redhat.com/browse/OCPBUGS-32948): Update documentation to restart pods when enabling workload identity [#701](https://github.com/openshift/cloud-credential-operator/pull/701)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/555da3f1debfad11e921539f96d5e7ab61b2af80...48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8ceee78810756afaa2efb75f60bef0358502834f)
* [OCPBUGS-33617](https://issues.redhat.com/browse/OCPBUGS-33617): Avoid panic when looking up attachedOutboundRule.ID in azure [#144](https://github.com/openshift/cloud-network-config-controller/pull/144)
* NO-JIRA: Update dependency google.golang.org/api [#143](https://github.com/openshift/cloud-network-config-controller/pull/143)
* [OCPBUGS-33154](https://issues.redhat.com/browse/OCPBUGS-33154): Incorrect use of go wait groups [#140](https://github.com/openshift/cloud-network-config-controller/pull/140)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/a48ba58f632bd2a2df2810a665a375f29c900f0c...8ceee78810756afaa2efb75f60bef0358502834f)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/b415439ebab2829c8da1ea17c05f2ac75fe5dbe8)
* NO-JIRA: remove go-jose not to get flagged with its CVEs [#668](https://github.com/openshift/cluster-authentication-operator/pull/668)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5072745da84762bb0fc943e41dd27c941a0c046c...b415439ebab2829c8da1ea17c05f2ac75fe5dbe8)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/eecb123a3b02358046a2c2ce52adfc548a5caa17)
* [OCPBUGS-33932](https://issues.redhat.com/browse/OCPBUGS-33932): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#303](https://github.com/openshift/kubernetes-autoscaler/pull/303)
* NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup [#298](https://github.com/openshift/kubernetes-autoscaler/pull/298)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c852679460d8af844212462e0244eb6240d0591b...eecb123a3b02358046a2c2ce52adfc548a5caa17)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#315](https://github.com/openshift/cluster-autoscaler-operator/pull/315)
* [OCPBUGS-20565](https://issues.redhat.com/browse/OCPBUGS-20565): Set webhook minimum TLS version to 1.3 [#320](https://github.com/openshift/cluster-autoscaler-operator/pull/320)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add empty string as value for GpuType if GpuCount is empty 0 [#317](https://github.com/openshift/cluster-autoscaler-operator/pull/317)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/89019ab5cdb49d6fbcd48f7123937bcc3f77051f...40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/9fd641850220391b72a86416867f5d2d902a4769)
* [OCPBUGS-35503](https://issues.redhat.com/browse/OCPBUGS-35503): Add capability to metal3-ramdisk-logs container [#426](https://github.com/openshift/cluster-baremetal-operator/pull/426)
* [OCPBUGS-34041](https://issues.redhat.com/browse/OCPBUGS-34041): Run metal3 containers as specific users and groups [#418](https://github.com/openshift/cluster-baremetal-operator/pull/418)
* [OCPBUGS-33493](https://issues.redhat.com/browse/OCPBUGS-33493): Enable leader election for baremetal-operator [#416](https://github.com/openshift/cluster-baremetal-operator/pull/416)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Drop unneccessary capabilities [#401](https://github.com/openshift/cluster-baremetal-operator/pull/401)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Wait for bootstrapping to finish before starting [#415](https://github.com/openshift/cluster-baremetal-operator/pull/415)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/aae4dcf33522b3268211a946f0a766be90262cc5...9fd641850220391b72a86416867f5d2d902a4769)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/5830a10a2f545dc25ff4ca4c4efd9005088676aa)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#207](https://github.com/openshift/cluster-api/pull/207)
* [Full changelog](https://github.com/openshift/cluster-api/compare/e9732a43bb44b4709ce1badcd4b8eac1d9c5b41c...5830a10a2f545dc25ff4ca4c4efd9005088676aa)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/a24f1aeb106bd4ad353615dacde6d4e884f5face)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#172](https://github.com/openshift/cluster-capi-operator/pull/172)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#171](https://github.com/openshift/cluster-capi-operator/pull/171)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/8342a83c1830ac86792f9f2c205575fa96f40d8e...a24f1aeb106bd4ad353615dacde6d4e884f5face)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/bbb13b9ad6e49e7dcd8d0b1a84f59ca8ff073599)
* [OCPBUGS-34826](https://issues.redhat.com/browse/OCPBUGS-34826): Nutanix CCM pods Cipher Suites vulnerability issue [#350](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/350)
* NO-JIRA: Ensure termination message policy in tests [#344](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/344)
* [OCPBUGS-33405](https://issues.redhat.com/browse/OCPBUGS-33405): update azure and ash tolerations on node manager [#342](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/342)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/70aa31af5224c0e05314cacf9a734b8944c14fbf...bbb13b9ad6e49e7dcd8d0b1a84f59ca8ff073599)
### [cluster-config-api](https://github.com/openshift/api/tree/636e2c17106f5a0d9c266535f262267384fede1f)
* [OCPBUGS-26466](https://issues.redhat.com/browse/OCPBUGS-26466): Disable PSA in non-previews 4.16 [#1912](https://github.com/openshift/api/pull/1912)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): promote VSphereDriverConfiguration feature to Accessible-by-default [#1904](https://github.com/openshift/api/pull/1904)
* temporarily break the featuregate check to show we can get results [#1911](https://github.com/openshift/api/pull/1911)
* Feature gates for platforms, architecture, and installs [#1910](https://github.com/openshift/api/pull/1910)
* [OCPBUGS-34398](https://issues.redhat.com/browse/OCPBUGS-34398): Streamline bootstrap crds [#1905](https://github.com/openshift/api/pull/1905)
* [ETCD-602](https://issues.redhat.com/browse/ETCD-602): Move etcd hardware speed feature to GA [#1901](https://github.com/openshift/api/pull/1901)
* Move CAPI install platforms to default feature set [#1892](https://github.com/openshift/api/pull/1892)
* [OCPBUGS-33727](https://issues.redhat.com/browse/OCPBUGS-33727): Fix Gateway API Feature Gate [#1894](https://github.com/openshift/api/pull/1894)
* NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config [#1890](https://github.com/openshift/api/pull/1890)
* [SDN-4600](https://issues.redhat.com/browse/SDN-4600): Add NetworkDiagnosticsConfig to the default featureset [#1886](https://github.com/openshift/api/pull/1886)
* Revert "Revert "Merge pull request #1851 from slashpai/metrics-server"" [#1865](https://github.com/openshift/api/pull/1865)
* [CORS-3488](https://issues.redhat.com/browse/CORS-3488): Add GCP CAPI installer to tech preview feature set. [#1889](https://github.com/openshift/api/pull/1889)
* Add eligible CAPI-install platforms to TechPreview [#1880](https://github.com/openshift/api/pull/1880)
* NO-JIRA: Update runtime image and drop color in CI [#1885](https://github.com/openshift/api/pull/1885)
* add MachineConfiguration conditions for boot image updates [#1882](https://github.com/openshift/api/pull/1882)
* [SPLAT-1452](https://issues.redhat.com/browse/SPLAT-1452): Changed vcenter MaxItems to be 3 for TechPreview. [#1842](https://github.com/openshift/api/pull/1842)
* [ETCD-520](https://issues.redhat.com/browse/ETCD-520): add BackendQuotaGiB example [#1874](https://github.com/openshift/api/pull/1874)
* Update SSA tag markers [#1881](https://github.com/openshift/api/pull/1881)
* Expose chunksize variable for S3 storage driver [#1864](https://github.com/openshift/api/pull/1864)
* [ETCD-520](https://issues.redhat.com/browse/ETCD-520): add etcd dbsize field [#1736](https://github.com/openshift/api/pull/1736)
* Update imageregistry component SSA tags [#1877](https://github.com/openshift/api/pull/1877)
* Add Machine V1 to payload CRDs [#1876](https://github.com/openshift/api/pull/1876)
* Recurse when loading CRD schemas to check [#1875](https://github.com/openshift/api/pull/1875)
* [MCO-1148](https://issues.redhat.com/browse/MCO-1148): Attempt to tombstone MachineConfiguration/StaticPodOperatorStatus [#1789](https://github.com/openshift/api/pull/1789)
* [Full changelog](https://github.com/openshift/api/compare/ac9356ba178405e39af0a76adc7d20a529bd93af...636e2c17106f5a0d9c266535f262267384fede1f)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/441d29c92b1759d1780a525112e764280b78b0d6)
* [SPLAT-1630](https://issues.redhat.com/browse/SPLAT-1630): Bump API version to get new VSphereMultiVCenters featuregate. [#418](https://github.com/openshift/cluster-config-operator/pull/418)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#410](https://github.com/openshift/cluster-config-operator/pull/410)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/777e50b938c9ab3bd4224dac16407de1d7acc2b3...441d29c92b1759d1780a525112e764280b78b0d6)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1a0064052f0f83792f9c668d93746dbfb7f7a5d8)
* [OCPBUGS-34970](https://issues.redhat.com/browse/OCPBUGS-34970): Add unreadyNodeGracePeriod for allowing brief node hiccups [#298](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/298)
* [OCPBUGS-35227](https://issues.redhat.com/browse/OCPBUGS-35227): Improved debugging of API listing errors [#300](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/300)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Modified webhook to reject changes to vsphere fields coming from failure domains. [#291](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/291)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#282](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/282)
