# 4.16.52

Created: 2025-11-06 12:10:36 +0000 UTC

Image Digest: `sha256:a47cb53955e7d4c656a07315f847ee24c41308b42f50df3b7262934e7d8b4aa2`


## Changes from 4.16.24

### Components

* Kubectl 1.29.7
* Kubernetes upgraded from 1.29.10 to 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202411201433-0 to 416.94.202511041744-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:c467b3517e04ca9e8c47f76954f49e6782ea918e4c8bda6998c36594fc6e0b87`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:cba08409f55dd2a0ce4a3042fd39cd3a7973dc807e3c6a6dbc71d3cf4e70f8d9`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ca81b6a3](https://github.com/openshift/apiserver-network-proxy/commit/ca81b6a32aff6ccb327f6889ec89c01afedd8efd) `sha256:6fe203c5045b2d1fbb18c9321b8b9faeffb1af56267be9632c7c25bcb32e9ad9`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:d90bebe578f372b19a2b57dbebf00d95625d2d7fd61f90650a64405fffbdb2d7`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:b0b3b29b3af61d4ae241c29c4914c90bac534e5a7ffbcd78efe8bf50d3d39ef7`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:edfe2a56a3d20da4644f8df3585761beb4d9bb91d698eb45d649c7750219c8c9`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a81e3b31](https://github.com/openshift/cluster-api-provider-azure/commit/a81e3b31948468d76ac744bbbb74b0c423fc969e) `sha256:dd3807285cfc31c67baacb121b3cb0c3114e99233770ecf9bc4c50ed7686b6b8`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:4cde87e0575dca937bc2d5eec0a1ad12ce4a5b973613cdb48fd80ccaa6bbdf30`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [7a36778a](https://github.com/openshift/azure-file-csi-driver/commit/7a36778add73d12eb08ff6be357d8d351af651a7) `sha256:7d27ac7d73e95a054f41c6ff400075b7b281643a879d6890e5a2dbc86d3bcbc0`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [f55a330f](https://github.com/openshift/baremetal-runtimecfg/commit/f55a330f8139ef660b3f60b735ef77538f7b9cbe) `sha256:0e60497938af9699f3116eb3c9854ea5d83689f43b1b43e7fd6995ddc24ff0cb`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:724a144ecd508f976c63fe00a50cbcccf1a3b135f64a6e6fc05acdc6cc2000a0`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:d30dbadc294f08970327c5f969b0b945b98e993e86db9f314de195d5823b915a`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:2040a96d4577431c645fcae447dc4910f89cc319babeaac484eba0c130912cc7`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [14571e8a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c) `sha256:3e729a5267c071f464583101fac99d158e867dc11ba978ef2b8a18d1e714138b`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:a33834b2d0c853d36e324af99f0b479280a4c7cbe71ef38214a8aba992f8fac2`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:24367b3ff0e03713106c35afb42c67cc120f8186a9cf00c3974fac1100dff3ca`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:daf0ea1119b322b935921fc72c894782c7eb60376c85cc18179ea6d03a5e59ea`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [e8258113](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/e825811333c05b705c35d2e9a9a62e55e9ab0935) `sha256:23ba83e7123ffebbc2f583b089ed1c32cd0f506bef6fd47a33a1f84e81f77e83`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [27bf70dd](https://github.com/openshift/cluster-olm-operator/commit/27bf70ddf9421637e1da18b249785b2cca177272) `sha256:4f3e6846140d759ec36de95c6cde66fc68b7eeedf4fb689ef841192170c494ce`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:0962bf4eaf7c4103cbe56fbafe09cdf003a3295ca47551ecdc2a9a00e22d7c73`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:8b38bedb4b4892b5a357b1fe7aaae04bf53c28faf7a11ec5499b97a1f0ceabbd`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:4081683ce59e2ffd6864dfd392a04670c3aacd384ca2de42a1ad396df4524b0b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:90667601b38a10f1c6453a32a76e66d1417fafe93a74fac94178f3ba1dc95fad`
* [coredns](https://github.com/openshift/coredns) git [1e417656](https://github.com/openshift/coredns/commit/1e417656c1c72d3410b31ee08caf25bcdf8836e3) `sha256:24c365454d5d2f075e5b06aed6fa3f36e06ae46ef4cc81bf64b79f456dad3804`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [c25d1ff2](https://github.com/openshift/csi-driver-manila-operator/commit/c25d1ff2677a882504b18220dcbbe153781f3883) `sha256:f6036501d9ad620bb3e8910d28f607280216f41617a9df04285f766ae65e80ff`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:5b064ea6a05e7f93014d9651fffc38dd9bfd6367b7e75c2c77e1732f2d664189`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:76662754a26a01bae4f5d12747bab9bc592ee168bd138917d3c597fa053c8e92`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:de5978cf0b22b802876bd81a4b776f14dfed291602af5e714ded9b0a5a4d8c20`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:fd379c21cd7d1940a0e2e169287f9e9d0398d28ad19a25d9048303ec9ebfeac3`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:0b098e307b17480b0acd6d723566391b06950acbe26e0e2fefe285301d745e84`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:4e6a88d16299625c79dc7abb88826bfdc8dcbec19ee4c0dd60fe91d306f9d572`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:eb4d68c97ef11a9982bbc0a5eb9465805a6fc5035119d779c5aacc5ab870ebed`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:32ab70ebd0c8b5bae71a77d55df9cfeba484b2023a6f7aa2b50501c4e6660f82`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:c288280b6380bb9db57d2ce5465c343390cdbfcd1a0f5d72abd86dce3b0c76bf`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:7da4bfaf03c9202f527acc6d93a5ae1e7b9eb1d4c1ef1051f17d637df7a2f0b1`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:258faa68ddf6718ad295ef9f8b16970c51b8dcab5f891a5f0642362f758432d3`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [02432df8](https://github.com/openshift/cluster-api-provider-gcp/commit/02432df87df9a731c8d630311854fbd515602e91) `sha256:53a904f847b3bf742b9585722285af05f7ec6478198096af7d5b5fa40cb7a209`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:7dc3c6649a466ca2732d4e327a1d8eeb1a255a8354599501cea9abf4d738485e`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:b42a50965919c10a9dde275c92ceed7700e1c4ea5e10eacb6e8ce3c8f0593a3a`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:b92e36d6128eb3cce0a5dc6ee431ad2b5535a0aa33b508b2509462352d5326a2`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:a61bd9c5e355d6527f509d3f67bf1dde0a7cfffb7314193e37e7359d1c93e09f`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:dca8a910036db62229cc8b45d6f27373ae06e8ed0293949abf65f0d961091209`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:eac773475cc62829f4252d538bbd522ec49e2dbe08ce37ebb691610d16f25671`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c38f4734](https://github.com/openshift/kube-rbac-proxy/commit/c38f4734c6b6931c75d46674122fb4b838b6e64b) `sha256:742f21117ba5bc128211bcbca719c1e41feeba00805ea06065fba0dfe481a72d`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:df00ef645ff0d9a2505328f21d38eaaea97b5a3f5b468c0923a899706c38da57`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:4063dc2bab033ee16000ae9cfa813410d1606f111699f92a40da329d8dea71be`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:aab66a88523699dfacc08415f844bc1288fbc90a1cf6bf1e8f1c183ea6bd70d7`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:217e64d424b4f0eb4185cf156ed0432a5ad1f44d655f6cfff5be8b0994c68f60`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:75e9cb5300b015c28c5a2cc85c932cdb55051c12da85039e88cf1500c1e3668b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [28bf5963](https://github.com/openshift/cloud-provider-nutanix/commit/28bf5963c7f82ae8d966a69562a19f038d819950) `sha256:d2a746d606faa78db82dfb6d5c9d967e58609c8e6d85092bad63fb77e35528ab`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:a2c7bbe0027377d63253dd9bd825beaa33d6df5e11054bc9bca7dc85ddbaa44e`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:4976fc4c8585f40fc82a449de0173498cfb8fc201c745d2a9ef714bd2e214686`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:a321b03292f84183b1563fd72398f85b330e22bcdba8f81078b3afa5ff4ff17b`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:cb2842c2fa44358ef607a67ce3dbba5cbc619826bd5ea5e02a9539070f8f0653`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:2cf4b7e006e63b6be16a69a78caab8eaea88a6bc21c9c477b20d6ecfbce2a527`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:a3b1fcc0779dd38b84f3df76b685edee4631e8126d39be87fb8d50e4f49027d4`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [5ada1cba](https://github.com/openshift/machine-api-provider-openstack/commit/5ada1cbab3a9354488b1e74e85c36285302c3382) `sha256:df14b9a173d63cbad97007217fc227b5bd72de3caeb54ef5a268028640e719ab`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:a6d6d29719ff1b65004961860305d1c9f5f1f115781bff1cdc2608bf99687fc1`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:fca809986bd4fbd3876c041d1e85a1eb45aaf263786062265ad846232939bc6e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:65f3bab0199e901f9d368ac8ed43eb028d8eca7a835b52d929dc2bedc7df5a79`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:f11b2a7cd84e97c420fb8e48a4fa68474424fbd3160f788c2c8c2fec00bcccbd`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:0fd3c679744b67b4630804f664b0665066bc1d1bec8c06e65f8afcc38adc7c26`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:a6c96e511d35de64e7b5c3c04679ea4c08d8ddafd92b51a65f5197d0c248eb28`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e9aea929](https://github.com/openshift/prometheus-alertmanager/commit/e9aea929f309f412678fdf1064e1f74db3ba08b4) `sha256:bcf59ca3bfc1aa480847966222bb24535b24821afd2271999ae3c4ea0fca8caa`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:85b553ea6c01dd94dff9c361364913f0e1f632e34d4b06af093116a85e9c477b`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:4d4780234a8e94ae1f82809215512c51b0eb1be13b5cad2639c8837ef476a185`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:047a1ed6f54fcf7083c690c5cc5bb510c43fb419ac20d93fe8c2004babd0f4f8`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:ddd58837ee165e2bf6a620009a62581412879838e82927b64f9234a96649c408`
* rhel-coreos `sha256:68961cb12e25fef064a05bccd41fd8343df881f3ab7f816df47c7f35ebd7a511`
* rhel-coreos-extensions `sha256:c1a3b7e2d938d6299455965523516bd978946a6d1fc7a3b73348bf52d7c8e1d4`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:ccfaff316580394551cfe736f26393633b6cb2a72924297bca4123d10776e795`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:7a6edd492ffe3feea403d97da804ae9bc46d169ee52e3616d436e1e4b24d5bc1`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:149bf976bf8d8ed213a46b20efbc88b04d8f028af5da565be7f3a61231b333ba`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:86707b8971966fc994e1fae51aee70f1de25e7b9440874f40371e477f8ff2223`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:7d6ca814e881ab789e968c78ac6a8c24fd0e456d420fbb8f64d1322be6c9ae4a`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3683c120](https://github.com/openshift/vsphere-problem-detector/commit/3683c120278fb79a30340f66d22948aaddf3c16a) `sha256:e006644949bf973ce0462d6faeab48de13a8b6d1b05597ab548e61c713d2e731`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/5c16119aeedc4c30e960a59ca91bbfe704879ad8)

* [OCPBUGS-58631](https://issues.redhat.com/browse/OCPBUGS-58631), [OCPBUGS-58636](https://issues.redhat.com/browse/OCPBUGS-58636): Bump glog to v1.2.5 in release-4.16 (#7901) [#7901](https://github.com/openshift/assisted-service/pull/7901)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) [#7857](https://github.com/openshift/assisted-service/pull/7857)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7486) [#7486](https://github.com/openshift/assisted-service/pull/7486)
* [OCPBUGS-45244](https://issues.redhat.com/browse/OCPBUGS-45244): Bump moby from v26.0.0 to v27.2.1 (#7189) [#7189](https://github.com/openshift/assisted-service/pull/7189)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7130) [#7130](https://github.com/openshift/assisted-service/pull/7130)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7ae324d5a15d0bc1abd0cae5a577db6adf38218a...5c16119aeedc4c30e960a59ca91bbfe704879ad8)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/302f47ff8d1bf6f69159453722346f850515bcab)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* abi: let the bootstrap waiting for workers before rebooting (#1047) [#1047](https://github.com/openshift/assisted-installer/pull/1047)
* [OCPBUGS-47494](https://issues.redhat.com/browse/OCPBUGS-47494): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) [#990](https://github.com/openshift/assisted-installer/pull/990)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/0c46e5179d0bb5a1818df3dcff160059dc8060bd...302f47ff8d1bf6f69159453722346f850515bcab)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/720b5023664bf91db7bccfed476545bdd21ae94d)

* run go mod tidy / vendor [#1019](https://github.com/openshift/assisted-installer-agent/pull/1019)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b121e87848721deee183a0d7bcc04bd5010eca38...720b5023664bf91db7bccfed476545bdd21ae94d)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/248372a4f668111a7bf134527911cb656c44d47a)

* [OCPBUGS-44242](https://issues.redhat.com/browse/OCPBUGS-44242): change the VERSION makefile variable to use OS_GIT_VERSION [#58](https://github.com/openshift/cluster-api-provider-alibaba/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/064d4624c74d417dd31cf1c173c00c3fa98ffade...248372a4f668111a7bf134527911cb656c44d47a)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/b7868f0f14f7bd45bd697bd21c0528f9ff718195)

* [OCPBUGS-61942](https://issues.redhat.com/browse/OCPBUGS-61942): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#572](https://github.com/openshift/cluster-api-provider-aws/pull/572)
* [OCPBUGS-58666](https://issues.redhat.com/browse/OCPBUGS-58666), [OCPBUGS-58671](https://issues.redhat.com/browse/OCPBUGS-58671): bump github.com/golang/glog to v1.2.5 [#560](https://github.com/openshift/cluster-api-provider-aws/pull/560)
* [OCPBUGS-53726](https://issues.redhat.com/browse/OCPBUGS-53726): Update golang-jwt to v4.5.2 [#547](https://github.com/openshift/cluster-api-provider-aws/pull/547)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/60d797bea7418e10ec26ae1ccef4e42249705b6c...b7868f0f14f7bd45bd697bd21c0528f9ff718195)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/27609c07dd4465b2b11a65eb8dad219e814b19e6)

