# 4.16.0-rc.4
Created: 2024-06-07 14:09:04 +0000 UTC
Image Digest: `sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6`
Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-06-07-024651
## Changes from 4.16.0-rc.1
### Components
* Kubectl 1.29.1
* Kubernetes upgraded from 1.29.4 to 1.29.5
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202405062146-0 to 416.94.202406052309-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| ClusterAPIInstallAWS
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallNutanix
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallOpenStack
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallVSphere
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| HardwareSpeed
(1 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| MetricsServer
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NetworkDiagnosticsConfig
(6 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereDriverConfiguration
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallGCP
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ClusterAPIInstallPowerVS
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| GatewayAPI
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| VSphereMultiVCenters
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [da90fb7c](https://github.com/openshift/aws-encryption-provider/commit/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0) `sha256:d0529a2375a5b7fbafe66b81012cdabbc3f4bd1797ec3dfbd744969e7d3e16f2`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [bc92347b](https://github.com/openshift/azure-kubernetes-kms/commit/bc92347bcd3863db05ce6c79f0b71145a3185e12) `sha256:6ea4ac3d2611bfb97809da6116a0be110f81c88254f8fab6aa1650c411762f44`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [f5039976](https://github.com/openshift/containernetworking-plugins/commit/f503997690a236f322ae062ab2ebcf720b0457bf) `sha256:e2cb7c2941af8e470d324306783e3e349c4c3bd89444b1406a150ab65c23aaf4`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [317208e7](https://github.com/openshift/multus-cni/commit/317208e75cd56a6d682357415a724ca34a6fd74b) `sha256:378117f719fe417ab26fa0482afd3f8b682e94d318700b60ce86ea4838c54d0c`
### Rebuilt images without code change
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:de89cfb56dbe79bb2ccbc43ee91496503c56460537f029ef81da551335f7a22d`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:f5930e39ca2b5bd5c21fb8f8e70d571872bc019af861e76b141fb76d5db7c582`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [9a6028c4](https://github.com/openshift/apiserver-network-proxy/commit/9a6028c48ae73bd8227f014635ce744452e70348) `sha256:847f79ca9f15e8d57886ea3bd697422ba63ae82b377e292975519c24d477217c`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:dae3c77a81ff54295e267f52fab7adf9bdb856e902772d82be57f1297c1ed393`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [61d60f6c](https://github.com/openshift/machine-api-provider-aws/commit/61d60f6ca20443df434456c2f3eeba859634e6a2) `sha256:8d409882e770e3395517f02c7dc2f09e1d363afb8b73e09a32c21773125ad166`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [746491a6](https://github.com/openshift/aws-pod-identity-webhook/commit/746491a64a4efc04132ceb641cee52c2ead3facd) `sha256:30367d8a6bd313c316d736f72da586e1c2c403a78f5f5eebf20eaa771ed92bfb`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:0ce4fcfefebbc59a93cb599fbecd9dfdc61aca056610ba34247b5c8e1934dfaa`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:fadc119bc4c8e630b76b0df84e31adb20b5484dcaf8495d0edcfe4288f414546`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [face7da9](https://github.com/openshift/cluster-api-provider-azure/commit/face7da9972351de9a8d230b2a72af9dfe7facf7) `sha256:f522bd5b32997cff39d9e6b3d0ffd96ed717c1a114ab8aa5e54996932fda32f1`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:0b19f2d14cd886282f9e0307d8d6332af732ffab98ac5322a35a918121f2fad4`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [5ceb190a](https://github.com/openshift/azure-file-csi-driver/commit/5ceb190a24730e4a3f951fa3e186e3cde9d86889) `sha256:70fe518883175c417f736849278c0b614ba907ce768d4f069f9ff16bdcf4b2b7`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [d6be293a](https://github.com/openshift/machine-api-provider-azure/commit/d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe) `sha256:f96580d79cef3954a20bcbe62a91f0cafbb3d90ece402e9dc77f02bd013c9bd1`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [4aca092a](https://github.com/openshift/azure-workload-identity/commit/4aca092a13f62e48c700a910e8f3f0f228a7d822) `sha256:5084c911e4bfad754b8a212885990742da96ffa00819c51076f43694a4958a16`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [11ba601f](https://github.com/openshift/cluster-api-provider-baremetal/commit/11ba601fbca58557176fcc67ffe8d7d64b697a4a) `sha256:39a292986902cfd6f5543fa9b73d892e87f0379dd1f6156ea3b2283407f6087f`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [b415439e](https://github.com/openshift/cluster-authentication-operator/commit/b415439ebab2829c8da1ea17c05f2ac75fe5dbe8) `sha256:21b6392aef797fc81a43507586d4924fb2f4eca833e6b01bb431df4d70849284`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:c7a7b890e48db564daac18984f85d061b19433a1263de3d32d1a5da49124a948`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [a24f1aeb](https://github.com/openshift/cluster-capi-operator/commit/a24f1aeb106bd4ad353615dacde6d4e884f5face) `sha256:c42cb532fabf07fcba3017eab65337d03bf4811005fd9c1dd247c53a3bd0dd95`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:c238e4efc26aa5b0bff051a864ffed7e3311d64d771e5a6a651e931734e7b74a`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:68ae5e595cb6b6ffa3f6861f7a41a92f5db8e9cd77fabb216dd7a96b9c1b4cf5`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [bf6afbb8](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/bf6afbb820531b4adc3a52f78a90f317c5580bad) `sha256:2217f372554ab69fda40095c92140fd60b05035749446270d5acabc18b956a9b`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:191ff3bb0eed21729ce43c31634050ee410b4db69b64664701cf399f747d150c`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:89206cb191ea89871d18b482edd9417d13327fab7091ed43293046345c80c3d7`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [d4dd8439](https://github.com/openshift/cluster-samples-operator/commit/d4dd84396472c5e974f0562046a6ad068b6f20f8) `sha256:a221a4b48a517ad29dce2fd98a900a21503bb1157bd43949d9698dd372ee7f5e`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c0641e08](https://github.com/openshift/cluster-update-keys/commit/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24) `sha256:d75c881104c8f88b64ad306a63296784845a3ee370b234a52e2e4422d06f5020`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:f3902416479cefeb73ede1ead32b35bb91d0c54eb9ec0dd7c0181c82e7764d27`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [f5039976](https://github.com/openshift/containernetworking-plugins/commit/f503997690a236f322ae062ab2ebcf720b0457bf) `sha256:443e172a5bba1222249dea114b13e2df0d1b0f7992ef3b774723c8aec78bb522`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:f7d92c60ffcc5ee6a9efc8badba3c4a4f0bd3ed32ba9f2b8948f3fbaad71e17c`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [6de0dc79](https://github.com/openshift/csi-driver-manila-operator/commit/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751) `sha256:c929ad890e53b2749372f94fb338a32c855bb4ac7b6055169ba59b2a5f05d946`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:bc26483bae9b004293fcf627e8c1634054aeae781c721e2f152040e0962fdf0f`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:673b4928576d0f2450325ad47e06b62ddd92a29047b3c02d325227ae26e1263c`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:faee251eeaea85be146c2f8c0d3c1ab21611fc16e36f00b82906954bcaf30d26`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:418951fd0c8cc12783cc24b2f9c487b6bd277aee2cf182578bfca497a167063f`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:6a3bd19b870f9551af296dce9d947bc273832d50ab86757035355993f59a347c`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:6db88450d13dc077711534a005852b06eaa6ff38c7fa366f99c53556c42697a1`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:c8e78d4df6fa60f107524286e6b4ad9f5682dd7fc844f98414bdcf73138a75c3`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:5d830c52b43c856c7c028326d64168ace2b44f8864f626cf15036118fdcc446c`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:0d14e1f2e418e264cd5e0ac7f27dc41a10afbe1d8ccde91062f1db6a82007f02`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:1f1332e8473ee587a634b23e555a97a472180466f100f68512d95bde33ad3a22`
* [docker-builder](https://github.com/openshift/builder) git [ca2b36ac](https://github.com/openshift/builder/commit/ca2b36ac7f38efc76bedc87cc81f9464f52bf332) `sha256:cee9993b6fc030e73c326a8561c9cc53b357e626552ecde2bca239d92963c136`
* [docker-registry](https://github.com/openshift/image-registry) git [4462ddcd](https://github.com/openshift/image-registry/commit/4462ddcd818294725dfd0f5232cc908408372524) `sha256:f52b3b97a6efeaa28a70030fa91a25af115baebf177488750df1e94e11423c77`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7534ab90](https://github.com/openshift/egress-router-cni/commit/7534ab906e5f9d38defbbbc6b169e5d829463bb5) `sha256:b09fd8c20080a440e2fb91e64deed04b5a8678296f0376dfa2f2908941b5309a`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:ab00725d7e8718b1346a713bfb71a43913d8e0449d04b86ce055464e2d4f83cc`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:261110a76f987e7689286c5c1f696bcfe58a93ce15648e8f468553c318ed1a6a`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:2a1253e128ed574a7ae9b751c3ee850f354744c52b1cf8d36ffd22a18a53091d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:58bdeee8472dd7156b3933de99018f7876cae7c625e70a2de1c3bc86f5e31833`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [32b4c005](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/32b4c00517de0f54bf738380064a12d58b031eec) `sha256:a8f986640f0b2824cdef9678ff69b8fb83c1537a0d56dfe28b6ee4caed4d63fc`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [1a3a3030](https://github.com/openshift/machine-api-provider-ibmcloud/commit/1a3a3030afcbbc0a26e794050d300b818069ba16) `sha256:b281400eafecab72f945ae8c64f4632d219a2dda2c104556cffc5fb3311a674b`
* [insights-operator](https://github.com/openshift/insights-operator) git [82e7c86a](https://github.com/openshift/insights-operator/commit/82e7c86ab5707ee3ccc6adbf78656a7a1e1daa12) `sha256:fdab70387e290b37356c43b0777c2dc89db5c379cb6947ed13b193427c5154e3`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [63681a46](https://github.com/openshift/ironic-agent-image/commit/63681a469fdba2f223373ff36350bf2462b997a3) `sha256:96df7f81d3678c45d9553cf0c359005aff1926bdb59b88bf8ccabcfab4d752df`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:39887a72b501e04d13d72d0e5d663153a50d4b2184210c6c23750ef9dfa38695`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e78e4c3e](https://github.com/openshift/ironic-static-ip-manager/commit/e78e4c3e6db1805816308197eb9002dfbca27560) `sha256:9b1fbb80ae8ec71ec35c510455cee481cf6e0efe1a08b051166bf5a83594671f`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:18941a8f54b1f356a1baa4435259ccdb9d7606da0cec401858050c0d70816697`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [7938f253](https://github.com/openshift/kubernetes-metrics-server/commit/7938f253e74f2259951cc882f2879a9860a38481) `sha256:c6a174cf59840331f2295deb5660fa1b584671c086c1ad64ce572cc5aad54c50`