* Drop CRDs for CPMS [#292](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/292)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/2b86969aeeee80efb1fee338effa18f86cb18953...1a0064052f0f83792f9c668d93746dbfb7f7a5d8)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/439826e1a723c094717877db0f2ca1848d0fb10a)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#196](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/196)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/66048040bb40915f0903a0e7de0bbc6f4b4faef5...439826e1a723c094717877db0f2ca1848d0fb10a)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a14431f277364605ede8e95530453c5fb7267e33)
* [CFE-964](https://issues.redhat.com/browse/CFE-964): Add DNSNameResolver controller [#394](https://github.com/openshift/cluster-dns-operator/pull/394)
* [OCPBUGS-32941](https://issues.redhat.com/browse/OCPBUGS-32941): Bump to Kubernetes 1.29 and controller-runtime 0.17.3 [#408](https://github.com/openshift/cluster-dns-operator/pull/408)
* [OCPBUGS-27924](https://issues.redhat.com/browse/OCPBUGS-27924): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 [#402](https://github.com/openshift/cluster-dns-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/2d77b099cd229949067d7de843b9d1538aab7403...a14431f277364605ede8e95530453c5fb7267e33)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/dc4f4e858ba8395dce6883242c7d12009685d145)
* [ETCD-621](https://issues.redhat.com/browse/ETCD-621): Update api vendor libraries to get GA'ed tuning profiles [#1265](https://github.com/openshift/cluster-etcd-operator/pull/1265)
* [OCPBUGS-33495](https://issues.redhat.com/browse/OCPBUGS-33495): return errors in wait-for-ceo [#1260](https://github.com/openshift/cluster-etcd-operator/pull/1260)
* [OCPBUGS-31849](https://issues.redhat.com/browse/OCPBUGS-31849): check the quorum in case the cluster is healthy or not after generating certs [#1239](https://github.com/openshift/cluster-etcd-operator/pull/1239)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cb78ee25cda56d8f2deb4f0e4ed09348d07220f8...dc4f4e858ba8395dce6883242c7d12009685d145)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0fc07edf2cd988e119961d07e67c36c7717ce6f2)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): add SAR capability to image-registry [#1054](https://github.com/openshift/cluster-image-registry-operator/pull/1054)
* [OCPBUGS-34165](https://issues.redhat.com/browse/OCPBUGS-34165): azure-path-fix: get client secret from k8s secret [#1041](https://github.com/openshift/cluster-image-registry-operator/pull/1041)
* [OCPBUGS-34166](https://issues.redhat.com/browse/OCPBUGS-34166): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1042](https://github.com/openshift/cluster-image-registry-operator/pull/1042)
* [OCPBUGS-34069](https://issues.redhat.com/browse/OCPBUGS-34069): Bump openshift api, client-go & library-go [#1039](https://github.com/openshift/cluster-image-registry-operator/pull/1039)
* [OCPBUGS-33172](https://issues.redhat.com/browse/OCPBUGS-33172): azurepathfix: check if platform status is nil before accessing it [#1030](https://github.com/openshift/cluster-image-registry-operator/pull/1030)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f3f278477a88c0934109da1f106dc5a75c1bcf67...0fc07edf2cd988e119961d07e67c36c7717ce6f2)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/28c943937d7bc6718e10af50da82097ce8fc6877)
* [OCPBUGS-34835](https://issues.redhat.com/browse/OCPBUGS-34835): internalServiceChanged: Fix target port logic [#1072](https://github.com/openshift/cluster-ingress-operator/pull/1072)
* [OCPBUGS-34837](https://issues.redhat.com/browse/OCPBUGS-34837): Bump openshift/library-go to resolve NewPrometheusClient E2E failures [#1074](https://github.com/openshift/cluster-ingress-operator/pull/1074)
* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Allow operator to update Route spec.subdomain [#1047](https://github.com/openshift/cluster-ingress-operator/pull/1047)
* [OCPBUGS-32942](https://issues.redhat.com/browse/OCPBUGS-32942): Bump controller-runtime to v0.17.3 [#1050](https://github.com/openshift/cluster-ingress-operator/pull/1050)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b7d42a2535904aab104e1f3d709832b1c104204c...28c943937d7bc6718e10af50da82097ce8fc6877)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d790493cfc43fd33450ca27633cbe37aa17427d2)
* [OCPBUGS-25104](https://issues.redhat.com/browse/OCPBUGS-25104): revert dev cert rotation 4.16 [#1695](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1695)
* [OCPBUGS-34408](https://issues.redhat.com/browse/OCPBUGS-34408): Create one-shot migrations for the flowcontrol group. [#1690](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1690)
* [OCPBUGS-33522](https://issues.redhat.com/browse/OCPBUGS-33522): add a controller that reconciles SCCs' volumes [#1675](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1675)
* NO-ISSUE: Revert "add SNO control plane high cpu usage alert" [#1674](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1674)
* [OCPBUGS-33184](https://issues.redhat.com/browse/OCPBUGS-33184): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1671](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1671)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1d9a2d0d604601640d318ea0cf973d23d711e970...d790493cfc43fd33450ca27633cbe37aa17427d2)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0338b3be6912024d03def2c26f0fa10218fc2c25)
* [OCPBUGS-33933](https://issues.redhat.com/browse/OCPBUGS-33933): Remove cloud-provider, cloud-config, and cloud-volume-plugin flags [#808](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/808)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/f0f485f3c1d70416c242e3159820331a36fb2d2a...0338b3be6912024d03def2c26f0fa10218fc2c25)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3eba7eeda244ea48c520d5384547659e9257cb58)
* [OCPBUGS-34161](https://issues.redhat.com/browse/OCPBUGS-34161): check for machine crd before listing machines [#233](https://github.com/openshift/cluster-machine-approver/pull/233)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d3b6e4ba503c8e1d13f535409db1e75844e5763f...3eba7eeda244ea48c520d5384547659e9257cb58)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
* [OCPBUGS-34806](https://issues.redhat.com/browse/OCPBUGS-34806): send cnv_abnormal metric via telemetry [#2364](https://github.com/openshift/cluster-monitoring-operator/pull/2364)
* [MON-3861](https://issues.redhat.com/browse/MON-3861): Bump go tools 1.21 [#2348](https://github.com/openshift/cluster-monitoring-operator/pull/2348)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#2342](https://github.com/openshift/cluster-monitoring-operator/pull/2342)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): change metrics-server probes for SNO [#2337](https://github.com/openshift/cluster-monitoring-operator/pull/2337)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#2338](https://github.com/openshift/cluster-monitoring-operator/pull/2338)
* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#2336](https://github.com/openshift/cluster-monitoring-operator/pull/2336)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): tweak Prometheus RBAC setup as a temp fix. [#2334](https://github.com/openshift/cluster-monitoring-operator/pull/2334)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#2335](https://github.com/openshift/cluster-monitoring-operator/pull/2335)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/77f948e59ad02a95b13d24b5a01e88e673c8875e...e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/84f9a080d03777c95a1c5a0d13ca16e5aa342d98)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Limit iptables-alerter's cpu [#2407](https://github.com/openshift/cluster-network-operator/pull/2407)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Handle pod exiting race conditions in iptables-alerter [#2394](https://github.com/openshift/cluster-network-operator/pull/2394)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [OCPBUGS-35061](https://issues.redhat.com/browse/OCPBUGS-35061): Add ANP metric rule expressions for telemetry exposure [#2398](https://github.com/openshift/cluster-network-operator/pull/2398)
* [OCPBUGS-34612](https://issues.redhat.com/browse/OCPBUGS-34612), [OCPBUGS-34660](https://issues.redhat.com/browse/OCPBUGS-34660), [OCPBUGS-34663](https://issues.redhat.com/browse/OCPBUGS-34663): Live migration backports [#2392](https://github.com/openshift/cluster-network-operator/pull/2392)
* [OCPBUGS-34964](https://issues.redhat.com/browse/OCPBUGS-34964): Fix DNSResolver feature gate enablement [#2402](https://github.com/openshift/cluster-network-operator/pull/2402)
* [OCPBUGS-34770](https://issues.redhat.com/browse/OCPBUGS-34770): Ensure that the node-identity webhook address contains colons for IPv6 [#2395](https://github.com/openshift/cluster-network-operator/pull/2395)
* [OCPBUGS-34214](https://issues.redhat.com/browse/OCPBUGS-34214): Add conditions for ignored-namespaces [#2378](https://github.com/openshift/cluster-network-operator/pull/2378)
* [OCPBUGS-34013](https://issues.redhat.com/browse/OCPBUGS-34013): Add custom masquerade subnet against right key at ovnkube-config CM [#2374](https://github.com/openshift/cluster-network-operator/pull/2374)
* [CFE-888](https://issues.redhat.com/browse/CFE-888): Enable DNSNameResolver feature-gate [#2131](https://github.com/openshift/cluster-network-operator/pull/2131)