* [OCPBUGS-61253](https://issues.redhat.com/browse/OCPBUGS-61253): add ability to control kube rbac proxy container image… [#426](https://github.com/openshift/csi-operator/pull/426)
* [OCPBUGS-60598](https://issues.redhat.com/browse/OCPBUGS-60598): Bump library-go [#423](https://github.com/openshift/csi-operator/pull/423)
* [OCPBUGS-59606](https://issues.redhat.com/browse/OCPBUGS-59606): Backport stale conditions fix [#407](https://github.com/openshift/csi-operator/pull/407)
* [OCPBUGS-60248](https://issues.redhat.com/browse/OCPBUGS-60248): add tag matching to Azure File storage class [#414](https://github.com/openshift/csi-operator/pull/414)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17...27609c07dd4465b2b11a65eb8dad219e814b19e6)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/249ee5ce8c79986e0ce593c736f4d26fab35696e)

* [OCPBUGS-63140](https://issues.redhat.com/browse/OCPBUGS-63140): client: re-use a single file for building the session instead of randomly named files [#144](https://github.com/openshift/machine-api-provider-aws/pull/144)
* [OCPBUGS-46508](https://issues.redhat.com/browse/OCPBUGS-46508): fix Associate*IpAddress flag on launch EC2 [#121](https://github.com/openshift/machine-api-provider-aws/pull/121)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/61d60f6ca20443df434456c2f3eeba859634e6a2...249ee5ce8c79986e0ce593c736f4d26fab35696e)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/459c531487ae4dd94301e2996bf817d47124854c)

* [OCPBUGS-52513](https://issues.redhat.com/browse/OCPBUGS-52513): github.com/go-jose/go-jose/v4 v4.0.5 [#203](https://github.com/openshift/aws-pod-identity-webhook/pull/203)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/746491a64a4efc04132ceb641cee52c2ead3facd...459c531487ae4dd94301e2996bf817d47124854c)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/e5bac3341fce67c12047caaafcf188c3f3049dc3)

* [OCPBUGS-47645](https://issues.redhat.com/browse/OCPBUGS-47645): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#133](https://github.com/openshift/cloud-provider-azure/pull/133)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0e9553295ecd02d6ef0aff19dfc1dfe680993112...e5bac3341fce67c12047caaafcf188c3f3049dc3)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/af633e05305c7adf67419ded3671903060ea4c66)

* [OCPBUGS-53494](https://issues.redhat.com/browse/OCPBUGS-53494): bump golang-jwt v4 [#13](https://github.com/openshift/azure-kubernetes-kms/pull/13)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/47d243b5a993fd0817eecf89a6d7896a3c911ecb...af633e05305c7adf67419ded3671903060ea4c66)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/f164f9753a3876133aa8c0bf6cee21098c48709b)

* [OCPBUGS-52476](https://issues.redhat.com/browse/OCPBUGS-52476): Remove unused vnet package [#131](https://github.com/openshift/machine-api-provider-azure/pull/131)
* [OCPBUGS-56169](https://issues.redhat.com/browse/OCPBUGS-56169): [release-4.16] Update virtualmachines service to armcompute/v5 SDK [#147](https://github.com/openshift/machine-api-provider-azure/pull/147)
* [OCPBUGS-56656](https://issues.redhat.com/browse/OCPBUGS-56656): Fix failure when attempting to modify immutable availabilitySet [#151](https://github.com/openshift/machine-api-provider-azure/pull/151)
* [OCPBUGS-56092](https://issues.redhat.com/browse/OCPBUGS-56092): Update eviction policy for Spot VMs from Deallocate to Delete [#142](https://github.com/openshift/machine-api-provider-azure/pull/142)
* [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137)
* [OCPBUGS-50966](https://issues.redhat.com/browse/OCPBUGS-50966): dynamically setting the amount of fault domains [#129](https://github.com/openshift/machine-api-provider-azure/pull/129)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e4e11505b645e2af8eb28c5dc353c41a6740db00...f164f9753a3876133aa8c0bf6cee21098c48709b)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/5b8d171e853d10ba151bfac4ac1e76109524ca4b)

* [OCPBUGS-53798](https://issues.redhat.com/browse/OCPBUGS-53798): github.com/golang-jwt/jwt/v4 v4.5.2 [#33](https://github.com/openshift/azure-workload-identity/pull/33)
* [OCPBUGS-52510](https://issues.redhat.com/browse/OCPBUGS-52510): github.com/go-jose/go-jose/v4 v4.0.5 [#29](https://github.com/openshift/azure-workload-identity/pull/29)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/4aca092a13f62e48c700a910e8f3f0f228a7d822...5b8d171e853d10ba151bfac4ac1e76109524ca4b)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/8dfa1e05e2b6735efdc68968ba122b08db99ba70)

* [OCPBUGS-62952](https://issues.redhat.com/browse/OCPBUGS-62952): Update the RHCOS 4.16 bootimage metadata [#10022](https://github.com/openshift/installer/pull/10022)
* [OCPBUGS-62653](https://issues.redhat.com/browse/OCPBUGS-62653): Release 4.16 bump terraform provider azurerm [#9993](https://github.com/openshift/installer/pull/9993)
* [OCPBUGS-59162](https://issues.redhat.com/browse/OCPBUGS-59162): vSphere - remove unit tests using nip.io [#9835](https://github.com/openshift/installer/pull/9835)
* [OCPBUGS-62235](https://issues.redhat.com/browse/OCPBUGS-62235): Make swift containers removal not fatal for UPI. [#9961](https://github.com/openshift/installer/pull/9961)
* [OCPBUGS-58290](https://issues.redhat.com/browse/OCPBUGS-58290): sort zone slices extracted from map of byo subnets [#9819](https://github.com/openshift/installer/pull/9819)
* [OCPBUGS-55807](https://issues.redhat.com/browse/OCPBUGS-55807): update resolv.conf every time on bootstrap node [#9694](https://github.com/openshift/installer/pull/9694)
* [OCPBUGS-57460](https://issues.redhat.com/browse/OCPBUGS-57460): vsphere - check if host is powered down or on standby before uploading template [#9786](https://github.com/openshift/installer/pull/9786)
* [OCPBUGS-36677](https://issues.redhat.com/browse/OCPBUGS-36677): Power VS: Enable incoming traffic on port 5000 during installation in a restricted network [#8711](https://github.com/openshift/installer/pull/8711)
* [OCPBUGS-57498](https://issues.redhat.com/browse/OCPBUGS-57498): ensure ctrplane nodes can access bootstrap MCS [#9788](https://github.com/openshift/installer/pull/9788)
* [OCPBUGS-54240](https://issues.redhat.com/browse/OCPBUGS-54240): Update timeout for GCP WaitFor operation [#9715](https://github.com/openshift/installer/pull/9715)
* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [OCPBUGS-54327](https://issues.redhat.com/browse/OCPBUGS-54327): Remove error logging when determining image arch [#9610](https://github.com/openshift/installer/pull/9610)
* [OCPBUGS-54345](https://issues.redhat.com/browse/OCPBUGS-54345): Remove tmp directory used for agent pxe files [#9611](https://github.com/openshift/installer/pull/9611)
* [OCPBUGS-54263](https://issues.redhat.com/browse/OCPBUGS-54263): IBMCloud: Move to IBM TF openshift fork [#9604](https://github.com/openshift/installer/pull/9604)
* [OCPBUGS-50547](https://issues.redhat.com/browse/OCPBUGS-50547): aws/edge/byovpc: tag edge subnets with shared value [#9482](https://github.com/openshift/installer/pull/9482)
* [OCPBUGS-52191](https://issues.redhat.com/browse/OCPBUGS-52191): [release-4.16] capi/aws: bump provider for LB DNS lookup fix [#9547](https://github.com/openshift/installer/pull/9547)
* [OCPBUGS-51207](https://issues.redhat.com/browse/OCPBUGS-51207): Log correct hostname for validation status [#9511](https://github.com/openshift/installer/pull/9511)
* [OCPBUGS-51111](https://issues.redhat.com/browse/OCPBUGS-51111): PowerVS: destroy dhcp hack [#9502](https://github.com/openshift/installer/pull/9502)
* [OCPBUGS-48762](https://issues.redhat.com/browse/OCPBUGS-48762): Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 [#9478](https://github.com/openshift/installer/pull/9478)
* [OCPBUGS-43469](https://issues.redhat.com/browse/OCPBUGS-43469): pkg/asset/installconfig/azure: send full certifcate chain [#9467](https://github.com/openshift/installer/pull/9467)
* [OCPBUGS-49416](https://issues.redhat.com/browse/OCPBUGS-49416): [Nutanix] Installation failed with timeout when uploading images to PC [#9412](https://github.com/openshift/installer/pull/9412)
* [OCPBUGS-47663](https://issues.redhat.com/browse/OCPBUGS-47663): [release-4.16] Power VS: Create region-zone-sysType hierarchy [#9338](https://github.com/openshift/installer/pull/9338)
* [OCPBUGS-48442](https://issues.redhat.com/browse/OCPBUGS-48442): Ensure rendezvousIP is checked against host IP [#9369](https://github.com/openshift/installer/pull/9369)
* [OCPBUGS-45999](https://issues.redhat.com/browse/OCPBUGS-45999): Always set cross_tenant_replication_enabled parameter to false [#9321](https://github.com/openshift/installer/pull/9321)
* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): aws: fix Node Port Service rule removal [#9312](https://github.com/openshift/installer/pull/9312)
* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): [release-4.16] capi/aws: remove allow-all Node Port Service [#9281](https://github.com/openshift/installer/pull/9281)
* [OCPBUGS-39434](https://issues.redhat.com/browse/OCPBUGS-39434): dropping this warning as the move from terraform is transparent to the end user [#8951](https://github.com/openshift/installer/pull/8951)
* [OCPBUGS-45852](https://issues.redhat.com/browse/OCPBUGS-45852): Update upi references to api-internal [#9290](https://github.com/openshift/installer/pull/9290)
* [OCPBUGS-41813](https://issues.redhat.com/browse/OCPBUGS-41813): Validate MTU for custom network [#9104](https://github.com/openshift/installer/pull/9104)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9259](https://github.com/openshift/installer/pull/9259)
* [OCPBUGS-45181](https://issues.redhat.com/browse/OCPBUGS-45181): add chrony.conf file when additional NTP sources are configured [#9247](https://github.com/openshift/installer/pull/9247)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9220](https://github.com/openshift/installer/pull/9220)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0...8dfa1e05e2b6735efdc68968ba122b08db99ba70)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2b396e06c0a92acbfa688cd782ec4bf319ff3608)

* [OCPBUGS-46645](https://issues.redhat.com/browse/OCPBUGS-46645): Bump x/net to 0.33.0 [#226](https://github.com/openshift/cluster-api-provider-baremetal/pull/226)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/11ba601fbca58557176fcc67ffe8d7d64b697a4a...2b396e06c0a92acbfa688cd782ec4bf319ff3608)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/84aeac37bd09c663278bf60faedd15241412f2fb)

* [OCPBUGS-53322](https://issues.redhat.com/browse/OCPBUGS-53322): BMO can expose any secret via BMCEventSubscription CRD [#407](https://github.com/openshift/baremetal-operator/pull/407)
* [OCPBUGS-49703](https://issues.redhat.com/browse/OCPBUGS-49703): Handle HFC for non-redfish HW [#396](https://github.com/openshift/baremetal-operator/pull/396)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/ae55a7053373827ad4b1aff6dceae5f077ce90e5...84aeac37bd09c663278bf60faedd15241412f2fb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4c7883ffc539da930d1334421b170322864375d8)

* [OCPBUGS-59938](https://issues.redhat.com/browse/OCPBUGS-59938): Adding sos.conf file for default sos config into the tools image [#2064](https://github.com/openshift/oc/pull/2064)
* [OCPBUGS-60675](https://issues.redhat.com/browse/OCPBUGS-60675): Use fedora image in unit tests instead of centos [#2079](https://github.com/openshift/oc/pull/2079)
* [OCPBUGS-51043](https://issues.redhat.com/browse/OCPBUGS-51043): Add HOST env var in oc debug for sos report collects more [#1977](https://github.com/openshift/oc/pull/1977)
* [Full changelog](https://github.com/openshift/oc/compare/cf533b548154f7f2e828a44864477bbbb881692d...4c7883ffc539da930d1334421b170322864375d8)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3f303a3694cf23f48bd89f4303cad44942e333ec)

* [OCPBUGS-55129](https://issues.redhat.com/browse/OCPBUGS-55129): snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 [#918](https://github.com/openshift/cloud-credential-operator/pull/918)
* [OCPBUGS-60973](https://issues.redhat.com/browse/OCPBUGS-60973): ccoctl: aws to use proper issuer url on subsequent runs [#909](https://github.com/openshift/cloud-credential-operator/pull/909)
* [OCPBUGS-60861](https://issues.redhat.com/browse/OCPBUGS-60861): ccoctl: only add owned tag to azure resources on create [#902](https://github.com/openshift/cloud-credential-operator/pull/902)
* [OCPBUGS-58676](https://issues.redhat.com/browse/OCPBUGS-58676): github.com/golang/glog v1.2.5 [#893](https://github.com/openshift/cloud-credential-operator/pull/893)
* [OCPBUGS-56981](https://issues.redhat.com/browse/OCPBUGS-56981): Azure: resolve nil pointer exception when role assignment exists [#867](https://github.com/openshift/cloud-credential-operator/pull/867)
* [OCPBUGS-53416](https://issues.redhat.com/browse/OCPBUGS-53416): github.com/golang/glog v1.2.4 [#843](https://github.com/openshift/cloud-credential-operator/pull/843)
* [OCPBUGS-53822](https://issues.redhat.com/browse/OCPBUGS-53822): update github.com/golang-jwt/jwt [#839](https://github.com/openshift/cloud-credential-operator/pull/839)
* [OCPBUGS-51544](https://issues.redhat.com/browse/OCPBUGS-51544): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#829](https://github.com/openshift/cloud-credential-operator/pull/829)
* [OCPBUGS-52512](https://issues.redhat.com/browse/OCPBUGS-52512): github.com/go-jose/go-jose/v4 v4.0.5 [#826](https://github.com/openshift/cloud-credential-operator/pull/826)
* [OCPBUGS-47070](https://issues.redhat.com/browse/OCPBUGS-47070): golang.org/x/net v0.33.0 [#805](https://github.com/openshift/cloud-credential-operator/pull/805)
* [OCPBUGS-45939](https://issues.redhat.com/browse/OCPBUGS-45939): Add AWS region to aws-pod-identity-webhook [#800](https://github.com/openshift/cloud-credential-operator/pull/800)
* [OCPBUGS-45007](https://issues.redhat.com/browse/OCPBUGS-45007): Add retry to ccoctl gcp create functions [#794](https://github.com/openshift/cloud-credential-operator/pull/794)
* [OCPBUGS-45002](https://issues.redhat.com/browse/OCPBUGS-45002): github.com/golang-jwt/jwt/v4 v4.5.1 [#788](https://github.com/openshift/cloud-credential-operator/pull/788)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/4672a9ad086ebcd75ee1ab0fb20af922e26f7029...3f303a3694cf23f48bd89f4303cad44942e333ec)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/66931aae890394ae9f91b273160e2788e548b969)

