# 4.16.44

Created: 2025-07-11 11:36:36 +0000 UTC

Image Digest: `sha256:f41be65a929742f584bb4299dfa48135b093b3cc86dc76c3ab77265574bdd4fe`


## Changes from 4.16.33

### Components

* Kubectl 1.29.7
* Kubernetes upgraded from 1.29.11 to 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202501270445-0 to 416.94.202507100308-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:cba7c8dfbc130df79fd563e6474115a6eb45c8c1f0f59c36e8d6961748db280b`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:4b26f4e164591d5b9209f93809432cd27a3bc9f338e57f39886ee706501fe043`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [248372a4](https://github.com/openshift/cluster-api-provider-alibaba/commit/248372a4f668111a7bf134527911cb656c44d47a) `sha256:9ad113a96037324a05493dfa66045646ded2cbbbe0187b622c484f7cd6996bad`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ca81b6a3](https://github.com/openshift/apiserver-network-proxy/commit/ca81b6a32aff6ccb327f6889ec89c01afedd8efd) `sha256:b9157098582c0f4855770a91ce96c6c19ebcdb6f0228545bceaf74b6134a89c4`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:8fce2e5ed06d836409e2c43875ba3eb2ef83d89ee7773b32a6ff4c3edc6cefbc`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:182eb9be62a64abdb57030902afd31140d8300fba4434c17dbed8808f78e9deb`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:35b012b81bbf1c545451bc9be0a6c9dc83a54c9b46716b19c97272e15167d595`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:cd6bcb95bd641cec458ce7b57d30424434336699b5059a5cc536e4967204cada`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [0c819861](https://github.com/openshift/machine-api-provider-aws/commit/0c8198618609197cc6cbcfd4016ba8400d8c13d5) `sha256:9edb9811ee819a4c038006f03e8547eb56d160ee0a0686ffc3ff59184857f59f`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [e5bac334](https://github.com/openshift/cloud-provider-azure/commit/e5bac3341fce67c12047caaafcf188c3f3049dc3) `sha256:b661ae2e4b88ab61c9e8b356eb14ed8cd8c654b399d5b91a62ed2445f6349f87`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [e5bac334](https://github.com/openshift/cloud-provider-azure/commit/e5bac3341fce67c12047caaafcf188c3f3049dc3) `sha256:1e3c9bf085f40255a79cb9ed835a04d3ff62f35df55c3a8473011ac13c54af0d`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a81e3b31](https://github.com/openshift/cluster-api-provider-azure/commit/a81e3b31948468d76ac744bbbb74b0c423fc969e) `sha256:f221d224222076cbe43a1d8e0c0f53b3b5878b9bccdff436a5a5d3c4c46c7b39`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:385d9cf03251abee421217efe18062444e2a0db381bc311c05c2564430efe9ce`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:6129725a1b1e307feae0946d6cedaec970578681c63e74e6c839366737c83ad8`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [7a36778a](https://github.com/openshift/azure-file-csi-driver/commit/7a36778add73d12eb08ff6be357d8d351af651a7) `sha256:8f5095e05245b6ac7d1970567023addc148dc43a5321b653fd237682c2586cab`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:29e19419c0b01f9878840aea8edee1433b2d06166c704a184643a363f59a79b2`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [2b396e06](https://github.com/openshift/cluster-api-provider-baremetal/commit/2b396e06c0a92acbfa688cd782ec4bf319ff3608) `sha256:1894a96c6f4e9a6da7c07ae1fd7df2ba9153b15be4803f0950de6c81cbfc88aa`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [f55a330f](https://github.com/openshift/baremetal-runtimecfg/commit/f55a330f8139ef660b3f60b735ef77538f7b9cbe) `sha256:29891a12f9573937012119b654eb23f67b111f1d2b3fa9ae842874eda0200e78`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:d49ce9c8bfaf7911f866ba1eb5a4efc08d3016e619d8406e97c42731ab01f41f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:e2b574c27148b2599704c21575f202aed280f99a9d1684c16347363a736667c6`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [1c26756f](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/1c26756f0b4ff5537e32db18d5fb16555f5bd58f) `sha256:adbd0c5e1fc7febf4ec7129b4e5d19e3660d5954cbc6e01e8ba2b0e0cbb2fa8d`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:3408bf243164e1a1fa470b4044952662ff76d9a92d25f1d19464ce3d4ce5436b`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [14571e8a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c) `sha256:666f0c9f5f455a2235a5ba7d3b4a079cda4f4956cc652866c2ee8696ef679de3`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:b20c285e56a2ddeba1482d4e707cd17e50a6d137de628cdc2c3fbd89f49852d4`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:7f9c769a81984ce9854f5f0e5c62e0677dc6c6ab71cea5cdcbb85efd17b1e158`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0338b3be](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0338b3be6912024d03def2c26f0fa10218fc2c25) `sha256:016513cd7fec85721d3530385fb65809cb5d77464df039bfa6b8f9ae65049e90`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:66b9a4e992340199d6d8684a992922dbd38ec790c678c8b0c878e8549d5d51f0`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [e8258113](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/e825811333c05b705c35d2e9a9a62e55e9ab0935) `sha256:aeeb38a8718291dcb592ad2f14549b3295231652e5eb894e748b6efc7b9bf4e2`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7685374f](https://github.com/openshift/cluster-machine-approver/commit/7685374f0e84181801b6390876a0d12c61fa9913) `sha256:56256d336e969f71667a48b24afd007ce28d59d25ce993c7c82d3f0fd3baf1a9`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [09963a50](https://github.com/openshift/cluster-monitoring-operator/commit/09963a509301f71679e9c567f06c6a4deda222fd) `sha256:b8499ac7d0aa1d8560e08a274e969dc96337ae181251fa19be959172a6a4bbb6`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:e3f558af3e9690d5210fd46f43a5b030d3ffce92b6c734cc68cbcbbb2ab7dbb8`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [27bf70dd](https://github.com/openshift/cluster-olm-operator/commit/27bf70ddf9421637e1da18b249785b2cca177272) `sha256:f1a6db1916423f070c83a8511d8a0984760f6a768c8334df76758b425f1dfd9e`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:5fc3dd1e06dafadf833c02e2ea86dc98254030a1f81c288346cad8433e89d4af`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2ed3cf99](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2ed3cf9965f8e6832cffde84f3de2fe210b79b49) `sha256:207de4041c811093d7dae4be1399462c440d5ee9fd0f287d2a1df50951b6008d`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:ab246126e01e9cfbd6ecc2213876315792d2110602006b9c2e46906437a86a58`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:97289b3d75288723a06f9dc62d434e05feb35ee95e151f0669715ef40c4c5ef7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:bddb86cf191d960d11597fcf946c35823e4da900e4caa56f952d8dd3ce98b7e3`
* [console-operator](https://github.com/openshift/console-operator) git [2d0c5f37](https://github.com/openshift/console-operator/commit/2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1) `sha256:c475ab9d17c8d63df14d82b20f0a98e5c4cc2464634fc54bde772ad2c2dad13b`
* [coredns](https://github.com/openshift/coredns) git [1e417656](https://github.com/openshift/coredns/commit/1e417656c1c72d3410b31ee08caf25bcdf8836e3) `sha256:ccda988f4a83f8047faf5612bf2ccc8b621ee0400a1e7a1913f3bdb4b6e3075e`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [1d3aa2ba](https://github.com/openshift/cloud-provider-openstack/commit/1d3aa2baae81b8c15260e87a816650b172c868f8) `sha256:807412ab8c6205dd5e8fa346b94e141268a8d08368612caf28842d4b64cf44c5`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [c25d1ff2](https://github.com/openshift/csi-driver-manila-operator/commit/c25d1ff2677a882504b18220dcbbe153781f3883) `sha256:3b49c61b4eb42e58097d4ae1a135673cf20f664c1c0d3b8b7707bfe8789a19c8`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:ae6e0e9e62b10df8ebc279c2db414c657061fcc8f251c900336f86bdd706d202`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:17f06b948fb6ea0674a5e4ebac2e67dfc8a4805c7500b2d02ce65c4d720f4cf5`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:de448a3f202a62a19e7f884ad5456363ec4061e0f28db7c5fd61d944c0f07c50`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:9de0e9962d8775b5db123f5d6907789ac22c2ac4d0953652805b595514e2bde7`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:85a1bd926ce3146bb581734e6531f4f40b851b9f3ac029ade3a243d6219fb3d4`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:08d0c198b5890f76f676bd1a54fe7eaf7350fe743cdde1f788dd05a7e24dcd47`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:f108d4dccc869cfc2154a2672aa7a4c627e615d81b8eb71554a0d0d52ed004d8`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:65a4ed1f155ee10d9a50775ae28bf1f1f3e5c2f8476ca7e874d6006b5b020aa0`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:f7a39de4e6f91ae8c7269cfc62eb828d8e07a3ada6f1cd9615d40ca67d5471f2`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:58b08bd53f43b20a04108272fbcc5b11fe76c17d60d0d813a098dfe35b911e6d`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:5ebce14824e97cd3d5441ec337d1a13447287a1f2ec3388d7962b3de730a3a77`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:a1765ef5966356dfd889b48737614f4e03bf2295301ef351b0116c8dc4ea8b1f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:69a06ebc8e85e0059c96be333acc3e0e5bc52c9a2a7bf0b3bfdd1e93d77c7071`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:967691c9b846e43fc3b87ad2e326f068d9823f059142306d090c5cb4dee7206a`
