# 4.16.18

Created: 2024-10-18 16:20:48 +0000 UTC

Image Digest: `sha256:3f14e29f5b42e1fee7d7e49482cfff4df0e63363bb4a5e782b65c66aba4944e7`

Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-10-18-061923


## Changes from 4.16.7

### Components

* Kubectl 1.29.7
* Kubernetes upgraded from 1.29.7 to 1.29.8
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202408062045-0 to 416.94.202410172137-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalRouteCertificate <br/> (0 tests)| Unconditional<br/>(Changed)| Unconditional<br/>(Changed)| Unconditional<br/>(Changed)| Unconditional<br/>(Changed)| Unconditional<br/>(Changed)| Unconditional<br/>(Changed) |


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:3c2de69e4dfa4be9217e9d7f3d27c598f54d5d8fb5b32ebfa1b5007915c1a136`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:c07477a86f0afae4e81dd9789f49b2d86047d1d603386207d90eb836fc3704ec`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [064d4624](https://github.com/openshift/cluster-api-provider-alibaba/commit/064d4624c74d417dd31cf1c173c00c3fa98ffade) `sha256:e5424f150f760e8383a31fd0e02822a11edc274f6c3412bd1c31a39c87937c39`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:2b37a56fea7cd1f1839745062be9e4ea64f442139e0f884e514a6d1914056875`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [aaaf00b1](https://github.com/openshift/cluster-api-provider-aws/commit/aaaf00b18daf45c9eea93bc2924a6a7e22d27766) `sha256:3fbbb72173367e388037ef97a785d66d7f58ee53555d4a303d05f560f4e7e9b0`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:72e6661d8b960f8dc93a470d5c9fbd4e2fd505b29eb6d2d13b17892c25412729`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:ce7b83607bce5b2c5458eb17e4e9ad9feb3c5a3bbd902b1781714e5ee165d3c7`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [61d60f6c](https://github.com/openshift/machine-api-provider-aws/commit/61d60f6ca20443df434456c2f3eeba859634e6a2) `sha256:04ee351281a1e65faf93febc34eb2d2d9d41b93854272033b42cecee004654e8`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [746491a6](https://github.com/openshift/aws-pod-identity-webhook/commit/746491a64a4efc04132ceb641cee52c2ead3facd) `sha256:27f1b394ed93aa6ef07025e28d2d95539153d8cecc1cbaa62b6f037e3af00541`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:7059f18f16b95e7a1652ae22f437c0376df787d285e842326b59e0ff1a05ed74`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [0e955329](https://github.com/openshift/cloud-provider-azure/commit/0e9553295ecd02d6ef0aff19dfc1dfe680993112) `sha256:e50f98b24a6cd5d6d281ab96a81f7527d3d56ac8e0637214df378d68b2d02173`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a81e3b31](https://github.com/openshift/cluster-api-provider-azure/commit/a81e3b31948468d76ac744bbbb74b0c423fc969e) `sha256:2587b1ddf70bd5c72cc685636dd727e6ec32815cc7cc6229b4fc59f38caa7ea5`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:10b95469bb6a5b0e9beabd8da6685d5fe558a8d360be3cb29891c9a5d7d87172`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:54cf23c99d395e137480609ddf4166ca7388991fa669b6b8b593d6c9fc2951a4`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:8677d41f05503c944d7f11f6842934a305413ab360ae6dfa99b7d8b59301e82a`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [e4e11505](https://github.com/openshift/machine-api-provider-azure/commit/e4e11505b645e2af8eb28c5dc353c41a6740db00) `sha256:15056414e682cd4f482226727ebb6795278dd6052adad53639c1ce819c65fee7`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [4aca092a](https://github.com/openshift/azure-workload-identity/commit/4aca092a13f62e48c700a910e8f3f0f228a7d822) `sha256:076ecb778f609024b2fb0675b9733ed0662d2e889ec279b8e52c774d459c97a5`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [11ba601f](https://github.com/openshift/cluster-api-provider-baremetal/commit/11ba601fbca58557176fcc67ffe8d7d64b697a4a) `sha256:ccbf8910cdc2a2e5de54a3dc3666127c48ebfbc2aa7e68f9f56d62c06c4bade6`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [f55a330f](https://github.com/openshift/baremetal-runtimecfg/commit/f55a330f8139ef660b3f60b735ef77538f7b9cbe) `sha256:b7ae17994a1c0c30c17d3706dacbe0bdea0449a54567f2f8342f3e02066203d4`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [8ceee788](https://github.com/openshift/cloud-network-config-controller/commit/8ceee78810756afaa2efb75f60bef0358502834f) `sha256:73bcb0279325ec2e068cd0af4214af7b384b03cec5e6f7f629e50f6e84c88f74`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [bae1e1c4](https://github.com/openshift/cluster-authentication-operator/commit/bae1e1c40ca48ed8049892ade79410faf4977166) `sha256:1865ea8aa8b130995815d49a37de787c8b62c5435389461a210d19493cf782f2`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [eecb123a](https://github.com/openshift/kubernetes-autoscaler/commit/eecb123a3b02358046a2c2ce52adfc548a5caa17) `sha256:3926f4e121655dab8d58ca23c601f77bb04ee61f444f33a33276b3fd7e9072ba`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [40cadf8a](https://github.com/openshift/cluster-autoscaler-operator/commit/40cadf8a4729ca808a3413e9b8593ab7aab0bed7) `sha256:28060c10f26cd83f9f0bab0d3833a0afd52dedc6cc790f45e5c2fa4599105fd5`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:9f709f6ea138151b5f0d81cb60779d610fcfe9414a48d87e7a8256d12b043b04`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:7f40074fe7158b577254899ed05bd92123faee4ef136e5f9040e2eac7aa7d32e`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [3a2f98fb](https://github.com/openshift/cluster-capi-operator/commit/3a2f98fba9180a470d224aa662bb7df5ee5127bf) `sha256:a93d837323073e8408e6c5fbecbbd672f782552170c57014f85bcd845c23309e`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [d4008130](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/d4008130ad1283e9e384944ea54de3778c1003ad) `sha256:211330b739b3f3ccf38c455c9ac2b784e8fe210799a8b478ae169d5d0a3fbf4e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:8918d812afa08eda5f6fbfd0913c239b32b95d62e7727cbed9489ab435867938`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [b0cb3dfa](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/b0cb3dfa22cfd2ba52caec1c73dee5ea765735ec) `sha256:77bb21effc2ad587e1fc139aa625f895f7ebf19277ed0e3c31014040d6da7170`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:3b9e43df644b05cdf69665a9d5d231ba19a7846aa8d3babd9968a3ec33fd32dc`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [8ddf28f9](https://github.com/openshift/cluster-dns-operator/commit/8ddf28f959955e2b1b319856c0d47ae6729bcc31) `sha256:18fd93558b0972ef27a7836669bdfc5d7e1f44d9e7db4dca49deeb15f292b3ef`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [de2f2ac2](https://github.com/openshift/cluster-kube-apiserver-operator/commit/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0) `sha256:94eb592be27d898c569e07562aecb157d7ba5db6c6455da18845350b948c3fc1`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:d0637e86b30fb37cff09890066acd3fa179de3738a869c2d7cd064da74d5f6c1`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0338b3be](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0338b3be6912024d03def2c26f0fa10218fc2c25) `sha256:27d3c9c3aab97eb994363beacd52cd2df01ab2e2256e1fc0bac8afd5ed753ef1`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:997034690ff04f6c4697d1b0768673ac36e26197ed8e2123ee5b0f188df5bed7`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [3eba7eed](https://github.com/openshift/cluster-machine-approver/commit/3eba7eeda244ea48c520d5384547659e9257cb58) `sha256:7e21f435213fa96707dae0974759080ebad2fae5d17704694f36364fb032674b`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [27bf70dd](https://github.com/openshift/cluster-olm-operator/commit/27bf70ddf9421637e1da18b249785b2cca177272) `sha256:aca7790786a0c4f3da8672bfb67ca7231a044b669345559c57f699b55b696709`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:ce18681a7994540c930a4f564bdb6ef179693218f931e78656f132c2fe5620ef`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [bcc371cc](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/bcc371ccbc9cab9bcb80b3f1a281a40c28011f59) `sha256:c607e2d8b876c65a67099f5262ef4cc31bcf96c6e8f3b815b06e83ebde5e563f`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:6e4339de9a9b08a2bb2e7c452d8bf1297063b84fb426f7d1d5ae9669970c1845`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [617769f9](https://github.com/openshift/cluster-version-operator/commit/617769f980c5b2b59ad6ee821aad511de44a798d) `sha256:59cf55a6269ba370f426e18317188de4acf6aee4eee7f79f96d3f2066c9643b0`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:e2ae7431075d5cce23013399e843084b7d26bc0e52530e7001ab57fa4ee0a364`
* [console-operator](https://github.com/openshift/console-operator) git [92447df5](https://github.com/openshift/console-operator/commit/92447df597eeca8a92bb9019e854619e19736638) `sha256:514ab7310f840027dc2609b10fa465eb6282c11d110f3d69efcf21ea5ef63ec9`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [73b4123c](https://github.com/openshift/containernetworking-plugins/commit/73b4123cc75abd22af8dc3b429836be2bea45fd5) `sha256:e003b5cd2331fcf64612c9f63ffeb79821556dc9953efbf2c4135e88e28d324a`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [73b4123c](https://github.com/openshift/containernetworking-plugins/commit/73b4123cc75abd22af8dc3b429836be2bea45fd5) `sha256:a659df32b2c45e4a4e416ca6de4bfecd4eda4d1a60fa930cc2ec9a5856ad9ea8`
* [coredns](https://github.com/openshift/coredns) git [1e417656](https://github.com/openshift/coredns/commit/1e417656c1c72d3410b31ee08caf25bcdf8836e3) `sha256:bd6efec780391d82ac1fdcf1756c14d5b589e0edde75e0ab79fb34e987f9c610`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:3eb6e2d693f2354bd3317104530aad90be183c082dcb20ee515e07fcc48436f4`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:3050949d8851d611a23a3d83e5b5b4d611603ecf55fe2254979d0342903b41d5`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:94688366ec93978fcb38fc670b785e521925e67543ed76ca24db5a1d4603b83b`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:8efea1cf0b2248d729bd84da28bc6ac2c5b8398a2990bf72bf5bfd7a57c04855`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:13167b6098fc081275f72f7542861a4d0400447f9901792bf179cfebd53f725d`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:b3f893b1ece9780a4ce3fd79a2581af4861f68361cda9a66b7e83d3f48e28003`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:2379da0a5d2e2cc0f1ae115f3f9de11dc9df5c6670a641814321ded76547e25f`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:94c3eb8a06df3f052a6540d64dc52495d60b353065f61ead7d557fbc4a720eba`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:52059a5d5ffa5da17f36a7f09aa8aefb0835dcf6acc