* [OCPBUGS-56359](https://issues.redhat.com/browse/OCPBUGS-56359): Increase API call timeout to 30 second [#172](https://github.com/openshift/cloud-network-config-controller/pull/172)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8ceee78810756afaa2efb75f60bef0358502834f...66931aae890394ae9f91b273160e2788e548b969)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/0e39ace55e81b082a50f67402e7776adb8c6c8a7)

* [OCPBUGS-54655](https://issues.redhat.com/browse/OCPBUGS-54655): Avoid duplicate OAuth client creation [#766](https://github.com/openshift/cluster-authentication-operator/pull/766)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4782c451e1aab859b7db09aee01af10c1ebf428c...0e39ace55e81b082a50f67402e7776adb8c6c8a7)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8e627d3d74cc34c9789645070b4937d2c0bb52d9)

* [OCPBUGS-60915](https://issues.redhat.com/browse/OCPBUGS-60915): revert openshift replica fix [#377](https://github.com/openshift/kubernetes-autoscaler/pull/377)
* [OCPBUGS-59267](https://issues.redhat.com/browse/OCPBUGS-59267): Fix cool down status condition to trigger scale down [#363](https://github.com/openshift/kubernetes-autoscaler/pull/363)
* [OCPBUGS-60609](https://issues.redhat.com/browse/OCPBUGS-60609): fix checkpoint gc of unknown recommenders [#372](https://github.com/openshift/kubernetes-autoscaler/pull/372)
* [OCPBUGS-54326](https://issues.redhat.com/browse/OCPBUGS-54326): improve replica counting and decrease target size behavior [#353](https://github.com/openshift/kubernetes-autoscaler/pull/353)
* [OCPBUGS-48732](https://issues.redhat.com/browse/OCPBUGS-48732): UPSTREAM: &lt;carry&gt;: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#339](https://github.com/openshift/kubernetes-autoscaler/pull/339)
* [OCPBUGS-45148](https://issues.redhat.com/browse/OCPBUGS-45148): [release-4.16] VPA: Update OWNERS file [#325](https://github.com/openshift/kubernetes-autoscaler/pull/325)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/eecb123a3b02358046a2c2ce52adfc548a5caa17...8e627d3d74cc34c9789645070b4937d2c0bb52d9)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/70164fc606a7b05352d92a8d07bd6ac42421c0ae)

* [OCPBUGS-52329](https://issues.redhat.com/browse/OCPBUGS-52329): set max soft bulk taint count to zero [#341](https://github.com/openshift/cluster-autoscaler-operator/pull/341)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/40cadf8a4729ca808a3413e9b8593ab7aab0bed7...70164fc606a7b05352d92a8d07bd6ac42421c0ae)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/16a518c8a8be82e52ac4e990c90e480fe0ad1091)

* [OCPBUGS-63417](https://issues.redhat.com/browse/OCPBUGS-63417): Fix ironic inspector container privileges [#513](https://github.com/openshift/cluster-baremetal-operator/pull/513)
* [OCPBUGS-61504](https://issues.redhat.com/browse/OCPBUGS-61504): Remove webhookport (9447) as HostPort [#506](https://github.com/openshift/cluster-baremetal-operator/pull/506)
* [OCPBUGS-54546](https://issues.redhat.com/browse/OCPBUGS-54546): Add missing relatedObjects [#470](https://github.com/openshift/cluster-baremetal-operator/pull/470)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/03738f2d941b836800926fc701202b8d4b9d0605...16a518c8a8be82e52ac4e990c90e480fe0ad1091)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c699f6cfedbcd8509a85db2be3e6f90712b728fe)

* [OCPBUGS-49603](https://issues.redhat.com/browse/OCPBUGS-49603): fix: always update clusteroperator status versions when differing [#253](https://github.com/openshift/cluster-capi-operator/pull/253)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3a2f98fba9180a470d224aa662bb7df5ee5127bf...c699f6cfedbcd8509a85db2be3e6f90712b728fe)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/d721cd62b5edec3f1b0b7a61b3e6e2af50bb71bc)

* [OCPBUGS-63168](https://issues.redhat.com/browse/OCPBUGS-63168): ccm: disable unused secure-serving port and webhook [#422](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/422)
* [OCPBUGS-60387](https://issues.redhat.com/browse/OCPBUGS-60387): Add Service using common resource templating [#411](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/411)
* [OCPBUGS-60387](https://issues.redhat.com/browse/OCPBUGS-60387): Update service selector to match deployment label [#410](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/410)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1c26756f0b4ff5537e32db18d5fb16555f5bd58f...d721cd62b5edec3f1b0b7a61b3e6e2af50bb71bc)


### [cluster-config-api](https://github.com/openshift/api/tree/7720577abc07845da9c12e60806983aa69ce769f)

* [CNTRLPLANE-1611](https://issues.redhat.com/browse/CNTRLPLANE-1611): Add feature gates for StreamingCollectionEncoding [#2542](https://github.com/openshift/api/pull/2542)
* [OCPBUGS-58392](https://issues.redhat.com/browse/OCPBUGS-58392): Add IPsec API for NAT-T UDP encapsulation support [#2393](https://github.com/openshift/api/pull/2393)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2330](https://github.com/openshift/api/pull/2330)
* [Full changelog](https://github.com/openshift/api/compare/b7d0481c9094172326bc9462c4f85b8f3ff0d761...7720577abc07845da9c12e60806983aa69ce769f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a4b1cfb4927052f4e21e919d0af05f78ca4fcace)

* [OCPBUGS-52498](https://issues.redhat.com/browse/OCPBUGS-52498): [release-4.16] Add runbook_url for CoreDNSErrorsHigh [#431](https://github.com/openshift/cluster-dns-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/8ddf28f959955e2b1b319856c0d47ae6729bcc31...a4b1cfb4927052f4e21e919d0af05f78ca4fcace)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ffa6c8229c2cf908fc20c9e5bf5c45cb1c7a6d08)

* [OCPBUGS-61505](https://issues.redhat.com/browse/OCPBUGS-61505): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1482](https://github.com/openshift/cluster-etcd-operator/pull/1482)
* [OCPBUGS-60836](https://issues.redhat.com/browse/OCPBUGS-60836): add missing ports to svc and pod spec [#1473](https://github.com/openshift/cluster-etcd-operator/pull/1473)
* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...ffa6c8229c2cf908fc20c9e5bf5c45cb1c7a6d08)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0f1869b1ed6b73023a46072311064ce6de6bcc33)

* [OCPBUGS-53870](https://issues.redhat.com/browse/OCPBUGS-53870): bump github.com/golang-jwt/jwt [#1219](https://github.com/openshift/cluster-image-registry-operator/pull/1219)
* [OCPBUGS-51600](https://issues.redhat.com/browse/OCPBUGS-51600): bump golang.org/x/oauth2 [#1210](https://github.com/openshift/cluster-image-registry-operator/pull/1210)
* [OCPBUGS-51167](https://issues.redhat.com/browse/OCPBUGS-51167): ensure that storage names don't end in dashes [#1181](https://github.com/openshift/cluster-image-registry-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068...0f1869b1ed6b73023a46072311064ce6de6bcc33)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/218159f7b060760c7e910b57429beea2f3eb3146)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add e2e tests for IdleConnectionTerminationPolicy [#1235](https://github.com/openshift/cluster-ingress-operator/pull/1235)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleConnectionTerminationPolicy [#1234](https://github.com/openshift/cluster-ingress-operator/pull/1234)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/57f9674e75908ca11b24792fb9f077233cd7bcf1...218159f7b060760c7e910b57429beea2f3eb3146)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/511bc434f628cf364966b53a5d350908e51d4b9c)

* [OCPBUGS-60467](https://issues.redhat.com/browse/OCPBUGS-60467): Add missing service ports to apiserver service [#1895](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1895)
* [OCPBUGS-50575](https://issues.redhat.com/browse/OCPBUGS-50575): Increase waitForFallbackDegradedConditionTimeout [#1805](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1805)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0...511bc434f628cf364966b53a5d350908e51d4b9c)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b3faac1f48914e94fa9af074f387c871dad84a9c)

* [OCPBUGS-60834](https://issues.redhat.com/browse/OCPBUGS-60834): Missing endpoint slices for open ports the operator uses [#864](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/864)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0338b3be6912024d03def2c26f0fa10218fc2c25...b3faac1f48914e94fa9af074f387c871dad84a9c)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7685374f0e84181801b6390876a0d12c61fa9913)

* [OCPBUGS-48258](https://issues.redhat.com/browse/OCPBUGS-48258): Fix race condition in CO status controller test [#267](https://github.com/openshift/cluster-machine-approver/pull/267)
* [OCPBUGS-47704](https://issues.redhat.com/browse/OCPBUGS-47704): Filter CSRs by signerName [#263](https://github.com/openshift/cluster-machine-approver/pull/263)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Ensure trailing dots on DNS names do not block serving cert auth [#257](https://github.com/openshift/cluster-machine-approver/pull/257)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Client internal DNS checks should ignore trailing dot [#251](https://github.com/openshift/cluster-machine-approver/pull/251)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/7fbf7f22ad6779c17414fc3072e2ea70cc2625c5...7685374f0e84181801b6390876a0d12c61fa9913)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/738eb25f04c53a483014c23b975e6076b72e19b2)

* [OCPBUGS-62765](https://issues.redhat.com/browse/OCPBUGS-62765): port metric acm_managed_cluster_worker_cores:max to OCP 4.16 [#2719](https://github.com/openshift/cluster-monitoring-operator/pull/2719)
* [OCPBUGS-63235](https://issues.redhat.com/browse/OCPBUGS-63235): test: remove image registry e2e tests [#2727](https://github.com/openshift/cluster-monitoring-operator/pull/2727)
* [OCPBUGS-61856](https://issues.redhat.com/browse/OCPBUGS-61856): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2676](https://github.com/openshift/cluster-monitoring-operator/pull/2676)
* [OCPBUGS-46066](https://issues.redhat.com/browse/OCPBUGS-46066): Add new metrics for OpenShift logging telemetry [#2537](https://github.com/openshift/cluster-monitoring-operator/pull/2537)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c2c204a1244adc54d7b31ec35766b82bf6db413d...738eb25f04c53a483014c23b975e6076b72e19b2)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/800b6ad61dfc6655d8ba9b131fca8fbb54773f71)

* [OCPBUGS-57354](https://issues.redhat.com/browse/OCPBUGS-57354): block upgrade if a CNI migration is in progress [#2760](https://github.com/openshift/cluster-network-operator/pull/2760)
* [OCPBUGS-62055](https://issues.redhat.com/browse/OCPBUGS-62055): Update CNO reviewers/approvers [#2803](https://github.com/openshift/cluster-network-operator/pull/2803)
* [OCPBUGS-44443](https://issues.redhat.com/browse/OCPBUGS-44443): Add controlplane cli image envar for use with hypershift [#2791](https://github.com/openshift/cluster-network-operator/pull/2791)
* [OCPBUGS-58392](https://issues.redhat.com/browse/OCPBUGS-58392): Add IPsec API for NAT-T UDP encapsulation support [#2736](https://github.com/openshift/cluster-network-operator/pull/2736)
* [OCPBUGS-56992](https://issues.redhat.com/browse/OCPBUGS-56992): iptables-alerter streamlining [#2717](https://github.com/openshift/cluster-network-operator/pull/2717)
* [OCPBUGS-56195](https://issues.redhat.com/browse/OCPBUGS-56195): Fix live migration with feature migration configured explicitly [#2710](https://github.com/openshift/cluster-network-operator/pull/2710)
* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [OCPBUGS-52952](https://issues.redhat.com/browse/OCPBUGS-52952): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2663](https://github.com/openshift/cluster-network-operator/pull/2663)
* [Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty [#2651](https://github.com/openshift/cluster-network-operator/pull/2651)
* [OCPBUGS-51074](https://issues.redhat.com/browse/OCPBUGS-51074): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2650](https://github.com/openshift/cluster-network-operator/pull/2650)
* [OCPBUGS-43803](https://issues.redhat.com/browse/OCPBUGS-43803): Start feature migration when the cluster CNI is changed to the target type [#2552](https://github.com/openshift/cluster-network-operator/pull/2552)
* [OCPBUGS-43715](https://issues.redhat.com/browse/OCPBUGS-43715): Skip including default crypto policies to avoid authby issue [#2598](https://github.com/openshift/cluster-network-operator/pull/2598)
* [OCPBUGS-44338](https://issues.redhat.com/browse/OCPBUGS-44338): Prevent live migration process from flapping between step-2 and step-3 [#2565](https://github.com/openshift/cluster-network-operator/pull/2565)
* [OCPBUGS-46148](https://issues.redhat.com/browse/OCPBUGS-46148): Remove ip xfrm state when IPsec is disabled [#2595](https://github.com/openshift/cluster-network-operator/pull/2595)
* [OCPBUGS-45593](https://issues.redhat.com/browse/OCPBUGS-45593): Pass transit_switch_subnet options in ovnkube-node pod [#2584](https://github.com/openshift/cluster-network-operator/pull/2584)
* [OCPBUGS-44846](https://issues.redhat.com/browse/OCPBUGS-44846), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2571](https://github.com/openshift/cluster-network-operator/pull/2571)
* [OCPBUGS-42727](https://issues.redhat.com/browse/OCPBUGS-42727): Live migration: report network overlap via live_migration_blocked metric [#2519](https://github.com/openshift/cluster-network-operator/pull/2519)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/179c38004739adde111d2fabf08bc94b0c663d9b...800b6ad61dfc6655d8ba9b131fca8fbb54773f71)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eacd6ee98ab26722603083768d4f58727a390dbe)