* [kube-proxy](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:d3b1f3a5ec5d152c7416613fe9696011e59ee6918a6358ddfeb9f62bed288523`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:6b9279ce7b6bdf993e9b37924ece65982b806475f0a633ef2eae1c5c960e5e1d`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [969a60e9](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51) `sha256:e287ab32d1cbe1209ccedc3a31649d2a75d5a4a8097590d600e0f3f7db99fc5c`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:7a0d8cfa7fbb1829f899dfd328eeb8bf6484cff4bd51476c38f81f780157f390`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:b880608f5b66d9db0f8cef8234d0bed27e5d297584a7e199030a1aa2e3cce96f`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:82ab59869f2f3258d6b7b5ddbb50fdfff5a2e7988d2255efe0867900b9f19cf3`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:ce77d4d33f98ba7f0a92d1d29779cc8618ba8ff1384e134a093a30ac463ed7d8`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [f1fc4315](https://github.com/openshift/monitoring-plugin/commit/f1fc4315bffa538d0a18e581866093a004db460b) `sha256:f9b89852af8e15ea647161b36f7764f1b62136616d1d923c006e854757020a83`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [2591682f](https://github.com/openshift/multus-admission-controller/commit/2591682f2d409eea29cced23bf355ca8f27fcec8) `sha256:bcd2eac2f4a4060a04319748ae6123c9e8fa96dfd8e16c530be345b3434cc6e9`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [c9a6ba24](https://github.com/openshift/multus-networkpolicy/commit/c9a6ba24e92dad55e00fc17815a3e9988ee14d2d) `sha256:93dfc4c0041a8749179a3db70ca35762a5fb1b048b7d1162a393c5ddb1a1cf88`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [6a04feea](https://github.com/openshift/route-override-cni/commit/6a04feea1b1ab85914d9793a3bb8502c54bef172) `sha256:68a95a354a5bb6c5312ebd4670ae305b8bf0123ed426048ed5befcbfeeff3fda`
* [must-gather](https://github.com/openshift/must-gather) git [7d5f7894](https://github.com/openshift/must-gather/commit/7d5f789407c53600f6bd4013ab35727ae09e719e) `sha256:ccdc0abcf68b276b781a774d7630503a6b323c7cedea8e5636b09dd759dd226a`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [bb911451](https://github.com/openshift/bond-cni/commit/bb911451158fc06f193917863778434944e88ae1) `sha256:492aea82e8accb6e690e9251e98bf5592433f92ca4d3df9bcad7af44a482559d`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [710bd872](https://github.com/openshift/network-metrics-daemon/commit/710bd872934572584eff4987eb638764afd04cdb) `sha256:20e7cc0c70dfe15e9bffb19cd84ad691a2f536c75032e323be137e932e06021a`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9bbc44c](https://github.com/openshift/cloud-provider-nutanix/commit/c9bbc44c0200c8061506c465d0eb3c97fe94e197) `sha256:5e019202b25a360625fbbae339fe9bf3aac764160547c76efe15f54f91dbfeee`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [fa1f097c](https://github.com/openshift/oauth-apiserver/commit/fa1f097c2800b06b3b56537651294d023762a4eb) `sha256:ca16980fc0e2808b2bab35cc848ad16da6f79e43fd4cacf17d77d98c0d581d02`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:655046e97dccfb3b436e38f55601c0ac038cba8ee5036c91b38b63c21a5b6750`
* [oauth-server](https://github.com/openshift/oauth-server) git [5597860a](https://github.com/openshift/oauth-server/commit/5597860a7484ea3e680b2564a4ba89a83888ace3) `sha256:7788c3460beebdd7e720c71ec3eca004cdfe2003b051103d3fccc7ef087f6eb3`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:fa7ef88f868ac71e4ef7fddd109c920efaece57f089e237830b24b9c256c8ba4`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:c0a74124a690f4255eae13c4f441cf6e294ed4ab5f2ea98bb5b7b7a565371a3c`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [6b5a59b3](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/6b5a59b34641fd3c7f3aca93d8bf40ae2a174466) `sha256:42c819eec0e79b381b41f308bbf9fc12c255a462acc21e1fc32fb0b33831b53a`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [5340eaab](https://github.com/openshift/cloud-provider-openstack/commit/5340eaab09d8057a705b7a7124e05231cfd37978) `sha256:af48c9c4f0d89a448490b095c1f53053c007337b958cdcabc85b53a2ee068e63`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [56b7b9d5](https://github.com/openshift/operator-framework-olm/commit/56b7b9d5a6a063dad50e5f5a31b6dca7012c8345) `sha256:0c98f79ab486ea5a1d832c1393ca7da8a3131096a54ea4a1779a8a57f7025fdb`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [56b7b9d5](https://github.com/openshift/operator-framework-olm/commit/56b7b9d5a6a063dad50e5f5a31b6dca7012c8345) `sha256:cc2ac5039a8d9bfb21593e4ee42c94bd445efa8d7be13fd63cd00049ce5db1de`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:91207bb3aab175c422f40f2abe5ff491aafbec94ab8d9b194a917f1998d590c6`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:c7b0c5751464d88169c81de1a6c181e779f4cd06139e362613b30ca173aa710b`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [730a473c](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/730a473cf60d5de4d4543ea71ff5f3c6c1010980) `sha256:588caee9a593941a51830f86881ceda1cb606de14242191cb27e334dc2779a54`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:dcb04825bb757705e030cefdd1d7ad46511a8a3090ba9f3855418ac6c5ea0285`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [87386cd4](https://github.com/openshift/cloud-provider-powervs/commit/87386cd444b4b9fe745d0198ab959ccedb5e318a) `sha256:c1a4611cdde1a89dd3da1fbe61c9ebfbaa455193f974603d9920f86198884b30`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [6b57e6c1](https://github.com/openshift/machine-api-provider-powervs/commit/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1) `sha256:072dc7924cb12df7c3d4314dcee6e21ebd96791293b03cfe3db8a9b67ec7d6bc`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:f925bb31c2c18c74b574e35352286036c72fcbb4ed95331ea4d1ba5d5b58f173`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:cfc189a1a1eae1859c452714b8bbc6c66fa5b837717f7da83631ee8de437fc63`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:b9eba2f769468893fb6bd7407847653fca7153da88e00ef8d68af2dd5a3d28e7`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:fcb3b0af68cb042fa56c1eac2be34b4ff2d766e2c8e4d769349b5a8b4bfff37e`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [8bf4750a](https://github.com/openshift/prometheus-operator/commit/8bf4750af765730dc423213516245c7b0679e352) `sha256:c9cb2094942cf6eba4ae69c856e11222e922ad4d839506d3e95913b068ec88c3`
* rhel-coreos `sha256:94928241dda9513ee247266c799478397060c998bef83c6e0824d1580fee1f22`
* rhel-coreos-extensions `sha256:d8d28df8d90f623ab802904ba1175bab4089f2378b49e3f0d31be00cf351e8cf`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [3112b458](https://github.com/openshift/route-controller-manager/commit/3112b458983c6fca6f77d5a945fb0026186dace6) `sha256:f5484eee39d22c97ef8b258c63a00940d97593abc951acad7aec3117e1d65019`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:94ee204681fcd49f3abd94b8ce0aeaccacd8b3c22e9b9405fd622b90d60d75fd`
* [telemeter](https://github.com/openshift/telemeter) git [6ab43e48](https://github.com/openshift/telemeter/commit/6ab43e488013b2383d594b3a8837e3800ce01c04) `sha256:5cf343fbff230391d5154834041903600727dc2c63d0af07f766528647950410`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [be22f10a](https://github.com/openshift/cluster-api-provider-vsphere/commit/be22f10a56a18cd94406eea442e0113d866618ea) `sha256:9dd94615cbbd117d9a82a66ebece980cb17ae3925f1b1a291e0d553cdb12cd5b`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [d674e6d8](https://github.com/openshift/vsphere-problem-detector/commit/d674e6d8b4b814b1544e7d2fc9177e5e0f90484b) `sha256:330dfc7ed0617992df7fb448a9e8dc398889b78edc7ee44e3528e268051b9b38`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
* [OCPBUGS-31727](https://issues.redhat.com/browse/OCPBUGS-31727): Invalid Pull-Secret when using password which contains a colon character (#6362) [#6362](https://github.com/openshift/assisted-service/pull/6362)
* [MGMT-17850](https://issues.redhat.com/browse/MGMT-17850): Bump k8s.io modules to v0.29 (#6345) (#6372) [#6345](https://github.com/openshift/assisted-service/pull/6345)
* [OCPBUGS-34278](https://issues.redhat.com/browse/OCPBUGS-34278): Don't use the statically linked installer if FIPS is enabled (#6357) [#6357](https://github.com/openshift/assisted-service/pull/6357)
* Use openshift-install binary for releases >= 4.16 (#6304) [#6304](https://github.com/openshift/assisted-service/pull/6304)
* [MGMT-17775](https://issues.redhat.com/browse/MGMT-17775): Ensure that patch manifest filenames are consistent and correct (#6289) [#6289](https://github.com/openshift/assisted-service/pull/6289)
* [MGMT-17194](https://issues.redhat.com/browse/MGMT-17194): Ensure that we improve error messages for mirror registry tagged images (#6266) [#6266](https://github.com/openshift/assisted-service/pull/6266)
* [MGMT-17764](https://issues.redhat.com/browse/MGMT-17764): Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) [#6276](https://github.com/openshift/assisted-service/pull/6276)
* NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) [#6255](https://github.com/openshift/assisted-service/pull/6255)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4577ef6f4cf138391e24899480ca533dd086557b...6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/373c87ad8f0d88816031b5c39764c80d900228d9)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#850) [#850](https://github.com/openshift/assisted-installer/pull/850)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/f548d3284a438c8e2020253d2250620b095c70a1...373c87ad8f0d88816031b5c39764c80d900228d9)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9ca7b58d937c413f670a26c02435829b1fb3a196)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#717) [#717](https://github.com/openshift/assisted-installer-agent/pull/717)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) [#637](https://github.com/openshift/assisted-installer-agent/pull/637)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/95b2b0ce40125bda30ec46cb664936e9967a8845...9ca7b58d937c413f670a26c02435829b1fb3a196)
### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/064d4624c74d417dd31cf1c173c00c3fa98ffade)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#50](https://github.com/openshift/cluster-api-provider-alibaba/pull/50)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/a57f2023035a80c8799edf4e105f11cabe6180a4...064d4624c74d417dd31cf1c173c00c3fa98ffade)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/a53e9def2e60eecd390575b59c85d54c5412ecd3)
* [OCPBUGS-31968](https://issues.redhat.com/browse/OCPBUGS-31968): update for CVE-2023-45288 [release-4.16] [#82](https://github.com/openshift/cloud-provider-aws/pull/82)
* [OCPBUGS-34046](https://issues.redhat.com/browse/OCPBUGS-34046): Ensure that addresses are added in network device index order [#88](https://github.com/openshift/cloud-provider-aws/pull/88)
* [OCPBUGS-8213](https://issues.redhat.com/browse/OCPBUGS-8213): Ensure removal of security group rules on deleting load balancers [#57](https://github.com/openshift/cloud-provider-aws/pull/57)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/c18f7e773f1cde578af70a25f6bf597797289309...a53e9def2e60eecd390575b59c85d54c5412ecd3)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#510](https://github.com/openshift/cluster-api-provider-aws/pull/510)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/63025f8fdfc1a53d5d37354c49b210754873667d...aaaf00b18daf45c9eea93bc2924a6a7e22d27766)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
* [OCPBUGS-34392](https://issues.redhat.com/browse/OCPBUGS-34392): Adjust port for registrar sidecar in aws-ebs csi driver container [#230](https://github.com/openshift/csi-operator/pull/230)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a82a21121e2f5230563b19c11e44f055d68ed382...ff69cd0336ab92035d3d57af0ec71ff7b52f0f17)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/b29f0a3e17a0373ea984164f516ea252e400e818)
* [OCPBUGS-34822](https://issues.redhat.com/browse/OCPBUGS-34822): [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled [#8524](https://github.com/openshift/installer/pull/8524)
* [OCPBUGS-34976](https://issues.redhat.com/browse/OCPBUGS-34976): [release-4.16] aws: terraform: add spot instance support for masters [#8526](https://github.com/openshift/installer/pull/8526)
* [OCPBUGS-34707](https://issues.redhat.com/browse/OCPBUGS-34707): attach tag to folder,fix folder destroy [#8509](https://github.com/openshift/installer/pull/8509)