4557a5a1b89cad14cc2a2`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:c116247a477876781d7ece5f5fb0e523590a47238276d5b016d6fb54e8b8aa85`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:5c6088b46aea36834f6c7255d11e0f3b196a6bc72a1ea42260f007a1cd304b1a`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:5d51dc5e80e1020cb70dbe9c235bd88d7b0fe13ae43273911fd6e0839e29c1ef`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:e2e2e13e4d3a4521bba65985d33495d59a7f67ecc273ad3637b11bc481bf1a6d`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:551111b069ee98c13760f73dbe191a40e6a847dd7ec731a000da5945c69f5aa1`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:d3d0767e7f7021d14b50f108337d7bb2c7133ac912bf720d97c068e6d232b74a`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [02432df8](https://github.com/openshift/cluster-api-provider-gcp/commit/02432df87df9a731c8d630311854fbd515602e91) `sha256:661bf489f29b61a171017efdab2a9057c2e135c692861efcf4fd1510a3554a0b`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [e72657c0](https://github.com/openshift/machine-api-provider-gcp/commit/e72657c0d2713842f701f1d43c777d6ec6880cb9) `sha256:f27badab622d549b22ddc3729c2b4a7ff5ebcc477a8c5498ea49be9ecf66c9a8`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:9aa09f6f9c406d7a564dd56de2e7b9dd8cb49ad3e65204d3fbb89f9264ed948d`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:734ff41f84f5ecc0f6fca1d00526b25478e376c6a1ee6e31ef539babae8b4646`
* [haproxy-router](https://github.com/openshift/router) git [4d9b8c4a](https://github.com/openshift/router/commit/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6) `sha256:6cb010148728790e274dc35124bdfd8eb73ab700e2d960f557d62b543c41c77d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:65c794908ab2d25f5af0a44226a8f52739cd6d68527b0fbd304c4808b9e959f7`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [95719738](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/957197389ec49234c3883bbb730bb630b459e24f) `sha256:5523c6cf60aa2b7e04fff6bfe89e15b1614ce17218258e0ce34e233e7c342a9d`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [60b7ca98](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/60b7ca98f5121f7e772437823b258a9fd0aa1d99) `sha256:8012c5f620c266a0a1a5b7a3e1dcc80a4e00cfd09049a39c9c71d44e87e75a88`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [1a3a3030](https://github.com/openshift/machine-api-provider-ibmcloud/commit/1a3a3030afcbbc0a26e794050d300b818069ba16) `sha256:bb3b61b24143587e666ecac3b243f147ce57f0e95568830a7019ef9c2a50d694`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:6e5823a95010269f3dfca76688c1aef8031215c775f9d6d031c6268bdf6c23ee`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e78e4c3e](https://github.com/openshift/ironic-static-ip-manager/commit/e78e4c3e6db1805816308197eb9002dfbca27560) `sha256:7abd406cd883cca552ed4d9b820713fd103972240bce56584c0b5c12aacf4f8e`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:09c71c17cac7107a0e176c8c8b97102ed308c6b124bb382df6319b155e32da59`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:dcd55ef2d57096d7cc3ef3cf8aa628d303b13a1cd3122c1bf0f7da5a1bbcbeb1`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [8ea2c994](https://github.com/openshift/kube-rbac-proxy/commit/8ea2c994df4296ec161023d8ff85f9ea0e383216) `sha256:e88d455d3eae4ddcca31e103557ce494ab00f1bd88557b9974f5f5a5311184f4`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:9d5f8e059dc460af730833689223f1488e5fbc24ae6d99de719294709fe914af`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [969a60e9](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51) `sha256:217581eb283ffa3b20c324d766c7cdae9ddefbcd8df626bba565c26cd02cbf64`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:3105e1966d3cc83969ea6c64dce6c4159e56fe29b92d9a38dfe4df30f25efe94`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [0693093f](https://github.com/openshift/kubevirt-csi-driver/commit/0693093f773c5046e231f174e7930315feabd996) `sha256:cf4c3f16000d26e1d39d0c0c040c978737671451a055f5e88898d9e1d3d59d20`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:470158e5006e1c1911e980b9f6cecd2b7d2c0b8b48bda71d32e126d16962b344`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:8d49c1a52c777dc6cc8643ff9d9c28fefe7c63185944f5aa2e122ddd431d0d7e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:e68809c69e6a2406d550e4ec9915ea8b500f7ae652c21d2d77e3ff644d93bde0`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [88c596ed](https://github.com/openshift/multus-admission-controller/commit/88c596ed782cf6c3f94efa286b3568d12acde436) `sha256:dfb8755490f1181c9e4a385e5468ca83083d5e8307df09f4124a11ae321dfbd2`