* use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) [#1292](https://github.com/openshift/cluster-node-tuning-operator/pull/1292)
* e2e: tuned degraded test fix (#1282) [#1282](https://github.com/openshift/cluster-node-tuning-operator/pull/1282)
* Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) [#1277](https://github.com/openshift/cluster-node-tuning-operator/pull/1277)
* e2e:performance: decode to valid kubeletconfig object (#1273) [#1273](https://github.com/openshift/cluster-node-tuning-operator/pull/1273)
* cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* e2e: add irdma to module_blacklist kernel args (#1267) [#1267](https://github.com/openshift/cluster-node-tuning-operator/pull/1267)
* [OCPBUGS-47678](https://issues.redhat.com/browse/OCPBUGS-47678): performanceprofile cpuset input validation (#1264) [#1264](https://github.com/openshift/cluster-node-tuning-operator/pull/1264)
* Fix context deadlines in ExecCommandOnPod() (#1263) [#1263](https://github.com/openshift/cluster-node-tuning-operator/pull/1263)
* [OCPBUGS-46496](https://issues.redhat.com/browse/OCPBUGS-46496): [release-4.16] Add vendor and architecture specific tuning options (#1254) [#1254](https://github.com/openshift/cluster-node-tuning-operator/pull/1254)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* E2E: fix modify node selector to use lowercase (#1209) [#1209](https://github.com/openshift/cluster-node-tuning-operator/pull/1209)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/e739b63c155856b93d072e6077bb73a995ba0f28...eacd6ee98ab26722603083768d4f58727a390dbe)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2ed3cf9965f8e6832cffde84f3de2fe210b79b49)

* [OCPBUGS-48657](https://issues.redhat.com/browse/OCPBUGS-48657): Add new team members to owners file [#378](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/378)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2280f54414cf403aed0a02b3fdb86ee6bf672410...2ed3cf9965f8e6832cffde84f3de2fe210b79b49)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [OCPBUGS-54420](https://issues.redhat.com/browse/OCPBUGS-54420): add rhdmalone to owners [#620](https://github.com/openshift/cluster-samples-operator/pull/620)
* [OCPBUGS-48848](https://issues.redhat.com/browse/OCPBUGS-48848): add shannon and aroyoredhat as owners [#596](https://github.com/openshift/cluster-samples-operator/pull/596)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/6541dd7e1fdb3d40896956a56f1dc800fae5d8b8...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a5de0226c9aee515fb937fc7458d5edb0e487a19)

* [OCPBUGS-61252](https://issues.redhat.com/browse/OCPBUGS-61252): add ability to control kube rbac proxy container image on controlplane [#614](https://github.com/openshift/cluster-storage-operator/pull/614)
* [OCPBUGS-52353](https://issues.redhat.com/browse/OCPBUGS-52353): fix Vsphere cluster Storage operator in Unavailable state [#563](https://github.com/openshift/cluster-storage-operator/pull/563)
* [OCPBUGS-46077](https://issues.redhat.com/browse/OCPBUGS-46077): Fix PodStartupStorageOperationsFailing alert [#548](https://github.com/openshift/cluster-storage-operator/pull/548)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/761b62fa95c15dd7fcae6df1dda5876e50a10f2d...a5de0226c9aee515fb937fc7458d5edb0e487a19)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/be820285dcf7b0ca4a712192ccb47fd0c843ea02)

* [OCPBUGS-58452](https://issues.redhat.com/browse/OCPBUGS-58452): Failing=Unknown upon long CO updating [#1213](https://github.com/openshift/cluster-version-operator/pull/1213)
* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [OCPBUGS-50590](https://issues.redhat.com/browse/OCPBUGS-50590): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1153](https://github.com/openshift/cluster-version-operator/pull/1153)
* [OCPBUGS-46408](https://issues.redhat.com/browse/OCPBUGS-46408): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1128](https://github.com/openshift/cluster-version-operator/pull/1128)
* [OCPBUGS-45329](https://issues.redhat.com/browse/OCPBUGS-45329): deps: bump golang.org/x/net to 0.31.0 [#1118](https://github.com/openshift/cluster-version-operator/pull/1118)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/15c87e7e6d56f89fcc2453012e09283e965e71af...be820285dcf7b0ca4a712192ccb47fd0c843ea02)


### [console](https://github.com/openshift/console/tree/fbca50eedbe66c9c42df8584350d51d791db6f51)

* [OCPBUGS-44157](https://issues.redhat.com/browse/OCPBUGS-44157): bump dompurify to latest [#15591](https://github.com/openshift/console/pull/15591)
* [OCPBUGS-62123](https://issues.redhat.com/browse/OCPBUGS-62123): Remove ancient `X-XSS-Protection` header [#15528](https://github.com/openshift/console/pull/15528)
* [OCPBUGS-61057](https://issues.redhat.com/browse/OCPBUGS-61057): OpenShift console PVC clone cannot use B as the unit [#15450](https://github.com/openshift/console/pull/15450)
* [OCPBUGS-60175](https://issues.redhat.com/browse/OCPBUGS-60175): Tolerate unknown fields in Infrastructur… [#15368](https://github.com/openshift/console/pull/15368)
* [OCPBUGS-60641](https://issues.redhat.com/browse/OCPBUGS-60641): Secret key with binary file changes when edited via Console [#15417](https://github.com/openshift/console/pull/15417)
* [OCPBUGS-59869](https://issues.redhat.com/browse/OCPBUGS-59869): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15334](https://github.com/openshift/console/pull/15334)
* [OCPBUGS-57677](https://issues.redhat.com/browse/OCPBUGS-57677): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15328](https://github.com/openshift/console/pull/15328)
* [OCPBUGS-60115](https://issues.redhat.com/browse/OCPBUGS-60115): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15358](https://github.com/openshift/console/pull/15358)
* [OCPBUGS-59358](https://issues.redhat.com/browse/OCPBUGS-59358): fix bug where / in console.tab/horizontalNav href brea… [#15286](https://github.com/openshift/console/pull/15286)
* [OCPBUGS-37603](https://issues.redhat.com/browse/OCPBUGS-37603): Manual backport of several incremental fixes for unauthenticated endpoints [#15312](https://github.com/openshift/console/pull/15312)
* [OCPBUGS-59274](https://issues.redhat.com/browse/OCPBUGS-59274): Add the ability to launch multiple modals with useModal hook [#15276](https://github.com/openshift/console/pull/15276)
* [OCPBUGS-59445](https://issues.redhat.com/browse/OCPBUGS-59445): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15291](https://github.com/openshift/console/pull/15291)
* [OCPBUGS-58407](https://issues.redhat.com/browse/OCPBUGS-58407): Add flags in console static plugin for all the components of this epic [#15243](https://github.com/openshift/console/pull/15243)
* [OCPBUGS-56838](https://issues.redhat.com/browse/OCPBUGS-56838): Fetching taskRuns in PLR details page using PLR UID also [#15099](https://github.com/openshift/console/pull/15099)
* [OCPBUGS-58188](https://issues.redhat.com/browse/OCPBUGS-58188): Fix TypeError Cannot read properties of null (reading 'metadata') [#15214](https://github.com/openshift/console/pull/15214)
* [OCPBUGS-57326](https://issues.redhat.com/browse/OCPBUGS-57326): Remove logoutOpenShift method call [#15172](https://github.com/openshift/console/pull/15172)
* [OCPBUGS-57270](https://issues.redhat.com/browse/OCPBUGS-57270): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15165](https://github.com/openshift/console/pull/15165)
* [OCPBUGS-57096](https://issues.redhat.com/browse/OCPBUGS-57096): Add all files to `vendor` regardless of gitignore [#15133](https://github.com/openshift/console/pull/15133)
* [OCPBUGS-57089](https://issues.redhat.com/browse/OCPBUGS-57089): Sample segment sessions [#15130](https://github.com/openshift/console/pull/15130)
* [OCPBUGS-56858](https://issues.redhat.com/browse/OCPBUGS-56858): remove 60 day alert from cluster update modal [#15102](https://github.com/openshift/console/pull/15102)
* [OCPBUGS-56715](https://issues.redhat.com/browse/OCPBUGS-56715): update the Deployment pod on change in imageStream [#15091](https://github.com/openshift/console/pull/15091)
* [OCPBUGS-56472](https://issues.redhat.com/browse/OCPBUGS-56472): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15072](https://github.com/openshift/console/pull/15072)
* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [OCPBUGS-48628](https://issues.redhat.com/browse/OCPBUGS-48628): Added token to proxy header [#14693](https://github.com/openshift/console/pull/14693)
* [OCPBUGS-54174](https://issues.redhat.com/browse/OCPBUGS-54174): Update the monitoring topic used by the console team [#14900](https://github.com/openshift/console/pull/14900)
* [OCPBUGS-52450](https://issues.redhat.com/browse/OCPBUGS-52450): fix run time error when no completed version exists [#14840](https://github.com/openshift/console/pull/14840)
* [OCPBUGS-52851](https://issues.redhat.com/browse/OCPBUGS-52851): Show Observe section without PROMETHEUS and MONITORING flags [#14849](https://github.com/openshift/console/pull/14849)
* [OCPBUGS-52288](https://issues.redhat.com/browse/OCPBUGS-52288): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14821](https://github.com/openshift/console/pull/14821)
* [OCPBUGS-49409](https://issues.redhat.com/browse/OCPBUGS-49409): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14703](https://github.com/openshift/console/pull/14703)
* [OCPBUGS-52418](https://issues.redhat.com/browse/OCPBUGS-52418): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14837](https://github.com/openshift/console/pull/14837)
* [OCPBUGS-49979](https://issues.redhat.com/browse/OCPBUGS-49979): Set default build option as BUILDS for Builder Image sample [#14730](https://github.com/openshift/console/pull/14730)
* [OCPBUGS-49800](https://issues.redhat.com/browse/OCPBUGS-49800): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14715](https://github.com/openshift/console/pull/14715)
* [OCPBUGS-49801](https://issues.redhat.com/browse/OCPBUGS-49801): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14716](https://github.com/openshift/console/pull/14716)
* [OCPBUGS-46388](https://issues.redhat.com/browse/OCPBUGS-46388): fix alert rule link [#14808](https://github.com/openshift/console/pull/14808)
* [OCPBUGS-52252](https://issues.redhat.com/browse/OCPBUGS-52252): Fix alert rule link to alert in dev perspective [#14817](https://github.com/openshift/console/pull/14817)
* [OCPBUGS-46441](https://issues.redhat.com/browse/OCPBUGS-46441): Do not pass CSV name to operand list page when an exen… [#14627](https://github.com/openshift/console/pull/14627)
* [OCPBUGS-36963](https://issues.redhat.com/browse/OCPBUGS-36963): Manually create an API token for a ServiceAccount [#14057](https://github.com/openshift/console/pull/14057)
* [OCPBUGS-35394](https://issues.redhat.com/browse/OCPBUGS-35394): sessions: fix sessions pruning [#13969](https://github.com/openshift/console/pull/13969)
* [OCPBUGS-46602](https://issues.redhat.com/browse/OCPBUGS-46602): ReRun of Resolver based PipelineRuns fails from UI [#14641](https://github.com/openshift/console/pull/14641)
* [OCPBUGS-46567](https://issues.redhat.com/browse/OCPBUGS-46567): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14636](https://github.com/openshift/console/pull/14636)
* [OCPBUGS-48162](https://issues.redhat.com/browse/OCPBUGS-48162): OCP web console show pod status as Init:0/1 after using Native sidecars [#14668](https://github.com/openshift/console/pull/14668)
* [OCPBUGS-43672](https://issues.redhat.com/browse/OCPBUGS-43672): Disable GQL introspection [#14638](https://github.com/openshift/console/pull/14638)
* [OCPBUGS-45334](https://issues.redhat.com/browse/OCPBUGS-45334): fix table combination [#14576](https://github.com/openshift/console/pull/14576)
* [OCPBUGS-41342](https://issues.redhat.com/browse/OCPBUGS-41342): fix namespace for networkpolicy [#14244](https://github.com/openshift/console/pull/14244)
* [OCPBUGS-46022](https://issues.redhat.com/browse/OCPBUGS-46022): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14612](https://github.com/openshift/console/pull/14612)
* [OCPBUGS-45229](https://issues.redhat.com/browse/OCPBUGS-45229): Unable to remove finally tasks in pipeline builder mode [#14558](https://github.com/openshift/console/pull/14558)
* [OCPBUGS-45245](https://issues.redhat.com/browse/OCPBUGS-45245): use TaskRuns results.tekton.dev/record annotation to get the logs [#14563](https://github.com/openshift/console/pull/14563)
* [OCPBUGS-41523](https://issues.redhat.com/browse/OCPBUGS-41523): i18n upload/download routine task - Sprint 254 [#14258](https://github.com/openshift/console/pull/14258)
* [OCPBUGS-45015](https://issues.redhat.com/browse/OCPBUGS-45015): Remove ClusterTask dependency in console from Pipelines 1.17 [#14537](https://github.com/openshift/console/pull/14537)
* [OCPBUGS-44792](https://issues.redhat.com/browse/OCPBUGS-44792): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14519](https://github.com/openshift/console/pull/14519)
* [OCPBUGS-44875](https://issues.redhat.com/browse/OCPBUGS-44875): Start last run do not work in buildConfig details page [#14529](https://github.com/openshift/console/pull/14529)
* [OCPBUGS-44874](https://issues.redhat.com/browse/OCPBUGS-44874): Telemetry userPreference results in empty nodes output to the DOM [#14528](https://github.com/openshift/console/pull/14528)
* [OCPBUGS-45124](https://issues.redhat.com/browse/OCPBUGS-45124): Add multiline support to template instantiation [#14545](https://github.com/openshift/console/pull/14545)
* [OCPBUGS-44885](https://issues.redhat.com/browse/OCPBUGS-44885): include external labels so silenced alerts not displayed in notifications [#14530](https://github.com/openshift/console/pull/14530)
* [OCPBUGS-44932](https://issues.redhat.com/browse/OCPBUGS-44932): Add IBM Block Storage CSI driver support for RWX [#14533](https://github.com/openshift/console/pull/14533)
* [OCPBUGS-43447](https://issues.redhat.com/browse/OCPBUGS-43447): Ensure envs are initted upon first load [#14405](https://github.com/openshift/console/pull/14405)
* [OCPBUGS-44806](https://issues.redhat.com/browse/OCPBUGS-44806): Don't request user settings configmap if no user has been loaded. [#14522](https://github.com/openshift/console/pull/14522)
* [OCPBUGS-44207](https://issues.redhat.com/browse/OCPBUGS-44207): Create RoleBinding will trigger Admission Webhook Warning [#14465](https://github.com/openshift/console/pull/14465)
* [Full changelog](https://github.com/openshift/console/compare/70202d40d3f3a2b4f944b066a531adbec3c71a20...fbca50eedbe66c9c42df8584350d51d791db6f51)