* [OCPBUGS-33794](https://issues.redhat.com/browse/OCPBUGS-33794): Make Ingress capability required for standalone OpenShift [#8528](https://github.com/openshift/installer/pull/8528)
* [OCPBUGS-34628](https://issues.redhat.com/browse/OCPBUGS-34628): tfvars: change asset's name [#8501](https://github.com/openshift/installer/pull/8501)
* [OCPBUGS-34388](https://issues.redhat.com/browse/OCPBUGS-34388): Add --dir /tmp to node-joiner-monitor.sh [#8461](https://github.com/openshift/installer/pull/8461)
* [OCPBUGS-34728](https://issues.redhat.com/browse/OCPBUGS-34728): [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix [#8506](https://github.com/openshift/installer/pull/8506)
* [OCPBUGS-34693](https://issues.redhat.com/browse/OCPBUGS-34693): update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 [#8517](https://github.com/openshift/installer/pull/8517)
* [OCPBUGS-34419](https://issues.redhat.com/browse/OCPBUGS-34419): PowerVS: update capi ibmcloud to release 0 8 0 [#8465](https://github.com/openshift/installer/pull/8465)
* [OCPBUGS-34623](https://issues.redhat.com/browse/OCPBUGS-34623), [OCPBUGS-34625](https://issues.redhat.com/browse/OCPBUGS-34625): capv - missing cores/socket,disk type [#8500](https://github.com/openshift/installer/pull/8500)
* [OCPBUGS-34427](https://issues.redhat.com/browse/OCPBUGS-34427): aws/cluster: restrict SSH on private clusters [#8467](https://github.com/openshift/installer/pull/8467)
* [OCPBUGS-34528](https://issues.redhat.com/browse/OCPBUGS-34528): Nutanix IPI install with capi failed to set bootType [#8481](https://github.com/openshift/installer/pull/8481)
* [OCPBUGS-31845](https://issues.redhat.com/browse/OCPBUGS-31845): Detect Release Image Arch in a Disconnected Env [#8490](https://github.com/openshift/installer/pull/8490)
* [OCPBUGS-33962](https://issues.redhat.com/browse/OCPBUGS-33962): [release-4.16] Remove vSphere Terraform [#8431](https://github.com/openshift/installer/pull/8431)
* [OCPBUGS-34506](https://issues.redhat.com/browse/OCPBUGS-34506): [release-4.16] bump golang-protobuf for CVE fix [#8478](https://github.com/openshift/installer/pull/8478)
* [OCPBUGS-34417](https://issues.redhat.com/browse/OCPBUGS-34417): capi/aws: don't modify BYO role's policy [#8463](https://github.com/openshift/installer/pull/8463)
* [OCPBUGS-34220](https://issues.redhat.com/browse/OCPBUGS-34220): Reintroduce CAPI-installer to 4.16 [#8451](https://github.com/openshift/installer/pull/8451)
* [OCPBUGS-33976](https://issues.redhat.com/browse/OCPBUGS-33976): Enable leader election for baremetal operator [#8435](https://github.com/openshift/installer/pull/8435)
* Trt-1674: 4.16 capi revert 1 [#8434](https://github.com/openshift/installer/pull/8434)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): [release-4.16] GA CAPI Installer [#8428](https://github.com/openshift/installer/pull/8428)
* [OCPBUGS-33668](https://issues.redhat.com/browse/OCPBUGS-33668): Changed folder name to match cluster name instead of infra-id. [#8414](https://github.com/openshift/installer/pull/8414)
* [AGENT-903](https://issues.redhat.com/browse/AGENT-903): monitor-add-nodes should only show CSRs matching node [#8376](https://github.com/openshift/installer/pull/8376)
* [CORS-3480](https://issues.redhat.com/browse/CORS-3480): aws/sdk: remove sdk provisioner [#8358](https://github.com/openshift/installer/pull/8358)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): Always collect clusterapi manifests [#8411](https://github.com/openshift/installer/pull/8411)
* [OCPBUGS-33709](https://issues.redhat.com/browse/OCPBUGS-33709): GCP mixup when using the ignition shim vs the signed url [#8342](https://github.com/openshift/installer/pull/8342)
* [CORS-3297](https://issues.redhat.com/browse/CORS-3297): Add GCP firewall rule to access bootstrap node via ssh [#8374](https://github.com/openshift/installer/pull/8374)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi-aws delete bootstrap ssh rule [#8359](https://github.com/openshift/installer/pull/8359)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): baremetal: always write masters file [#8365](https://github.com/openshift/installer/pull/8365)
* [OCPBUGS-33531](https://issues.redhat.com/browse/OCPBUGS-33531): update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 [#8409](https://github.com/openshift/installer/pull/8409)
* no-jira: Vendor api changes for tech preview with capg [#8407](https://github.com/openshift/installer/pull/8407)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure ignite control plane machines [#8126](https://github.com/openshift/installer/pull/8126)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add missing permission for IPv4 pools [#8408](https://github.com/openshift/installer/pull/8408)
* [OCPBUGS-33649](https://issues.redhat.com/browse/OCPBUGS-33649): add quota support to ca-west-1 [#8406](https://github.com/openshift/installer/pull/8406)
* [CORS-3460](https://issues.redhat.com/browse/CORS-3460): capi: collect generated assets in hidden dir and save into log bundle [#8387](https://github.com/openshift/installer/pull/8387)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: aarch64-related fixes [#8385](https://github.com/openshift/installer/pull/8385)
* [OCPBUGS-33610](https://issues.redhat.com/browse/OCPBUGS-33610): fix API detection, azure bootstrap disk size, and use get to verify endpoint [#8371](https://github.com/openshift/installer/pull/8371)
* no-jira: Removing unused terraform variables [#8360](https://github.com/openshift/installer/pull/8360)
* [OCPBUGS-33502](https://issues.redhat.com/browse/OCPBUGS-33502): capi/aws: fix setting IMDSv2 value [#8399](https://github.com/openshift/installer/pull/8399)
* [CORS-3516](https://issues.redhat.com/browse/CORS-3516): hack: do not execute cross-compiled binaries [#8397](https://github.com/openshift/installer/pull/8397)
* [OCPBUGS-33578](https://issues.redhat.com/browse/OCPBUGS-33578): capi/aws: fix HostedZone ID lookup [#8396](https://github.com/openshift/installer/pull/8396)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): improve bootstrap logic to wait for at least 2 apiserver instances [#8394](https://github.com/openshift/installer/pull/8394)
* [OKD-213](https://issues.redhat.com/browse/OKD-213): Reference stream-coreos instead of centos-stream-coreos-9 [#8356](https://github.com/openshift/installer/pull/8356)
* [OCPBUGS-33470](https://issues.redhat.com/browse/OCPBUGS-33470): use read/write cache on azure masters [#8380](https://github.com/openshift/installer/pull/8380)
* no-jira: AzureMachines: set disk caching to ReadWrite [#8390](https://github.com/openshift/installer/pull/8390)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): Change $@ to "$*" to fix shellcheck [#8402](https://github.com/openshift/installer/pull/8402)
* [OCPBUGS-33481](https://issues.redhat.com/browse/OCPBUGS-33481): set the node tag used by CAPG for CloudProviderConfig [#8386](https://github.com/openshift/installer/pull/8386)
* [OCPBUGS-23022](https://issues.redhat.com/browse/OCPBUGS-23022): Installer should not complain when API and API-INT are resolved. [#7701](https://github.com/openshift/installer/pull/7701)
* no-jira: vendor: capi-installer in tech preview [#8372](https://github.com/openshift/installer/pull/8372)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): capa/machines: fix zone placement for control planes [#8347](https://github.com/openshift/installer/pull/8347)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Changed vsphere CPMS to not include fields controlled by failure domains. [#8354](https://github.com/openshift/installer/pull/8354)
* [AGENT-872](https://issues.redhat.com/browse/AGENT-872): Generate JWT token [#8110](https://github.com/openshift/installer/pull/8110)
* no-jira: vSphere - update owners aliases [#8384](https://github.com/openshift/installer/pull/8384)
* [AGENT-906](https://issues.redhat.com/browse/AGENT-906): Script to run monitor-add-nodes in cluster [#8294](https://github.com/openshift/installer/pull/8294)
* [OCPBUGS-33430](https://issues.redhat.com/browse/OCPBUGS-33430): Fix CAPI installation typo [#8375](https://github.com/openshift/installer/pull/8375)
* [CORS-3471](https://issues.redhat.com/browse/CORS-3471): standalone destroy bootstrap support with capi [#8350](https://github.com/openshift/installer/pull/8350)
* [CORS-3477](https://issues.redhat.com/browse/CORS-3477): hack: build capi + providers by default [#8357](https://github.com/openshift/installer/pull/8357)
* [OCPBUGS-33189](https://issues.redhat.com/browse/OCPBUGS-33189): OCPBUGS-33006: baremetal: correct libvirt defaults [#8366](https://github.com/openshift/installer/pull/8366)
* [OCPBUGS-33157](https://issues.redhat.com/browse/OCPBUGS-33157): baremetal: pause provisioning [#8346](https://github.com/openshift/installer/pull/8346)
* NO-ISSUE: baremetal: disable bmo webhook on bootstrap [#8340](https://github.com/openshift/installer/pull/8340)
* [OCPBUGS-33240](https://issues.redhat.com/browse/OCPBUGS-33240): avoid FAT32 error messages when generating the agent ISO [#8353](https://github.com/openshift/installer/pull/8353)
* no-jira: Private domains in survey for PowerVS [#8303](https://github.com/openshift/installer/pull/8303)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images: use pre-built KAS/etcd binaries [#8343](https://github.com/openshift/installer/pull/8343)
* [Full changelog](https://github.com/openshift/installer/compare/419b4353f13b9356d8af8c3102f2afc78c19febc...b29f0a3e17a0373ea984164f516ea252e400e818)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7673d14fc567c3621e8d5fdca69ff03bd99504ef)
* [OCPBUGS-33254](https://issues.redhat.com/browse/OCPBUGS-33254): Merge upstream [#354](https://github.com/openshift/baremetal-operator/pull/354)
* NO-ISSUE: Revert "downstream-only: Disable webhooks" [#335](https://github.com/openshift/baremetal-operator/pull/335)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/33cfa9fcf9a13a86ca8afe0433cef49ea062ad12...7673d14fc567c3621e8d5fdca69ff03bd99504ef)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/91e3cb724f9d14cf40f66d059cdac1578193cac0)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Fix generation of DNSUpstreams on cloud platforms [#308](https://github.com/openshift/baremetal-runtimecfg/pull/308)
* NO-ISSUE: Fix wrong golang version, bump to 1.21 [#311](https://github.com/openshift/baremetal-runtimecfg/pull/311)
* Revert "OCPBUGS-32348: Make log level configurable" [#310](https://github.com/openshift/baremetal-runtimecfg/pull/310)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/53bcc3aa6e5ef57743526150a7280b176404442c...91e3cb724f9d14cf40f66d059cdac1578193cac0)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
* [OCPBUGS-34886](https://issues.redhat.com/browse/OCPBUGS-34886): Hardcode resource groups/kinds for now [#1796](https://github.com/openshift/oc/pull/1796)
* [OCPBUGS-33917](https://issues.redhat.com/browse/OCPBUGS-33917): add alert data to upgrade health in oc adm upgrade status [#1794](https://github.com/openshift/oc/pull/1794)
* [OCPBUGS-33975](https://issues.redhat.com/browse/OCPBUGS-33975): pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK [#1776](https://github.com/openshift/oc/pull/1776)
* [OCPBUGS-34406](https://issues.redhat.com/browse/OCPBUGS-34406): Simplify output when not updating [#1781](https://github.com/openshift/oc/pull/1781)
* [OCPBUGS-33918](https://issues.redhat.com/browse/OCPBUGS-33918): `adm update status`: Show information about the upgrade target version [#1772](https://github.com/openshift/oc/pull/1772)
* [OCPBUGS-33916](https://issues.redhat.com/browse/OCPBUGS-33916): Add s390x based oc into extraction target [#1770](https://github.com/openshift/oc/pull/1770)
* [OCPNODE-2281](https://issues.redhat.com/browse/OCPNODE-2281): Support multiple icsps in migrate icsp [#1751](https://github.com/openshift/oc/pull/1751)