* [multus-cni](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:2e306bf1c9af83559491b299513d78d3043fff323434bc9ddca5a695c4b2ef30`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:0483ddb6a434b59d6bbbb5dc9989c9ad2b42a5addee89fd12589515a97276c7b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:1a23dd0fa90812645a10777595a0d8d05f2a1ca085fdba49fb4e7530bf8ce022`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:0d21cc1d7cf3807c0dd28202e1d6c0db20c6ce2c7c948bdbe7da85faa0490a01`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [dab1dd29](https://github.com/openshift/whereabouts-cni/commit/dab1dd29b18521916c18a278faa734f038eccdf1) `sha256:00bde18097829619a5bdb26234551b05d2992497de547f1549991f7dbcb7151b`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [bb911451](https://github.com/openshift/bond-cni/commit/bb911451158fc06f193917863778434944e88ae1) `sha256:f5bd365edac43416f3ac30daba85553bf8392d383202b95962a892b0dca004e3`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [48059263](https://github.com/openshift/network-metrics-daemon/commit/48059263880572c52fb8b21f1441370100dc167a) `sha256:cef9b0d1925213f1bb3504d7f9ce3f177056ee3aa73b4cc51f68aaa0d0d76f4a`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:072e0720599a3d10764b1adbf1c120c51180981409913a4a268d292e3d1a4c47`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9bbc44c](https://github.com/openshift/cloud-provider-nutanix/commit/c9bbc44c0200c8061506c465d0eb3c97fe94e197) `sha256:17c51cad970d73c0217b6ba8cf89b5adea91eb04aad87a627ee16714e1f3f4cc`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [f053e5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/f053e5a0ee58d20066efff8db01578785ea83dad) `sha256:6889117fb74225d8975f9678f459ccc19aa069922d4fc203fedd77fe615ab606`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [fa1f097c](https://github.com/openshift/oauth-apiserver/commit/fa1f097c2800b06b3b56537651294d023762a4eb) `sha256:e89fe2abe74d64bb85dffa17604237e2d394d27131d97928e7bc41bcc8bddbc5`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:d8bdbedff34ff739f34a441ab119c1fe461f3e06c8e013b7779599daa1839f8d`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:f9f637909b35cdd3f118cf5a9c6d8d0ed1e0889765feb0deab1e6b52d15aaba4`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:fc9e02a47d0eb498eb4b054b4207eb220b8bf7a38623a6c1081bc1970d3d6f87`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:ef910bd9252638c6d89065ce7017222c654608775a6361a6c72fd45507cc7083`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:0662b47786d8f5245579c1ce37187201b15d3d989eac77443f03d25653182e0e`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:9047a4d5a710ef483ffcf0c756bcf749d8edd8e16f77b13ae951b3b944a5eac7`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:bd6b5569a7c84fcbb3dbdbd1d146ee607d51cdba1311444a945fbbe308ea7570`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [7db179fb](https://github.com/operator-framework/operator-marketplace/commit/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2) `sha256:0ac8243111a5d49c9b54881c219b79b1819a40c893784a5bd3cf7df695719154`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:5f313a03d31f8bb633a0e0c3522f1653ec1098b0d1a60ff2663ce73b6da097c8`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:fefbbd3732f8c3e1674d0db26350821d6d3fe2ea3c146de2272ebacec48b4406`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [abb91c84](https://github.com/openshift/cluster-api-provider-ovirt/commit/abb91c84083dd139780921673da64fa5cd13bccb) `sha256:1e5fcbc293d7529c6fe45b78b32afee9d5a0e2e3804757b2b96cb32ab05799d1`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:65b12ce61786e2f608ba696ec7ef660d22d3577321f6695baa6df673aeb188fe`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:fb0a354cc04ec4dc13b9914deb4a5d3745142c69a37574e23d451dd225193f70`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:09bbfbfa0b4617e169345e1ac70387c361fbe194d47cb43ebc24cb14d83a515d`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:865de909c4b5135f3498193472ea3d09bb012497884b3ee716916644ffebff4e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e9aea929](https://github.com/openshift/prometheus-alertmanager/commit/e9aea929f309f412678fdf1064e1f74db3ba08b4) `sha256:641f625c472613aa587d5cccc498ce1dcd0d21ddd11b0d046d6de1015d67cf7f`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:4d503a4c05351b2a54b5025050c8761fae94da0a20218f2a92dd75979f0c55df`
* rhel-coreos `sha256:4953eceb38b2a74631a520886dbee8bcb0a2db3fa12b950f4434d46e99380b2a`
* rhel-coreos-extensions `sha256:fb3b9b24b7ad567e979ee85d936abe503f0b2fa8ea00527dd72f2e85067d26da`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [3112b458](https://github.com/openshift/route-controller-manager/commit/3112b458983c6fca6f77d5a945fb0026186dace6) `sha256:2e38478073ac41c5ebdc3b121c5c41dd464e7ce47d61d9ecc88dd7b17838155f`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:43dcca8dc726eda2c47621089698349d987aa8261e283ee807bb5be2b24ce03d`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:df94d6b9f598a889ed75e2e079e3ce8452d50dc17bf539eb74c92154c4902eca`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:f0c7c8556906dddd1c7cf74a4a358bc34d9eb180a8f408603d56b91657e78505`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [be22f10a](https://github.com/openshift/cluster-api-provider-vsphere/commit/be22f10a56a18cd94406eea442e0113d866618ea) `sha256:10cad44ace09e4bacd6582dc45f1e3d6448dca5a88adebdfb3857afdc5ea7213`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [483de9c5](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4) `sha256:857888602e21c2a0bb30ac598149a3dfea228bc517d140e7f075eae00806ac2a`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3683c120](https://github.com/openshift/vsphere-problem-detector/commit/3683c120278fb79a30340f66d22948aaddf3c16a) `sha256:e9cd246723bd0955a8a888a9bea908a5342ad3d639ea1c9edc3d273073cfc194`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7ae324d5a15d0bc1abd0cae5a577db6adf38218a)