* [OCPBUGS-32979](https://issues.redhat.com/browse/OCPBUGS-32979): Update network operator status for IPsec [#2360](https://github.com/openshift/cluster-network-operator/pull/2360)
* [USHIFT-2912](https://issues.redhat.com/browse/USHIFT-2912): Add ref to MicroShift's Multus and CNI Plugins [#2365](https://github.com/openshift/cluster-network-operator/pull/2365)
* [OCPBUGS-29403](https://issues.redhat.com/browse/OCPBUGS-29403): add more safe sysctls [#2273](https://github.com/openshift/cluster-network-operator/pull/2273)
* [OCPBUGS-32525](https://issues.redhat.com/browse/OCPBUGS-32525): Check every MachineConfigPool for IPsec plugin existence [#2349](https://github.com/openshift/cluster-network-operator/pull/2349)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2364](https://github.com/openshift/cluster-network-operator/pull/2364)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7604c189b47723fd932cf959c8c15d694262b1f5...84f9a080d03777c95a1c5a0d13ca16e5aa342d98)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/2bd8891ead93e161b9a871ac2eaa947bfc17309f)
* [OCPBUGS-33682](https://issues.redhat.com/browse/OCPBUGS-33682): right-hand-side profile_dirs take precedence (#1080) [#1080](https://github.com/openshift/cluster-node-tuning-operator/pull/1080)
* NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) [#1046](https://github.com/openshift/cluster-node-tuning-operator/pull/1046)
* [CNF-11817](https://issues.redhat.com/browse/CNF-11817): e2e: control and data planes clients (#1004) [#1004](https://github.com/openshift/cluster-node-tuning-operator/pull/1004)
* Unify OKD and OCP Dockerfiles (#1058) [#1058](https://github.com/openshift/cluster-node-tuning-operator/pull/1058)
* [OCPBUGS-33460](https://issues.redhat.com/browse/OCPBUGS-33460): E2E: change tuned profile path (#1055) [#1055](https://github.com/openshift/cluster-node-tuning-operator/pull/1055)
* E2E: modify test use HaveKey matchter instead of ContainElement (#1056) [#1056](https://github.com/openshift/cluster-node-tuning-operator/pull/1056)
* E2E: Add automation to check default cpuset from cpu manager state file (#1050) [#1050](https://github.com/openshift/cluster-node-tuning-operator/pull/1050)
* perfprof: latency e2e: adjust failure message (#1044) [#1044](https://github.com/openshift/cluster-node-tuning-operator/pull/1044)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5a9355ec2c462d83812184c83deb209aa5762801...2bd8891ead93e161b9a871ac2eaa947bfc17309f)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/27bf70ddf9421637e1da18b249785b2cca177272)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#54](https://github.com/openshift/cluster-olm-operator/pull/54)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for clusterextensions [#53](https://github.com/openshift/cluster-olm-operator/pull/53)
* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Add roles for validating admission policy APIs [#52](https://github.com/openshift/cluster-olm-operator/pull/52)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/5332ad906fda9671f1b0cd53979fab07bb0eb04a...27bf70ddf9421637e1da18b249785b2cca177272)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/899699681f8bb984d0f249dec171e630440c461b)
* [OCPBUGS-34384](https://issues.redhat.com/browse/OCPBUGS-34384): [release-4.16] Disable Rolebindings for Capabilities [#350](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/350)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#336](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/336)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d291c51f0becf065fbe740cf7b113b81378ee34a...899699681f8bb984d0f249dec171e630440c461b)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7cb826784c64b234d9ce1c99b2f8fd6082670c36)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#470](https://github.com/openshift/cluster-storage-operator/pull/470)
* [OCPBUGS-29126](https://issues.redhat.com/browse/OCPBUGS-29126): vsphere-problem-detector: don't set Available condition [#456](https://github.com/openshift/cluster-storage-operator/pull/456)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/0669fc4b2b26afa2497610c2950e427fa5cf59cb...7cb826784c64b234d9ce1c99b2f8fd6082670c36)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6f553e98877e87d08a5c5fa9b13758a12cdcef8c)
* [OCPBUGS-35249](https://issues.redhat.com/browse/OCPBUGS-35249): Revert: Add support for Custom Certificate Authorities for custom signature stores" [#1053](https://github.com/openshift/cluster-version-operator/pull/1053)
* [OCPBUGS-24700](https://issues.redhat.com/browse/OCPBUGS-24700): Add support for Custom Certificate Authorities for custom signature stores [#1030](https://github.com/openshift/cluster-version-operator/pull/1030)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/0b3f507632ce4705702fc725614bd22d25d6686c...6f553e98877e87d08a5c5fa9b13758a12cdcef8c)
### [console](https://github.com/openshift/console/tree/cb7b0786c142a10610fa50cddc25cd1de8a62653)
* [OCPBUGS-35395](https://issues.redhat.com/browse/OCPBUGS-35395): Keep useUserSettings hook in the internal api [#13970](https://github.com/openshift/console/pull/13970)
* [OCPBUGS-35152](https://issues.redhat.com/browse/OCPBUGS-35152): restore missing CloseButton styles [#13947](https://github.com/openshift/console/pull/13947)
* [OCPBUGS-35318](https://issues.redhat.com/browse/OCPBUGS-35318), [OCPBUGS-35319](https://issues.redhat.com/browse/OCPBUGS-35319), [OCPBUGS-35320](https://issues.redhat.com/browse/OCPBUGS-35320): disabling add-flow A-04-TC01 test and knative tests due to flakes [#13962](https://github.com/openshift/console/pull/13962)
* (chore) Update tectonic builder image to use golang-1.21 [#13944](https://github.com/openshift/console/pull/13944)
* [OCPBUGS-34139](https://issues.redhat.com/browse/OCPBUGS-34139): Improve Pipeline list page performance [#13882](https://github.com/openshift/console/pull/13882)
* [OCPBUGS-34002](https://issues.redhat.com/browse/OCPBUGS-34002): Fix console crash-loop with OIDC auth config [#13874](https://github.com/openshift/console/pull/13874)
* [OCPBUGS-34711](https://issues.redhat.com/browse/OCPBUGS-34711): show "Debug container" link for pods with status.phase… [#13914](https://github.com/openshift/console/pull/13914)
* [OCPBUGS-33965](https://issues.redhat.com/browse/OCPBUGS-33965): i18n - Download and merge French and Spanish languages translations in the OCP Console [#13870](https://github.com/openshift/console/pull/13870)
* [OCPBUGS-34393](https://issues.redhat.com/browse/OCPBUGS-34393): fix bug where textarea is not resizable [#13894](https://github.com/openshift/console/pull/13894)
* [OCPBUGS-33989](https://issues.redhat.com/browse/OCPBUGS-33989): Updating the secrets using Form editor displays an unknown warning message [#13873](https://github.com/openshift/console/pull/13873)
* [OCPBUGS-34112](https://issues.redhat.com/browse/OCPBUGS-34112): Fix Admission webhook warning for Route and BuildConfig creation via import flow [#13881](https://github.com/openshift/console/pull/13881)
* [OCPBUGS-34141](https://issues.redhat.com/browse/OCPBUGS-34141): UI inconsistency in topology when application grouping is collapsed [#13883](https://github.com/openshift/console/pull/13883)
* [OCPBUGS-34142](https://issues.redhat.com/browse/OCPBUGS-34142): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13884](https://github.com/openshift/console/pull/13884)
* [OCPBUGS-34143](https://issues.redhat.com/browse/OCPBUGS-34143): Create Serverless form does not create BuildConfig [#13885](https://github.com/openshift/console/pull/13885)
* [OCPBUGS-33872](https://issues.redhat.com/browse/OCPBUGS-33872): add user-impersonation to QuickStartGettingStartedCard,… [#13864](https://github.com/openshift/console/pull/13864)
* [OCPBUGS-32631](https://issues.redhat.com/browse/OCPBUGS-32631): TaskRuns should not be fetched for Failed PLR's [#13806](https://github.com/openshift/console/pull/13806)
* [OCPBUGS-33567](https://issues.redhat.com/browse/OCPBUGS-33567): Expose useUserSettings hooks in dynamic plugin sdk [#13843](https://github.com/openshift/console/pull/13843)
* [ODC-7576](https://issues.redhat.com/browse/ODC-7576): Pipelines plugin test fixes [#13841](https://github.com/openshift/console/pull/13841)
* [OCPBUGS-31901](https://issues.redhat.com/browse/OCPBUGS-31901): Patch PF dynamic module parser to exclude 'next' modules [#13832](https://github.com/openshift/console/pull/13832)
* [ODC-7574](https://issues.redhat.com/browse/ODC-7574): Add e2e tests for QuickStart from Masthead in CI [#13837](https://github.com/openshift/console/pull/13837)
* [OCPBUGS-33523](https://issues.redhat.com/browse/OCPBUGS-33523): restrict Masthead logo to max-height [#13838](https://github.com/openshift/console/pull/13838)
* [OCPBUGS-29745](https://issues.redhat.com/browse/OCPBUGS-29745): Fix Pipeline details page with when expression using CEL expression [#13834](https://github.com/openshift/console/pull/13834)
* [CONSOLE-4019](https://issues.redhat.com/browse/CONSOLE-4019): Display a warning message from kube-apiserver when creating resource integration tests [#13814](https://github.com/openshift/console/pull/13814)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Backup to segment public api key [#13821](https://github.com/openshift/console/pull/13821)
* [OCPBUGS-33352](https://issues.redhat.com/browse/OCPBUGS-33352): Fix PatternFly modules check [#13817](https://github.com/openshift/console/pull/13817)
* [OCPBUGS-33345](https://issues.redhat.com/browse/OCPBUGS-33345): Disable create button on NAD empty state for regular user [#13805](https://github.com/openshift/console/pull/13805)