### [console-operator](https://github.com/openshift/console-operator/tree/04f80faf396b645582e5a19041e7faa5bf203443)

* [OCPBUGS-60794](https://issues.redhat.com/browse/OCPBUGS-60794): Update downloads deployment configuration to use master node selector [#1036](https://github.com/openshift/console-operator/pull/1036)
* [OCPBUGS-46481](https://issues.redhat.com/browse/OCPBUGS-46481): Dont disable console when authConfig type is set to None [#952](https://github.com/openshift/console-operator/pull/952)
* [Full changelog](https://github.com/openshift/console-operator/compare/92447df597eeca8a92bb9019e854619e19736638...04f80faf396b645582e5a19041e7faa5bf203443)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5f9ee066b2b7768606ffae81b52e8bd0f25cb471)

* [OCPBUGS-55648](https://issues.redhat.com/browse/OCPBUGS-55648): Check error returned by ipv6 SettleAddresses [#188](https://github.com/openshift/containernetworking-plugins/pull/188)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/73b4123cc75abd22af8dc3b429836be2bea45fd5...5f9ee066b2b7768606ffae81b52e8bd0f25cb471)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83d0aa3221daba495868a8b186c893cf12e44251)

* [OCPBUGS-58884](https://issues.redhat.com/browse/OCPBUGS-58884): CARRY: don't ignore json files [#341](https://github.com/openshift/cloud-provider-openstack/pull/341)
* [OCPBUGS-43426](https://issues.redhat.com/browse/OCPBUGS-43426): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 [#303](https://github.com/openshift/cloud-provider-openstack/pull/303)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b7e9010d795f78f39bf12433599658bbbdd9560e...83d0aa3221daba495868a8b186c893cf12e44251)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/06e08fd2e3c63e218e2973e4c711e9ae302948a4)

* [OCPBUGS-62465](https://issues.redhat.com/browse/OCPBUGS-62465): Requeue PVC over PV creation [#174](https://github.com/openshift/csi-external-resizer/pull/174)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/bdf5bfb4da07be6a85ae5253218f29fb8af51adf...06e08fd2e3c63e218e2973e4c711e9ae302948a4)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/ee32ba01e1f89bac057611ad4580589652f250a3)

* [OCPBUGS-60450](https://issues.redhat.com/browse/OCPBUGS-60450): UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots [#186](https://github.com/openshift/csi-external-snapshotter/pull/186)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/5315d37a1e5415e8b6870f23e50238681979cc28...ee32ba01e1f89bac057611ad4580589652f250a3)


### [docker-builder](https://github.com/openshift/builder/tree/e77895c27d8d39398c585064b8a87b5531b2574d)

* [OCPBUGS-58074](https://issues.redhat.com/browse/OCPBUGS-58074): S2I build cpu limits observed by assemble are limited to 1 cpu [#475](https://github.com/openshift/builder/pull/475)
* [OCPBUGS-53076](https://issues.redhat.com/browse/OCPBUGS-53076): Upgraded Kubernetes dependency from 1.28.2 to 1.29.0 [#468](https://github.com/openshift/builder/pull/468)
* [OCPBUGS-42893](https://issues.redhat.com/browse/OCPBUGS-42893), [OCPBUGS-42914](https://issues.redhat.com/browse/OCPBUGS-42914): buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library [#450](https://github.com/openshift/builder/pull/450)
* [OCPBUGS-43186](https://issues.redhat.com/browse/OCPBUGS-43186): runc library bump to 1.1.12 [#420](https://github.com/openshift/builder/pull/420)
* [OCPBUGS-47775](https://issues.redhat.com/browse/OCPBUGS-47775): skipping some unit tests to avoid failures as they are duplicate [#424](https://github.com/openshift/builder/pull/424)
* [OCPBUGS-48159](https://issues.redhat.com/browse/OCPBUGS-48159): Add team members to the OWNERS file [#426](https://github.com/openshift/builder/pull/426)
* [Full changelog](https://github.com/openshift/builder/compare/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be...e77895c27d8d39398c585064b8a87b5531b2574d)


### [docker-registry](https://github.com/openshift/image-registry/tree/072c544c1eaab6d0e43fc63ab6c12c18bf524afb)

* [OCPBUGS-60183](https://issues.redhat.com/browse/OCPBUGS-60183): bump openshift/docker-distribution [#441](https://github.com/openshift/image-registry/pull/441)
* [OCPBUGS-53654](https://issues.redhat.com/browse/OCPBUGS-53654): bump jwt and oauth dependencies [#432](https://github.com/openshift/image-registry/pull/432)
* [OCPBUGS-49696](https://issues.redhat.com/browse/OCPBUGS-49696): bump docker distribution [#423](https://github.com/openshift/image-registry/pull/423)
* [Full changelog](https://github.com/openshift/image-registry/compare/e4d56625da1bde6f51fb84f05efe02df92b6f120...072c544c1eaab6d0e43fc63ab6c12c18bf524afb)


### [etcd](https://github.com/openshift/etcd/tree/e7911c0d19925c0a67328052a8580a80fb40cb5b)

* NO-ISSUE: Add support for cachi2 based deps [#298](https://github.com/openshift/etcd/pull/298)
* [Full changelog](https://github.com/openshift/etcd/compare/16202ec4ecea353650b3681979ba73c5d8664d8c...e7911c0d19925c0a67328052a8580a80fb40cb5b)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372)

* [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116)
* [OCPBUGS-48484](https://issues.redhat.com/browse/OCPBUGS-48484): Refactor exists() to handle gcp API change [#106](https://github.com/openshift/machine-api-provider-gcp/pull/106)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/e72657c0d2713842f701f1d43c777d6ec6880cb9...8851888abd5f7f47edd12a56f515b8f333c09372)


### [haproxy-router](https://github.com/openshift/router/tree/7c4b47201b75421631739feb42e7ae86ae047739)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleCloseTerminationPolicy [#655](https://github.com/openshift/router/pull/655)
* [OCPBUGS-49391](https://issues.redhat.com/browse/OCPBUGS-49391): Reject All CA-Signed Certs Using SHA1 [#651](https://github.com/openshift/router/pull/651)
* [Full changelog](https://github.com/openshift/router/compare/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6...7c4b47201b75421631739feb42e7ae86ae047739)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/f3cb5c11ed5964553a01210bd88333fd3e1d8fa6)

* [CNTRLPLANE-1612](https://issues.redhat.com/browse/CNTRLPLANE-1612): Backport StreamingCollectionEncoding for JSON and protobuf [#2485](https://github.com/openshift/kubernetes/pull/2485)
* [OCPBUGS-61908](https://issues.redhat.com/browse/OCPBUGS-61908): UPSTREAM: &lt;carry&gt;: Don't retry storage calls with side effects. [#2470](https://github.com/openshift/kubernetes/pull/2470)
* [OCPBUGS-60553](https://issues.redhat.com/browse/OCPBUGS-60553): [4.16]: podresources: list: use active pods [#2454](https://github.com/openshift/kubernetes/pull/2454)
* 4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments [#2435](https://github.com/openshift/kubernetes/pull/2435)
* [OCPBUGS-60272](https://issues.redhat.com/browse/OCPBUGS-60272): Bump nfs server provisioner [#2402](https://github.com/openshift/kubernetes/pull/2402)
* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2342](https://github.com/openshift/kubernetes/pull/2342)
* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: &lt;carry&gt;: disable some legacy cloud provider Azure tests [#2352](https://github.com/openshift/kubernetes/pull/2352)
* [OCPBUGS-57290](https://issues.redhat.com/browse/OCPBUGS-57290): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix kubelet [#2325](https://github.com/openshift/kubernetes/pull/2325)
* [OCPBUGS-49906](https://issues.redhat.com/browse/OCPBUGS-49906): Bump k8s api to 1.29.14 [#2211](https://github.com/openshift/kubernetes/pull/2211)
* [OCPBUGS-45931](https://issues.redhat.com/browse/OCPBUGS-45931): UPSTREAM: &lt;carry&gt;: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 [#2200](https://github.com/openshift/kubernetes/pull/2200)
* [OCPBUGS-46003](https://issues.redhat.com/browse/OCPBUGS-46003): Bump k8s api to 1.29.11 [#2161](https://github.com/openshift/kubernetes/pull/2161)
* [Full changelog](https://github.com/openshift/kubernetes/compare/67d33871ba24f0e8c4d2d201a4c4decaabfa1eca...f3cb5c11ed5964553a01210bd88333fd3e1d8fa6)


### [hypershift](https://github.com/openshift/hypershift/tree/7e33d8351a4e924e5b39f15cde7736bb193782ee)

* [CNTRLPLANE-1426](https://issues.redhat.com/browse/CNTRLPLANE-1426): feat(konflux): tag MCE HO images with latest [#6839](https://github.com/openshift/hypershift/pull/6839)
* [OCPBUGS-61252](https://issues.redhat.com/browse/OCPBUGS-61252): dont use registryOverrides on kube rbac proxy image be… [#6756](https://github.com/openshift/hypershift/pull/6756)
* [OCPBUGS-61582](https://issues.redhat.com/browse/OCPBUGS-61582): Update KCM node monitor grace period [#6797](https://github.com/openshift/hypershift/pull/6797)
* [OCPBUGS-61860](https://issues.redhat.com/browse/OCPBUGS-61860): Use the common MCE konflux pipeline [#6844](https://github.com/openshift/hypershift/pull/6844)
* [OCPBUGS-60150](https://issues.redhat.com/browse/OCPBUGS-60150): Always compress and encode payload in token secret for inplace upgrades [#6750](https://github.com/openshift/hypershift/pull/6750)
* [OCPBUGS-60951](https://issues.redhat.com/browse/OCPBUGS-60951): MCE 2.6 konflux hcp cli [#6701](https://github.com/openshift/hypershift/pull/6701)
* [CNTRLPLANE-1203](https://issues.redhat.com/browse/CNTRLPLANE-1203): HO MCE change to hermetic ta build [#6654](https://github.com/openshift/hypershift/pull/6654)
* [CNTRLPLANE-1231](https://issues.redhat.com/browse/CNTRLPLANE-1231): Move CPO pipeline to hermetic builds [#6599](https://github.com/openshift/hypershift/pull/6599)
* [OCPBUGS-58505](https://issues.redhat.com/browse/OCPBUGS-58505): [release-4.16] Add missing service network DNS entries to KAS cert [#6393](https://github.com/openshift/hypershift/pull/6393)
* [OCPBUGS-57494](https://issues.redhat.com/browse/OCPBUGS-57494): Add proxy variables for the MCD Pod [#6286](https://github.com/openshift/hypershift/pull/6286)
* [OCPBUGS-55697](https://issues.redhat.com/browse/OCPBUGS-55697): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6114](https://github.com/openshift/hypershift/pull/6114)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6087](https://github.com/openshift/hypershift/pull/6087)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6082](https://github.com/openshift/hypershift/pull/6082)
* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [OCPBUGS-54632](https://issues.redhat.com/browse/OCPBUGS-54632): Sync RBAC for attaching volumes on VM level [#5998](https://github.com/openshift/hypershift/pull/5998)
* [OCPBUGS-49914](https://issues.redhat.com/browse/OCPBUGS-49914): Reconcile proxy CA bundle into hosted cluster [#5983](https://github.com/openshift/hypershift/pull/5983)
* [OCPBUGS-53902](https://issues.redhat.com/browse/OCPBUGS-53902): bump golang-jwt v4 and v5 [#5907](https://github.com/openshift/hypershift/pull/5907)
* Red Hat Konflux update control-plane-operator-4-16 [#5957](https://github.com/openshift/hypershift/pull/5957)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5922](https://github.com/openshift/hypershift/pull/5922)
* [OCPBUGS-51733](https://issues.redhat.com/browse/OCPBUGS-51733), [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Bump dependencies to OCP fork in backports [#5901](https://github.com/openshift/hypershift/pull/5901)
* [OCPBUGS-53308](https://issues.redhat.com/browse/OCPBUGS-53308): fix(deps): bump go-jose [#5866](https://github.com/openshift/hypershift/pull/5866)
* [OCPBUGS-52506](https://issues.redhat.com/browse/OCPBUGS-52506): refactor aws identity health check into new controller [#5781](https://github.com/openshift/hypershift/pull/5781)
* [OCPBUGS-52857](https://issues.redhat.com/browse/OCPBUGS-52857): Make managed-trust-bundle optional [#5809](https://github.com/openshift/hypershift/pull/5809)
* [OCPBUGS-52426](https://issues.redhat.com/browse/OCPBUGS-52426): change plaform to platform [#5773](https://github.com/openshift/hypershift/pull/5773)
* [OCPBUGS-50993](https://issues.redhat.com/browse/OCPBUGS-50993): Honor proxy vars in the util insecure http client [#5662](https://github.com/openshift/hypershift/pull/5662)
* [OCPBUGS-46466](https://issues.redhat.com/browse/OCPBUGS-46466): Consistently look up and dial cloud API hostnames [#5301](https://github.com/openshift/hypershift/pull/5301)
* [OCPBUGS-50698](https://issues.redhat.com/browse/OCPBUGS-50698): add region to AWS creds passed to operators managed by CPO [#5670](https://github.com/openshift/hypershift/pull/5670)
* [OCPBUGS-51296](https://issues.redhat.com/browse/OCPBUGS-51296): 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5707](https://github.com/openshift/hypershift/pull/5707)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5686](https://github.com/openshift/hypershift/pull/5686)
* [OCPBUGS-50694](https://issues.redhat.com/browse/OCPBUGS-50694): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5620](https://github.com/openshift/hypershift/pull/5620)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5635](https://github.com/openshift/hypershift/pull/5635)
* [OCPBUGS-50557](https://issues.redhat.com/browse/OCPBUGS-50557): Prevent IgnitionServer from flooding the API server with patch requests [#5599](https://github.com/openshift/hypershift/pull/5599)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 [#5597](https://github.com/openshift/hypershift/pull/5597)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 [#5591](https://github.com/openshift/hypershift/pull/5591)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5587](https://github.com/openshift/hypershift/pull/5587)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 [#5574](https://github.com/openshift/hypershift/pull/5574)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5575](https://github.com/openshift/hypershift/pull/5575)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 [#5531](https://github.com/openshift/hypershift/pull/5531)
* NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 [#5532](https://github.com/openshift/hypershift/pull/5532)
* [OCPBUGS-49640](https://issues.redhat.com/browse/OCPBUGS-49640): fix overwriting PKI operator HCP conditions [#5506](https://github.com/openshift/hypershift/pull/5506)
* NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned [#5484](https://github.com/openshift/hypershift/pull/5484)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5477](https://github.com/openshift/hypershift/pull/5477)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) [#5437](https://github.com/openshift/hypershift/pull/5437)
* NO-JIRA: Update Konflux references (release-4.16) [#5431](https://github.com/openshift/hypershift/pull/5431)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5384](https://github.com/openshift/hypershift/pull/5384)
* NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) [#5298](https://github.com/openshift/hypershift/pull/5298)
* NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net [#5370](https://github.com/openshift/hypershift/pull/5370)
* NO-JIRA: Update Konflux references (release-4.16) [#5328](https://github.com/openshift/hypershift/pull/5328)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 [#5337](https://github.com/openshift/hypershift/pull/5337)
* [OCPBUGS-47539](https://issues.redhat.com/browse/OCPBUGS-47539): Separate CPO containerfiles [#5333](https://github.com/openshift/hypershift/pull/5333)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) [#5295](https://github.com/openshift/hypershift/pull/5295)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) [#5297](https://github.com/openshift/hypershift/pull/5297)
* NO-JIRA:  chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) [#5294](https://github.com/openshift/hypershift/pull/5294)
* NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 [#5261](https://github.com/openshift/hypershift/pull/5261)
* [OCPBUGS-39372](https://issues.redhat.com/browse/OCPBUGS-39372): Fixed NodePool version validation [#5219](https://github.com/openshift/hypershift/pull/5219)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) [#5209](https://github.com/openshift/hypershift/pull/5209)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5207](https://github.com/openshift/hypershift/pull/5207)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) [#5189](https://github.com/openshift/hypershift/pull/5189)
* [OCPBUGS-43930](https://issues.redhat.com/browse/OCPBUGS-43930): Return the right tagReference on Catalogs ImageStream [#5133](https://github.com/openshift/hypershift/pull/5133)
* [Full changelog](https://github.com/openshift/hypershift/compare/6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a...7e33d8351a4e924e5b39f15cde7736bb193782ee)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/668c884b139f2ed0ea89ebcbe1a6b915f8de66a9)