* [OCPNODE-2282](https://issues.redhat.com/browse/OCPNODE-2282): Support multiple ImageDigestMirrorSet objects in the th… [#1756](https://github.com/openshift/oc/pull/1756)
* [OTA-1275](https://issues.redhat.com/browse/OTA-1275): cli/admin/release/git: use optimized git flags [#1754](https://github.com/openshift/oc/pull/1754)
* [Full changelog](https://github.com/openshift/oc/compare/941fe49866979576189f764217deae6029e15e9b...a2450418f7b12a71e8f3562a4e9aa8a976bbf85b)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
* [OCPBUGS-32948](https://issues.redhat.com/browse/OCPBUGS-32948): Update documentation to restart pods when enabling workload identity [#701](https://github.com/openshift/cloud-credential-operator/pull/701)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/555da3f1debfad11e921539f96d5e7ab61b2af80...48b287d41e71b23c55b00cbcbfb38ac1eedfb9f4)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8ceee78810756afaa2efb75f60bef0358502834f)
* [OCPBUGS-33617](https://issues.redhat.com/browse/OCPBUGS-33617): Avoid panic when looking up attachedOutboundRule.ID in azure [#144](https://github.com/openshift/cloud-network-config-controller/pull/144)
* NO-JIRA: Update dependency google.golang.org/api [#143](https://github.com/openshift/cloud-network-config-controller/pull/143)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/43c7556403171f1adbbdefaa2b0c08466464ef0d...8ceee78810756afaa2efb75f60bef0358502834f)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/0ca482b99013490611296fefb9e780ac5c81abe4)
* NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup [#298](https://github.com/openshift/kubernetes-autoscaler/pull/298)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c852679460d8af844212462e0244eb6240d0591b...0ca482b99013490611296fefb9e780ac5c81abe4)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#315](https://github.com/openshift/cluster-autoscaler-operator/pull/315)
* [OCPBUGS-20565](https://issues.redhat.com/browse/OCPBUGS-20565): Set webhook minimum TLS version to 1.3 [#320](https://github.com/openshift/cluster-autoscaler-operator/pull/320)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/9e97f29324de0e06018dab8f6c94bc77fb32d41a...40cadf8a4729ca808a3413e9b8593ab7aab0bed7)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fe453644c42480cd3803b1d8a9fc7cdc28f89b59)
* [OCPBUGS-34041](https://issues.redhat.com/browse/OCPBUGS-34041): Run metal3 containers as specific users and groups [#418](https://github.com/openshift/cluster-baremetal-operator/pull/418)
* [OCPBUGS-33493](https://issues.redhat.com/browse/OCPBUGS-33493): Enable leader election for baremetal-operator [#416](https://github.com/openshift/cluster-baremetal-operator/pull/416)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Drop unneccessary capabilities [#401](https://github.com/openshift/cluster-baremetal-operator/pull/401)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b019df5ab745d4ad6c7598ce3bd97b31c9fe222c...fe453644c42480cd3803b1d8a9fc7cdc28f89b59)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/5830a10a2f545dc25ff4ca4c4efd9005088676aa)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#207](https://github.com/openshift/cluster-api/pull/207)
* [Full changelog](https://github.com/openshift/cluster-api/compare/e9732a43bb44b4709ce1badcd4b8eac1d9c5b41c...5830a10a2f545dc25ff4ca4c4efd9005088676aa)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e21fac6dce98b2136cb60af47a8bfb33e562f9a1)
* NO-JIRA: Ensure termination message policy in tests [#344](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/344)
* [OCPBUGS-33405](https://issues.redhat.com/browse/OCPBUGS-33405): update azure and ash tolerations on node manager [#342](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/342)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/70aa31af5224c0e05314cacf9a734b8944c14fbf...e21fac6dce98b2136cb60af47a8bfb33e562f9a1)
### [cluster-config-api](https://github.com/openshift/api/tree/636e2c17106f5a0d9c266535f262267384fede1f)
* [OCPBUGS-26466](https://issues.redhat.com/browse/OCPBUGS-26466): Disable PSA in non-previews 4.16 [#1912](https://github.com/openshift/api/pull/1912)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): promote VSphereDriverConfiguration feature to Accessible-by-default [#1904](https://github.com/openshift/api/pull/1904)
* temporarily break the featuregate check to show we can get results [#1911](https://github.com/openshift/api/pull/1911)
* Feature gates for platforms, architecture, and installs [#1910](https://github.com/openshift/api/pull/1910)
* [OCPBUGS-34398](https://issues.redhat.com/browse/OCPBUGS-34398): Streamline bootstrap crds [#1905](https://github.com/openshift/api/pull/1905)
* [ETCD-602](https://issues.redhat.com/browse/ETCD-602): Move etcd hardware speed feature to GA [#1901](https://github.com/openshift/api/pull/1901)
* Move CAPI install platforms to default feature set [#1892](https://github.com/openshift/api/pull/1892)
* [OCPBUGS-33727](https://issues.redhat.com/browse/OCPBUGS-33727): Fix Gateway API Feature Gate [#1894](https://github.com/openshift/api/pull/1894)
* NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config [#1890](https://github.com/openshift/api/pull/1890)
* [SDN-4600](https://issues.redhat.com/browse/SDN-4600): Add NetworkDiagnosticsConfig to the default featureset [#1886](https://github.com/openshift/api/pull/1886)
* Revert "Revert "Merge pull request #1851 from slashpai/metrics-server"" [#1865](https://github.com/openshift/api/pull/1865)
* [CORS-3488](https://issues.redhat.com/browse/CORS-3488): Add GCP CAPI installer to tech preview feature set. [#1889](https://github.com/openshift/api/pull/1889)
* Add eligible CAPI-install platforms to TechPreview [#1880](https://github.com/openshift/api/pull/1880)
* NO-JIRA: Update runtime image and drop color in CI [#1885](https://github.com/openshift/api/pull/1885)
* add MachineConfiguration conditions for boot image updates [#1882](https://github.com/openshift/api/pull/1882)
* [SPLAT-1452](https://issues.redhat.com/browse/SPLAT-1452): Changed vcenter MaxItems to be 3 for TechPreview. [#1842](https://github.com/openshift/api/pull/1842)
* [ETCD-520](https://issues.redhat.com/browse/ETCD-520): add BackendQuotaGiB example [#1874](https://github.com/openshift/api/pull/1874)
* Update SSA tag markers [#1881](https://github.com/openshift/api/pull/1881)
* [Full changelog](https://github.com/openshift/api/compare/0a2abb2b630b660e5ac03d320b5c8ef2d36daad5...636e2c17106f5a0d9c266535f262267384fede1f)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/441d29c92b1759d1780a525112e764280b78b0d6)
* [SPLAT-1630](https://issues.redhat.com/browse/SPLAT-1630): Bump API version to get new VSphereMultiVCenters featuregate. [#418](https://github.com/openshift/cluster-config-operator/pull/418)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#410](https://github.com/openshift/cluster-config-operator/pull/410)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/777e50b938c9ab3bd4224dac16407de1d7acc2b3...441d29c92b1759d1780a525112e764280b78b0d6)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/00851fc5e20622a1bf20d4d89dc62de1f3172717)
* [OCPBUGS-32947](https://issues.redhat.com/browse/OCPBUGS-32947): Modified webhook to reject changes to vsphere fields coming from failure domains. [#291](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/291)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#282](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/282)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/1f3175d6d80d4505bc8f200292c47cf332fc8ba9...00851fc5e20622a1bf20d4d89dc62de1f3172717)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/439826e1a723c094717877db0f2ca1848d0fb10a)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#196](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/196)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/66048040bb40915f0903a0e7de0bbc6f4b4faef5...439826e1a723c094717877db0f2ca1848d0fb10a)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a14431f277364605ede8e95530453c5fb7267e33)
* [CFE-964](https://issues.redhat.com/browse/CFE-964): Add DNSNameResolver controller [#394](https://github.com/openshift/cluster-dns-operator/pull/394)
* [OCPBUGS-32941](https://issues.redhat.com/browse/OCPBUGS-32941): Bump to Kubernetes 1.29 and controller-runtime 0.17.3 [#408](https://github.com/openshift/cluster-dns-operator/pull/408)
* [OCPBUGS-27924](https://issues.redhat.com/browse/OCPBUGS-27924): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 [#402](https://github.com/openshift/cluster-dns-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/2d77b099cd229949067d7de843b9d1538aab7403...a14431f277364605ede8e95530453c5fb7267e33)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/dc4f4e858ba8395dce6883242c7d12009685d145)
* [ETCD-621](https://issues.redhat.com/browse/ETCD-621): Update api vendor libraries to get GA'ed tuning profiles [#1265](https://github.com/openshift/cluster-etcd-operator/pull/1265)
* [OCPBUGS-33495](https://issues.redhat.com/browse/OCPBUGS-33495): return errors in wait-for-ceo [#1260](https://github.com/openshift/cluster-etcd-operator/pull/1260)
* [OCPBUGS-31849](https://issues.redhat.com/browse/OCPBUGS-31849): check the quorum in case the cluster is healthy or not after generating certs [#1239](https://github.com/openshift/cluster-etcd-operator/pull/1239)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cb78ee25cda56d8f2deb4f0e4ed09348d07220f8...dc4f4e858ba8395dce6883242c7d12009685d145)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/b55be2491e3ed9c11b10694dda0d1473f437b56d)
* [OCPBUGS-34165](https://issues.redhat.com/browse/OCPBUGS-34165): azure-path-fix: get client secret from k8s secret [#1041](https://github.com/openshift/cluster-image-registry-operator/pull/1041)
* [OCPBUGS-34166](https://issues.redhat.com/browse/OCPBUGS-34166): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1042](https://github.com/openshift/cluster-image-registry-operator/pull/1042)
* [OCPBUGS-34069](https://issues.redhat.com/browse/OCPBUGS-34069): Bump openshift api, client-go & library-go [#1039](https://github.com/openshift/cluster-image-registry-operator/pull/1039)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/3f65eebf18937b8dffe3c97ccf947d140d15284e...b55be2491e3ed9c11b10694dda0d1473f437b56d)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/28c943937d7bc6718e10af50da82097ce8fc6877)
* [OCPBUGS-34835](https://issues.redhat.com/browse/OCPBUGS-34835): internalServiceChanged: Fix target port logic [#1072](https://github.com/openshift/cluster-ingress-operator/pull/1072)
* [OCPBUGS-34837](https://issues.redhat.com/browse/OCPBUGS-34837): Bump openshift/library-go to resolve NewPrometheusClient E2E failures [#1074](https://github.com/openshift/cluster-ingress-operator/pull/1074)
* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Allow operator to update Route spec.subdomain [#1047](https://github.com/openshift/cluster-ingress-operator/pull/1047)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5b42422d0f5f488fc1deb3db08a7b97367cfd2a6...28c943937d7bc6718e10af50da82097ce8fc6877)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d790493cfc43fd33450ca27633cbe37aa17427d2)
* [OCPBUGS-25104](https://issues.redhat.com/browse/OCPBUGS-25104): revert dev cert rotation 4.16 [#1695](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1695)
* [OCPBUGS-34408](https://issues.redhat.com/browse/OCPBUGS-34408): Create one-shot migrations for the flowcontrol group. [#1690](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1690)
* [OCPBUGS-33522](https://issues.redhat.com/browse/OCPBUGS-33522): add a controller that reconciles SCCs' volumes [#1675](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1675)
* NO-ISSUE: Revert "add SNO control plane high cpu usage alert" [#1674](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1674)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8fae6b51944c1f90e6875f55072a3d85db40e743...d790493cfc43fd33450ca27633cbe37aa17427d2)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0338b3be6912024d03def2c26f0fa10218fc2c25)