* [CNV-36170](https://issues.redhat.com/browse/CNV-36170): Multi NetworkPolicies [#13772](https://github.com/openshift/console/pull/13772)
* [OCPBUGS-33219](https://issues.redhat.com/browse/OCPBUGS-33219): Fix StatusItem layout when no timestamp is present [#13815](https://github.com/openshift/console/pull/13815)
* [OCPBUGS-31558](https://issues.redhat.com/browse/OCPBUGS-31558): Fix NAD creation defaulting to the default namespace [#13822](https://github.com/openshift/console/pull/13822)
* [OCPBUGS-33222](https://issues.redhat.com/browse/OCPBUGS-33222): List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature [#13818](https://github.com/openshift/console/pull/13818)
* [OCPBUGS-33199](https://issues.redhat.com/browse/OCPBUGS-33199): The filepath including leading slash makes error during parsing devfile using Gitlab [#13812](https://github.com/openshift/console/pull/13812)
* [OCPBUGS-33202](https://issues.redhat.com/browse/OCPBUGS-33202): Pipeline list page is crashed when navigating from Search page [#13813](https://github.com/openshift/console/pull/13813)
* [CONSOLE-3939](https://issues.redhat.com/browse/CONSOLE-3939): Display a warning message from kube-apiserver when creating / updating workloads resource [#13763](https://github.com/openshift/console/pull/13763)
* [Full changelog](https://github.com/openshift/console/compare/6c050bebfd222e4d97ef15b9148258936261d0c9...cb7b0786c142a10610fa50cddc25cd1de8a62653)
### [console-operator](https://github.com/openshift/console-operator/tree/efe782291fe88877add25db7d575934d926963c4)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#901](https://github.com/openshift/console-operator/pull/901)
* [OCPBUGS-33505](https://issues.redhat.com/browse/OCPBUGS-33505): Add missing return statement to fix crash in healthcheck controller [#900](https://github.com/openshift/console-operator/pull/900)
* [OKD-214](https://issues.redhat.com/browse/OKD-214): Dockerfile: Add ARG TAGS=ocp [#896](https://github.com/openshift/console-operator/pull/896)
* [TRT-1664](https://issues.redhat.com/browse/TRT-1664): Revert #895 "CONSOLE-4047: Console-operator should be internally using listers for fetching data" [#899](https://github.com/openshift/console-operator/pull/899)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#895](https://github.com/openshift/console-operator/pull/895)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Default telemetry values [#890](https://github.com/openshift/console-operator/pull/890)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#893](https://github.com/openshift/console-operator/pull/893)
* [Full changelog](https://github.com/openshift/console-operator/compare/dac8cc800dc7cb7d8925da0b8a47b7f3e2b69b1f...efe782291fe88877add25db7d575934d926963c4)
### [coredns](https://github.com/openshift/coredns/tree/04d84f7f2e17ff464fad3f2841e7b29a43c8382f)
* [OCPBUGS-35296](https://issues.redhat.com/browse/OCPBUGS-35296): UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 [#123](https://github.com/openshift/coredns/pull/123)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order [#116](https://github.com/openshift/coredns/pull/116)
* [OCPBUGS-31768](https://issues.redhat.com/browse/OCPBUGS-31768): UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 [#108](https://github.com/openshift/coredns/pull/108)
* [Full changelog](https://github.com/openshift/coredns/compare/f937ebfb6b8a31fc194597a1ade0e93e73e474b5...04d84f7f2e17ff464fad3f2841e7b29a43c8382f)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/bc125def6a15a71b2ef8c59e9c1284e471e7d905)
* [BUILD-877](https://issues.redhat.com/browse/BUILD-877): BUILD-887: Add konflux config for push and pull request [#183](https://github.com/openshift/csi-driver-shared-resource/pull/183)
* [BUILD-961](https://issues.redhat.com/browse/BUILD-961): use separate dockerfile for using catalog images [#180](https://github.com/openshift/csi-driver-shared-resource/pull/180)
* [OCPBUGS-33513](https://issues.redhat.com/browse/OCPBUGS-33513): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 [#178](https://github.com/openshift/csi-driver-shared-resource/pull/178)
* [OCPBUGS-33511](https://issues.redhat.com/browse/OCPBUGS-33511): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/csi-driver-shared-resource/pull/177)
* [BUILD-957](https://issues.redhat.com/browse/BUILD-957): Update Images with Red Hat Catalog Images [#173](https://github.com/openshift/csi-driver-shared-resource/pull/173)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Compare to Other Secret Stores [#176](https://github.com/openshift/csi-driver-shared-resource/pull/176)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Simplify README [#174](https://github.com/openshift/csi-driver-shared-resource/pull/174)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/cf116d908e98b71bfafc31042e17a93e8f3de6b1...bc125def6a15a71b2ef8c59e9c1284e471e7d905)
### [docker-registry](https://github.com/openshift/image-registry/tree/58a613b36ac03c264f06e429d6260f34396668db)
* [OCPBUGS-34779](https://issues.redhat.com/browse/OCPBUGS-34779): Use SAR instead of SSAR [#403](https://github.com/openshift/image-registry/pull/403)
* [Full changelog](https://github.com/openshift/image-registry/compare/4462ddcd818294725dfd0f5232cc908408372524...58a613b36ac03c264f06e429d6260f34396668db)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1d5732f0209bb7d98661a53c66c5ac265272dce6)
* Adding the `+` char to the RT kernel version. (#156) [#156](https://github.com/openshift/driver-toolkit/pull/156)
* ART bash parser is failing on [[...]] syntax Replace with sh compatible syntax. (#152) [#152](https://github.com/openshift/driver-toolkit/pull/152)
* Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) [#150](https://github.com/openshift/driver-toolkit/pull/150)
* Use a default RHEL_VERSION when the build argument is not specified (#148) [#148](https://github.com/openshift/driver-toolkit/pull/148)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/82e950507a066cb93ee19371f375ba0565f591a7...1d5732f0209bb7d98661a53c66c5ac265272dce6)
### [etcd](https://github.com/openshift/etcd/tree/bc2fec27ff5b086436d438157c24396f280e0305)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): DOWNSTREAM <carry>: add native binary to installer images [#269](https://github.com/openshift/etcd/pull/269)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: installer: make etcd binaries static [#268](https://github.com/openshift/etcd/pull/268)
* [CORS-3249](https://issues.redhat.com/browse/CORS-3249): DOWNSTREAM <carry>: add installer Dockerfile for ART builds [#267](https://github.com/openshift/etcd/pull/267)
* [Full changelog](https://github.com/openshift/etcd/compare/aa0c441f97e070fed62cc3e1423537eb42c661a3...bc2fec27ff5b086436d438157c24396f280e0305)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/02432df87df9a731c8d630311854fbd515602e91)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#224](https://github.com/openshift/cluster-api-provider-gcp/pull/224)
* [OCPBUGS-28331](https://issues.redhat.com/browse/OCPBUGS-28331): add test directory to snyk excludes [#220](https://github.com/openshift/cluster-api-provider-gcp/pull/220)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/c76ca4039dd0f452cf0e6d70e800c25e319e5c38...02432df87df9a731c8d630311854fbd515602e91)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e72657c0d2713842f701f1d43c777d6ec6880cb9)
* [OCPBUGS-30520](https://issues.redhat.com/browse/OCPBUGS-30520): Bump protobuf to v1.34.0 [#82](https://github.com/openshift/machine-api-provider-gcp/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/fc80687e76e6d04444f20914f60915067b832e30...e72657c0d2713842f701f1d43c777d6ec6880cb9)
### [haproxy-router](https://github.com/openshift/router/tree/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
* [CFE-1020](https://issues.redhat.com/browse/CFE-1020): feature:route external certificate reference [#565](https://github.com/openshift/router/pull/565)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): generateHAProxyCertConfigMap: No H2 with dup certs [#589](https://github.com/openshift/router/pull/589)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Optimize Upgrade Validation plugin by skipping unnecessary changes [#587](https://github.com/openshift/router/pull/587)
* [Full changelog](https://github.com/openshift/router/compare/b6f7c63c52e6b20fde2549a3c3e69a052ab453cc...4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/29c95f359e591fae386ce64516812d8b65d285be)
* [OCPBUGS-35291](https://issues.redhat.com/browse/OCPBUGS-35291): Backport 125337 [#1989](https://github.com/openshift/kubernetes/pull/1989)
* [OCPBUGS-27074](https://issues.redhat.com/browse/OCPBUGS-27074): UPSTREAM: <carry>: extend termination events [#1980](https://github.com/openshift/kubernetes/pull/1980)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1985](https://github.com/openshift/kubernetes/pull/1985)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#1972](https://github.com/openshift/kubernetes/pull/1972)
* UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries [#1978](https://github.com/openshift/kubernetes/pull/1978)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): bump openshift/library-go@e22d25a [#1967](https://github.com/openshift/kubernetes/pull/1967)
* [OCPBUGS-32934](https://issues.redhat.com/browse/OCPBUGS-32934): UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods [#1966](https://github.com/openshift/kubernetes/pull/1966)
* no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#1959](https://github.com/openshift/kubernetes/pull/1959)