* [OCPBUGS-58737](https://issues.redhat.com/browse/OCPBUGS-58737): bump github.com/golang/glog to version v1.2.4 [#106](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/106)
* [OCPBUGS-56063](https://issues.redhat.com/browse/OCPBUGS-56063): tech debt: rework vendor patches [#91](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/91)
* [OCPBUGS-53910](https://issues.redhat.com/browse/OCPBUGS-53910): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#84](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/84)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/957197389ec49234c3883bbb730bb630b459e24f...668c884b139f2ed0ea89ebcbe1a6b915f8de66a9)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/9ca537683fc2ae2e7847032441fde42ff3171a48)

* [OCPBUGS-59727](https://issues.redhat.com/browse/OCPBUGS-59727): [IBM VPC] set offlineExpansion to false in e2e test manifest [#149](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/149)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/5d5d8010a59916cc264d0ab14962be85a35b7228...9ca537683fc2ae2e7847032441fde42ff3171a48)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/f19534d79cdf99790c46da6721f29f3ed9027027)

* [OCPBUGS-51818](https://issues.redhat.com/browse/OCPBUGS-51818): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#109](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/109)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7d4f93efe65a7c070ded6b889b61ae3d51e259fb...f19534d79cdf99790c46da6721f29f3ed9027027)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/d29506e7fea609bc8f004256c9c057e5429f72a1)

* [OCPBUGS-44870](https://issues.redhat.com/browse/OCPBUGS-44870): Bump dependency for CVE [#53](https://github.com/openshift/machine-api-provider-ibmcloud/pull/53)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46c3c741fd44c1160a1f17d360723dc734d64648...d29506e7fea609bc8f004256c9c057e5429f72a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0bb63f81c90506b58ba05f4823de648f187e4db0)

* [OCPBUGS-61656](https://issues.redhat.com/browse/OCPBUGS-61656): virt launcher logs gatherer (#1135) (#1138) (#1147) [#1135](https://github.com/openshift/insights-operator/pull/1135)
* avoid possible Go panic when searching existing conditions (#1142) [#1142](https://github.com/openshift/insights-operator/pull/1142)
* fix: incorrect anonymization of domains (#1119) [#1119](https://github.com/openshift/insights-operator/pull/1119)
* feat: copy proxy envs from IO pod to gathering pods (#1108) [#1108](https://github.com/openshift/insights-operator/pull/1108)
* [OCPBUGS-60448](https://issues.redhat.com/browse/OCPBUGS-60448): [release-4.16] Adding missing back-port changes from OCPBUGS issue (#1117) [#1117](https://github.com/openshift/insights-operator/pull/1117)
* Ignore previous status when disabling alerts (#1061) [#1061](https://github.com/openshift/insights-operator/pull/1061)
* [OCPBUGS-45203](https://issues.redhat.com/browse/OCPBUGS-45203): LokiStack gatherer (#1051) [#1051](https://github.com/openshift/insights-operator/pull/1051)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1054) [#1054](https://github.com/openshift/insights-operator/pull/1054)
* [Full changelog](https://github.com/openshift/insights-operator/compare/faf70d79e50b62a3e5014c2081ee5203957c0d20...0bb63f81c90506b58ba05f4823de648f187e4db0)


### [ironic](https://github.com/openshift/ironic-image/tree/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#648](https://github.com/openshift/ironic-image/pull/648)
* [OCPBUGS-49895](https://issues.redhat.com/browse/OCPBUGS-49895): Drop quiet option of grep to avoid race condition with pipefail [#634](https://github.com/openshift/ironic-image/pull/634)
* [OCPBUGS-48151](https://issues.redhat.com/browse/OCPBUGS-48151), [OCPBUGS-48598](https://issues.redhat.com/browse/OCPBUGS-48598): Bump jinja2 to 3.0.1-6.el9.2 [#623](https://github.com/openshift/ironic-image/pull/623)
* [OCPBUGS-44895](https://issues.redhat.com/browse/OCPBUGS-44895): Bump Ironic [#610](https://github.com/openshift/ironic-image/pull/610)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d56a7dc8465a36357ba4ede63eabc9897a06a657...d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/aea138cd4ac822092199c141bb925b37527389cd)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#180](https://github.com/openshift/ironic-agent-image/pull/180)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/3c5298e05497b59a876c73c51359f49f3cc2cb99...aea138cd4ac822092199c141bb925b37527389cd)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)

* [OCPBUGS-49595](https://issues.redhat.com/browse/OCPBUGS-49595): Fix subnet validation [#48](https://github.com/openshift/ironic-static-ip-manager/pull/48)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/e78e4c3e6db1805816308197eb9002dfbca27560...f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)

* : OCPBUGS-46663: Disable HTTP2 [#41](https://github.com/openshift/kubernetes-metrics-server/pull/41)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/8c2920c24c3705e43cefd6c6e65409b7da341ddc...9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53fea06bf50bdeff168cdf1ca3f5e19375c56f02)

* [OCPBUGS-54457](https://issues.redhat.com/browse/OCPBUGS-54457): Drop SYNACK as well in MCS side [#658](https://github.com/openshift/sdn/pull/658)
* [OCPBUGS-44674](https://issues.redhat.com/browse/OCPBUGS-44674): Handle `openshift-host-network` namespace as special when it modifies [#648](https://github.com/openshift/sdn/pull/648)
* [OCPBUGS-46493](https://issues.redhat.com/browse/OCPBUGS-46493): Raise the minSyncPeriod for NetworkPolicies to 10s during migration [#649](https://github.com/openshift/sdn/pull/649)
* [OCPBUGS-46048](https://issues.redhat.com/browse/OCPBUGS-46048): clean up containernetworking/plugins vendoring in sdn [#645](https://github.com/openshift/sdn/pull/645)
* [OCPBUGS-45806](https://issues.redhat.com/browse/OCPBUGS-45806): Stop checking ruleVersion [4.16] [#643](https://github.com/openshift/sdn/pull/643)
* [Full changelog](https://github.com/openshift/sdn/compare/c4dd04f7cece66d0a237f06cac9253d4e70103a7...53fea06bf50bdeff168cdf1ca3f5e19375c56f02)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/6f2133209d90d822e79d679ed483eeb755ceaaf8)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). [#227](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/227)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51...6f2133209d90d822e79d679ed483eeb755ceaaf8)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/d474c42ed4486f36cbcc8bfecac6b184483e92ee)

* [OCPBUGS-54632](https://issues.redhat.com/browse/OCPBUGS-54632): Ensure volume stays attached through reboots [#57](https://github.com/openshift/kubevirt-csi-driver/pull/57)
* [OCPBUGS-44622](https://issues.redhat.com/browse/OCPBUGS-44622): During detach don't return error if VM is not found [#49](https://github.com/openshift/kubevirt-csi-driver/pull/49)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/0693093f773c5046e231f174e7930315feabd996...d474c42ed4486f36cbcc8bfecac6b184483e92ee)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/4bd420eb2a0c79d0ec1b7f81a70e6c367f513914)

* [OCPBUGS-26525](https://issues.redhat.com/browse/OCPBUGS-26525): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 [#283](https://github.com/openshift/cluster-api-provider-libvirt/pull/283)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...4bd420eb2a0c79d0ec1b7f81a70e6c367f513914)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0f08bd6aceaca6fd83d047faac51186d90d9c946)

* [OCPBUGS-57210](https://issues.redhat.com/browse/OCPBUGS-57210): Updates GCP CredentialsRequest [#1378](https://github.com/openshift/machine-api-operator/pull/1378)
* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [OCPBUGS-53045](https://issues.redhat.com/browse/OCPBUGS-53045): add image/read permissions [#1348](https://github.com/openshift/machine-api-operator/pull/1348)
* [OCPBUGS-52342](https://issues.redhat.com/browse/OCPBUGS-52342): Drop oVirt support [#1336](https://github.com/openshift/machine-api-operator/pull/1336)
* [OCPBUGS-45947](https://issues.redhat.com/browse/OCPBUGS-45947): vSphere klog initialization preventing verbose log messages [#1312](https://github.com/openshift/machine-api-operator/pull/1312)
* [OCPBUGS-45998](https://issues.redhat.com/browse/OCPBUGS-45998): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1313](https://github.com/openshift/machine-api-operator/pull/1313)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/0967219612b43f35342c162f5b92733f946bd9be...0f08bd6aceaca6fd83d047faac51186d90d9c946)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7073c4fc0b6308be412a3c3fe5e47b7396181dc7)