* [OCPBUGS-33933](https://issues.redhat.com/browse/OCPBUGS-33933): Remove cloud-provider, cloud-config, and cloud-volume-plugin flags [#808](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/808)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/f0f485f3c1d70416c242e3159820331a36fb2d2a...0338b3be6912024d03def2c26f0fa10218fc2c25)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3eba7eeda244ea48c520d5384547659e9257cb58)
* [OCPBUGS-34161](https://issues.redhat.com/browse/OCPBUGS-34161): check for machine crd before listing machines [#233](https://github.com/openshift/cluster-machine-approver/pull/233)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d3b6e4ba503c8e1d13f535409db1e75844e5763f...3eba7eeda244ea48c520d5384547659e9257cb58)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
* [OCPBUGS-34806](https://issues.redhat.com/browse/OCPBUGS-34806): send cnv_abnormal metric via telemetry [#2364](https://github.com/openshift/cluster-monitoring-operator/pull/2364)
* [MON-3861](https://issues.redhat.com/browse/MON-3861): Bump go tools 1.21 [#2348](https://github.com/openshift/cluster-monitoring-operator/pull/2348)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#2342](https://github.com/openshift/cluster-monitoring-operator/pull/2342)
* [OCPBUGS-32510](https://issues.redhat.com/browse/OCPBUGS-32510): change metrics-server probes for SNO [#2337](https://github.com/openshift/cluster-monitoring-operator/pull/2337)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#2338](https://github.com/openshift/cluster-monitoring-operator/pull/2338)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ac5f6747d7ba862a3075b6bcbbb72178f6e46ac3...e0083986a4eb9fceb07c696b4d1cf64c6aabf386)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dfb3ff7a1642906f523911882c72d0cf00fd086f)
* [OCPBUGS-34964](https://issues.redhat.com/browse/OCPBUGS-34964): Fix DNSResolver feature gate enablement [#2402](https://github.com/openshift/cluster-network-operator/pull/2402)
* [OCPBUGS-34770](https://issues.redhat.com/browse/OCPBUGS-34770): Ensure that the node-identity webhook address contains colons for IPv6 [#2395](https://github.com/openshift/cluster-network-operator/pull/2395)
* [OCPBUGS-34214](https://issues.redhat.com/browse/OCPBUGS-34214): Add conditions for ignored-namespaces [#2378](https://github.com/openshift/cluster-network-operator/pull/2378)
* [OCPBUGS-34013](https://issues.redhat.com/browse/OCPBUGS-34013): Add custom masquerade subnet against right key at ovnkube-config CM [#2374](https://github.com/openshift/cluster-network-operator/pull/2374)
* [CFE-888](https://issues.redhat.com/browse/CFE-888): Enable DNSNameResolver feature-gate [#2131](https://github.com/openshift/cluster-network-operator/pull/2131)
* [OCPBUGS-32979](https://issues.redhat.com/browse/OCPBUGS-32979): Update network operator status for IPsec [#2360](https://github.com/openshift/cluster-network-operator/pull/2360)
* [USHIFT-2912](https://issues.redhat.com/browse/USHIFT-2912): Add ref to MicroShift's Multus and CNI Plugins [#2365](https://github.com/openshift/cluster-network-operator/pull/2365)
* [OCPBUGS-29403](https://issues.redhat.com/browse/OCPBUGS-29403): add more safe sysctls [#2273](https://github.com/openshift/cluster-network-operator/pull/2273)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/21291740019b0ef308fdd090c229d12efce33c80...dfb3ff7a1642906f523911882c72d0cf00fd086f)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b3b634d12117b880f5c33deba1b48465e1be31c1)
* NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) [#1046](https://github.com/openshift/cluster-node-tuning-operator/pull/1046)
* [CNF-11817](https://issues.redhat.com/browse/CNF-11817): e2e: control and data planes clients (#1004) [#1004](https://github.com/openshift/cluster-node-tuning-operator/pull/1004)
* Unify OKD and OCP Dockerfiles (#1058) [#1058](https://github.com/openshift/cluster-node-tuning-operator/pull/1058)
* [OCPBUGS-33460](https://issues.redhat.com/browse/OCPBUGS-33460): E2E: change tuned profile path (#1055) [#1055](https://github.com/openshift/cluster-node-tuning-operator/pull/1055)
* E2E: modify test use HaveKey matchter instead of ContainElement (#1056) [#1056](https://github.com/openshift/cluster-node-tuning-operator/pull/1056)
* E2E: Add automation to check default cpuset from cpu manager state file (#1050) [#1050](https://github.com/openshift/cluster-node-tuning-operator/pull/1050)
* perfprof: latency e2e: adjust failure message (#1044) [#1044](https://github.com/openshift/cluster-node-tuning-operator/pull/1044)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5a9355ec2c462d83812184c83deb209aa5762801...b3b634d12117b880f5c33deba1b48465e1be31c1)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/27bf70ddf9421637e1da18b249785b2cca177272)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#54](https://github.com/openshift/cluster-olm-operator/pull/54)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d998a86dd053100e2cd3b9466f7dad2f41c1d12c...27bf70ddf9421637e1da18b249785b2cca177272)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/899699681f8bb984d0f249dec171e630440c461b)
* [OCPBUGS-34384](https://issues.redhat.com/browse/OCPBUGS-34384): [release-4.16] Disable Rolebindings for Capabilities [#350](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/350)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#336](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/336)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d291c51f0becf065fbe740cf7b113b81378ee34a...899699681f8bb984d0f249dec171e630440c461b)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7cb826784c64b234d9ce1c99b2f8fd6082670c36)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#470](https://github.com/openshift/cluster-storage-operator/pull/470)
* [OCPBUGS-29126](https://issues.redhat.com/browse/OCPBUGS-29126): vsphere-problem-detector: don't set Available condition [#456](https://github.com/openshift/cluster-storage-operator/pull/456)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/0669fc4b2b26afa2497610c2950e427fa5cf59cb...7cb826784c64b234d9ce1c99b2f8fd6082670c36)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/5d39f27c9f645c68d0cad059dc781bad7506f310)
* [OCPBUGS-24700](https://issues.redhat.com/browse/OCPBUGS-24700): Add support for Custom Certificate Authorities for custom signature stores [#1030](https://github.com/openshift/cluster-version-operator/pull/1030)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/0b3f507632ce4705702fc725614bd22d25d6686c...5d39f27c9f645c68d0cad059dc781bad7506f310)
### [console](https://github.com/openshift/console/tree/f3b1bba19cb9a89a196c62100d362709a2738937)
* [OCPBUGS-34139](https://issues.redhat.com/browse/OCPBUGS-34139): Improve Pipeline list page performance [#13882](https://github.com/openshift/console/pull/13882)
* [OCPBUGS-34002](https://issues.redhat.com/browse/OCPBUGS-34002): Fix console crash-loop with OIDC auth config [#13874](https://github.com/openshift/console/pull/13874)
* [OCPBUGS-34711](https://issues.redhat.com/browse/OCPBUGS-34711): show "Debug container" link for pods with status.phase… [#13914](https://github.com/openshift/console/pull/13914)
* [OCPBUGS-33965](https://issues.redhat.com/browse/OCPBUGS-33965): i18n - Download and merge French and Spanish languages translations in the OCP Console [#13870](https://github.com/openshift/console/pull/13870)
* [OCPBUGS-34393](https://issues.redhat.com/browse/OCPBUGS-34393): fix bug where textarea is not resizable [#13894](https://github.com/openshift/console/pull/13894)
* [OCPBUGS-33989](https://issues.redhat.com/browse/OCPBUGS-33989): Updating the secrets using Form editor displays an unknown warning message [#13873](https://github.com/openshift/console/pull/13873)
* [OCPBUGS-34112](https://issues.redhat.com/browse/OCPBUGS-34112): Fix Admission webhook warning for Route and BuildConfig creation via import flow [#13881](https://github.com/openshift/console/pull/13881)
* [OCPBUGS-34141](https://issues.redhat.com/browse/OCPBUGS-34141): UI inconsistency in topology when application grouping is collapsed [#13883](https://github.com/openshift/console/pull/13883)
* [OCPBUGS-34142](https://issues.redhat.com/browse/OCPBUGS-34142): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13884](https://github.com/openshift/console/pull/13884)
* [OCPBUGS-34143](https://issues.redhat.com/browse/OCPBUGS-34143): Create Serverless form does not create BuildConfig [#13885](https://github.com/openshift/console/pull/13885)
* [OCPBUGS-33872](https://issues.redhat.com/browse/OCPBUGS-33872): add user-impersonation to QuickStartGettingStartedCard,… [#13864](https://github.com/openshift/console/pull/13864)
* [OCPBUGS-32631](https://issues.redhat.com/browse/OCPBUGS-32631): TaskRuns should not be fetched for Failed PLR's [#13806](https://github.com/openshift/console/pull/13806)
* [OCPBUGS-33567](https://issues.redhat.com/browse/OCPBUGS-33567): Expose useUserSettings hooks in dynamic plugin sdk [#13843](https://github.com/openshift/console/pull/13843)
* [ODC-7576](https://issues.redhat.com/browse/ODC-7576): Pipelines plugin test fixes [#13841](https://github.com/openshift/console/pull/13841)
* [OCPBUGS-31901](https://issues.redhat.com/browse/OCPBUGS-31901): Patch PF dynamic module parser to exclude 'next' modules [#13832](https://github.com/openshift/console/pull/13832)
* [ODC-7574](https://issues.redhat.com/browse/ODC-7574): Add e2e tests for QuickStart from Masthead in CI [#13837](https://github.com/openshift/console/pull/13837)
* [OCPBUGS-33523](https://issues.redhat.com/browse/OCPBUGS-33523): restrict Masthead logo to max-height [#13838](https://github.com/openshift/console/pull/13838)
* [OCPBUGS-29745](https://issues.redhat.com/browse/OCPBUGS-29745): Fix Pipeline details page with when expression using CEL expression [#13834](https://github.com/openshift/console/pull/13834)
* [CONSOLE-4019](https://issues.redhat.com/browse/CONSOLE-4019): Display a warning message from kube-apiserver when creating resource integration tests [#13814](https://github.com/openshift/console/pull/13814)
* [CONSOLE-3943](https://issues.redhat.com/browse/CONSOLE-3943): Backup to segment public api key [#13821](https://github.com/openshift/console/pull/13821)
* [OCPBUGS-33352](https://issues.redhat.com/browse/OCPBUGS-33352): Fix PatternFly modules check [#13817](https://github.com/openshift/console/pull/13817)
* [OCPBUGS-33345](https://issues.redhat.com/browse/OCPBUGS-33345): Disable create button on NAD empty state for regular user [#13805](https://github.com/openshift/console/pull/13805)
* [CNV-36170](https://issues.redhat.com/browse/CNV-36170): Multi NetworkPolicies [#13772](https://github.com/openshift/console/pull/13772)
* [OCPBUGS-33219](https://issues.redhat.com/browse/OCPBUGS-33219): Fix StatusItem layout when no timestamp is present [#13815](https://github.com/openshift/console/pull/13815)
* [Full changelog](https://github.com/openshift/console/compare/ae78a8518d7fca93226b667deeb931499a15fc19...f3b1bba19cb9a89a196c62100d362709a2738937)
### [console-operator](https://github.com/openshift/console-operator/tree/efe782291fe88877add25db7d575934d926963c4)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#901](https://github.com/openshift/console-operator/pull/901)
* [OCPBUGS-33505](https://issues.redhat.com/browse/OCPBUGS-33505): Add missing return statement to fix crash in healthcheck controller [#900](https://github.com/openshift/console-operator/pull/900)
* [OKD-214](https://issues.redhat.com/browse/OKD-214): Dockerfile: Add ARG TAGS=ocp [#896](https://github.com/openshift/console-operator/pull/896)
* [TRT-1664](https://issues.redhat.com/browse/TRT-1664): Revert #895 "CONSOLE-4047: Console-operator should be internally using listers for fetching data" [#899](https://github.com/openshift/console-operator/pull/899)