* [OCPBUGS-43021](https://issues.redhat.com/browse/OCPBUGS-43021): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) [#6893](https://github.com/openshift/assisted-service/pull/6893)
* [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) [#6752](https://github.com/openshift/assisted-service/pull/6752)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a...7ae324d5a15d0bc1abd0cae5a577db6adf38218a)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0c46e5179d0bb5a1818df3dcff160059dc8060bd)

* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#914) [#914](https://github.com/openshift/assisted-installer/pull/914)
* [OCPBUGS-43025](https://issues.redhat.com/browse/OCPBUGS-43025): Pick up latest CVE changes by bumping service (#920) [#920](https://github.com/openshift/assisted-installer/pull/920)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) [#906](https://github.com/openshift/assisted-installer/pull/906)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/182ecbdc7d808580e7f0ebfd668d61bc0f0641f9...0c46e5179d0bb5a1818df3dcff160059dc8060bd)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b121e87848721deee183a0d7bcc04bd5010eca38)

* [OCPBUGS-43028](https://issues.redhat.com/browse/OCPBUGS-43028): Pick up latest CVE changes by bumping service (#804) [#804](https://github.com/openshift/assisted-installer-agent/pull/804)
* [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9ca7b58d937c413f670a26c02435829b1fb3a196...b121e87848721deee183a0d7bcc04bd5010eca38)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/ca81b6a32aff6ccb327f6889ec89c01afedd8efd)

* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#59](https://github.com/openshift/apiserver-network-proxy/pull/59)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/9a6028c48ae73bd8227f014635ce744452e70348...ca81b6a32aff6ccb327f6889ec89c01afedd8efd)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/c66065de639016b770f512e7cfcfcee9519fb89f)

* [OCPBUGS-33693](https://issues.redhat.com/browse/OCPBUGS-33693): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 [#18](https://github.com/openshift/aws-encryption-provider/pull/18)
* hack: display diff on verify-mod-tidy failure [#26](https://github.com/openshift/aws-encryption-provider/pull/26)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0...c66065de639016b770f512e7cfcfcee9519fb89f)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/7a36778add73d12eb08ff6be357d8d351af651a7)

* [OCPBUGS-39145](https://issues.redhat.com/browse/OCPBUGS-39145): bump mount-utils to treat ENODEV error as corrupted mount [#76](https://github.com/openshift/azure-file-csi-driver/pull/76)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/5ceb190a24730e4a3f951fa3e186e3cde9d86889...7a36778add73d12eb08ff6be357d8d351af651a7)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/47d243b5a993fd0817eecf89a6d7896a3c911ecb)

* [OCPBUGS-33692](https://issues.redhat.com/browse/OCPBUGS-33692): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 [#4](https://github.com/openshift/azure-kubernetes-kms/pull/4)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/bc92347bcd3863db05ce6c79f0b71145a3185e12...47d243b5a993fd0817eecf89a6d7896a3c911ecb)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/a8c32e35b532d3934f790ae6693aae0f0b850544)