* [etcd](https://github.com/openshift/etcd) git [e7911c0d](https://github.com/openshift/etcd/commit/e7911c0d19925c0a67328052a8580a80fb40cb5b) `sha256:294b849f696e370aa20fd39bc19f7782ec408d0dff9ca7c9006a9c6b1d46762c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:0497fc60a326e9404b36d9a7432434ea11e2598c36eda2dd618e2482f8100663`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [02432df8](https://github.com/openshift/cluster-api-provider-gcp/commit/02432df87df9a731c8d630311854fbd515602e91) `sha256:9be8871bcc3977d4e6cf360b5ae662a497d44bdbc8066d4e279fdacf56a6a413`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:311aec7e1b15f56d5b5e69e2a14c966ff9a1dc483bda15e83b08d4fdb2bb0b2f`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:b258427e1b649581cf5db5e54a916a566f6ad7f58324a4d9308fa3869bfd0b0f`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:b427d3ef140ddceaaad95acf0d39f17530a116c95e871a4819e51c5cfd4acc55`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [5d5d8010](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/5d5d8010a59916cc264d0ab14962be85a35b7228) `sha256:bd3ee7a5676f0623ea3c46b267c465d5ffbc3e55e3f9bf689a52ceb051fe3da6`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [7d4f93ef](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/7d4f93efe65a7c070ded6b889b61ae3d51e259fb) `sha256:904b014c78867efda4dcef94284d0dcc216a9c02d4a5ba611998f107eac6da21`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [d29506e7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/d29506e7fea609bc8f004256c9c057e5429f72a1) `sha256:afdc38b2fd9b53fd967da7b9bc4643da30d25b1b15bb25d8c3f35f39fb636253`
* [insights-operator](https://github.com/openshift/insights-operator) git [80aaae31](https://github.com/openshift/insights-operator/commit/80aaae316ad37023a112db855525c0e7bf18db74) `sha256:2c54bc3b2d77cc15ae1e101f8d29fccbb1287836c0df492a26a7a581eb417e0c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:bd02f1fa514e044600a8f470381cbdd8a93bd2e468b0382d93ef834aa1c3fdf3`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:dc701cfbcee28ebc5bbf1771f2e19374a75a56214d12ed5d640c540cc7482cc2`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:e9e076521fe84408f5c66519fb91777f992e5864f123df0e585c2a2afa3ddfbb`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [9116b918](https://github.com/openshift/kubernetes-metrics-server/commit/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a) `sha256:f1dcfe223e87009149d1cad8983ab3d17cf9f51b15e17ee37271e4772187c267`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c38f4734](https://github.com/openshift/kube-rbac-proxy/commit/c38f4734c6b6931c75d46674122fb4b838b6e64b) `sha256:8eeed107cf9df249a470619ded55210032725b4915c24a038ddc3e5fb9f30a7f`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:2b60abb520aa49664150a3bd3c7700d47fd05c67784739dd27052a6e482b1f8d`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [969a60e9](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51) `sha256:9b9ba3c81d3c0ea5f1ccb8c5a0e8ad194898bf3bfe80a7c478336ace249ae9a9`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:63eddc2e8392d73fbe964ff9ca359f47e263efc2db7eb6f011b6292f000ee721`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:586afb06917d17383a27eeb8d8d1d6c436f148887dfcd09697aecc65f0262dda`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:5f8272c258ae8f9e8e8b27cd86735faf837ec196430038abe9d62f8f8be0dd32`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:ccc0fe9b8381a3c2f80fc6d884b5e9189b076c152a22d7cadba6921534b21882`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [88c596ed](https://github.com/openshift/multus-admission-controller/commit/88c596ed782cf6c3f94efa286b3568d12acde436) `sha256:888aa552b00b30b9b6b0da78913555cf32de870a8768be8918fbc2181992668f`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:bfb8a4751fd02b53cc9efb58ece91562d9147e8556cc122921c6198182f69c89`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:494b5dbcdf7d91bc88cddbf422c2a49a1d4133537866ba9f11b917835a722aa0`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [bb911451](https://github.com/openshift/bond-cni/commit/bb911451158fc06f193917863778434944e88ae1) `sha256:97a014357150a76016a8884b91e2de4ba3e335546414a628e265c26c69b51422`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [48059263](https://github.com/openshift/network-metrics-daemon/commit/48059263880572c52fb8b21f1441370100dc167a) `sha256:bacac2bc0d0f378fdfefbb1549c2a9a06f0769d29d8c26d570bf173e6b37cff5`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [28bf5963](https://github.com/openshift/cloud-provider-nutanix/commit/28bf5963c7f82ae8d966a69562a19f038d819950) `sha256:fdad149c1b0990461da0c743dd865386e5988dfe684f0a3ce5d8f397fb617491`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:742d7c08c1bb926f8efa6c69b7b4ffd1d3598a305cda72283dec377d312ae59d`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:8ad556ebab6399944ff811c0ba758a09f0bd1944fd65525f475f1c04cd9fc530`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [b137a53a](https://github.com/openshift/oc-mirror/commit/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a) `sha256:2115445d4bdb5fefb95e7d1b4d60b4d2c1ac7833f653e56121431579975500f8`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:6782383c47406fb48ccba26de8af2aeec26736bc1e2c6f3fcc0a9641de7625e4`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:78df3523185731b85de964b7a0aa143ced94f2583d048ac9e26c8a65b1eb4c25`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:ee93ee8d1046093daa40c244df0c6beab3da01c71b26d27106f7be5be8525056`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:712627818a0402f5dbe7595fbe26387a11019ff927df1b7048432cf1abc42825`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [1d3aa2ba](https://github.com/openshift/cloud-provider-openstack/commit/1d3aa2baae81b8c15260e87a816650b172c868f8) `sha256:0f357c975f6225d6b8fcfd89849d9b1a7bfda572d69c021107d9fa57fa659d0b`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:506d8d6a04422a1c5132f2f3c7bfe0d42e105104caa22f3b154d01f81370f6e4`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [1d3aa2ba](https://github.com/openshift/cloud-provider-openstack/commit/1d3aa2baae81b8c15260e87a816650b172c868f8) `sha256:7517067f6108e3b671ad04f3670974dc1a9e7814af6ee0cec0d85bc312ff80fb`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [5ada1cba](https://github.com/openshift/machine-api-provider-openstack/commit/5ada1cbab3a9354488b1e74e85c36285302c3382) `sha256:5eef7541b6f254884cba6110e18c3af114ba84ecf94aba06b7c0580cc76a607e`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:b748964b1b2b0990b695185f0eca1007b1a8f9630a81d05c5c88df84743a31bc`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:1d0f0bbf59b8e136a52959c8fd773e2e45de3554b0ce51ca4717daa1c6e84af8`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:d2e351983b7b584aa2e69e2600b4f9eea862713137c56200d970a978e847529a`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:c0b8515777d2d133c74fd0d15352cd101eff9328c7b099d1c554a9d9bc988cd2`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:1d7f0a531e1d3e397da7aeb6bd022bd6aa2144481e32a3e4fc3a20268c593c21`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [60ebedf0](https://github.com/openshift/machine-api-provider-powervs/commit/60ebedf061fe1bb5279650fd637108b13b92d95f) `sha256:31af1aa29e05d81207e69f57c6ed215010fc901963c886617ae8c365e14cf882`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:830dd99dd4fc5269f71ce4cdcf80046432e71dcff21419b3de9e23eef40f9da7`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e9aea929](https://github.com/openshift/prometheus-alertmanager/commit/e9aea929f309f412678fdf1064e1f74db3ba08b4) `sha256:d729403aac64f350550036f5395c2b9a4aca62b555046e5b10a3d33d2f03d9b1`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:d9a560b59582449c0de58260d712099e35f956ff805d7a1cbc31d8b5adffecaa`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:6f0949eccdfc64eaaddaf58e8685b23e4f56533ce42a6dbb8bb315e2e558ca5c`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:3db03326bd5ce731a5630056914f8f13146de29815ebd19ebf8193edee1abcd8`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:f40b3ca57f26f794733c9995ffb1e3a278cc14901e0bc6d04923993454cf0eb0`
* rhel-coreos `sha256:f244d130d635806a85c4ba598a6d7c8c4e7af8106e0d85ae33d09a803d5dfac5`
* rhel-coreos-extensions `sha256:0fa8742d6fc05aae1899e1052d47a577026b7a82d0adf710326bc3bead38c5e3`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:85b61b64d77e06535ec452b1c7ad9ae14b1eb148707ead33bcf5586f2547e66b`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:56f96ef47486fc3b480f15159d5f564ef4241e87a555292333041e1b25fd80a9`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:1f500e628b25bbc7d72d776faceb88225b8629d7f9a75fd1a34413351992842f`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [023a3655](https://github.com/openshift/cloud-provider-vsphere/commit/023a3655c181512a870fe1c865dbdbd31690f439) `sha256:5b70e5d5975cc90024d36c143750a7e48d09097564d918251c4c88c74e5018fd`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [be22f10a](https://github.com/openshift/cluster-api-provider-vsphere/commit/be22f10a56a18cd94406eea442e0113d866618ea) `sha256:1ceec7517a35f7189bcbe394c4c1256b99ace7776adfc0f254f30230023c7ed2`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:148cb3acf7868649e5f92d107a5b9d151ff8d1f9b9693d4b39c32fc1d69a244a`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:7f76e5cd4323fd41a65e1505382a262efca62d9e6753376cc44109094b35c868`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3683c120](https://github.com/openshift/vsphere-problem-detector/commit/3683c120278fb79a30340f66d22948aaddf3c16a) `sha256:759b8876d559dd3ab780b967dc1988a818feaf4555b61bd7051298b72d4c9072`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/cf4e24ce161365e4f0bc4286dedef3891041f7ba)

* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7486) [#7486](https://github.com/openshift/assisted-service/pull/7486)
* [OCPBUGS-45244](https://issues.redhat.com/browse/OCPBUGS-45244): Bump moby from v26.0.0 to v27.2.1 (#7189) [#7189](https://github.com/openshift/assisted-service/pull/7189)
* [Full changelog](https://github.com/openshift/assisted-service/compare/71c1d799edcc2e4a0e0b976d2eea4a100f170285...cf4e24ce161365e4f0bc4286dedef3891041f7ba)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* abi: let the bootstrap waiting for workers before rebooting (#1047) [#1047](https://github.com/openshift/assisted-installer/pull/1047)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/ab9e2ade2f45890033a140b314ef87e367317b51...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3cf0e7cf67abe6ea698ce21e3829c0424201ab2d)

* run go mod tidy / vendor [#1019](https://github.com/openshift/assisted-installer-agent/pull/1019)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9354874458a3ab97dfb7ca68de011637fd5423e3...3cf0e7cf67abe6ea698ce21e3829c0424201ab2d)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/de46a7e48105e8299024a25626cc1beb48c6b04b)

* [OCPBUGS-53726](https://issues.redhat.com/browse/OCPBUGS-53726): Update golang-jwt to v4.5.2 [#547](https://github.com/openshift/cluster-api-provider-aws/pull/547)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/60d797bea7418e10ec26ae1ccef4e42249705b6c...de46a7e48105e8299024a25626cc1beb48c6b04b)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/459c531487ae4dd94301e2996bf817d47124854c)

* [OCPBUGS-52513](https://issues.redhat.com/browse/OCPBUGS-52513): github.com/go-jose/go-jose/v4 v4.0.5 [#203](https://github.com/openshift/aws-pod-identity-webhook/pull/203)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/746491a64a4efc04132ceb641cee52c2ead3facd...459c531487ae4dd94301e2996bf817d47124854c)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/af633e05305c7adf67419ded3671903060ea4c66)

* [OCPBUGS-53494](https://issues.redhat.com/browse/OCPBUGS-53494): bump golang-jwt v4 [#13](https://github.com/openshift/azure-kubernetes-kms/pull/13)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/47d243b5a993fd0817eecf89a6d7896a3c911ecb...af633e05305c7adf67419ded3671903060ea4c66)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d836fece4c28219df8327720a7ecd55ddfb48041)

* [OCPBUGS-56656](https://issues.redhat.com/browse/OCPBUGS-56656): Fix failure when attempting to modify immutable availabilitySet [#151](https://github.com/openshift/machine-api-provider-azure/pull/151)
* [OCPBUGS-56092](https://issues.redhat.com/browse/OCPBUGS-56092): Update eviction policy for Spot VMs from Deallocate to Delete [#142](https://github.com/openshift/machine-api-provider-azure/pull/142)
* [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137)
* [OCPBUGS-50966](https://issues.redhat.com/browse/OCPBUGS-50966): dynamically setting the amount of fault domains [#129](https://github.com/openshift/machine-api-provider-azure/pull/129)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e4e11505b645e2af8eb28c5dc353c41a6740db00...d836fece4c28219df8327720a7ecd55ddfb48041)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/5b8d171e853d10ba151bfac4ac1e76109524ca4b)

* [OCPBUGS-53798](https://issues.redhat.com/browse/OCPBUGS-53798): github.com/golang-jwt/jwt/v4 v4.5.2 [#33](https://github.com/openshift/azure-workload-identity/pull/33)
* [OCPBUGS-52510](https://issues.redhat.com/browse/OCPBUGS-52510): github.com/go-jose/go-jose/v4 v4.0.5 [#29](https://github.com/openshift/azure-workload-identity/pull/29)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/4aca092a13f62e48c700a910e8f3f0f228a7d822...5b8d171e853d10ba151bfac4ac1e76109524ca4b)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/5b041e9d08a3717207cb610c479d14237dae8ec2)

* [OCPBUGS-55807](https://issues.redhat.com/browse/OCPBUGS-55807): update resolv.conf every time on bootstrap node [#9694](https://github.com/openshift/installer/pull/9694)
* [OCPBUGS-57460](https://issues.redhat.com/browse/OCPBUGS-57460): vsphere - check if host is powered down or on standby before uploading template [#9786](https://github.com/openshift/installer/pull/9786)
* [OCPBUGS-36677](https://issues.redhat.com/browse/OCPBUGS-36677): Power VS: Enable incoming traffic on port 5000 during installation in a restricted network [#8711](https://github.com/openshift/installer/pull/8711)
* [OCPBUGS-57498](https://issues.redhat.com/browse/OCPBUGS-57498): ensure ctrplane nodes can access bootstrap MCS [#9788](https://github.com/openshift/installer/pull/9788)
* [OCPBUGS-54240](https://issues.redhat.com/browse/OCPBUGS-54240): Update timeout for GCP WaitFor operation [#9715](https://github.com/openshift/installer/pull/9715)
* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [OCPBUGS-54327](https://issues.redhat.com/browse/OCPBUGS-54327): Remove error logging when determining image arch [#9610](https://github.com/openshift/installer/pull/9610)
* [OCPBUGS-54345](https://issues.redhat.com/browse/OCPBUGS-54345): Remove tmp directory used for agent pxe files [#9611](https://github.com/openshift/installer/pull/9611)
* [OCPBUGS-54263](https://issues.redhat.com/browse/OCPBUGS-54263): IBMCloud: Move to IBM TF openshift fork [#9604](https://github.com/openshift/installer/pull/9604)
* [OCPBUGS-50547](https://issues.redhat.com/browse/OCPBUGS-50547): aws/edge/byovpc: tag edge subnets with shared value [#9482](https://github.com/openshift/installer/pull/9482)
* [OCPBUGS-52191](https://issues.redhat.com/browse/OCPBUGS-52191): [release-4.16] capi/aws: bump provider for LB DNS lookup fix [#9547](https://github.com/openshift/installer/pull/9547)
* [OCPBUGS-51207](https://issues.redhat.com/browse/OCPBUGS-51207): Log correct hostname for validation status [#9511](https://github.com/openshift/installer/pull/9511)
* [OCPBUGS-51111](https://issues.redhat.com/browse/OCPBUGS-51111): PowerVS: destroy dhcp hack [#9502](https://github.com/openshift/installer/pull/9502)
* [OCPBUGS-48762](https://issues.redhat.com/browse/OCPBUGS-48762): Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 [#9478](https://github.com/openshift/installer/pull/9478)
* [OCPBUGS-43469](https://issues.redhat.com/browse/OCPBUGS-43469): pkg/asset/installconfig/azure: send full certifcate chain [#9467](https://github.com/openshift/installer/pull/9467)
* [OCPBUGS-49416](https://issues.redhat.com/browse/OCPBUGS-49416): [Nutanix] Installation failed with timeout when uploading images to PC [#9412](https://github.com/openshift/installer/pull/9412)
* [Full changelog](https://github.com/openshift/installer/compare/162d3adca436493ad1b06a03d623a5acf5548da2...5b041e9d08a3717207cb610c479d14237dae8ec2)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/84aeac37bd09c663278bf60faedd15241412f2fb)