* [CONSOLE-4047](https://issues.redhat.com/browse/CONSOLE-4047): Console-operator should be internally using listers for fetching data [#895](https://github.com/openshift/console-operator/pull/895)
* [Full changelog](https://github.com/openshift/console-operator/compare/c758f7194cc012490d7b8c3f4eaabe0f065ec559...efe782291fe88877add25db7d575934d926963c4)
### [coredns](https://github.com/openshift/coredns/tree/5afff2a989779a52e00ef9579cfbc03f36b5334a)
* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order [#116](https://github.com/openshift/coredns/pull/116)
* [OCPBUGS-31768](https://issues.redhat.com/browse/OCPBUGS-31768): UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 [#108](https://github.com/openshift/coredns/pull/108)
* [Full changelog](https://github.com/openshift/coredns/compare/f937ebfb6b8a31fc194597a1ade0e93e73e474b5...5afff2a989779a52e00ef9579cfbc03f36b5334a)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/bc125def6a15a71b2ef8c59e9c1284e471e7d905)
* [BUILD-877](https://issues.redhat.com/browse/BUILD-877): BUILD-887: Add konflux config for push and pull request [#183](https://github.com/openshift/csi-driver-shared-resource/pull/183)
* [BUILD-961](https://issues.redhat.com/browse/BUILD-961): use separate dockerfile for using catalog images [#180](https://github.com/openshift/csi-driver-shared-resource/pull/180)
* [OCPBUGS-33513](https://issues.redhat.com/browse/OCPBUGS-33513): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 [#178](https://github.com/openshift/csi-driver-shared-resource/pull/178)
* [OCPBUGS-33511](https://issues.redhat.com/browse/OCPBUGS-33511): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/csi-driver-shared-resource/pull/177)
* [BUILD-957](https://issues.redhat.com/browse/BUILD-957): Update Images with Red Hat Catalog Images [#173](https://github.com/openshift/csi-driver-shared-resource/pull/173)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Compare to Other Secret Stores [#176](https://github.com/openshift/csi-driver-shared-resource/pull/176)
* [BUILD-953](https://issues.redhat.com/browse/BUILD-953): Simplify README [#174](https://github.com/openshift/csi-driver-shared-resource/pull/174)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/cf116d908e98b71bfafc31042e17a93e8f3de6b1...bc125def6a15a71b2ef8c59e9c1284e471e7d905)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1d5732f0209bb7d98661a53c66c5ac265272dce6)
* Adding the `+` char to the RT kernel version. (#156) [#156](https://github.com/openshift/driver-toolkit/pull/156)
* ART bash parser is failing on [[...]] syntax Replace with sh compatible syntax. (#152) [#152](https://github.com/openshift/driver-toolkit/pull/152)
* Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) [#150](https://github.com/openshift/driver-toolkit/pull/150)
* Use a default RHEL_VERSION when the build argument is not specified (#148) [#148](https://github.com/openshift/driver-toolkit/pull/148)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/82e950507a066cb93ee19371f375ba0565f591a7...1d5732f0209bb7d98661a53c66c5ac265272dce6)
### [etcd](https://github.com/openshift/etcd/tree/bc2fec27ff5b086436d438157c24396f280e0305)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): DOWNSTREAM <carry>: add native binary to installer images [#269](https://github.com/openshift/etcd/pull/269)
* [Full changelog](https://github.com/openshift/etcd/compare/f6dd3fb9c8b351dce11af0161e58e2edc644ee3a...bc2fec27ff5b086436d438157c24396f280e0305)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/02432df87df9a731c8d630311854fbd515602e91)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): Container fallback to logs on error [#224](https://github.com/openshift/cluster-api-provider-gcp/pull/224)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/c2f91b533dbb51c8e3080d965e31992cda9c8803...02432df87df9a731c8d630311854fbd515602e91)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e72657c0d2713842f701f1d43c777d6ec6880cb9)
* [OCPBUGS-30520](https://issues.redhat.com/browse/OCPBUGS-30520): Bump protobuf to v1.34.0 [#82](https://github.com/openshift/machine-api-provider-gcp/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/fc80687e76e6d04444f20914f60915067b832e30...e72657c0d2713842f701f1d43c777d6ec6880cb9)
### [haproxy-router](https://github.com/openshift/router/tree/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
* [CFE-1020](https://issues.redhat.com/browse/CFE-1020): feature:route external certificate reference [#565](https://github.com/openshift/router/pull/565)
* [Full changelog](https://github.com/openshift/router/compare/56ab14f257e123317c00ce7ba5b4ecae7b2e0102...4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/f6419fba786afe73e14412e43ee5645184addd92)
* [OCPBUGS-34545](https://issues.redhat.com/browse/OCPBUGS-34545): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1985](https://github.com/openshift/kubernetes/pull/1985)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#1972](https://github.com/openshift/kubernetes/pull/1972)
* UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries [#1978](https://github.com/openshift/kubernetes/pull/1978)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): bump openshift/library-go@e22d25a [#1967](https://github.com/openshift/kubernetes/pull/1967)
* [OCPBUGS-32934](https://issues.redhat.com/browse/OCPBUGS-32934): UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods [#1966](https://github.com/openshift/kubernetes/pull/1966)
* no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961)
* [Full changelog](https://github.com/openshift/kubernetes/compare/681e46bbc98c439e0915762fec0e98bb9cf1cc5c...f6419fba786afe73e14412e43ee5645184addd92)
### [hypershift](https://github.com/openshift/hypershift/tree/41f8efec0672937631af2c0d36b5c1528bc35318)
* [OCPBUGS-34903](https://issues.redhat.com/browse/OCPBUGS-34903): Allow access to root-ca configmap in cluster-network-operator role [#4155](https://github.com/openshift/hypershift/pull/4155)
* [OCPBUGS-34575](https://issues.redhat.com/browse/OCPBUGS-34575): Rename machine-config operator CRD references [#4105](https://github.com/openshift/hypershift/pull/4105)
* [OCPBUGS-34759](https://issues.redhat.com/browse/OCPBUGS-34759): add AWS STS URL to OIDC provider audiences [#4134](https://github.com/openshift/hypershift/pull/4134)
* [HOSTEDCP-1688](https://issues.redhat.com/browse/HOSTEDCP-1688): Use operator namespace for openshift-config-managed-trusted-ca-bundle [#4117](https://github.com/openshift/hypershift/pull/4117)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak cipher [#4139](https://github.com/openshift/hypershift/pull/4139)
* [OCPBUGS-34773](https://issues.redhat.com/browse/OCPBUGS-34773): Fix disconnected metadata inspection for nodepool [#4137](https://github.com/openshift/hypershift/pull/4137)
* [OCPBUGS-34569](https://issues.redhat.com/browse/OCPBUGS-34569), [OCPBUGS-34602](https://issues.redhat.com/browse/OCPBUGS-34602): Backports that should go in together [#4114](https://github.com/openshift/hypershift/pull/4114)
* [OCPBUGS-34542](https://issues.redhat.com/browse/OCPBUGS-34542): Reconcile KAS endpoints and endpoint slice [#4096](https://github.com/openshift/hypershift/pull/4096)
* [OCPBUGS-34554](https://issues.redhat.com/browse/OCPBUGS-34554): Fixed audit-logs sigterm failing to terminate gracefully [#4090](https://github.com/openshift/hypershift/pull/4090)
* [OCPBUGS-34390](https://issues.redhat.com/browse/OCPBUGS-34390): Add TrustedBundles to OAS container [#4087](https://github.com/openshift/hypershift/pull/4087)
* [HOSTEDCP-1561](https://issues.redhat.com/browse/HOSTEDCP-1561): Move HCP Product CLI to STS [#4092](https://github.com/openshift/hypershift/pull/4092)
* [HOSTEDCP-1556](https://issues.redhat.com/browse/HOSTEDCP-1556): Support Priority based expander for cluster-autoscaler [#4068](https://github.com/openshift/hypershift/pull/4068)
* [OCPBUGS-34171](https://issues.redhat.com/browse/OCPBUGS-34171): Make active & backup Azure KMS containers use different --metrics-addr [#4079](https://github.com/openshift/hypershift/pull/4079)
* NO-JIRA: Bump library-go dependency [#4069](https://github.com/openshift/hypershift/pull/4069)
* [TRT-1672](https://issues.redhat.com/browse/TRT-1672): e2e: proceed with teardown even if dump fails [#4052](https://github.com/openshift/hypershift/pull/4052)
* NO-JIRA: Update RHTAP references [#4042](https://github.com/openshift/hypershift/pull/4042)
* [OCPBUGS-33729](https://issues.redhat.com/browse/OCPBUGS-33729): Do not ignore single placeholder pods for a specific hosted cluster [#4037](https://github.com/openshift/hypershift/pull/4037)
* [HOSTEDCP-1668](https://issues.redhat.com/browse/HOSTEDCP-1668): remove dns-operator leader-elect flags [#4038](https://github.com/openshift/hypershift/pull/4038)
* [OCPBUGS-33595](https://issues.redhat.com/browse/OCPBUGS-33595): Cluster sizing controller: do not error on not found HC [#4023](https://github.com/openshift/hypershift/pull/4023)
* [HOSTEDCP-1655](https://issues.redhat.com/browse/HOSTEDCP-1655): Don't Ignore SubnetID and Network Security Group ID flags when values are passed through [#4021](https://github.com/openshift/hypershift/pull/4021)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#3864](https://github.com/openshift/hypershift/pull/3864)
* [HOSTEDCP-1310](https://issues.redhat.com/browse/HOSTEDCP-1310): use kms images from payload [#3996](https://github.com/openshift/hypershift/pull/3996)
* [OCPBUGS-32257](https://issues.redhat.com/browse/OCPBUGS-32257): Restrict image registry overrides to control plane components [#3952](https://github.com/openshift/hypershift/pull/3952)
* [HOSTEDCP-1560](https://issues.redhat.com/browse/HOSTEDCP-1560): Create AWS STS Role for the hypershift/hcp cli [#4003](https://github.com/openshift/hypershift/pull/4003)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies [#4012](https://github.com/openshift/hypershift/pull/4012)
* [HOSTEDCP-1566](https://issues.redhat.com/browse/HOSTEDCP-1566): Bump CAPI dependencies [#4011](https://github.com/openshift/hypershift/pull/4011)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Fix nil dereference in clustersizingconfig validation [#4016](https://github.com/openshift/hypershift/pull/4016)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Fixed azure using incorrect kms socket [#3981](https://github.com/openshift/hypershift/pull/3981)
* [HOSTEDCP-1563](https://issues.redhat.com/browse/HOSTEDCP-1563): Refine the Azure API in the NodePool Spec [#4004](https://github.com/openshift/hypershift/pull/4004)
* [OCPBUGS-33320](https://issues.redhat.com/browse/OCPBUGS-33320): Autoscaler for non request serving nodes [#4007](https://github.com/openshift/hypershift/pull/4007)
* [HOSTEDCP-1557](https://issues.redhat.com/browse/HOSTEDCP-1557): Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config [#4006](https://github.com/openshift/hypershift/pull/4006)
* NO-JIRA: Remove CLI inspection of release image [#3548](https://github.com/openshift/hypershift/pull/3548)
* [OCPBUGS-33237](https://issues.redhat.com/browse/OCPBUGS-33237): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#3999](https://github.com/openshift/hypershift/pull/3999)
* [OCPBUGS-26762](https://issues.redhat.com/browse/OCPBUGS-26762): Disable DNS resolving for CNO [#3986](https://github.com/openshift/hypershift/pull/3986)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Set arch to ppc64le within PowerVS platform func [#4002](https://github.com/openshift/hypershift/pull/4002)
* [MULTIARCH-4637](https://issues.redhat.com/browse/MULTIARCH-4637): Support ppc64le arch for Agent and PowerVS platform [#3979](https://github.com/openshift/hypershift/pull/3979)
* [HOSTEDCP-1544](https://issues.redhat.com/browse/HOSTEDCP-1544): Allow user to specify subnet ID for Hosted Cluster & NodePool Creation [#3945](https://github.com/openshift/hypershift/pull/3945)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Set time out for external snapshotter on kubevirt csi driver [#3968](https://github.com/openshift/hypershift/pull/3968)