* [OCPBUGS-42014](https://issues.redhat.com/browse/OCPBUGS-42014): Update terraform provider for google [#9077](https://github.com/openshift/installer/pull/9077)
* [OCPBUGS-38732](https://issues.redhat.com/browse/OCPBUGS-38732): vsphere, if secureboot is enabled, disable it in the template [#8904](https://github.com/openshift/installer/pull/8904)
* [OCPBUGS-39415](https://issues.redhat.com/browse/OCPBUGS-39415): OpenStack: Install CI dependencies from rpm [#8995](https://github.com/openshift/installer/pull/8995)
* [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971)
* [OCPBUGS-38687](https://issues.redhat.com/browse/OCPBUGS-38687): only allow a single network in failure domain topology [#8875](https://github.com/openshift/installer/pull/8875)
* [OCPBUGS-42062](https://issues.redhat.com/browse/OCPBUGS-42062): OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 [#9036](https://github.com/openshift/installer/pull/9036)
* [OCPBUGS-42012](https://issues.redhat.com/browse/OCPBUGS-42012): Systemd Fails to Parse Multiline EC Keys [#9037](https://github.com/openshift/installer/pull/9037)
* [OCPBUGS-41845](https://issues.redhat.com/browse/OCPBUGS-41845): Bump extract-machine-os timout to 20m [#8997](https://github.com/openshift/installer/pull/8997)
* [OCPBUGS-38964](https://issues.redhat.com/browse/OCPBUGS-38964): IngressController subnet selection in AWS [#8910](https://github.com/openshift/installer/pull/8910)
* [OCPBUGS-42138](https://issues.redhat.com/browse/OCPBUGS-42138): add tested instance type for IBMCloud [#9031](https://github.com/openshift/installer/pull/9031)
* [OCPBUGS-39287](https://issues.redhat.com/browse/OCPBUGS-39287): Fix var_files syntax to work on older version of ansible [#8936](https://github.com/openshift/installer/pull/8936)
* [OCPBUGS-41929](https://issues.redhat.com/browse/OCPBUGS-41929): Add AWS c7g,m7g,r8g to tested instance types [#9009](https://github.com/openshift/installer/pull/9009)
* [OCPBUGS-36855](https://issues.redhat.com/browse/OCPBUGS-36855): Openstack UPI - Reintroduce unique resource names. [#8724](https://github.com/openshift/installer/pull/8724)
* [OCPBUGS-39082](https://issues.redhat.com/browse/OCPBUGS-39082): incorrect folder gen, workaround govmomi vm folder path bug [#8912](https://github.com/openshift/installer/pull/8912)
* [OCPBUGS-39496](https://issues.redhat.com/browse/OCPBUGS-39496): capi/aws/byo-vpc/multi-cidr: fix group rules [#8953](https://github.com/openshift/installer/pull/8953)
* [OCPBUGS-36861](https://issues.redhat.com/browse/OCPBUGS-36861): Updates GCP terraform worker role [#8939](https://github.com/openshift/installer/pull/8939)
* [OCPBUGS-38956](https://issues.redhat.com/browse/OCPBUGS-38956): failed to install Nutanix OCP 4.16 cluster with DHCP [#8905](https://github.com/openshift/installer/pull/8905)
* [OCPBUGS-38822](https://issues.redhat.com/browse/OCPBUGS-38822): upstream capv bug causes session timeout [#8891](https://github.com/openshift/installer/pull/8891)
* [OCPBUGS-39468](https://issues.redhat.com/browse/OCPBUGS-39468): Enable TLS for virtual media in initial ironic deployment [#8955](https://github.com/openshift/installer/pull/8955)
* [OCPBUGS-37606](https://issues.redhat.com/browse/OCPBUGS-37606): vSphere validation fails if dc is in a folder [#8777](https://github.com/openshift/installer/pull/8777)
* [OCPBUGS-39206](https://issues.redhat.com/browse/OCPBUGS-39206): Update GCP Disk Types 4.16 [#8920](https://github.com/openshift/installer/pull/8920)
* [OCPBUGS-39087](https://issues.redhat.com/browse/OCPBUGS-39087): aws: validate public-only subnets configs [#8913](https://github.com/openshift/installer/pull/8913)
* [OCPBUGS-38821](https://issues.redhat.com/browse/OCPBUGS-38821): [release-4.16] Azure: Disable shared key access when using a managed identity [#8855](https://github.com/openshift/installer/pull/8855)
* [OCPBUGS-38302](https://issues.redhat.com/browse/OCPBUGS-38302): upi/aws: update lambda runtime python version [#8897](https://github.com/openshift/installer/pull/8897)
* [OCPBUGS-38826](https://issues.redhat.com/browse/OCPBUGS-38826): aws: add support for clusters with public-only subnets [#8892](https://github.com/openshift/installer/pull/8892)
* [OCPBUGS-38517](https://issues.redhat.com/browse/OCPBUGS-38517): [release-4.16] capi/aws: bump provider for instance register fix [#8848](https://github.com/openshift/installer/pull/8848)
* [OCPBUGS-38196](https://issues.redhat.com/browse/OCPBUGS-38196): Remove timed context for gcp client [#8818](https://github.com/openshift/installer/pull/8818)
* [OCPBUGS-38502](https://issues.redhat.com/browse/OCPBUGS-38502): PowerVS: Fix mad system pool [#8846](https://github.com/openshift/installer/pull/8846)
* [Full changelog](https://github.com/openshift/installer/compare/4f78aec1c86c5f51f560f56193f7be1843ab2cd2...a8c32e35b532d3934f790ae6693aae0f0b850544)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/ae55a7053373827ad4b1aff6dceae5f077ce90e5)

* [OCPBUGS-39490](https://issues.redhat.com/browse/OCPBUGS-39490): Disallow fetching secrets from namespaces different from the host's one [#378](https://github.com/openshift/baremetal-operator/pull/378)
* [OCPBUGS-38938](https://issues.redhat.com/browse/OCPBUGS-38938): [OCP] Ability to disable agent power off after deployment [#372](https://github.com/openshift/baremetal-operator/pull/372)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/4632bfb631abe1b202d6dd450c92e86df06db8b9...ae55a7053373827ad4b1aff6dceae5f077ce90e5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cf533b548154f7f2e828a44864477bbbb881692d)

* [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891)
* [OCPBUGS-39341](https://issues.redhat.com/browse/OCPBUGS-39341): Ignore pruning when deployment points to replicationcontroller [#1862](https://github.com/openshift/oc/pull/1862)
* [Full changelog](https://github.com/openshift/oc/compare/e8fb3c0574da9189b61a87a53956aa820cbfcd2c...cf533b548154f7f2e828a44864477bbbb881692d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/8514901e687f8f192178ec44e8108c34cbdb0f1f)

* [OCPBUGS-43337](https://issues.redhat.com/browse/OCPBUGS-43337): Update github.com/sirupsen/logrus v1.9.3 [#767](https://github.com/openshift/cloud-credential-operator/pull/767)
* [OCPBUGS-41234](https://issues.redhat.com/browse/OCPBUGS-41234): List secrets in batches to avoid api timeout [#757](https://github.com/openshift/cloud-credential-operator/pull/757)
* [OCPBUGS-38376](https://issues.redhat.com/browse/OCPBUGS-38376): Update google.golang.org/grpc v1.65.0 [#748](https://github.com/openshift/cloud-credential-operator/pull/748)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/38ef552e182880d3053bcbd43bda3f45a11ed01e...8514901e687f8f192178ec44e8108c34cbdb0f1f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/8f65ef620e5a47e3cb29167c6b5fb56c7b802627)