* [Full changelog](https://github.com/openshift/kubernetes/compare/d1ec84aa4c0ca46e90b22b364a62d38c78487c12...29c95f359e591fae386ce64516812d8b65d285be)
### [hypershift](https://github.com/openshift/hypershift/tree/6946c3cc4654833ffc3db6299d5859b58b2f20a7)
* [OCPBUGS-35369](https://issues.redhat.com/browse/OCPBUGS-35369): OCPBUGS-35252: vendor: bump openshift/api [#4197](https://github.com/openshift/hypershift/pull/4197)
* NO-JIRA: hack: make the e2e script generic [#4198](https://github.com/openshift/hypershift/pull/4198)
* [OCPBUGS-35308](https://issues.redhat.com/browse/OCPBUGS-35308): fix router on 4.14 y-stream upgrade [#4194](https://github.com/openshift/hypershift/pull/4194)
* [HOSTEDCP-1715](https://issues.redhat.com/browse/HOSTEDCP-1715): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 [#4177](https://github.com/openshift/hypershift/pull/4177)
* [HOSTEDCP-1570](https://issues.redhat.com/browse/HOSTEDCP-1570): remove liveness and readiness probes using metrics endpoint [#4116](https://github.com/openshift/hypershift/pull/4116)
* [OCPBUGS-35052](https://issues.redhat.com/browse/OCPBUGS-35052): Add missing Tag permissions to cli role [#4173](https://github.com/openshift/hypershift/pull/4173)
* [OCPBUGS-34903](https://issues.redhat.com/browse/OCPBUGS-34903): Allow access to root-ca configmap in cluster-network-operator role [#4155](https://github.com/openshift/hypershift/pull/4155)
* [OCPBUGS-34575](https://issues.redhat.com/browse/OCPBUGS-34575): Rename machine-config operator CRD references [#4105](https://github.com/openshift/hypershift/pull/4105)
* [OCPBUGS-34759](https://issues.redhat.com/browse/OCPBUGS-34759): add AWS STS URL to OIDC provider audiences [#4134](https://github.com/openshift/hypershift/pull/4134)
* [HOSTEDCP-1688](https://issues.redhat.com/browse/HOSTEDCP-1688): Use operator namespace for openshift-config-managed-trusted-ca-bundle [#4117](https://github.com/openshift/hypershift/pull/4117)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak cipher [#4139](https://github.com/openshift/hypershift/pull/4139)
* [OCPBUGS-34773](https://issues.redhat.com/browse/OCPBUGS-34773): Fix disconnected metadata inspection for nodepool [#4137](https://github.com/openshift/hypershift/pull/4137)
* [OCPBUGS-34569](https://issues.redhat.com/browse/OCPBUGS-34569), [OCPBUGS-34602](https://issues.redhat.com/browse/OCPBUGS-34602): Backports that should go in together [#4114](https://github.com/openshift/hypershift/pull/4114)
* [OCPBUGS-34542](https://issues.redhat.com/browse/OCPBUGS-34542): Reconcile KAS endpoints and endpoint slice [#4096](https://github.com/openshift/hypershift/pull/4096)
* [OCPBUGS-34554](https://issues.redhat.com/browse/OCPBUGS-34554): Fixed audit-logs sigterm failing to terminate gracefully [#4090](https://github.com/openshift/hypershift/pull/4090)
* [OCPBUGS-34390](https://issues.redhat.com/browse/OCPBUGS-34390): Add TrustedBundles to OAS container [#4087](https://github.com/openshift/hypershift/pull/4087)
* [HOSTEDCP-1561](https://issues.redhat.com/browse/HOSTEDCP-1561): Move HCP Product CLI to STS [#4092](https://github.com/openshift/hypershift/pull/4092)
* [HOSTEDCP-1556](https://issues.redhat.com/browse/HOSTEDCP-1556): Support Priority based expander for cluster-autoscaler [#4068](https://github.com/openshift/hypershift/pull/4068)
* [OCPBUGS-34171](https://issues.redhat.com/browse/OCPBUGS-34171): Make active & backup Azure KMS containers use different --metrics-addr [#4079](https://github.com/openshift/hypershift/pull/4079)
* NO-JIRA: Bump library-go dependency [#4069](https://github.com/openshift/hypershift/pull/4069)
* [TRT-1672](https://issues.redhat.com/browse/TRT-1672): e2e: proceed with teardown even if dump fails [#4052](https://github.com/openshift/hypershift/pull/4052)
* NO-JIRA: Update RHTAP references [#4042](https://github.com/openshift/hypershift/pull/4042)
* [OCPBUGS-33729](https://issues.redhat.com/browse/OCPBUGS-33729): Do not ignore single placeholder pods for a specific hosted cluster [#4037](https://github.com/openshift/hypershift/pull/4037)
* [HOSTEDCP-1668](https://issues.redhat.com/browse/HOSTEDCP-1668): remove dns-operator leader-elect flags [#4038](https://github.com/openshift/hypershift/pull/4038)
* [OCPBUGS-33595](https://issues.redhat.com/browse/OCPBUGS-33595): Cluster sizing controller: do not error on not found HC [#4023](https://github.com/openshift/hypershift/pull/4023)
* [HOSTEDCP-1655](https://issues.redhat.com/browse/HOSTEDCP-1655): Don't Ignore SubnetID and Network Security Group ID flags when values are passed through [#4021](https://github.com/openshift/hypershift/pull/4021)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#3864](https://github.com/openshift/hypershift/pull/3864)
* [HOSTEDCP-1310](https://issues.redhat.com/browse/HOSTEDCP-1310): use kms images from payload [#3996](https://github.com/openshift/hypershift/pull/3996)
* [OCPBUGS-32257](https://issues.redhat.com/browse/OCPBUGS-32257): Restrict image registry overrides to control plane components [#3952](https://github.com/openshift/hypershift/pull/3952)
* [HOSTEDCP-1560](https://issues.redhat.com/browse/HOSTEDCP-1560): Create AWS STS Role for the hypershift/hcp cli [#4003](https://github.com/openshift/hypershift/pull/4003)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies [#4012](https://github.com/openshift/hypershift/pull/4012)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump CAPI dependencies [#4011](https://github.com/openshift/hypershift/pull/4011)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Fix nil dereference in clustersizingconfig validation [#4016](https://github.com/openshift/hypershift/pull/4016)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Fixed azure using incorrect kms socket [#3981](https://github.com/openshift/hypershift/pull/3981)
* [HOSTEDCP-1563](https://issues.redhat.com/browse/HOSTEDCP-1563): Refine the Azure API in the NodePool Spec [#4004](https://github.com/openshift/hypershift/pull/4004)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Autoscaler for non request serving nodes [#4007](https://github.com/openshift/hypershift/pull/4007)
* [HOSTEDCP-1557](https://issues.redhat.com/browse/HOSTEDCP-1557): Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config [#4006](https://github.com/openshift/hypershift/pull/4006)
* NO-JIRA: Remove CLI inspection of release image [#3548](https://github.com/openshift/hypershift/pull/3548)
* [OCPBUGS-33237](https://issues.redhat.com/browse/OCPBUGS-33237): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#3999](https://github.com/openshift/hypershift/pull/3999)
* [OCPBUGS-26762](https://issues.redhat.com/browse/OCPBUGS-26762): Disable DNS resolving for CNO [#3986](https://github.com/openshift/hypershift/pull/3986)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Set arch to ppc64le within PowerVS platform func [#4002](https://github.com/openshift/hypershift/pull/4002)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Support ppc64le arch for Agent and PowerVS platform [#3979](https://github.com/openshift/hypershift/pull/3979)
* [HOSTEDCP-1544](https://issues.redhat.com/browse/HOSTEDCP-1544): Allow user to specify subnet ID for Hosted Cluster & NodePool Creation [#3945](https://github.com/openshift/hypershift/pull/3945)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Set time out for external snapshotter on kubevirt csi driver [#3968](https://github.com/openshift/hypershift/pull/3968)
* [HOSTEDCP-1523](https://issues.redhat.com/browse/HOSTEDCP-1523): Bump k8s to v0.29.3 [#3878](https://github.com/openshift/hypershift/pull/3878)
* [OCPBUGS-25012](https://issues.redhat.com/browse/OCPBUGS-25012): Updating ose-hypershift-container image to be consistent with ART [#3303](https://github.com/openshift/hypershift/pull/3303)
* [OCPBUGS-33203](https://issues.redhat.com/browse/OCPBUGS-33203), [OCPBUGS-33274](https://issues.redhat.com/browse/OCPBUGS-33274): Autoscaler: scale down unused machinesets [#3988](https://github.com/openshift/hypershift/pull/3988)
* NO-JIRA: chore(deps): update rhtap references [#3973](https://github.com/openshift/hypershift/pull/3973)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Add operator scoping support to nodepool controller [#3928](https://github.com/openshift/hypershift/pull/3928)
* [Full changelog](https://github.com/openshift/hypershift/compare/6bb55dffe1bbf25c1086fa4398c8c97b083b57bb...6946c3cc4654833ffc3db6299d5859b58b2f20a7)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
* [OCPBUGS-33329](https://issues.redhat.com/browse/OCPBUGS-33329): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#115](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/115)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#114](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/114)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/9cc8f148e2f6e6228419b165ef7813f9548df2dd...34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/60b7ca98f5121f7e772437823b258a9fd0aa1d99)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#80](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/80)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/3c01576e22ba1b9fdb7e513838b108021e32cc77...60b7ca98f5121f7e772437823b258a9fd0aa1d99)
### [insights-operator](https://github.com/openshift/insights-operator/tree/3c7446c68efe41e66efa1edca41aac89ba38f7fc)
* [OCPBUGS-35086](https://issues.redhat.com/browse/OCPBUGS-35086): Collect aggregated Prometheus Alertmanager instances (#948) [#948](https://github.com/openshift/insights-operator/pull/948)
* gather aggregated numbers of Pods and Netnamespaces with SDN annotations (#946) [#946](https://github.com/openshift/insights-operator/pull/946)