* [OCPBUGS-53322](https://issues.redhat.com/browse/OCPBUGS-53322): BMO can expose any secret via BMCEventSubscription CRD [#407](https://github.com/openshift/baremetal-operator/pull/407)
* [OCPBUGS-49703](https://issues.redhat.com/browse/OCPBUGS-49703): Handle HFC for non-redfish HW [#396](https://github.com/openshift/baremetal-operator/pull/396)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/ae55a7053373827ad4b1aff6dceae5f077ce90e5...84aeac37bd09c663278bf60faedd15241412f2fb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c)

* [OCPBUGS-51043](https://issues.redhat.com/browse/OCPBUGS-51043): Add HOST env var in oc debug for sos report collects more [#1977](https://github.com/openshift/oc/pull/1977)
* [Full changelog](https://github.com/openshift/oc/compare/cf533b548154f7f2e828a44864477bbbb881692d...ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/365dfb4ef9cf04c8a191a4fe848ee2d9ab65d41d)

* [OCPBUGS-56981](https://issues.redhat.com/browse/OCPBUGS-56981): Azure: resolve nil pointer exception when role assignment exists [#867](https://github.com/openshift/cloud-credential-operator/pull/867)
* [OCPBUGS-53416](https://issues.redhat.com/browse/OCPBUGS-53416): github.com/golang/glog v1.2.4 [#843](https://github.com/openshift/cloud-credential-operator/pull/843)
* [OCPBUGS-53822](https://issues.redhat.com/browse/OCPBUGS-53822): update github.com/golang-jwt/jwt [#839](https://github.com/openshift/cloud-credential-operator/pull/839)
* [OCPBUGS-51544](https://issues.redhat.com/browse/OCPBUGS-51544): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#829](https://github.com/openshift/cloud-credential-operator/pull/829)
* [OCPBUGS-52512](https://issues.redhat.com/browse/OCPBUGS-52512): github.com/go-jose/go-jose/v4 v4.0.5 [#826](https://github.com/openshift/cloud-credential-operator/pull/826)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/87a85dc8e12e74149583877996ae38597e78e3dd...365dfb4ef9cf04c8a191a4fe848ee2d9ab65d41d)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/66931aae890394ae9f91b273160e2788e548b969)

* [OCPBUGS-56359](https://issues.redhat.com/browse/OCPBUGS-56359): Increase API call timeout to 30 second [#172](https://github.com/openshift/cloud-network-config-controller/pull/172)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8ceee78810756afaa2efb75f60bef0358502834f...66931aae890394ae9f91b273160e2788e548b969)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/0e39ace55e81b082a50f67402e7776adb8c6c8a7)

* [OCPBUGS-54655](https://issues.redhat.com/browse/OCPBUGS-54655): Avoid duplicate OAuth client creation [#766](https://github.com/openshift/cluster-authentication-operator/pull/766)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4782c451e1aab859b7db09aee01af10c1ebf428c...0e39ace55e81b082a50f67402e7776adb8c6c8a7)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/6222ac21a2b55bda531df9811502e9626caad536)

* [OCPBUGS-54326](https://issues.redhat.com/browse/OCPBUGS-54326): improve replica counting and decrease target size behavior [#353](https://github.com/openshift/kubernetes-autoscaler/pull/353)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f0bac124f7a1c6dee6e40fe90415cb95017f83a1...6222ac21a2b55bda531df9811502e9626caad536)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/70164fc606a7b05352d92a8d07bd6ac42421c0ae)

* [OCPBUGS-52329](https://issues.redhat.com/browse/OCPBUGS-52329): set max soft bulk taint count to zero [#341](https://github.com/openshift/cluster-autoscaler-operator/pull/341)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/40cadf8a4729ca808a3413e9b8593ab7aab0bed7...70164fc606a7b05352d92a8d07bd6ac42421c0ae)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4f6e4b9f347338286d44ec137d211035d3fe8c7f)

* [OCPBUGS-54546](https://issues.redhat.com/browse/OCPBUGS-54546): Add missing relatedObjects [#470](https://github.com/openshift/cluster-baremetal-operator/pull/470)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/03738f2d941b836800926fc701202b8d4b9d0605...4f6e4b9f347338286d44ec137d211035d3fe8c7f)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c699f6cfedbcd8509a85db2be3e6f90712b728fe)

* [OCPBUGS-49603](https://issues.redhat.com/browse/OCPBUGS-49603): fix: always update clusteroperator status versions when differing [#253](https://github.com/openshift/cluster-capi-operator/pull/253)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3a2f98fba9180a470d224aa662bb7df5ee5127bf...c699f6cfedbcd8509a85db2be3e6f90712b728fe)


### [cluster-config-api](https://github.com/openshift/api/tree/5f9522bd5e3e1a9cbcb169ce2b7c1716257d8585)

* [OCPBUGS-58392](https://issues.redhat.com/browse/OCPBUGS-58392): Add IPsec API for NAT-T UDP encapsulation support [#2393](https://github.com/openshift/api/pull/2393)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2330](https://github.com/openshift/api/pull/2330)
* [Full changelog](https://github.com/openshift/api/compare/b7d0481c9094172326bc9462c4f85b8f3ff0d761...5f9522bd5e3e1a9cbcb169ce2b7c1716257d8585)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a4b1cfb4927052f4e21e919d0af05f78ca4fcace)

* [OCPBUGS-52498](https://issues.redhat.com/browse/OCPBUGS-52498): [release-4.16] Add runbook_url for CoreDNSErrorsHigh [#431](https://github.com/openshift/cluster-dns-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/8ddf28f959955e2b1b319856c0d47ae6729bcc31...a4b1cfb4927052f4e21e919d0af05f78ca4fcace)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)

* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0f1869b1ed6b73023a46072311064ce6de6bcc33)

* [OCPBUGS-53870](https://issues.redhat.com/browse/OCPBUGS-53870): bump github.com/golang-jwt/jwt [#1219](https://github.com/openshift/cluster-image-registry-operator/pull/1219)
* [OCPBUGS-51600](https://issues.redhat.com/browse/OCPBUGS-51600): bump golang.org/x/oauth2 [#1210](https://github.com/openshift/cluster-image-registry-operator/pull/1210)
* [OCPBUGS-51167](https://issues.redhat.com/browse/OCPBUGS-51167): ensure that storage names don't end in dashes [#1181](https://github.com/openshift/cluster-image-registry-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068...0f1869b1ed6b73023a46072311064ce6de6bcc33)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/218159f7b060760c7e910b57429beea2f3eb3146)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add e2e tests for IdleConnectionTerminationPolicy [#1235](https://github.com/openshift/cluster-ingress-operator/pull/1235)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleConnectionTerminationPolicy [#1234](https://github.com/openshift/cluster-ingress-operator/pull/1234)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/57f9674e75908ca11b24792fb9f077233cd7bcf1...218159f7b060760c7e910b57429beea2f3eb3146)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/f47238554feb2fa6dbce3333adc7e26ffe2d8424)