* [HOSTEDCP-1523](https://issues.redhat.com/browse/HOSTEDCP-1523): Bump k8s to v0.29.3 [#3878](https://github.com/openshift/hypershift/pull/3878)
* [OCPBUGS-25012](https://issues.redhat.com/browse/OCPBUGS-25012): Updating ose-hypershift-container image to be consistent with ART [#3303](https://github.com/openshift/hypershift/pull/3303)
* [OCPBUGS-33203](https://issues.redhat.com/browse/OCPBUGS-33203), [OCPBUGS-33274](https://issues.redhat.com/browse/OCPBUGS-33274): Autoscaler: scale down unused machinesets [#3988](https://github.com/openshift/hypershift/pull/3988)
* NO-JIRA: chore(deps): update rhtap references [#3973](https://github.com/openshift/hypershift/pull/3973)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Add operator scoping support to nodepool controller [#3928](https://github.com/openshift/hypershift/pull/3928)
* [Full changelog](https://github.com/openshift/hypershift/compare/6bb55dffe1bbf25c1086fa4398c8c97b083b57bb...41f8efec0672937631af2c0d36b5c1528bc35318)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
* [OCPBUGS-33329](https://issues.redhat.com/browse/OCPBUGS-33329): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#115](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/115)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#114](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/114)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/9cc8f148e2f6e6228419b165ef7813f9548df2dd...34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/60b7ca98f5121f7e772437823b258a9fd0aa1d99)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): All containers must fallback to logs on error [#80](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/80)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/3c01576e22ba1b9fdb7e513838b108021e32cc77...60b7ca98f5121f7e772437823b258a9fd0aa1d99)
### [ironic](https://github.com/openshift/ironic-image/tree/9d49fd688bcd13f28ed89f4641429f0b0797b339)
* Bug OCPBUGS-34985: Disable installation of .pyc files through pip [#509](https://github.com/openshift/ironic-image/pull/509)
* [OCPBUGS-32304](https://issues.redhat.com/browse/OCPBUGS-32304): Fix ironic-inspector permissions for creating /certs/ca directory [#500](https://github.com/openshift/ironic-image/pull/500)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0a0cd714f76336e8ad71060b9b2f74469cf86e59...9d49fd688bcd13f28ed89f4641429f0b0797b339)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/661d4f2ac6466565889ad11acb19d49d6e11333a)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Revert #179 [#180](https://github.com/openshift/images/pull/180)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency [#179](https://github.com/openshift/images/pull/179)
* Add dnf-plugins-core in scos to help with OCP image compat [#178](https://github.com/openshift/images/pull/178)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add sig-cloud repository and enable rt repository [#177](https://github.com/openshift/images/pull/177)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Add the sig-nfv repo in the CS9 base [#176](https://github.com/openshift/images/pull/176)
* [OCPBUGS-24850](https://issues.redhat.com/browse/OCPBUGS-24850): Bump OpenShift 4.16, RHEL9, and iptables package [#175](https://github.com/openshift/images/pull/175)
* [Full changelog](https://github.com/openshift/images/compare/a26ca1f6e12455e124f9324d859d87bd083bd444...661d4f2ac6466565889ad11acb19d49d6e11333a)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/8ea2c994df4296ec161023d8ff85f9ea0e383216)
* [OCPBUGS-31955](https://issues.redhat.com/browse/OCPBUGS-31955): Merge upstream v0.17.1 release [#98](https://github.com/openshift/kube-rbac-proxy/pull/98)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/04d0a78154b45ce300e176836bd47c6004603e88...8ea2c994df4296ec161023d8ff85f9ea0e383216)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/0693093f773c5046e231f174e7930315feabd996)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Enable snapshot tests [#40](https://github.com/openshift/kubevirt-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/738dc394f915b6585f2cc4c1cc312b51d45d8d1f...0693093f773c5046e231f174e7930315feabd996)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/49a82ff09217fcef6c3c51d0a0e34582b5355c98)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1220](https://github.com/openshift/machine-api-operator/pull/1220)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ac84cecd1374041a1dbb70313f76504c41b131a6...49a82ff09217fcef6c3c51d0a0e34582b5355c98)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/53f3e1eef97a3e1c2cae0b3cbcae3e10f9228d8d)
* [OCPBUGS-34799](https://issues.redhat.com/browse/OCPBUGS-34799): set required-scc for openshift workloads [#4384](https://github.com/openshift/machine-config-operator/pull/4384)
* [OCPBUGS-33901](https://issues.redhat.com/browse/OCPBUGS-33901): machine-os-puller SA refreshes every hour, causing machine config regeneration [#4374](https://github.com/openshift/machine-config-operator/pull/4374)
* [OCPBUGS-10498](https://issues.redhat.com/browse/OCPBUGS-10498): If multiple hostnames are returned, use the first one for the Node name [#4368](https://github.com/openshift/machine-config-operator/pull/4368)
* [OKD-212](https://issues.redhat.com/browse/OKD-212): Reference `stream-coreos` instead of `centos-stream-coreos-9` [#4349](https://github.com/openshift/machine-config-operator/pull/4349)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821), [OCPBUGS-31381](https://issues.redhat.com/browse/OCPBUGS-31381): certificate_writer: clean up disk-write logic [#4343](https://github.com/openshift/machine-config-operator/pull/4343)
* [MCO-1131](https://issues.redhat.com/browse/MCO-1131): Merge implementation machineOSBuild and machineOSConfig in MCO [#4327](https://github.com/openshift/machine-config-operator/pull/4327)
* [OCPBUGS-33357](https://issues.redhat.com/browse/OCPBUGS-33357): Check both ready and health ingress endpoints [#4356](https://github.com/openshift/machine-config-operator/pull/4356)
* [OCPBUGS-32583](https://issues.redhat.com/browse/OCPBUGS-32583): daemon/pinned-image-set: refactor mirrored registry auth [#4345](https://github.com/openshift/machine-config-operator/pull/4345)
* [OCPBUGS-33046](https://issues.redhat.com/browse/OCPBUGS-33046): improve status reporting for pinned image sets [#4339](https://github.com/openshift/machine-config-operator/pull/4339)
* [OPNET-282](https://issues.redhat.com/browse/OPNET-282): Configure-ovs alternative implementation [#4249](https://github.com/openshift/machine-config-operator/pull/4249)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Only re-bootstrap kubelet on X.509 errors [#4351](https://github.com/openshift/machine-config-operator/pull/4351)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/203afde4a93e2c6c7672d6669dd6fe7644ccd388...53f3e1eef97a3e1c2cae0b3cbcae3e10f9228d8d)
### [multus-cni](https://github.com/openshift/multus-cni/tree/317208e75cd56a6d682357415a724ca34a6fd74b)
* [OCPBUGS-33256](https://issues.redhat.com/browse/OCPBUGS-33256): Fix CNI cache update function to prevent nil access [#230](https://github.com/openshift/multus-cni/pull/230)
* [Full changelog](https://github.com/openshift/multus-cni/compare/bd8686f05101480960845742a79414f21fd17945...317208e75cd56a6d682357415a724ca34a6fd74b)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
* [OCPBUGS-34929](https://issues.redhat.com/browse/OCPBUGS-34929): [release-4.16] Use IP to identify orphaned allocation to be deleted [#286](https://github.com/openshift/whereabouts-cni/pull/286)
* [OCPBUGS-33565](https://issues.redhat.com/browse/OCPBUGS-33565): Upstream sync may24 [#278](https://github.com/openshift/whereabouts-cni/pull/278)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2a70b36325e0a9a7d92c9045aadd859fdaa5e700...c2d65d1fc7b414bf8c823b2b9f90d6cb3371d975)
### [network-tools](https://github.com/openshift/network-tools/tree/39eca100c0978fb59234e21bf549b130914616ac)
* [OCPBUGS-33388](https://issues.redhat.com/browse/OCPBUGS-33388): Updating ose-network-tools-container image to be consistent with ART for 4.16 [#125](https://github.com/openshift/network-tools/pull/125)
* [Full changelog](https://github.com/openshift/network-tools/compare/01baf4d0afe29529276efefa8fa199fee1c5ffba...39eca100c0978fb59234e21bf549b130914616ac)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/f053e5a0ee58d20066efff8db01578785ea83dad)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#73](https://github.com/openshift/machine-api-provider-nutanix/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed...f053e5a0ee58d20066efff8db01578785ea83dad)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c6cad796b9e31d2009b5b2965a75fe1a53d3f3da)
* [CLID-122](https://issues.redhat.com/browse/CLID-122): upgrades distribution/distribution for a released version (#864) (#868) [#864](https://github.com/openshift/oc-mirror/pull/864)
* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#863) [#863](https://github.com/openshift/oc-mirror/pull/863)
* [OCPBUGS-33081](https://issues.redhat.com/browse/OCPBUGS-33081): Skip images that don't follow standards, semver and naming (#861) [#861](https://github.com/openshift/oc-mirror/pull/861)
* [OCPBUGS-33196](https://issues.redhat.com/browse/OCPBUGS-33196): skip images with both tag and digest (#853) [#853](https://github.com/openshift/oc-mirror/pull/853)
* [OCPBUGS-31608](https://issues.redhat.com/browse/OCPBUGS-31608): Fix IDMS/ITMS generated source repository in case of empty namespace (#850) [#850](https://github.com/openshift/oc-mirror/pull/850)
* [OCPBUGS-31858](https://issues.redhat.com/browse/OCPBUGS-31858): CLID-97: Provide a way to skip failing images (#854) [#854](https://github.com/openshift/oc-mirror/pull/854)
* [OCPBUGS-31622](https://issues.redhat.com/browse/OCPBUGS-31622): Fix operator related image has empty reference (#851) [#851](https://github.com/openshift/oc-mirror/pull/851)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) [#852](https://github.com/openshift/oc-mirror/pull/852)
* [OCPBUGS-32547](https://issues.redhat.com/browse/OCPBUGS-32547): Fix delete generation for mirror to mirror flow (#848) [#848](https://github.com/openshift/oc-mirror/pull/848)
* [OCPBUGS-31536](https://issues.redhat.com/browse/OCPBUGS-31536): Change default behavior to not rebuild catalogs for V1 - 2 (#847) [#847](https://github.com/openshift/oc-mirror/pull/847)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/9e77c1944f70fed0a85e5051c8f3efdfb09add70...c6cad796b9e31d2009b5b2965a75fe1a53d3f3da)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/80b8649cf7a57098d03eff0d155531cf63728f41)
* NO-ISSUE: Synchronize From Upstream Repositories [#102](https://github.com/openshift/operator-framework-operator-controller/pull/102)
* NO-ISSUE: Synchronize From Upstream Repositories [#101](https://github.com/openshift/operator-framework-operator-controller/pull/101)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/a1ca98e00e786ccb1846cae940a9ddbfcd97c52c...80b8649cf7a57098d03eff0d155531cf63728f41)
### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-rukpak/pull/84)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/38965a71a46318b8b133d46188a6b2795fce7c68...282cc84cf92dc963f5fd719e103c91b6cc0e6dc6)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6b5184128103eaad64d7b00f0d1de9b7c3597112)
* [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): Bump library-go [#434](https://github.com/openshift/openshift-apiserver/pull/434)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): Bump openshift/api for Route API godoc fix [#433](https://github.com/openshift/openshift-apiserver/pull/433)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/dd8658e4f242fd580e21384683e82b90360700f3...6b5184128103eaad64d7b00f0d1de9b7c3597112)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c736111041fca03f933739e7c55f223e72705623)