* [Full changelog](https://github.com/openshift/insights-operator/compare/82e7c86ab5707ee3ccc6adbf78656a7a1e1daa12...3c7446c68efe41e66efa1edca41aac89ba38f7fc)
### [ironic](https://github.com/openshift/ironic-image/tree/9d49fd688bcd13f28ed89f4641429f0b0797b339)
* Bug OCPBUGS-34985: Disable installation of .pyc files through pip [#509](https://github.com/openshift/ironic-image/pull/509)
* [OCPBUGS-32304](https://issues.redhat.com/browse/OCPBUGS-32304): Fix ironic-inspector permissions for creating /certs/ca directory [#500](https://github.com/openshift/ironic-image/pull/500)
* [METAL-1005](https://issues.redhat.com/browse/METAL-1005): [4.16] Update ironic projects and remove cinder and glance clients [#493](https://github.com/openshift/ironic-image/pull/493)
* [Full changelog](https://github.com/openshift/ironic-image/compare/280091b7e56ba25d95a989f19f70455bd243edb4...9d49fd688bcd13f28ed89f4641429f0b0797b339)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/661d4f2ac6466565889ad11acb19d49d6e11333a)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Revert #179 [#180](https://github.com/openshift/images/pull/180)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency [#179](https://github.com/openshift/images/pull/179)
* Add dnf-plugins-core in scos to help with OCP image compat [#178](https://github.com/openshift/images/pull/178)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add sig-cloud repository and enable rt repository [#177](https://github.com/openshift/images/pull/177)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add the sig-nfv repo in the CS9 base [#176](https://github.com/openshift/images/pull/176)
* [OCPBUGS-24850](https://issues.redhat.com/browse/OCPBUGS-24850): Bump OpenShift 4.16, RHEL9, and iptables package [#175](https://github.com/openshift/images/pull/175)
* [OCPBUGS-24990](https://issues.redhat.com/browse/OCPBUGS-24990): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART [#159](https://github.com/openshift/images/pull/159)
* [OCPBUGS-24800](https://issues.redhat.com/browse/OCPBUGS-24800): Updating ose-egress-http-proxy-container image to be consistent with ART [#156](https://github.com/openshift/images/pull/156)
* [Full changelog](https://github.com/openshift/images/compare/95de81f5ffc9c8b50dddd4f890a666820e3b2b18...661d4f2ac6466565889ad11acb19d49d6e11333a)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/8ea2c994df4296ec161023d8ff85f9ea0e383216)
* [OCPBUGS-31955](https://issues.redhat.com/browse/OCPBUGS-31955): Merge upstream v0.17.1 release [#98](https://github.com/openshift/kube-rbac-proxy/pull/98)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/04d0a78154b45ce300e176836bd47c6004603e88...8ea2c994df4296ec161023d8ff85f9ea0e383216)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/0693093f773c5046e231f174e7930315feabd996)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Enable snapshot tests [#40](https://github.com/openshift/kubevirt-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/738dc394f915b6585f2cc4c1cc312b51d45d8d1f...0693093f773c5046e231f174e7930315feabd996)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/49a82ff09217fcef6c3c51d0a0e34582b5355c98)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1220](https://github.com/openshift/machine-api-operator/pull/1220)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ac84cecd1374041a1dbb70313f76504c41b131a6...49a82ff09217fcef6c3c51d0a0e34582b5355c98)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9e4a1f5f4c7ef58082021ca40556c67f99062d0a)
* [OCPBUGS-35992](https://issues.redhat.com/browse/OCPBUGS-35992): disable mglru service [#4427](https://github.com/openshift/machine-config-operator/pull/4427)
* [OCPBUGS-35291](https://issues.redhat.com/browse/OCPBUGS-35291): Default ipv4 NODE_IP to 0.0.0.0 [#4409](https://github.com/openshift/machine-config-operator/pull/4409)
* [OCPBUGS-35364](https://issues.redhat.com/browse/OCPBUGS-35364): Azure: add Azure specific dnsmasq ordering [#4406](https://github.com/openshift/machine-config-operator/pull/4406)
* [OCPBUGS-35299](https://issues.redhat.com/browse/OCPBUGS-35299): Panic when we remove an OCB infra MCP and we try to create new ones with different names [#4403](https://github.com/openshift/machine-config-operator/pull/4403)
* [OCPBUGS-35042](https://issues.redhat.com/browse/OCPBUGS-35042): ensure event handlers are registered after queue is configured [#4394](https://github.com/openshift/machine-config-operator/pull/4394)
* [OCPBUGS-34799](https://issues.redhat.com/browse/OCPBUGS-34799): set required-scc for openshift workloads [#4384](https://github.com/openshift/machine-config-operator/pull/4384)
* [OCPBUGS-33901](https://issues.redhat.com/browse/OCPBUGS-33901): machine-os-puller SA refreshes every hour, causing machine config regeneration [#4374](https://github.com/openshift/machine-config-operator/pull/4374)
* [OCPBUGS-10498](https://issues.redhat.com/browse/OCPBUGS-10498): If multiple hostnames are returned, use the first one for the Node name [#4368](https://github.com/openshift/machine-config-operator/pull/4368)
* [OKD-212](https://issues.redhat.com/browse/OKD-212): Reference `stream-coreos` instead of `centos-stream-coreos-9` [#4349](https://github.com/openshift/machine-config-operator/pull/4349)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821), [OCPBUGS-31381](https://issues.redhat.com/browse/OCPBUGS-31381): certificate_writer: clean up disk-write logic [#4343](https://github.com/openshift/machine-config-operator/pull/4343)
* [MCO-1131](https://issues.redhat.com/browse/MCO-1131): Merge implementation machineOSBuild and machineOSConfig in MCO [#4327](https://github.com/openshift/machine-config-operator/pull/4327)
* [OCPBUGS-33357](https://issues.redhat.com/browse/OCPBUGS-33357): Check both ready and health ingress endpoints [#4356](https://github.com/openshift/machine-config-operator/pull/4356)
* [OCPBUGS-32583](https://issues.redhat.com/browse/OCPBUGS-32583): daemon/pinned-image-set: refactor mirrored registry auth [#4345](https://github.com/openshift/machine-config-operator/pull/4345)
* [OCPBUGS-33046](https://issues.redhat.com/browse/OCPBUGS-33046): improve status reporting for pinned image sets [#4339](https://github.com/openshift/machine-config-operator/pull/4339)
* [OPNET-282](https://issues.redhat.com/browse/OPNET-282): Configure-ovs alternative implementation [#4249](https://github.com/openshift/machine-config-operator/pull/4249)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Only re-bootstrap kubelet on X.509 errors [#4351](https://github.com/openshift/machine-config-operator/pull/4351)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: logSystem the Kube API errors that trigger a re-bootstrap [#4342](https://github.com/openshift/machine-config-operator/pull/4342)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix CoreDNS pod definition on bootstrap nodes on cloud platforms [#4238](https://github.com/openshift/machine-config-operator/pull/4238)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/69944ada37af73f874bc436cbd79e5b9af4c16de...9e4a1f5f4c7ef58082021ca40556c67f99062d0a)
### [multus-cni](https://github.com/openshift/multus-cni/tree/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
* [OCPBUGS-34910](https://issues.redhat.com/browse/OCPBUGS-34910): Thick plugin should not wait for API readiness on CNI DEL [#238](https://github.com/openshift/multus-cni/pull/238)
* [OCPBUGS-34924](https://issues.redhat.com/browse/OCPBUGS-34924): Update owners file [#239](https://github.com/openshift/multus-cni/pull/239)
* [OCPBUGS-33256](https://issues.redhat.com/browse/OCPBUGS-33256): Fix CNI cache update function to prevent nil access [#230](https://github.com/openshift/multus-cni/pull/230)
* [Full changelog](https://github.com/openshift/multus-cni/compare/bd8686f05101480960845742a79414f21fd17945...c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
* [OCPBUGS-34929](https://issues.redhat.com/browse/OCPBUGS-34929): [release-4.16] Use IP to identify orphaned allocation to be deleted [#286](https://github.com/openshift/whereabouts-cni/pull/286)
* [OCPBUGS-33565](https://issues.redhat.com/browse/OCPBUGS-33565): Upstream sync may24 [#278](https://github.com/openshift/whereabouts-cni/pull/278)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2a70b36325e0a9a7d92c9045aadd859fdaa5e700...c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
### [must-gather](https://github.com/openshift/must-gather/tree/7d5f789407c53600f6bd4013ab35727ae09e719e)
* [WRKLDS-1257](https://issues.redhat.com/browse/WRKLDS-1257): Switch must-gather to RHEL9 as base image [#421](https://github.com/openshift/must-gather/pull/421)
* [WRKLDS-1251](https://issues.redhat.com/browse/WRKLDS-1251): Use oc.rhel8 based on the target arch of image [#420](https://github.com/openshift/must-gather/pull/420)
* [Full changelog](https://github.com/openshift/must-gather/compare/68204b5c7e9c933479d3d6f2313b24423e120d9f...7d5f789407c53600f6bd4013ab35727ae09e719e)
### [network-tools](https://github.com/openshift/network-tools/tree/39eca100c0978fb59234e21bf549b130914616ac)
* [OCPBUGS-33388](https://issues.redhat.com/browse/OCPBUGS-33388): Updating ose-network-tools-container image to be consistent with ART for 4.16 [#125](https://github.com/openshift/network-tools/pull/125)
* NO-JIRA: New label for CI flakes [#124](https://github.com/openshift/network-tools/pull/124)