* [OCPBUGS-50575](https://issues.redhat.com/browse/OCPBUGS-50575): Increase waitForFallbackDegradedConditionTimeout [#1805](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1805)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0...f47238554feb2fa6dbce3333adc7e26ffe2d8424)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5e51d1d51ce0e791c46009fa4e2e6f65a17853bc)

* [OCPBUGS-56992](https://issues.redhat.com/browse/OCPBUGS-56992): iptables-alerter streamlining [#2717](https://github.com/openshift/cluster-network-operator/pull/2717)
* [OCPBUGS-56195](https://issues.redhat.com/browse/OCPBUGS-56195): Fix live migration with feature migration configured explicitly [#2710](https://github.com/openshift/cluster-network-operator/pull/2710)
* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [OCPBUGS-52952](https://issues.redhat.com/browse/OCPBUGS-52952): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2663](https://github.com/openshift/cluster-network-operator/pull/2663)
* [Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty [#2651](https://github.com/openshift/cluster-network-operator/pull/2651)
* [OCPBUGS-51074](https://issues.redhat.com/browse/OCPBUGS-51074): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2650](https://github.com/openshift/cluster-network-operator/pull/2650)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b5eb4ae75b428e748cbf6a7e6b68da2b4687cbf3...5e51d1d51ce0e791c46009fa4e2e6f65a17853bc)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [OCPBUGS-54420](https://issues.redhat.com/browse/OCPBUGS-54420): add rhdmalone to owners [#620](https://github.com/openshift/cluster-samples-operator/pull/620)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/34eec32b3f8d79e15fa5bc59ddcea0c67f1caeee...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/f3cf5ff2dc6848db6da947c538c032f89ad152d2)

* [OCPBUGS-52353](https://issues.redhat.com/browse/OCPBUGS-52353): fix Vsphere cluster Storage operator in Unavailable state [#563](https://github.com/openshift/cluster-storage-operator/pull/563)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/86529c3935d12fd90f7537ade0db42f4fcb1eeb3...f3cf5ff2dc6848db6da947c538c032f89ad152d2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626)

* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [OCPBUGS-50590](https://issues.redhat.com/browse/OCPBUGS-50590): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1153](https://github.com/openshift/cluster-version-operator/pull/1153)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/671714b6563ff252cc4a8c455775d3682f2c1302...d0d0d6e7614148e497a10001ac16af689506c626)


### [console](https://github.com/openshift/console/tree/81b19813daab41ddd557baf54bbc57c72675bc68)

* [OCPBUGS-58188](https://issues.redhat.com/browse/OCPBUGS-58188): Fix TypeError Cannot read properties of null (reading 'metadata') [#15214](https://github.com/openshift/console/pull/15214)
* [OCPBUGS-57326](https://issues.redhat.com/browse/OCPBUGS-57326): Remove logoutOpenShift method call [#15172](https://github.com/openshift/console/pull/15172)
* [OCPBUGS-57270](https://issues.redhat.com/browse/OCPBUGS-57270): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15165](https://github.com/openshift/console/pull/15165)
* [OCPBUGS-57096](https://issues.redhat.com/browse/OCPBUGS-57096): Add all files to `vendor` regardless of gitignore [#15133](https://github.com/openshift/console/pull/15133)
* [OCPBUGS-57089](https://issues.redhat.com/browse/OCPBUGS-57089): Sample segment sessions [#15130](https://github.com/openshift/console/pull/15130)
* [OCPBUGS-56858](https://issues.redhat.com/browse/OCPBUGS-56858): remove 60 day alert from cluster update modal [#15102](https://github.com/openshift/console/pull/15102)
* [OCPBUGS-56715](https://issues.redhat.com/browse/OCPBUGS-56715): update the Deployment pod on change in imageStream [#15091](https://github.com/openshift/console/pull/15091)
* [OCPBUGS-56472](https://issues.redhat.com/browse/OCPBUGS-56472): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15072](https://github.com/openshift/console/pull/15072)
* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [OCPBUGS-48628](https://issues.redhat.com/browse/OCPBUGS-48628): Added token to proxy header [#14693](https://github.com/openshift/console/pull/14693)
* [OCPBUGS-54174](https://issues.redhat.com/browse/OCPBUGS-54174): Update the monitoring topic used by the console team [#14900](https://github.com/openshift/console/pull/14900)
* [OCPBUGS-52450](https://issues.redhat.com/browse/OCPBUGS-52450): fix run time error when no completed version exists [#14840](https://github.com/openshift/console/pull/14840)
* [OCPBUGS-52851](https://issues.redhat.com/browse/OCPBUGS-52851): Show Observe section without PROMETHEUS and MONITORING flags [#14849](https://github.com/openshift/console/pull/14849)
* [OCPBUGS-52288](https://issues.redhat.com/browse/OCPBUGS-52288): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14821](https://github.com/openshift/console/pull/14821)
* [OCPBUGS-49409](https://issues.redhat.com/browse/OCPBUGS-49409): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14703](https://github.com/openshift/console/pull/14703)
* [OCPBUGS-52418](https://issues.redhat.com/browse/OCPBUGS-52418): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14837](https://github.com/openshift/console/pull/14837)
* [OCPBUGS-49979](https://issues.redhat.com/browse/OCPBUGS-49979): Set default build option as BUILDS for Builder Image sample [#14730](https://github.com/openshift/console/pull/14730)
* [OCPBUGS-49800](https://issues.redhat.com/browse/OCPBUGS-49800): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14715](https://github.com/openshift/console/pull/14715)
* [OCPBUGS-49801](https://issues.redhat.com/browse/OCPBUGS-49801): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14716](https://github.com/openshift/console/pull/14716)
* [OCPBUGS-46388](https://issues.redhat.com/browse/OCPBUGS-46388): fix alert rule link [#14808](https://github.com/openshift/console/pull/14808)
* [OCPBUGS-52252](https://issues.redhat.com/browse/OCPBUGS-52252): Fix alert rule link to alert in dev perspective [#14817](https://github.com/openshift/console/pull/14817)
* [OCPBUGS-46441](https://issues.redhat.com/browse/OCPBUGS-46441): Do not pass CSV name to operand list page when an exen… [#14627](https://github.com/openshift/console/pull/14627)
* [OCPBUGS-36963](https://issues.redhat.com/browse/OCPBUGS-36963): Manually create an API token for a ServiceAccount [#14057](https://github.com/openshift/console/pull/14057)
* [OCPBUGS-35394](https://issues.redhat.com/browse/OCPBUGS-35394): sessions: fix sessions pruning [#13969](https://github.com/openshift/console/pull/13969)
* [Full changelog](https://github.com/openshift/console/compare/aeaa642076e0440d5bf577e0ac5a561e23b09af4...81b19813daab41ddd557baf54bbc57c72675bc68)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5f9ee066b2b7768606ffae81b52e8bd0f25cb471)

* [OCPBUGS-55648](https://issues.redhat.com/browse/OCPBUGS-55648): Check error returned by ipv6 SettleAddresses [#188](https://github.com/openshift/containernetworking-plugins/pull/188)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/73b4123cc75abd22af8dc3b429836be2bea45fd5...5f9ee066b2b7768606ffae81b52e8bd0f25cb471)


### [docker-builder](https://github.com/openshift/builder/tree/e77895c27d8d39398c585064b8a87b5531b2574d)

* [OCPBUGS-58074](https://issues.redhat.com/browse/OCPBUGS-58074): S2I build cpu limits observed by assemble are limited to 1 cpu [#475](https://github.com/openshift/builder/pull/475)
* [OCPBUGS-53076](https://issues.redhat.com/browse/OCPBUGS-53076): Upgraded Kubernetes dependency from 1.28.2 to 1.29.0 [#468](https://github.com/openshift/builder/pull/468)
* [OCPBUGS-42893](https://issues.redhat.com/browse/OCPBUGS-42893), [OCPBUGS-42914](https://issues.redhat.com/browse/OCPBUGS-42914): buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library [#450](https://github.com/openshift/builder/pull/450)
* [Full changelog](https://github.com/openshift/builder/compare/300d9ad0370b0746bd526b304331675064214bc2...e77895c27d8d39398c585064b8a87b5531b2574d)