* [OCPBUGS-33893](https://issues.redhat.com/browse/OCPBUGS-33893): openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets [#309](https://github.com/openshift/openshift-controller-manager/pull/309)
* [OCPBUGS-33876](https://issues.redhat.com/browse/OCPBUGS-33876): filter delete events [#308](https://github.com/openshift/openshift-controller-manager/pull/308)
* [OCPBUGS-33600](https://issues.redhat.com/browse/OCPBUGS-33600): revert revert and fix for hypershift [#305](https://github.com/openshift/openshift-controller-manager/pull/305)
* Revert #288 "API-1644: Use bound service account tokens when generating pull secrets" [#304](https://github.com/openshift/openshift-controller-manager/pull/304)
* [API-1644](https://issues.redhat.com/browse/API-1644): Use bound service account tokens when generating pull secrets [#288](https://github.com/openshift/openshift-controller-manager/pull/288)
* [OCPBUGS-33241](https://issues.redhat.com/browse/OCPBUGS-33241): panic in image trigger controller [#302](https://github.com/openshift/openshift-controller-manager/pull/302)
* [OCPBUGS-30688](https://issues.redhat.com/browse/OCPBUGS-30688): bump go-jose to fix CVE-2024-28176 [#297](https://github.com/openshift/openshift-controller-manager/pull/297)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds roleBinding controllers to the controllerInitializers [#296](https://github.com/openshift/openshift-controller-manager/pull/296)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade [#300](https://github.com/openshift/openshift-controller-manager/pull/300)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/8f6f90a1e8b7057588006508cc2be22949d3b0e2...c736111041fca03f933739e7c55f223e72705623)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/be72b7545228d631178c49677b01905e92846441)
* NO-JIRA: Bump to latest CAPO v0.10 [#312](https://github.com/openshift/cluster-api-provider-openstack/pull/312)
* [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): openshift: Set FallbackToLogsOnError on infra-cluster controller [#311](https://github.com/openshift/cluster-api-provider-openstack/pull/311)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c42a4659d6c092229e84169bfadd7dd80d7cf27b...be72b7545228d631178c49677b01905e92846441)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/fb930638853b159a2e428e6200bd67a64a37295b)
* [OCPBUGS-34158](https://issues.redhat.com/browse/OCPBUGS-34158): Failure to get bootstrap is non-fatal [#115](https://github.com/openshift/machine-api-provider-openstack/pull/115)
* [OCPBUGS-34155](https://issues.redhat.com/browse/OCPBUGS-34155): Fix panic deleting Machine in ERROR state [#114](https://github.com/openshift/machine-api-provider-openstack/pull/114)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/bf45c1fb232122e978eb73336be6d5e441c41d9d...fb930638853b159a2e428e6200bd67a64a37295b)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
* [OCPBUGS-24971](https://issues.redhat.com/browse/OCPBUGS-24971): bump golang to 1.21 [#560](https://github.com/operator-framework/operator-marketplace/pull/560)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/631f53b57cdc33507e61c4f682ebba3f8b440e82...7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2)
### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/abb91c84083dd139780921673da64fa5cd13bccb)
* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 [#177](https://github.com/openshift/cluster-api-provider-ovirt/pull/177)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/7679c1259fc009096f0c50ca50b168975d3de6b6...abb91c84083dd139780921673da64fa5cd13bccb)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d90fa545e17a27bdf253fa820a1d7552e3079465)
* [OCPBUGS-34402](https://issues.redhat.com/browse/OCPBUGS-34402): [release-4.16] dns: fix deadlock in case of error [#2181](https://github.com/openshift/ovn-kubernetes/pull/2181)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2174](https://github.com/openshift/ovn-kubernetes/pull/2174)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Downstream Merge 16th May 2024 [#2171](https://github.com/openshift/ovn-kubernetes/pull/2171)
* [OCPBUGS-30224](https://issues.redhat.com/browse/OCPBUGS-30224), [OCPBUGS-33328](https://issues.redhat.com/browse/OCPBUGS-33328), [SDN-4388](https://issues.redhat.com/browse/SDN-4388): [DownstreamMerge] 10 may 2024 [#2162](https://github.com/openshift/ovn-kubernetes/pull/2162)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e7517c1c125d482c01e53baf0670ba777ca2c9d2...d90fa545e17a27bdf253fa820a1d7552e3079465)
### [prometheus](https://github.com/openshift/prometheus/tree/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#202](https://github.com/openshift/prometheus/pull/202)
* [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#201](https://github.com/openshift/prometheus/pull/201)
* [Full changelog](https://github.com/openshift/prometheus/compare/73b6ffbb3a5d0e1a1d8ce04d96a072940613519a...69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/e9aea929f309f412678fdf1064e1f74db3ba08b4)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): Dockerfile.ocp: use common-build target [#91](https://github.com/openshift/prometheus-alertmanager/pull/91)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/1e17979b2cd4d36dff7ed3d38e4fea9d875a9261...e9aea929f309f412678fdf1064e1f74db3ba08b4)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/538c7b98a689e573b61e1abb1cb649da470c5fac)
* [OCPBUGS-24916](https://issues.redhat.com/browse/OCPBUGS-24916): Bump to rhel9 [#240](https://github.com/openshift/service-ca-operator/pull/240)
* [OCPBUGS-29583](https://issues.redhat.com/browse/OCPBUGS-29583): Apply hypershift cluster-profile for ibm-cloud-managed [#234](https://github.com/openshift/service-ca-operator/pull/234)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/cb3093f23618be6898e540b97855450cc198db2d...538c7b98a689e573b61e1abb1cb649da470c5fac)
### [tests](https://github.com/openshift/origin/tree/fd977e33926965cbd177c0b942c2e36d4b5ebc02)
* [OCPBUGS-34500](https://issues.redhat.com/browse/OCPBUGS-34500): add manual etcd signer cert rotation e2e test [#28830](https://github.com/openshift/origin/pull/28830)
* [OCPBUGS-33710](https://issues.redhat.com/browse/OCPBUGS-33710): Bump k8s API to 1.29.5 [#28831](https://github.com/openshift/origin/pull/28831)
* NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens [#28810](https://github.com/openshift/origin/pull/28810)
* [STOR-1838](https://issues.redhat.com/browse/STOR-1838): add test for vsphere driver snapshot configuration [#28717](https://github.com/openshift/origin/pull/28717)
* [OCPEDGE-1101](https://issues.redhat.com/browse/OCPEDGE-1101): skip etcd test for hardware speed on sno [#28800](https://github.com/openshift/origin/pull/28800)
* [SPLAT-1439](https://issues.redhat.com/browse/SPLAT-1439): Ignore edge workers when listing nodes [#28584](https://github.com/openshift/origin/pull/28584)
* NO-ISSUE: Automated - Update synthetic test data [#28795](https://github.com/openshift/origin/pull/28795)
* NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) [#28803](https://github.com/openshift/origin/pull/28803)
* [USHIFT-3143](https://issues.redhat.com/browse/USHIFT-3143): Skip metrics and adjust termination message policy monitor tests [#28799](https://github.com/openshift/origin/pull/28799)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): Pass namespace in function checkHostnameReady for monitortest [#28794](https://github.com/openshift/origin/pull/28794)
* [ETCD-488](https://issues.redhat.com/browse/ETCD-488): Fix feature gate for etcd profiles e2e test [#28782](https://github.com/openshift/origin/pull/28782)
* [OCPBUGS-31919](https://issues.redhat.com/browse/OCPBUGS-31919): Use proper pull-secret for getting openshift-tests image [#28764](https://github.com/openshift/origin/pull/28764)
* [OCPBUGS-33378](https://issues.redhat.com/browse/OCPBUGS-33378): Verify Build Webhooks on Upgrade [#28783](https://github.com/openshift/origin/pull/28783)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Increase IPsec timeout parameters [#28779](https://github.com/openshift/origin/pull/28779)
* [USHIFT-3142](https://issues.redhat.com/browse/USHIFT-3142): Automatically exclude FeatureGate tagged tests [#28786](https://github.com/openshift/origin/pull/28786)
* [USHIFT-3133](https://issues.redhat.com/browse/USHIFT-3133): Skip cloud provider disruption monitors for MicroShift [#28767](https://github.com/openshift/origin/pull/28767)
* NO-JIRA: enforce termination policy [#28777](https://github.com/openshift/origin/pull/28777)
* [TRT-1656](https://issues.redhat.com/browse/TRT-1656): Revert #28750 "OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks" [#28781](https://github.com/openshift/origin/pull/28781)
* [SDN-4783](https://issues.redhat.com/browse/SDN-4783): Add e2e tests for NetworkDiagnosticsConfig featuregate [#28719](https://github.com/openshift/origin/pull/28719)
* [API-1783](https://issues.redhat.com/browse/API-1783): Update etcd test data for 1.30 release [#28770](https://github.com/openshift/origin/pull/28770)
* NO-JIRA: verify tls artifacts [#28772](https://github.com/openshift/origin/pull/28772)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#28771](https://github.com/openshift/origin/pull/28771)
* [OCPEDGE-812](https://issues.redhat.com/browse/OCPEDGE-812): feat: add tests for cpu limits on workload partitioning [#28752](https://github.com/openshift/origin/pull/28752)
* [OCPBUGS-18534](https://issues.redhat.com/browse/OCPBUGS-18534): monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28739](https://github.com/openshift/origin/pull/28739)
* [MON-3513](https://issues.redhat.com/browse/MON-3513): Add availability test for Metrics API [#28737](https://github.com/openshift/origin/pull/28737)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Add IPsec e2e tests [#28658](https://github.com/openshift/origin/pull/28658)
* [OCPBUGS-33041](https://issues.redhat.com/browse/OCPBUGS-33041): Add RoleBinding for BuildConfig Webhooks [#28750](https://github.com/openshift/origin/pull/28750)
* [Full changelog](https://github.com/openshift/origin/compare/15c35210bc8e0a1b06bd54e6fe5731d3a700b670...fd977e33926965cbd177c0b942c2e36d4b5ebc02)
### [thanos](https://github.com/openshift/thanos/tree/85eee25c36702ec14b86dc3157856d2aa2634642)
* [MON-3851](https://issues.redhat.com/browse/MON-3851): Bump openshift/thanos to v0.35.0 [#145](https://github.com/openshift/thanos/pull/145)
* [Full changelog](https://github.com/openshift/thanos/compare/7ab10572156af80ee1bc20ae95ebd8069f527342...85eee25c36702ec14b86dc3157856d2aa2634642)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/8777b9a5ec4b34cefab7708987731a1fd224a739)
* [OCPBUGS-30538](https://issues.redhat.com/browse/OCPBUGS-30538): Bump protobuf to v1.33.0 [#67](https://github.com/openshift/cloud-provider-vsphere/pull/67)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/d13aea81a381d967de15444c3949b4f0ef372185...8777b9a5ec4b34cefab7708987731a1fd224a739)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/3cd689f3f1ff59467885ee8ef42997eef5f81972)
* [OCPBUGS-13551](https://issues.redhat.com/browse/OCPBUGS-13551): FailedPrecondition volume does not appear staged [#88](https://github.com/openshift/vmware-vsphere-csi-driver/pull/88)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/2042477f5d1261397c954f58f2e88d435a35edfc...3cd689f3f1ff59467885ee8ef42997eef5f81972)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)
* [OCPBUGS-24061](https://issues.redhat.com/browse/OCPBUGS-24061): Keep CSI operators progressing=true during DaemonSet rollout [#230](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/230)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#231](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/231)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/f06192f43e32fc1b3b934a0281b3224c9d573ab6...483de9c59f1646f239c7039bcc0fa5fa0e44e7b4)