* [Full changelog](https://github.com/openshift/network-tools/compare/0e1891d86a645e2e9345d2d0c33787c1b7e6818d...39eca100c0978fb59234e21bf549b130914616ac)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/f053e5a0ee58d20066efff8db01578785ea83dad)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#73](https://github.com/openshift/machine-api-provider-nutanix/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed...f053e5a0ee58d20066efff8db01578785ea83dad)
### [oauth-server](https://github.com/openshift/oauth-server/tree/3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
* [OCPBUGS-35374](https://issues.redhat.com/browse/OCPBUGS-35374): p/o/handlers - fix nil-pointer, if ResStatus is nil [#152](https://github.com/openshift/oauth-server/pull/152)
* [Full changelog](https://github.com/openshift/oauth-server/compare/5597860a7484ea3e680b2564a4ba89a83888ace3...3739138c8ebbeb73f6e89f61591dd16a3ece32e3)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7c0889f4bd343ccaaba5f33b7b861db29b1e5e49)
* [OCPBUGS-33775](https://issues.redhat.com/browse/OCPBUGS-33775): Do not generate idms & itms if nothing has been mirrored (#871) [#871](https://github.com/openshift/oc-mirror/pull/871)
* [CLID-122](https://issues.redhat.com/browse/CLID-122): upgrades distribution/distribution for a released version (#864) (#868) [#864](https://github.com/openshift/oc-mirror/pull/864)
* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#863) [#863](https://github.com/openshift/oc-mirror/pull/863)
* [OCPBUGS-33081](https://issues.redhat.com/browse/OCPBUGS-33081): Skip images that don't follow standards, semver and naming (#861) [#861](https://github.com/openshift/oc-mirror/pull/861)
* [OCPBUGS-33196](https://issues.redhat.com/browse/OCPBUGS-33196): skip images with both tag and digest (#853) [#853](https://github.com/openshift/oc-mirror/pull/853)
* [OCPBUGS-31608](https://issues.redhat.com/browse/OCPBUGS-31608): Fix IDMS/ITMS generated source repository in case of empty namespace (#850) [#850](https://github.com/openshift/oc-mirror/pull/850)
* [OCPBUGS-31858](https://issues.redhat.com/browse/OCPBUGS-31858): CLID-97: Provide a way to skip failing images (#854) [#854](https://github.com/openshift/oc-mirror/pull/854)
* [OCPBUGS-31622](https://issues.redhat.com/browse/OCPBUGS-31622): Fix operator related image has empty reference (#851) [#851](https://github.com/openshift/oc-mirror/pull/851)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) [#852](https://github.com/openshift/oc-mirror/pull/852)
* [OCPBUGS-32547](https://issues.redhat.com/browse/OCPBUGS-32547): Fix delete generation for mirror to mirror flow (#848) [#848](https://github.com/openshift/oc-mirror/pull/848)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 - 2 (#847) [#847](https://github.com/openshift/oc-mirror/pull/847)
* Fix golint errors (#845) [#845](https://github.com/openshift/oc-mirror/pull/845)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 (#844) [#844](https://github.com/openshift/oc-mirror/pull/844)
* [OCPBUGS-33098](https://issues.redhat.com/browse/OCPBUGS-33098): feat: generates a file with errors during mirroring (#843) [#843](https://github.com/openshift/oc-mirror/pull/843)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/d0c3c4722ec5509aef6ce65f5fae534b8940efdf...7c0889f4bd343ccaaba5f33b7b861db29b1e5e49)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/80b8649cf7a57098d03eff0d155531cf63728f41)
* NO-ISSUE: Synchronize From Upstream Repositories [#102](https://github.com/openshift/operator-framework-operator-controller/pull/102)
* NO-ISSUE: Synchronize From Upstream Repositories [#101](https://github.com/openshift/operator-framework-operator-controller/pull/101)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/f5d6bc09a94f07cf776840d1728d64fb1bd61aea...80b8649cf7a57098d03eff0d155531cf63728f41)
### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-rukpak/pull/84)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/38965a71a46318b8b133d46188a6b2795fce7c68...282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6b5184128103eaad64d7b00f0d1de9b7c3597112)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): Bump library-go [#434](https://github.com/openshift/openshift-apiserver/pull/434)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): Bump openshift/api for Route API godoc fix [#433](https://github.com/openshift/openshift-apiserver/pull/433)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/dd8658e4f242fd580e21384683e82b90360700f3...6b5184128103eaad64d7b00f0d1de9b7c3597112)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc)
* [OCPBUGS-34825](https://issues.redhat.com/browse/OCPBUGS-34825): Whitelists lower-case proxy envs to pod proxydefaults [#314](https://github.com/openshift/openshift-controller-manager/pull/314)
* [OCPBUGS-33893](https://issues.redhat.com/browse/OCPBUGS-33893): openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets [#309](https://github.com/openshift/openshift-controller-manager/pull/309)
* [OCPBUGS-33876](https://issues.redhat.com/browse/OCPBUGS-33876): filter delete events [#308](https://github.com/openshift/openshift-controller-manager/pull/308)
* [OCPBUGS-33600](https://issues.redhat.com/browse/OCPBUGS-33600): revert revert and fix for hypershift [#305](https://github.com/openshift/openshift-controller-manager/pull/305)
* Revert #288 "API-1644: Use bound service account tokens when generating pull secrets" [#304](https://github.com/openshift/openshift-controller-manager/pull/304)
* [API-1644](https://issues.redhat.com/browse/API-1644): Use bound service account tokens when generating pull secrets [#288](https://github.com/openshift/openshift-controller-manager/pull/288)
* [OCPBUGS-33241](https://issues.redhat.com/browse/OCPBUGS-33241): panic in image trigger controller [#302](https://github.com/openshift/openshift-controller-manager/pull/302)
* [OCPBUGS-30688](https://issues.redhat.com/browse/OCPBUGS-30688): bump go-jose to fix CVE-2024-28176 [#297](https://github.com/openshift/openshift-controller-manager/pull/297)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds roleBinding controllers to the controllerInitializers [#296](https://github.com/openshift/openshift-controller-manager/pull/296)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade [#300](https://github.com/openshift/openshift-controller-manager/pull/300)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/8f6f90a1e8b7057588006508cc2be22949d3b0e2...1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6eb4b8220a63a6f9fef9b3779aaf015247697713)
* [OCPBUGS-34882](https://issues.redhat.com/browse/OCPBUGS-34882): Correct out-of-bounds check [#171](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/171)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6b5a59b34641fd3c7f3aca93d8bf40ae2a174466...6eb4b8220a63a6f9fef9b3779aaf015247697713)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/be72b7545228d631178c49677b01905e92846441)
* NO-JIRA: Bump to latest CAPO v0.10 [#312](https://github.com/openshift/cluster-api-provider-openstack/pull/312)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): openshift: Set FallbackToLogsOnError on infra-cluster controller [#311](https://github.com/openshift/cluster-api-provider-openstack/pull/311)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c42a4659d6c092229e84169bfadd7dd80d7cf27b...be72b7545228d631178c49677b01905e92846441)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/fb930638853b159a2e428e6200bd67a64a37295b)
* [OCPBUGS-34158](https://issues.redhat.com/browse/OCPBUGS-34158): Failure to get bootstrap is non-fatal [#115](https://github.com/openshift/machine-api-provider-openstack/pull/115)
* [OCPBUGS-34155](https://issues.redhat.com/browse/OCPBUGS-34155): Fix panic deleting Machine in ERROR state [#114](https://github.com/openshift/machine-api-provider-openstack/pull/114)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/bf45c1fb232122e978eb73336be6d5e441c41d9d...fb930638853b159a2e428e6200bd67a64a37295b)
### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1aacee6a78ceac7acd5aa03647933e550d66a12c)
* [OCPBUGS-35219](https://issues.redhat.com/browse/OCPBUGS-35219): Unblock CI [#767](https://github.com/openshift/operator-framework-olm/pull/767)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/56b7b9d5a6a063dad50e5f5a31b6dca7012c8345...1aacee6a78ceac7acd5aa03647933e550d66a12c)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
* [OCPBUGS-24971](https://issues.redhat.com/browse/OCPBUGS-24971): bump golang to 1.21 [#560](https://github.com/operator-framework/operator-marketplace/pull/560)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#561](https://github.com/operator-framework/operator-marketplace/pull/561)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/cfb26ffc98ef98b3bcc8e758eedf7bd43f47d94c...7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/abb91c84083dd139780921673da64fa5cd13bccb)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/cluster-api-provider-ovirt/pull/177)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/7679c1259fc009096f0c50ca50b168975d3de6b6...abb91c84083dd139780921673da64fa5cd13bccb)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8a9743708ae117595226a52b4856f8c032fed2ab)
* [OCPBUGS-35835](https://issues.redhat.com/browse/OCPBUGS-35835): [release-4.16] bump OVN to ovn24.03-24.03.2-19.el9fdp [#2209](https://github.com/openshift/ovn-kubernetes/pull/2209)
* [OCPBUGS-34402](https://issues.redhat.com/browse/OCPBUGS-34402): [release-4.16] dns: fix deadlock in case of error [#2181](https://github.com/openshift/ovn-kubernetes/pull/2181)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2174](https://github.com/openshift/ovn-kubernetes/pull/2174)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Downstream Merge 16th May 2024 [#2171](https://github.com/openshift/ovn-kubernetes/pull/2171)