### [docker-registry](https://github.com/openshift/image-registry/tree/5944d7459214475e0626b6fb8396c50790a9c7eb)

* [OCPBUGS-53654](https://issues.redhat.com/browse/OCPBUGS-53654): bump jwt and oauth dependencies [#432](https://github.com/openshift/image-registry/pull/432)
* [OCPBUGS-49696](https://issues.redhat.com/browse/OCPBUGS-49696): bump docker distribution [#423](https://github.com/openshift/image-registry/pull/423)
* [Full changelog](https://github.com/openshift/image-registry/compare/e4d56625da1bde6f51fb84f05efe02df92b6f120...5944d7459214475e0626b6fb8396c50790a9c7eb)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372)

* [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372)


### [haproxy-router](https://github.com/openshift/router/tree/7c4b47201b75421631739feb42e7ae86ae047739)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleCloseTerminationPolicy [#655](https://github.com/openshift/router/pull/655)
* [OCPBUGS-49391](https://issues.redhat.com/browse/OCPBUGS-49391): Reject All CA-Signed Certs Using SHA1 [#651](https://github.com/openshift/router/pull/651)
* [Full changelog](https://github.com/openshift/router/compare/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6...7c4b47201b75421631739feb42e7ae86ae047739)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/a6b193cd9c260cd0159d66a35b5654de32efde1f)

* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2342](https://github.com/openshift/kubernetes/pull/2342)
* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2352](https://github.com/openshift/kubernetes/pull/2352)
* [OCPBUGS-57290](https://issues.redhat.com/browse/OCPBUGS-57290): UPSTREAM: <carry>: Bump cadvisor version to fix kubelet [#2325](https://github.com/openshift/kubernetes/pull/2325)
* [OCPBUGS-49906](https://issues.redhat.com/browse/OCPBUGS-49906): Bump k8s api to 1.29.14 [#2211](https://github.com/openshift/kubernetes/pull/2211)
* [OCPBUGS-45931](https://issues.redhat.com/browse/OCPBUGS-45931): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 [#2200](https://github.com/openshift/kubernetes/pull/2200)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ef2a55c520f6a4c95996ff54c41fb58959750306...a6b193cd9c260cd0159d66a35b5654de32efde1f)


### [hypershift](https://github.com/openshift/hypershift/tree/91ab4c7358a5c2bba922b24d2f9ef30af37fa4be)

* [OCPBUGS-58505](https://issues.redhat.com/browse/OCPBUGS-58505): [release-4.16] Add missing service network DNS entries to KAS cert [#6393](https://github.com/openshift/hypershift/pull/6393)
* [OCPBUGS-57494](https://issues.redhat.com/browse/OCPBUGS-57494): Add proxy variables for the MCD Pod [#6286](https://github.com/openshift/hypershift/pull/6286)
* [OCPBUGS-55697](https://issues.redhat.com/browse/OCPBUGS-55697): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6114](https://github.com/openshift/hypershift/pull/6114)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6087](https://github.com/openshift/hypershift/pull/6087)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6082](https://github.com/openshift/hypershift/pull/6082)
* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [OCPBUGS-54632](https://issues.redhat.com/browse/OCPBUGS-54632): Sync RBAC for attaching volumes on VM level [#5998](https://github.com/openshift/hypershift/pull/5998)
* [OCPBUGS-49914](https://issues.redhat.com/browse/OCPBUGS-49914): Reconcile proxy CA bundle into hosted cluster [#5983](https://github.com/openshift/hypershift/pull/5983)
* [OCPBUGS-53902](https://issues.redhat.com/browse/OCPBUGS-53902): bump golang-jwt v4 and v5 [#5907](https://github.com/openshift/hypershift/pull/5907)
* Red Hat Konflux update control-plane-operator-4-16 [#5957](https://github.com/openshift/hypershift/pull/5957)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5922](https://github.com/openshift/hypershift/pull/5922)
* [OCPBUGS-51733](https://issues.redhat.com/browse/OCPBUGS-51733), [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Bump dependencies to OCP fork in backports [#5901](https://github.com/openshift/hypershift/pull/5901)
* [OCPBUGS-53308](https://issues.redhat.com/browse/OCPBUGS-53308): fix(deps): bump go-jose [#5866](https://github.com/openshift/hypershift/pull/5866)
* [OCPBUGS-52506](https://issues.redhat.com/browse/OCPBUGS-52506): refactor aws identity health check into new controller [#5781](https://github.com/openshift/hypershift/pull/5781)
* [OCPBUGS-52857](https://issues.redhat.com/browse/OCPBUGS-52857): Make managed-trust-bundle optional [#5809](https://github.com/openshift/hypershift/pull/5809)
* [OCPBUGS-52426](https://issues.redhat.com/browse/OCPBUGS-52426): change plaform to platform [#5773](https://github.com/openshift/hypershift/pull/5773)
* [OCPBUGS-50993](https://issues.redhat.com/browse/OCPBUGS-50993): Honor proxy vars in the util insecure http client [#5662](https://github.com/openshift/hypershift/pull/5662)
* [OCPBUGS-46466](https://issues.redhat.com/browse/OCPBUGS-46466): Consistently look up and dial cloud API hostnames [#5301](https://github.com/openshift/hypershift/pull/5301)
* [OCPBUGS-50698](https://issues.redhat.com/browse/OCPBUGS-50698): add region to AWS creds passed to operators managed by CPO [#5670](https://github.com/openshift/hypershift/pull/5670)
* [OCPBUGS-51296](https://issues.redhat.com/browse/OCPBUGS-51296): 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5707](https://github.com/openshift/hypershift/pull/5707)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5686](https://github.com/openshift/hypershift/pull/5686)
* [OCPBUGS-50694](https://issues.redhat.com/browse/OCPBUGS-50694): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5620](https://github.com/openshift/hypershift/pull/5620)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5635](https://github.com/openshift/hypershift/pull/5635)
* [OCPBUGS-50557](https://issues.redhat.com/browse/OCPBUGS-50557): Prevent IgnitionServer from flooding the API server with patch requests [#5599](https://github.com/openshift/hypershift/pull/5599)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 [#5597](https://github.com/openshift/hypershift/pull/5597)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 [#5591](https://github.com/openshift/hypershift/pull/5591)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5587](https://github.com/openshift/hypershift/pull/5587)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 [#5574](https://github.com/openshift/hypershift/pull/5574)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5575](https://github.com/openshift/hypershift/pull/5575)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 [#5531](https://github.com/openshift/hypershift/pull/5531)
* NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 [#5532](https://github.com/openshift/hypershift/pull/5532)
* [OCPBUGS-49640](https://issues.redhat.com/browse/OCPBUGS-49640): fix overwriting PKI operator HCP conditions [#5506](https://github.com/openshift/hypershift/pull/5506)
* [Full changelog](https://github.com/openshift/hypershift/compare/676df86637b8819a5fb9141158558c14e04d5487...91ab4c7358a5c2bba922b24d2f9ef30af37fa4be)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/8283424ccf9699622ce5d84df66bed9dc92a41b8)

* [OCPBUGS-53910](https://issues.redhat.com/browse/OCPBUGS-53910): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#84](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/84)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/957197389ec49234c3883bbb730bb630b459e24f...8283424ccf9699622ce5d84df66bed9dc92a41b8)


### [ironic](https://github.com/openshift/ironic-image/tree/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#648](https://github.com/openshift/ironic-image/pull/648)
* [OCPBUGS-49895](https://issues.redhat.com/browse/OCPBUGS-49895): Drop quiet option of grep to avoid race condition with pipefail [#634](https://github.com/openshift/ironic-image/pull/634)
* [Full changelog](https://github.com/openshift/ironic-image/compare/00257ef3725281e58ee5265dae9f5b382024fc9c...d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/aea138cd4ac822092199c141bb925b37527389cd)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#180](https://github.com/openshift/ironic-agent-image/pull/180)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/3c5298e05497b59a876c73c51359f49f3cc2cb99...aea138cd4ac822092199c141bb925b37527389cd)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)

* [OCPBUGS-49595](https://issues.redhat.com/browse/OCPBUGS-49595): Fix subnet validation [#48](https://github.com/openshift/ironic-static-ip-manager/pull/48)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/e78e4c3e6db1805816308197eb9002dfbca27560...f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53fea06bf50bdeff168cdf1ca3f5e19375c56f02)