* [OCPBUGS-60773](https://issues.redhat.com/browse/OCPBUGS-60773): scope MCD node listers to current node [#5260](https://github.com/openshift/machine-config-operator/pull/5260)
* [OCPBUGS-63553](https://issues.redhat.com/browse/OCPBUGS-63553): Add control-plane label for master nodes on legacy clusters [#5376](https://github.com/openshift/machine-config-operator/pull/5376)
* [OCPBUGS-57423](https://issues.redhat.com/browse/OCPBUGS-57423): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5119](https://github.com/openshift/machine-config-operator/pull/5119)
* [OCPBUGS-63332](https://issues.redhat.com/browse/OCPBUGS-63332): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5364](https://github.com/openshift/machine-config-operator/pull/5364)
* [OCPBUGS-56753](https://issues.redhat.com/browse/OCPBUGS-56753): Support NODEIP_HINT in IPI deployments too [#5079](https://github.com/openshift/machine-config-operator/pull/5079)
* [OCPBUGS-62689](https://issues.redhat.com/browse/OCPBUGS-62689): Add mcd_local_unsupported_packages recording rule [#5328](https://github.com/openshift/machine-config-operator/pull/5328)
* [OCPBUGS-59931](https://issues.redhat.com/browse/OCPBUGS-59931), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5205](https://github.com/openshift/machine-config-operator/pull/5205)
* [OCPBUGS-61869](https://issues.redhat.com/browse/OCPBUGS-61869): Override NMState service definition [#5290](https://github.com/openshift/machine-config-operator/pull/5290)
* [OCPBUGS-60621](https://issues.redhat.com/browse/OCPBUGS-60621): Add workaround fix for static pod race [#5252](https://github.com/openshift/machine-config-operator/pull/5252)
* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Log CRC MC deletion [#5178](https://github.com/openshift/machine-config-operator/pull/5178)
* [OCPBUGS-58270](https://issues.redhat.com/browse/OCPBUGS-58270): Do not set cpu system reserve below the default value [#5163](https://github.com/openshift/machine-config-operator/pull/5163)
* add missing vendors [#4952](https://github.com/openshift/machine-config-operator/pull/4952)
* [OCPBUGS-48283](https://issues.redhat.com/browse/OCPBUGS-48283): Do not run resolv-prepender from NM dispatcher [#4784](https://github.com/openshift/machine-config-operator/pull/4784)
* [OCPBUGS-56868](https://issues.redhat.com/browse/OCPBUGS-56868): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5090](https://github.com/openshift/machine-config-operator/pull/5090)
* [OCPBUGS-56626](https://issues.redhat.com/browse/OCPBUGS-56626): error from generateAndValidateRenderedMachineConfig function can be misleading [#5075](https://github.com/openshift/machine-config-operator/pull/5075)
* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [OCPBUGS-53248](https://issues.redhat.com/browse/OCPBUGS-53248): Enforce VIPs to be collocated at the same host [#4923](https://github.com/openshift/machine-config-operator/pull/4923)
* [OCPBUGS-53043](https://issues.redhat.com/browse/OCPBUGS-53043): Enable nmstate-configuration on all platforms [#4910](https://github.com/openshift/machine-config-operator/pull/4910)
* [OCPBUGS-52952](https://issues.redhat.com/browse/OCPBUGS-52952): Add ipsec connect wait service [#4931](https://github.com/openshift/machine-config-operator/pull/4931)
* [OCPBUGS-54163](https://issues.redhat.com/browse/OCPBUGS-54163): Fixing typos for MachineConfigNode [#4942](https://github.com/openshift/machine-config-operator/pull/4942)
* [OCPBUGS-53434](https://issues.redhat.com/browse/OCPBUGS-53434): Update ObservedGeneration in KubeletConfig [#4935](https://github.com/openshift/machine-config-operator/pull/4935)
* [OCPBUGS-53313](https://issues.redhat.com/browse/OCPBUGS-53313): daemon: ensure ostree-finalize-staged is started before rebooting [#4928](https://github.com/openshift/machine-config-operator/pull/4928)
* [OCPBUGS-52421](https://issues.redhat.com/browse/OCPBUGS-52421): Update format verbs for alert logs [#4901](https://github.com/openshift/machine-config-operator/pull/4901)
* [OCPBUGS-51347](https://issues.redhat.com/browse/OCPBUGS-51347): Update the storage.conf configuration file template [#4881](https://github.com/openshift/machine-config-operator/pull/4881)
* [OCPBUGS-52593](https://issues.redhat.com/browse/OCPBUGS-52593): Update cluster-reader ClusterRole permissions [#4905](https://github.com/openshift/machine-config-operator/pull/4905)
* [OCPBUGS-52404](https://issues.redhat.com/browse/OCPBUGS-52404): create /run/nodeip-configuration before use [#4897](https://github.com/openshift/machine-config-operator/pull/4897)
* [OCPBUGS-52310](https://issues.redhat.com/browse/OCPBUGS-52310): configure-ovs workaround for ovs-if-br-ex bug [#4892](https://github.com/openshift/machine-config-operator/pull/4892)
* [OCPBUGS-50862](https://issues.redhat.com/browse/OCPBUGS-50862): Auto-recover from MC with invalid extension [#4853](https://github.com/openshift/machine-config-operator/pull/4853)
* [OCPBUGS-43680](https://issues.redhat.com/browse/OCPBUGS-43680): Regenerate the rendered MC in use when deleted [#4655](https://github.com/openshift/machine-config-operator/pull/4655)
* [OCPBUGS-49976](https://issues.redhat.com/browse/OCPBUGS-49976): Add clarification to invalid maxUnavailable alert [#4837](https://github.com/openshift/machine-config-operator/pull/4837)
* [OCPBUGS-39224](https://issues.redhat.com/browse/OCPBUGS-39224): Do not enable on-prem-resolv-prepender.path for UPI [#4573](https://github.com/openshift/machine-config-operator/pull/4573)
* [OCPBUGS-48290](https://issues.redhat.com/browse/OCPBUGS-48290): Pausing Master MCP results in Alerts [#4786](https://github.com/openshift/machine-config-operator/pull/4786)
* [OCPBUGS-43765](https://issues.redhat.com/browse/OCPBUGS-43765): openstack: fix non-old systemd compatible unit [#4660](https://github.com/openshift/machine-config-operator/pull/4660)
* [OCPBUGS-43741](https://issues.redhat.com/browse/OCPBUGS-43741): Soften haproxy timeout for kubeapi probe [#4662](https://github.com/openshift/machine-config-operator/pull/4662)
* [OCPBUGS-48116](https://issues.redhat.com/browse/OCPBUGS-48116): OCPBUGS-47801: trying to wait for sub-controllers [#4777](https://github.com/openshift/machine-config-operator/pull/4777)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Remove trailing periods from AWS provided hostnames [#4744](https://github.com/openshift/machine-config-operator/pull/4744)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4bb3364914c4dbcdfcc08b0914f402cdd38f014f...7073c4fc0b6308be412a3c3fe5e47b7396181dc7)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/a99847b4450d58dbd0e487dd7e834586cd3e9289)

* [OCPBUGS-54169](https://issues.redhat.com/browse/OCPBUGS-54169): Change rhcos release browser url [#57](https://github.com/openshift/machine-os-images/pull/57)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c...a99847b4450d58dbd0e487dd7e834586cd3e9289)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/b3e669b974bff4240a547bfebcb443cf5d16a841)

* [OCPBUGS-54316](https://issues.redhat.com/browse/OCPBUGS-54316): Fix "Export as CSV" [#469](https://github.com/openshift/monitoring-plugin/pull/469)
* [OU-559](https://issues.redhat.com/browse/OU-559): fix log based alerts namespace for dev console [#320](https://github.com/openshift/monitoring-plugin/pull/320)
* [OCPBUGS-44395](https://issues.redhat.com/browse/OCPBUGS-44395): remove unused package and upgrade vulnerable dependency [#272](https://github.com/openshift/monitoring-plugin/pull/272)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/442ccd10ad05a04f510932082cd5a791d66a997e...b3e669b974bff4240a547bfebcb443cf5d16a841)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/a15bf454ad4446cefdb708ea3f121d08a0df83ee)

* [OCPBUGS-58767](https://issues.redhat.com/browse/OCPBUGS-58767): Update the github.com/golang/glog module to v1.2.4 [#103](https://github.com/openshift/multus-admission-controller/pull/103)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/88c596ed782cf6c3f94efa286b3568d12acde436...a15bf454ad4446cefdb708ea3f121d08a0df83ee)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/e88ad2bbc482feb728c61783cfed85509b2a2db6)

* [OCPBUGS-47472](https://issues.redhat.com/browse/OCPBUGS-47472): adds getcontext (backport 4.16) [#261](https://github.com/openshift/multus-cni/pull/261)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f...e88ad2bbc482feb728c61783cfed85509b2a2db6)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/467d84ad05ef97ab2a36d27258185942e21d1636)

* [OCPBUGS-55618](https://issues.redhat.com/browse/OCPBUGS-55618): Fixes leftover podref issue [#365](https://github.com/openshift/whereabouts-cni/pull/365)
* [OCPBUGS-50005](https://issues.redhat.com/browse/OCPBUGS-50005): [Release-4.17]Kubeconfig loop [#340](https://github.com/openshift/whereabouts-cni/pull/340)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dab1dd29b18521916c18a278faa734f038eccdf1...467d84ad05ef97ab2a36d27258185942e21d1636)


### [must-gather](https://github.com/openshift/must-gather/tree/774a4e024925cc6034969eb84c9030a338a187e5)

* [OCPBUGS-42960](https://issues.redhat.com/browse/OCPBUGS-42960): Gather OSUS data [#455](https://github.com/openshift/must-gather/pull/455)
* [OCPBUGS-48082](https://issues.redhat.com/browse/OCPBUGS-48082): Update owners [#473](https://github.com/openshift/must-gather/pull/473)
* [OCPBUGS-46407](https://issues.redhat.com/browse/OCPBUGS-46407): Support gathering IPsec data [#469](https://github.com/openshift/must-gather/pull/469)
* [OCPBUGS-42969](https://issues.redhat.com/browse/OCPBUGS-42969): Collect etcd object count [#454](https://github.com/openshift/must-gather/pull/454)
* [Full changelog](https://github.com/openshift/must-gather/compare/a30f939e9fec211253eaf1c91d4b5c7401f300a4...774a4e024925cc6034969eb84c9030a338a187e5)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e6880659ea1327c5b48dcf64a426eadfbafc0f1b)

* [OCPBUGS-61348](https://issues.redhat.com/browse/OCPBUGS-61348): Bump github.com/containernetworking/plugins from to 1.7.1 [#95](https://github.com/openshift/bond-cni/pull/95)
* NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/bond-cni/pull/91)
* NO-JIRA: Add ci-operator.yaml file on release-4.16 [#84](https://github.com/openshift/bond-cni/pull/84)
* [Full changelog](https://github.com/openshift/bond-cni/compare/bb911451158fc06f193917863778434944e88ae1...e6880659ea1327c5b48dcf64a426eadfbafc0f1b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/1210db38beff72968f1227f10312a9086b1b914e)

* [OCPBUGS-58777](https://issues.redhat.com/browse/OCPBUGS-58777): Bump github.com/golang/glog to v1.2.4 (#113) [#113](https://github.com/openshift/network-metrics-daemon/pull/113)
* [OCPBUGS-60186](https://issues.redhat.com/browse/OCPBUGS-60186): Replace e2e test image (#122) [#122](https://github.com/openshift/network-metrics-daemon/pull/122)
* swtich golint install method (#123) [#123](https://github.com/openshift/network-metrics-daemon/pull/123)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/48059263880572c52fb8b21f1441370100dc167a...1210db38beff72968f1227f10312a9086b1b914e)


### [network-tools](https://github.com/openshift/network-tools/tree/234ed43e3e7b2cfcb76a19c80fcdb573a625309f)

* add missing go vendors [#140](https://github.com/openshift/network-tools/pull/140)
* [Full changelog](https://github.com/openshift/network-tools/compare/39eca100c0978fb59234e21bf549b130914616ac...234ed43e3e7b2cfcb76a19c80fcdb573a625309f)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/2f2e121b6caea7073a5b7d64312f08f9d91233bb)

* [OCPBUGS-51854](https://issues.redhat.com/browse/OCPBUGS-51854): CVE-2025-22868 [#110](https://github.com/openshift/machine-api-provider-nutanix/pull/110)
* [OCPBUGS-47266](https://issues.redhat.com/browse/OCPBUGS-47266): fixing CVE-2024-45338 [#93](https://github.com/openshift/machine-api-provider-nutanix/pull/93)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f053e5a0ee58d20066efff8db01578785ea83dad...2f2e121b6caea7073a5b7d64312f08f9d91233bb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/f09a9be33b6455664a6842980fca4bd8008e9e6e)

* [OCPBUGS-30525](https://issues.redhat.com/browse/OCPBUGS-30525): Update dependencies to address CVE-2024-24786 [#124](https://github.com/openshift/oauth-apiserver/pull/124)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/fa1f097c2800b06b3b56537651294d023762a4eb...f09a9be33b6455664a6842980fca4bd8008e9e6e)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/565f7ed40b9ae8b3a0c146e0495334bd58b40d36)

* [OCPBUGS-61446](https://issues.redhat.com/browse/OCPBUGS-61446): Update x/crypto to v0.31.0 [#335](https://github.com/openshift/oauth-proxy/pull/335)
* [OCPBUGS-62707](https://issues.redhat.com/browse/OCPBUGS-62707): Fix oauth-proxy e2e-component tests [#338](https://github.com/openshift/oauth-proxy/pull/338)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/30f8012482023689655252dc2af2f17fe6a09253...565f7ed40b9ae8b3a0c146e0495334bd58b40d36)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a)

* changes the owners file (#1015) [#1015](https://github.com/openshift/oc-mirror/pull/1015)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1021) [#1021](https://github.com/openshift/oc-mirror/pull/1021)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/819f0115e4be3f55ed7d4edae1c38035811771ae...b137a53a5360a41a70432ea2bfc98a6cee6f7a4a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/575627db4295c204620c50c4e5ab12990f2ae08a)

* [OCPBUGS-63394](https://issues.redhat.com/browse/OCPBUGS-63394): Wire dry run option to Image API server operations [#566](https://github.com/openshift/openshift-apiserver/pull/566)
* [OCPBUGS-61474](https://issues.redhat.com/browse/OCPBUGS-61474): Skip blocked registry check for registries with mirrors [#552](https://github.com/openshift/openshift-apiserver/pull/552)
* [OCPBUGS-56612](https://issues.redhat.com/browse/OCPBUGS-56612): Fix image reference in TestImageStreamImportQuayIO [#516](https://github.com/openshift/openshift-apiserver/pull/516)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): prevent panic when no image and error are set [#494](https://github.com/openshift/openshift-apiserver/pull/494)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): validate image property isn't nil before using [#493](https://github.com/openshift/openshift-apiserver/pull/493)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): move on to the next digest/tag during failures [#492](https://github.com/openshift/openshift-apiserver/pull/492)
* [OCPBUGS-45010](https://issues.redhat.com/browse/OCPBUGS-45010): Pass expected type to deploymentconfig/scale object validation. [#461](https://github.com/openshift/openshift-apiserver/pull/461)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f09402cfac07d6e5040ac8b6f068703eba3c700f...575627db4295c204620c50c4e5ab12990f2ae08a)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/90f73f7ea939b221b79684ebe6d2feb843fc1f83)

* [OCPBUGS-61707](https://issues.redhat.com/browse/OCPBUGS-61707): legacy image pull secret rollback controller [#416](https://github.com/openshift/openshift-controller-manager/pull/416)
* [OCPBUGS-60233](https://issues.redhat.com/browse/OCPBUGS-60233): ignore error failing to find pull/push secrets [#409](https://github.com/openshift/openshift-controller-manager/pull/409)
* [OCPBUGS-57513](https://issues.redhat.com/browse/OCPBUGS-57513): Set node-pullsecrets volume to read-only to protect image pull credentials [#394](https://github.com/openshift/openshift-controller-manager/pull/394)
* [OCPBUGS-56354](https://issues.redhat.com/browse/OCPBUGS-56354): Empty proxy variables are causing issues during the build [#382](https://github.com/openshift/openshift-controller-manager/pull/382)
* [OCPBUGS-44186](https://issues.redhat.com/browse/OCPBUGS-44186): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#351](https://github.com/openshift/openshift-controller-manager/pull/351)
* [OCPBUGS-48202](https://issues.redhat.com/browse/OCPBUGS-48202): Add team members to the OWNERS file [#358](https://github.com/openshift/openshift-controller-manager/pull/358)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/05ca43957983cd8ea5a5890c5271d7cb228ecdd0...90f73f7ea939b221b79684ebe6d2feb843fc1f83)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)