* [OCPBUGS-30224](https://issues.redhat.com/browse/OCPBUGS-30224), [OCPBUGS-33328](https://issues.redhat.com/browse/OCPBUGS-33328), [SDN-4388](https://issues.redhat.com/browse/SDN-4388): [DownstreamMerge] 10 may 2024 [#2162](https://github.com/openshift/ovn-kubernetes/pull/2162)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Downstream Merge May 2nd 2024 [#2152](https://github.com/openshift/ovn-kubernetes/pull/2152)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7682c449ded3889b111f8aefe43134e30bd89118...8a9743708ae117595226a52b4856f8c032fed2ab)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#70](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/70)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7cb9279894982a436d65a4c9bc49459460354c46...9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525)
### [prometheus](https://github.com/openshift/prometheus/tree/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#202](https://github.com/openshift/prometheus/pull/202)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#201](https://github.com/openshift/prometheus/pull/201)
* [Full changelog](https://github.com/openshift/prometheus/compare/73b6ffbb3a5d0e1a1d8ce04d96a072940613519a...69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/e9aea929f309f412678fdf1064e1f74db3ba08b4)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): Dockerfile.ocp: use common-build target [#91](https://github.com/openshift/prometheus-alertmanager/pull/91)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/1e17979b2cd4d36dff7ed3d38e4fea9d875a9261...e9aea929f309f412678fdf1064e1f74db3ba08b4)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/538c7b98a689e573b61e1abb1cb649da470c5fac)
* [OCPBUGS-24916](https://issues.redhat.com/browse/OCPBUGS-24916): Bump to rhel9 [#240](https://github.com/openshift/service-ca-operator/pull/240)
* [OCPBUGS-29583](https://issues.redhat.com/browse/OCPBUGS-29583): Apply hypershift cluster-profile for ibm-cloud-managed [#234](https://github.com/openshift/service-ca-operator/pull/234)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/cb3093f23618be6898e540b97855450cc198db2d...538c7b98a689e573b61e1abb1cb649da470c5fac)
### [tests](https://github.com/openshift/origin/tree/3bb691e0fe54cd503f884a80e9211e318a7d8090)
* [OCPBUGS-34736](https://issues.redhat.com/browse/OCPBUGS-34736): Add a "limit" exception for iptables-alerter [#28859](https://github.com/openshift/origin/pull/28859)
* [OCPBUGS-34500](https://issues.redhat.com/browse/OCPBUGS-34500): add manual etcd signer cert rotation e2e test [#28830](https://github.com/openshift/origin/pull/28830)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#28831](https://github.com/openshift/origin/pull/28831)
* NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens [#28810](https://github.com/openshift/origin/pull/28810)
* [STOR-1838](https://issues.redhat.com/browse/STOR-1838): add test for vsphere driver snapshot configuration [#28717](https://github.com/openshift/origin/pull/28717)
* [OCPEDGE-1101](https://issues.redhat.com/browse/OCPEDGE-1101): skip etcd test for hardware speed on sno [#28800](https://github.com/openshift/origin/pull/28800)
* [SPLAT-1439](https://issues.redhat.com/browse/SPLAT-1439): Ignore edge workers when listing nodes [#28584](https://github.com/openshift/origin/pull/28584)
* NO-ISSUE: Automated - Update synthetic test data [#28795](https://github.com/openshift/origin/pull/28795)
* NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) [#28803](https://github.com/openshift/origin/pull/28803)
* [USHIFT-3143](https://issues.redhat.com/browse/USHIFT-3143): Skip metrics and adjust termination message policy monitor tests [#28799](https://github.com/openshift/origin/pull/28799)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): Pass namespace in function checkHostnameReady for monitortest [#28794](https://github.com/openshift/origin/pull/28794)
* [ETCD-488](https://issues.redhat.com/browse/ETCD-488): Fix feature gate for etcd profiles e2e test [#28782](https://github.com/openshift/origin/pull/28782)
* [OCPBUGS-31919](https://issues.redhat.com/browse/OCPBUGS-31919): Use proper pull-secret for getting openshift-tests image [#28764](https://github.com/openshift/origin/pull/28764)
* [OCPBUGS-33378](https://issues.redhat.com/browse/OCPBUGS-33378): Verify Build Webhooks on Upgrade [#28783](https://github.com/openshift/origin/pull/28783)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Increase IPsec timeout parameters [#28779](https://github.com/openshift/origin/pull/28779)
* [USHIFT-3142](https://issues.redhat.com/browse/USHIFT-3142): Automatically exclude FeatureGate tagged tests [#28786](https://github.com/openshift/origin/pull/28786)
* [USHIFT-3133](https://issues.redhat.com/browse/USHIFT-3133): Skip cloud provider disruption monitors for MicroShift [#28767](https://github.com/openshift/origin/pull/28767)
* NO-JIRA: enforce termination policy [#28777](https://github.com/openshift/origin/pull/28777)
* [TRT-1656](https://issues.redhat.com/browse/TRT-1656): Revert #28750 "OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks" [#28781](https://github.com/openshift/origin/pull/28781)
* [SDN-4783](https://issues.redhat.com/browse/SDN-4783): Add e2e tests for NetworkDiagnosticsConfig featuregate [#28719](https://github.com/openshift/origin/pull/28719)
* [API-1783](https://issues.redhat.com/browse/API-1783): Update etcd test data for 1.30 release [#28770](https://github.com/openshift/origin/pull/28770)
* NO-JIRA: verify tls artifacts [#28772](https://github.com/openshift/origin/pull/28772)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#28771](https://github.com/openshift/origin/pull/28771)
* [OCPEDGE-812](https://issues.redhat.com/browse/OCPEDGE-812): feat: add tests for cpu limits on workload partitioning [#28752](https://github.com/openshift/origin/pull/28752)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28739](https://github.com/openshift/origin/pull/28739)
* [MON-3513](https://issues.redhat.com/browse/MON-3513): Add availability test for Metrics API [#28737](https://github.com/openshift/origin/pull/28737)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Add IPsec e2e tests [#28658](https://github.com/openshift/origin/pull/28658)
* [OCPBUGS-33041](https://issues.redhat.com/browse/OCPBUGS-33041): Add RoleBinding for BuildConfig Webhooks [#28750](https://github.com/openshift/origin/pull/28750)
* [OCPBUGS-33317](https://issues.redhat.com/browse/OCPBUGS-33317): use tokenrequest api [#28769](https://github.com/openshift/origin/pull/28769)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): allow for some errors checking namespace delete [#28761](https://github.com/openshift/origin/pull/28761)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Add test for UpgradeValidation contention [#28710](https://github.com/openshift/origin/pull/28710)
* [OCPBUGS-29373](https://issues.redhat.com/browse/OCPBUGS-29373): test/extended/router/http2: Use unique certs [#28757](https://github.com/openshift/origin/pull/28757)
* [OCPBUGS-33125](https://issues.redhat.com/browse/OCPBUGS-33125): Allow flexible rhel in tests [#28755](https://github.com/openshift/origin/pull/28755)
* [Full changelog](https://github.com/openshift/origin/compare/f9eeb4866c898462c881327c964b88fe1e613278...3bb691e0fe54cd503f884a80e9211e318a7d8090)
### [thanos](https://github.com/openshift/thanos/tree/85eee25c36702ec14b86dc3157856d2aa2634642)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#145](https://github.com/openshift/thanos/pull/145)
* [Full changelog](https://github.com/openshift/thanos/compare/7ab10572156af80ee1bc20ae95ebd8069f527342...85eee25c36702ec14b86dc3157856d2aa2634642)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/8777b9a5ec4b34cefab7708987731a1fd224a739)
* [OCPBUGS-30538](https://issues.redhat.com/browse/OCPBUGS-30538): Bump protobuf to v1.33.0 [#67](https://github.com/openshift/cloud-provider-vsphere/pull/67)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/d13aea81a381d967de15444c3949b4f0ef372185...8777b9a5ec4b34cefab7708987731a1fd224a739)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/be22f10a56a18cd94406eea442e0113d866618ea)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#37](https://github.com/openshift/cluster-api-provider-vsphere/pull/37)
* [OCPBUGS-30539](https://issues.redhat.com/browse/OCPBUGS-30539): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.3 (e50b9e2) into master [#36](https://github.com/openshift/cluster-api-provider-vsphere/pull/36)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/80c2c63235a4b69f3d2fac26fcffdfff970e2362...be22f10a56a18cd94406eea442e0113d866618ea)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/3cd689f3f1ff59467885ee8ef42997eef5f81972)
* [OCPBUGS-13551](https://issues.redhat.com/browse/OCPBUGS-13551): FailedPrecondition volume does not appear staged [#88](https://github.com/openshift/vmware-vsphere-csi-driver/pull/88)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/2042477f5d1261397c954f58f2e88d435a35edfc...3cd689f3f1ff59467885ee8ef42997eef5f81972)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
* [OCPBUGS-24061](https://issues.redhat.com/browse/OCPBUGS-24061): Keep CSI operators progressing=true during DaemonSet rollout [#230](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/230)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#231](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/231)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/f06192f43e32fc1b3b934a0281b3224c9d573ab6...483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)