* [OCPBUGS-54457](https://issues.redhat.com/browse/OCPBUGS-54457): Drop SYNACK as well in MCS side [#658](https://github.com/openshift/sdn/pull/658)
* [OCPBUGS-44674](https://issues.redhat.com/browse/OCPBUGS-44674): Handle `openshift-host-network` namespace as special when it modifies [#648](https://github.com/openshift/sdn/pull/648)
* [OCPBUGS-46493](https://issues.redhat.com/browse/OCPBUGS-46493): Raise the minSyncPeriod for NetworkPolicies to 10s during migration [#649](https://github.com/openshift/sdn/pull/649)
* [Full changelog](https://github.com/openshift/sdn/compare/a226c293ab041a5ee7706308b66856ab486fbeae...53fea06bf50bdeff168cdf1ca3f5e19375c56f02)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/d474c42ed4486f36cbcc8bfecac6b184483e92ee)

* [OCPBUGS-54632](https://issues.redhat.com/browse/OCPBUGS-54632): Ensure volume stays attached through reboots [#57](https://github.com/openshift/kubevirt-csi-driver/pull/57)
* [OCPBUGS-44622](https://issues.redhat.com/browse/OCPBUGS-44622): During detach don't return error if VM is not found [#49](https://github.com/openshift/kubevirt-csi-driver/pull/49)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/0693093f773c5046e231f174e7930315feabd996...d474c42ed4486f36cbcc8bfecac6b184483e92ee)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)

* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [OCPBUGS-53045](https://issues.redhat.com/browse/OCPBUGS-53045): add image/read permissions [#1348](https://github.com/openshift/machine-api-operator/pull/1348)
* [OCPBUGS-52342](https://issues.redhat.com/browse/OCPBUGS-52342): Drop oVirt support [#1336](https://github.com/openshift/machine-api-operator/pull/1336)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ac37878bf75e8b7ee850976663ef6eb61045195a...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4aeec11792b124a0eaa15e36b35750d25cc4be81)

* [OCPBUGS-58270](https://issues.redhat.com/browse/OCPBUGS-58270): Do not set cpu system reserve below the default value [#5163](https://github.com/openshift/machine-config-operator/pull/5163)
* add missing vendors [#4952](https://github.com/openshift/machine-config-operator/pull/4952)
* [OCPBUGS-48283](https://issues.redhat.com/browse/OCPBUGS-48283): Do not run resolv-prepender from NM dispatcher [#4784](https://github.com/openshift/machine-config-operator/pull/4784)
* [OCPBUGS-56868](https://issues.redhat.com/browse/OCPBUGS-56868): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5090](https://github.com/openshift/machine-config-operator/pull/5090)
* [OCPBUGS-56626](https://issues.redhat.com/browse/OCPBUGS-56626): error from generateAndValidateRenderedMachineConfig function can be misleading [#5075](https://github.com/openshift/machine-config-operator/pull/5075)
* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [OCPBUGS-53248](https://issues.redhat.com/browse/OCPBUGS-53248): Enforce VIPs to be collocated at the same host [#4923](https://github.com/openshift/machine-config-operator/pull/4923)
* [OCPBUGS-53043](https://issues.redhat.com/browse/OCPBUGS-53043): Enable nmstate-configuration on all platforms [#4910](https://github.com/openshift/machine-config-operator/pull/4910)
* [OCPBUGS-52952](https://issues.redhat.com/browse/OCPBUGS-52952): Add ipsec connect wait service [#4931](https://github.com/openshift/machine-config-operator/pull/4931)
* [OCPBUGS-54163](https://issues.redhat.com/browse/OCPBUGS-54163): Fixing typos for MachineConfigNode [#4942](https://github.com/openshift/machine-config-operator/pull/4942)
* [OCPBUGS-53434](https://issues.redhat.com/browse/OCPBUGS-53434): Update ObservedGeneration in KubeletConfig [#4935](https://github.com/openshift/machine-config-operator/pull/4935)
* [OCPBUGS-53313](https://issues.redhat.com/browse/OCPBUGS-53313): daemon: ensure ostree-finalize-staged is started before rebooting [#4928](https://github.com/openshift/machine-config-operator/pull/4928)
* [OCPBUGS-52421](https://issues.redhat.com/browse/OCPBUGS-52421): Update format verbs for alert logs [#4901](https://github.com/openshift/machine-config-operator/pull/4901)
* [OCPBUGS-51347](https://issues.redhat.com/browse/OCPBUGS-51347): Update the storage.conf configuration file template [#4881](https://github.com/openshift/machine-config-operator/pull/4881)
* [OCPBUGS-52593](https://issues.redhat.com/browse/OCPBUGS-52593): Update cluster-reader ClusterRole permissions [#4905](https://github.com/openshift/machine-config-operator/pull/4905)
* [OCPBUGS-52404](https://issues.redhat.com/browse/OCPBUGS-52404): create /run/nodeip-configuration before use [#4897](https://github.com/openshift/machine-config-operator/pull/4897)
* [OCPBUGS-52310](https://issues.redhat.com/browse/OCPBUGS-52310): configure-ovs workaround for ovs-if-br-ex bug [#4892](https://github.com/openshift/machine-config-operator/pull/4892)
* [OCPBUGS-50862](https://issues.redhat.com/browse/OCPBUGS-50862): Auto-recover from MC with invalid extension [#4853](https://github.com/openshift/machine-config-operator/pull/4853)
* [OCPBUGS-43680](https://issues.redhat.com/browse/OCPBUGS-43680): Regenerate the rendered MC in use when deleted [#4655](https://github.com/openshift/machine-config-operator/pull/4655)
* [OCPBUGS-49976](https://issues.redhat.com/browse/OCPBUGS-49976): Add clarification to invalid maxUnavailable alert [#4837](https://github.com/openshift/machine-config-operator/pull/4837)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9e721f05c02ec0dd8d1f4d58b95462bb87748f17...4aeec11792b124a0eaa15e36b35750d25cc4be81)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/a99847b4450d58dbd0e487dd7e834586cd3e9289)

* [OCPBUGS-54169](https://issues.redhat.com/browse/OCPBUGS-54169): Change rhcos release browser url [#57](https://github.com/openshift/machine-os-images/pull/57)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c...a99847b4450d58dbd0e487dd7e834586cd3e9289)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/e88ad2bbc482feb728c61783cfed85509b2a2db6)

* [OCPBUGS-47472](https://issues.redhat.com/browse/OCPBUGS-47472): adds getcontext (backport 4.16) [#261](https://github.com/openshift/multus-cni/pull/261)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f...e88ad2bbc482feb728c61783cfed85509b2a2db6)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/467d84ad05ef97ab2a36d27258185942e21d1636)

* [OCPBUGS-55618](https://issues.redhat.com/browse/OCPBUGS-55618): Fixes leftover podref issue [#365](https://github.com/openshift/whereabouts-cni/pull/365)
* [OCPBUGS-50005](https://issues.redhat.com/browse/OCPBUGS-50005): [Release-4.17]Kubeconfig loop [#340](https://github.com/openshift/whereabouts-cni/pull/340)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dab1dd29b18521916c18a278faa734f038eccdf1...467d84ad05ef97ab2a36d27258185942e21d1636)


### [must-gather](https://github.com/openshift/must-gather/tree/774a4e024925cc6034969eb84c9030a338a187e5)

* [OCPBUGS-42960](https://issues.redhat.com/browse/OCPBUGS-42960): Gather OSUS data [#455](https://github.com/openshift/must-gather/pull/455)
* [OCPBUGS-48082](https://issues.redhat.com/browse/OCPBUGS-48082): Update owners [#473](https://github.com/openshift/must-gather/pull/473)
* [Full changelog](https://github.com/openshift/must-gather/compare/353cd4b07ecac847c6c384775231dabc2bc44cdd...774a4e024925cc6034969eb84c9030a338a187e5)


### [network-tools](https://github.com/openshift/network-tools/tree/234ed43e3e7b2cfcb76a19c80fcdb573a625309f)

* add missing go vendors [#140](https://github.com/openshift/network-tools/pull/140)
* [Full changelog](https://github.com/openshift/network-tools/compare/39eca100c0978fb59234e21bf549b130914616ac...234ed43e3e7b2cfcb76a19c80fcdb573a625309f)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/2f2e121b6caea7073a5b7d64312f08f9d91233bb)

* [OCPBUGS-51854](https://issues.redhat.com/browse/OCPBUGS-51854): CVE-2025-22868 [#110](https://github.com/openshift/machine-api-provider-nutanix/pull/110)
* [OCPBUGS-47266](https://issues.redhat.com/browse/OCPBUGS-47266): fixing CVE-2024-45338 [#93](https://github.com/openshift/machine-api-provider-nutanix/pull/93)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f053e5a0ee58d20066efff8db01578785ea83dad...2f2e121b6caea7073a5b7d64312f08f9d91233bb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/f09a9be33b6455664a6842980fca4bd8008e9e6e)