* [OCPBUGS-58028](https://issues.redhat.com/browse/OCPBUGS-58028): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#346](https://github.com/openshift/cluster-api-provider-openstack/pull/346)
* [OCPBUGS-44456](https://issues.redhat.com/browse/OCPBUGS-44456): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#328](https://github.com/openshift/cluster-api-provider-openstack/pull/328)
* [OCPBUGS-44990](https://issues.redhat.com/browse/OCPBUGS-44990): Makefile changes for merge-bot [#341](https://github.com/openshift/cluster-api-provider-openstack/pull/341)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/10aa50e3b19a233c77f18fe6aa616e03874fa511...3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e48ec38c748a5cb90cdaf2fe017fb161301886ae)

* [OCPBUGS-58881](https://issues.redhat.com/browse/OCPBUGS-58881): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1102](https://github.com/openshift/operator-framework-olm/pull/1102)
* [OCPBUGS-59647](https://issues.redhat.com/browse/OCPBUGS-59647): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1042](https://github.com/openshift/operator-framework-olm/pull/1042)
* [OCPBUGS-60847](https://issues.redhat.com/browse/OCPBUGS-60847): Add NetworkPolicy as a supported kind [#1050](https://github.com/openshift/operator-framework-olm/pull/1050)
* [OCPBUGS-61388](https://issues.redhat.com/browse/OCPBUGS-61388): [4.16] e2e stability fixes [#1083](https://github.com/openshift/operator-framework-olm/pull/1083)
* [OCPBUGS-57429](https://issues.redhat.com/browse/OCPBUGS-57429): reduce cache expiry frequency [release-4.19] [#1022](https://github.com/openshift/operator-framework-olm/pull/1022)
* [OCPBUGS-56358](https://issues.redhat.com/browse/OCPBUGS-56358): fix(olm): improve error logging for missing olm.managed label (#3558) [#1006](https://github.com/openshift/operator-framework-olm/pull/1006)
* [OCPBUGS-53395](https://issues.redhat.com/browse/OCPBUGS-53395): Ensure that PSA label is latest instead of pinning versions [#987](https://github.com/openshift/operator-framework-olm/pull/987)
* [OCPBUGS-48696](https://issues.redhat.com/browse/OCPBUGS-48696): Fix excessive catalog source snapshots cause severe performance regression [#957](https://github.com/openshift/operator-framework-olm/pull/957)
* [OCPBUGS-48661](https://issues.redhat.com/browse/OCPBUGS-48661): Fix concurrent namespace resolution [#947](https://github.com/openshift/operator-framework-olm/pull/947)
* [OCPBUGS-46928](https://issues.redhat.com/browse/OCPBUGS-46928), [OCPBUGS-46935](https://issues.redhat.com/browse/OCPBUGS-46935), [OCPBUGS-47315](https://issues.redhat.com/browse/OCPBUGS-47315): x/net bump to v0.34.0 [release-4.16] [#939](https://github.com/openshift/operator-framework-olm/pull/939)
* [OCPBUGS-47738](https://issues.redhat.com/browse/OCPBUGS-47738): catalog-operator: Delete Pods that were evicted (#3459) [#925](https://github.com/openshift/operator-framework-olm/pull/925)
* [OCPBUGS-46434](https://issues.redhat.com/browse/OCPBUGS-46434): CRD upgrade existing CR validation fix [#916](https://github.com/openshift/operator-framework-olm/pull/916)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d718c4c564975f3d4fac468987c4424691201790...e48ec38c748a5cb90cdaf2fe017fb161301886ae)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/f6d328d06a7546579c8456a3822f9c1596aec9cc)

* [OCPBUGS-62220](https://issues.redhat.com/browse/OCPBUGS-62220): Remove Expect func so that the test case can use the retry logic [#671](https://github.com/operator-framework/operator-marketplace/pull/671)
* [OCPBUGS-61920](https://issues.redhat.com/browse/OCPBUGS-61920): Update memoryTarget on catalog source pods [#664](https://github.com/operator-framework/operator-marketplace/pull/664)
* [OCPBUGS-49429](https://issues.redhat.com/browse/OCPBUGS-49429): Upgrade golang.org/x/net [release-4.16] [#587](https://github.com/operator-framework/operator-marketplace/pull/587)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2...f6d328d06a7546579c8456a3822f9c1596aec9cc)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/a1529ee69c96641072d85b04ca815b3457e9dc3e)

* [OCPBUGS-63230](https://issues.redhat.com/browse/OCPBUGS-63230): Fix dnsnameresolver address set [#2812](https://github.com/openshift/ovn-kubernetes/pull/2812)
* [OCPBUGS-60079](https://issues.redhat.com/browse/OCPBUGS-60079): Always enable global IPv6 forwarding [#2743](https://github.com/openshift/ovn-kubernetes/pull/2743)
* [OCPBUGS-60494](https://issues.redhat.com/browse/OCPBUGS-60494): Update OWNERS file: Add Patryk/Martin as approvers [#2718](https://github.com/openshift/ovn-kubernetes/pull/2718)
* [OCPBUGS-58161](https://issues.redhat.com/browse/OCPBUGS-58161): Unpin OVS patch versions [#2648](https://github.com/openshift/ovn-kubernetes/pull/2648)
* [OCPBUGS-57396](https://issues.redhat.com/browse/OCPBUGS-57396): Fix predicate for cluster subnet route to gateway router [#2645](https://github.com/openshift/ovn-kubernetes/pull/2645)
* [OCPBUGS-55282](https://issues.redhat.com/browse/OCPBUGS-55282): Fix hybrid overlay node subnets collision with cluster subnets [#2621](https://github.com/openshift/ovn-kubernetes/pull/2621)
* [OCPBUGS-48121](https://issues.redhat.com/browse/OCPBUGS-48121): Increase InformerSyncTimeout to 60s [#2624](https://github.com/openshift/ovn-kubernetes/pull/2624)
* [OCPBUGS-56242](https://issues.redhat.com/browse/OCPBUGS-56242): Handles unspecified protocol in network policy port [#2571](https://github.com/openshift/ovn-kubernetes/pull/2571)
* [OCPBUGS-56812](https://issues.redhat.com/browse/OCPBUGS-56812): egressfirewall: avoid nil dereference on node delete [#2591](https://github.com/openshift/ovn-kubernetes/pull/2591)
* [OCPBUGS-52503](https://issues.redhat.com/browse/OCPBUGS-52503): Fixes unexpected mp0 route removal during start up [#2479](https://github.com/openshift/ovn-kubernetes/pull/2479)
* [OCPBUGS-54204](https://issues.redhat.com/browse/OCPBUGS-54204): Update OVN to FDP25.A.1 24.03.5-40. [#2497](https://github.com/openshift/ovn-kubernetes/pull/2497)
* [OCPBUGS-50595](https://issues.redhat.com/browse/OCPBUGS-50595): kubevirt, localnet: Reduce live migration downtime [#2469](https://github.com/openshift/ovn-kubernetes/pull/2469)
* [OCPBUGS-50594](https://issues.redhat.com/browse/OCPBUGS-50594): fixes overzealous deletion of SNAT in egressIP [#2456](https://github.com/openshift/ovn-kubernetes/pull/2456)
* [OCPBUGS-47634](https://issues.redhat.com/browse/OCPBUGS-47634): Let OVN-northd bind remote ports [#2406](https://github.com/openshift/ovn-kubernetes/pull/2406)
* [OCPBUGS-45958](https://issues.redhat.com/browse/OCPBUGS-45958): bump OVS to 3.3.0-62.el9fdp for OCP 4.16 [#2388](https://github.com/openshift/ovn-kubernetes/pull/2388)
* [OCPBUGS-44457](https://issues.redhat.com/browse/OCPBUGS-44457): Add static route to the hairpin masquerade IPs to pod [#2346](https://github.com/openshift/ovn-kubernetes/pull/2346)
* [OCPBUGS-45942](https://issues.redhat.com/browse/OCPBUGS-45942): pin libreswan to 4.6-3.el9_0.3 [#2386](https://github.com/openshift/ovn-kubernetes/pull/2386)
* [OCPBUGS-45343](https://issues.redhat.com/browse/OCPBUGS-45343): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2377](https://github.com/openshift/ovn-kubernetes/pull/2377)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cb50d1472dc0bd6ff8d96aa3dd9b68897be85479...a1529ee69c96641072d85b04ca815b3457e9dc3e)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/2bfcc0f832d5237690ea900996e7679a5b5f0cd7)

* [OCPBUGS-61511](https://issues.redhat.com/browse/OCPBUGS-61511): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#127](https://github.com/openshift/machine-api-provider-powervs/pull/127)
* [OCPBUGS-54752](https://issues.redhat.com/browse/OCPBUGS-54752): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 [#114](https://github.com/openshift/machine-api-provider-powervs/pull/114)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/60ebedf061fe1bb5279650fd637108b13b92d95f...2bfcc0f832d5237690ea900996e7679a5b5f0cd7)


### [prometheus](https://github.com/openshift/prometheus/tree/e9fa80af084868b1e0f69e35b69e8ebca5ae1ddc)

* [OCPBUGS-61856](https://issues.redhat.com/browse/OCPBUGS-61856): chore: compute highestTimestamp at queryManager level [#270](https://github.com/openshift/prometheus/pull/270)
* [OCPBUGS-56739](https://issues.redhat.com/browse/OCPBUGS-56739): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#255](https://github.com/openshift/prometheus/pull/255)
* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [OCPBUGS-43668](https://issues.redhat.com/browse/OCPBUGS-43668): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#231](https://github.com/openshift/prometheus/pull/231)
* [Full changelog](https://github.com/openshift/prometheus/compare/c5c08df947236f3917abf14de481eb2f99fb07de...e9fa80af084868b1e0f69e35b69e8ebca5ae1ddc)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/5da234dd58c092cba019807979f9c29664ddb860)

* [OCPBUGS-56152](https://issues.redhat.com/browse/OCPBUGS-56152): Added error event for failed ingress to route conversion [#61](https://github.com/openshift/route-controller-manager/pull/61)
* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...5da234dd58c092cba019807979f9c29664ddb860)


### [tests](https://github.com/openshift/origin/tree/eb4358f069c5ce04b311295adb4eb21d55a177d6)

* [OCPBUGS-63395](https://issues.redhat.com/browse/OCPBUGS-63395): Backport pr 29834 to release-4.18 [#30409](https://github.com/openshift/origin/pull/30409)
* [OCPBUGS-62934](https://issues.redhat.com/browse/OCPBUGS-62934): Fix bearer token exposure in exit condition as well [#30365](https://github.com/openshift/origin/pull/30365)
* [OCPBUGS-61170](https://issues.redhat.com/browse/OCPBUGS-61170): images/tests: Remove rteval [#30203](https://github.com/openshift/origin/pull/30203)
* NO-JIRA: Update extended/networking OWNERS [#30091](https://github.com/openshift/origin/pull/30091)
* [OCPBUGS-60272](https://issues.redhat.com/browse/OCPBUGS-60272): Bump kubernetes version to fix NFS ganesha version [#30086](https://github.com/openshift/origin/pull/30086)
* [OCPBUGS-57311](https://issues.redhat.com/browse/OCPBUGS-57311): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29908](https://github.com/openshift/origin/pull/29908)
* [OCPBUGS-57203](https://issues.redhat.com/browse/OCPBUGS-57203): fix: remove un-needed test [#29849](https://github.com/openshift/origin/pull/29849)
* [OCPBUGS-34163](https://issues.redhat.com/browse/OCPBUGS-34163): Fix regex parser for censoring private key [#29805](https://github.com/openshift/origin/pull/29805)
* [OCPBUGS-56704](https://issues.redhat.com/browse/OCPBUGS-56704): aws/edge: prevent test using unschedulable nodes [#29847](https://github.com/openshift/origin/pull/29847)
* [OCPBUGS-55476](https://issues.redhat.com/browse/OCPBUGS-55476): support provider type external [#29738](https://github.com/openshift/origin/pull/29738)
* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [OCPBUGS-54768](https://issues.redhat.com/browse/OCPBUGS-54768): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29663](https://github.com/openshift/origin/pull/29663)
* [OCPBUGS-52581](https://issues.redhat.com/browse/OCPBUGS-52581): Use payload pullspec for image info test [#29589](https://github.com/openshift/origin/pull/29589)
* [OCPBUGS-52343](https://issues.redhat.com/browse/OCPBUGS-52343): Try also user CA for getting openshift-tests image [#29578](https://github.com/openshift/origin/pull/29578)
* [OCPBUGS-44119](https://issues.redhat.com/browse/OCPBUGS-44119): Ignore infra nodes on tap cni tests [#29261](https://github.com/openshift/origin/pull/29261)
* [OCPBUGS-48448](https://issues.redhat.com/browse/OCPBUGS-48448): Add team members to the OWNERS file for PR approvals [#29443](https://github.com/openshift/origin/pull/29443)
* [OCPBUGS-48348](https://issues.redhat.com/browse/OCPBUGS-48348): Fixing build s2i ruby test data inline with latest ruby version(&gt;=3.0) [#29431](https://github.com/openshift/origin/pull/29431)
* [Full changelog](https://github.com/openshift/origin/compare/c740dbdf225dfeef7fa9470ae61da2507302116c...eb4358f069c5ce04b311295adb4eb21d55a177d6)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/023a3655c181512a870fe1c865dbdbd31690f439)

* [OCPBUGS-46341](https://issues.redhat.com/browse/OCPBUGS-46341): update check-fmt goimports command [#83](https://github.com/openshift/cloud-provider-vsphere/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/44ea2b5825a5e200e12cb36f901393e97cbbf243...023a3655c181512a870fe1c865dbdbd31690f439)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/f489582e5e92f2a8fffb7a39e70dadff54351af4)

* [OCPBUGS-61653](https://issues.redhat.com/browse/OCPBUGS-61653): Fix unit tests [#72](https://github.com/openshift/cluster-api-provider-vsphere/pull/72)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/be22f10a56a18cd94406eea442e0113d866618ea...f489582e5e92f2a8fffb7a39e70dadff54351af4)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/7940ea1685dee6d3f29a6360dac9a82dd1b09230)

* [OCPBUGS-51206](https://issues.redhat.com/browse/OCPBUGS-51206): Set reconcile-sync to 10 minute for ListVolume [#294](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/294)
* [OCPBUGS-49862](https://issues.redhat.com/browse/OCPBUGS-49862): List only linux nodes [#289](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/289)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4...7940ea1685dee6d3f29a6360dac9a82dd1b09230)