* [OCPBUGS-30525](https://issues.redhat.com/browse/OCPBUGS-30525): Update dependencies to address CVE-2024-24786 [#124](https://github.com/openshift/oauth-apiserver/pull/124)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/fa1f097c2800b06b3b56537651294d023762a4eb...f09a9be33b6455664a6842980fca4bd8008e9e6e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/fcee0c265f79dcecccfd0d276e6fcc0af7dbcf11)

* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): prevent panic when no image and error are set [#494](https://github.com/openshift/openshift-apiserver/pull/494)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): validate image property isn't nil before using [#493](https://github.com/openshift/openshift-apiserver/pull/493)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): move on to the next digest/tag during failures [#492](https://github.com/openshift/openshift-apiserver/pull/492)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f1e2ceacdcca25cc6bfe2591ea596d98b83991a3...fcee0c265f79dcecccfd0d276e6fcc0af7dbcf11)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/18c8021a36cb0963a46ea45313913400404214ad)

* [OCPBUGS-57513](https://issues.redhat.com/browse/OCPBUGS-57513): Set node-pullsecrets volume to read-only to protect image pull credentials [#394](https://github.com/openshift/openshift-controller-manager/pull/394)
* [OCPBUGS-56354](https://issues.redhat.com/browse/OCPBUGS-56354): Empty proxy variables are causing issues during the build [#382](https://github.com/openshift/openshift-controller-manager/pull/382)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bcf6e58edbcc8e7ce6f7e4d0658635688e0fc114...18c8021a36cb0963a46ea45313913400404214ad)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)

* [OCPBUGS-58028](https://issues.redhat.com/browse/OCPBUGS-58028): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#346](https://github.com/openshift/cluster-api-provider-openstack/pull/346)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/bafa26de94c06009f563c8283ac42a78478667c5...3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/650a3cd620865598f97b5a3eaaf88cf044e2ffb3)

* [OCPBUGS-56358](https://issues.redhat.com/browse/OCPBUGS-56358): fix(olm): improve error logging for missing olm.managed label (#3558) [#1006](https://github.com/openshift/operator-framework-olm/pull/1006)
* [OCPBUGS-53395](https://issues.redhat.com/browse/OCPBUGS-53395): Ensure that PSA label is latest instead of pinning versions [#987](https://github.com/openshift/operator-framework-olm/pull/987)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/48d68f52674ad5afb2d40d032abb0892a5dafee6...650a3cd620865598f97b5a3eaaf88cf044e2ffb3)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/208d5aa79e2f953d0e621070091409ab43cb54e1)

* [OCPBUGS-49429](https://issues.redhat.com/browse/OCPBUGS-49429): Upgrade golang.org/x/net [release-4.16] [#587](https://github.com/operator-framework/operator-marketplace/pull/587)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2...208d5aa79e2f953d0e621070091409ab43cb54e1)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/72502ee080b31a1e019c2ce6c74747f31728803e)

* [OCPBUGS-58161](https://issues.redhat.com/browse/OCPBUGS-58161): Unpin OVS patch versions [#2648](https://github.com/openshift/ovn-kubernetes/pull/2648)
* [OCPBUGS-57396](https://issues.redhat.com/browse/OCPBUGS-57396): Fix predicate for cluster subnet route to gateway router [#2645](https://github.com/openshift/ovn-kubernetes/pull/2645)
* [OCPBUGS-55282](https://issues.redhat.com/browse/OCPBUGS-55282): Fix hybrid overlay node subnets collision with cluster subnets [#2621](https://github.com/openshift/ovn-kubernetes/pull/2621)
* [OCPBUGS-48121](https://issues.redhat.com/browse/OCPBUGS-48121): Increase InformerSyncTimeout to 60s [#2624](https://github.com/openshift/ovn-kubernetes/pull/2624)
* [OCPBUGS-56242](https://issues.redhat.com/browse/OCPBUGS-56242): Handles unspecified protocol in network policy port [#2571](https://github.com/openshift/ovn-kubernetes/pull/2571)
* [OCPBUGS-56812](https://issues.redhat.com/browse/OCPBUGS-56812): egressfirewall: avoid nil dereference on node delete [#2591](https://github.com/openshift/ovn-kubernetes/pull/2591)
* [OCPBUGS-52503](https://issues.redhat.com/browse/OCPBUGS-52503): Fixes unexpected mp0 route removal during start up [#2479](https://github.com/openshift/ovn-kubernetes/pull/2479)
* [OCPBUGS-54204](https://issues.redhat.com/browse/OCPBUGS-54204): Update OVN to FDP25.A.1 24.03.5-40. [#2497](https://github.com/openshift/ovn-kubernetes/pull/2497)
* [OCPBUGS-50595](https://issues.redhat.com/browse/OCPBUGS-50595): kubevirt, localnet: Reduce live migration downtime [#2469](https://github.com/openshift/ovn-kubernetes/pull/2469)
* [OCPBUGS-50594](https://issues.redhat.com/browse/OCPBUGS-50594): fixes overzealous deletion of SNAT in egressIP [#2456](https://github.com/openshift/ovn-kubernetes/pull/2456)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b24157b7b38f1be8a6175a2c7cae0fe8ece97f67...72502ee080b31a1e019c2ce6c74747f31728803e)


### [prometheus](https://github.com/openshift/prometheus/tree/4c5f18daa384c9fa90c5afdee69ed7aae7ccbf98)

* [OCPBUGS-56739](https://issues.redhat.com/browse/OCPBUGS-56739): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#255](https://github.com/openshift/prometheus/pull/255)
* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...4c5f18daa384c9fa90c5afdee69ed7aae7ccbf98)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/5da234dd58c092cba019807979f9c29664ddb860)

* [OCPBUGS-56152](https://issues.redhat.com/browse/OCPBUGS-56152): Added error event for failed ingress to route conversion [#61](https://github.com/openshift/route-controller-manager/pull/61)
* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...5da234dd58c092cba019807979f9c29664ddb860)


### [tests](https://github.com/openshift/origin/tree/65d2ed0a5731405923f11791977e1b0136636d56)

* [OCPBUGS-57203](https://issues.redhat.com/browse/OCPBUGS-57203): fix: remove un-needed test [#29849](https://github.com/openshift/origin/pull/29849)
* [OCPBUGS-34163](https://issues.redhat.com/browse/OCPBUGS-34163): Fix regex parser for censoring private key [#29805](https://github.com/openshift/origin/pull/29805)
* [OCPBUGS-56704](https://issues.redhat.com/browse/OCPBUGS-56704): aws/edge: prevent test using unschedulable nodes [#29847](https://github.com/openshift/origin/pull/29847)
* [OCPBUGS-55476](https://issues.redhat.com/browse/OCPBUGS-55476): support provider type external [#29738](https://github.com/openshift/origin/pull/29738)
* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [OCPBUGS-54768](https://issues.redhat.com/browse/OCPBUGS-54768): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29663](https://github.com/openshift/origin/pull/29663)
* [OCPBUGS-52581](https://issues.redhat.com/browse/OCPBUGS-52581): Use payload pullspec for image info test [#29589](https://github.com/openshift/origin/pull/29589)
* [OCPBUGS-52343](https://issues.redhat.com/browse/OCPBUGS-52343): Try also user CA for getting openshift-tests image [#29578](https://github.com/openshift/origin/pull/29578)
* [OCPBUGS-44119](https://issues.redhat.com/browse/OCPBUGS-44119): Ignore infra nodes on tap cni tests [#29261](https://github.com/openshift/origin/pull/29261)
* [Full changelog](https://github.com/openshift/origin/compare/ffc141f727e879141c5b56badcd608a2c5f40520...65d2ed0a5731405923f11791977e1b0136636d56)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/7940ea1685dee6d3f29a6360dac9a82dd1b09230)

* [OCPBUGS-51206](https://issues.redhat.com/browse/OCPBUGS-51206): Set reconcile-sync to 10 minute for ListVolume [#294](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/294)
* [OCPBUGS-49862](https://issues.redhat.com/browse/OCPBUGS-49862): List only linux nodes [#289](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/289)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4...7940ea1685dee6d3f29a6360dac9a82dd1b09230)