* [OCPBUGS-31961](https://issues.redhat.com/browse/OCPBUGS-31961): bump x/net to 0.23.0 [#431](https://github.com/openshift/cluster-baremetal-operator/pull/431)
* [OCPBUGS-36415](https://issues.redhat.com/browse/OCPBUGS-36415): set required-scc for openshift workloads [#433](https://github.com/openshift/cluster-baremetal-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/cda1c4bd1c4a4d2b08c58e8153190016ac09c87c...8f65ef620e5a47e3cb29167c6b5fb56c7b802627)


### [cluster-config-api](https://github.com/openshift/api/tree/b7d0481c9094172326bc9462c4f85b8f3ff0d761)

* [OCPBUGS-38773](https://issues.redhat.com/browse/OCPBUGS-38773): remove duplicate featuregate 'ExternalRouteCertificate' [#2007](https://github.com/openshift/api/pull/2007)
* [OCPBUGS-37857](https://issues.redhat.com/browse/OCPBUGS-37857): [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features [#1985](https://github.com/openshift/api/pull/1985)
* [Full changelog](https://github.com/openshift/api/compare/4b89b3a92a17a92f3d3b84dbded5d874427787ab...b7d0481c9094172326bc9462c4f85b8f3ff0d761)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd)

* [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348)
* [OCPBUGS-37820](https://issues.redhat.com/browse/OCPBUGS-37820): ensure ordering in member health checks [#1311](https://github.com/openshift/cluster-etcd-operator/pull/1311)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b0d0d6ad7ff87305a486e5f501c39e495931e4ac...3f2ce4889c255391323d8bdf07dece99e87dbccd)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/97c55a477e79fa6c104bab400cee6c5d6b362587)

* [OCPBUGS-42933](https://issues.redhat.com/browse/OCPBUGS-42933): azureclient: stop validating credentials when creating the client [#1134](https://github.com/openshift/cluster-image-registry-operator/pull/1134)
* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126)
* Revert "[release-4.16]  OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage" [#1119](https://github.com/openshift/cluster-image-registry-operator/pull/1119)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): pkg/operator/azurepathfixcontroller: do not sync on non-azure storage [#1115](https://github.com/openshift/cluster-image-registry-operator/pull/1115)
* [OCPBUGS-39098](https://issues.redhat.com/browse/OCPBUGS-39098): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1104](https://github.com/openshift/cluster-image-registry-operator/pull/1104)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource/azurepathfixjob: invoke update-ca-trust extract with --output [#1102](https://github.com/openshift/cluster-image-registry-operator/pull/1102)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource: invoke update-ca-trust extract with --output [#1098](https://github.com/openshift/cluster-image-registry-operator/pull/1098)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/335c9147242d4bf3e91e4377691101107a166b43...97c55a477e79fa6c104bab400cee6c5d6b362587)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/57f9674e75908ca11b24792fb9f077233cd7bcf1)

* [OCPBUGS-39324](https://issues.redhat.com/browse/OCPBUGS-39324): Refine logging for accurate infra CR status updates [#1139](https://github.com/openshift/cluster-ingress-operator/pull/1139)
* [OCPBUGS-39323](https://issues.redhat.com/browse/OCPBUGS-39323): Ingress operator status not degraded when canary route fails [#1138](https://github.com/openshift/cluster-ingress-operator/pull/1138)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/af5d3f6c171354c387e0cfc901110a7211715e9b...57f9674e75908ca11b24792fb9f077233cd7bcf1)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e825811333c05b705c35d2e9a9a62e55e9ab0935)

* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): bump protobuf [#115](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/115)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/bf6afbb820531b4adc3a52f78a90f317c5580bad...e825811333c05b705c35d2e9a9a62e55e9ab0935)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4af900ea18ec33a6dabe84aaa9c2c78a64c412eb)

* [OCPBUGS-41967](https://issues.redhat.com/browse/OCPBUGS-41967): disable user-defined monitoring per object [#2474](https://github.com/openshift/cluster-monitoring-operator/pull/2474)
* [OCPBUGS-42067](https://issues.redhat.com/browse/OCPBUGS-42067): Reapply "chore: poll immediately in the e2e tests" [#2476](https://github.com/openshift/cluster-monitoring-operator/pull/2476)
* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Configure graceful shutdown for metrics-server (4.16 backport) [#2467](https://github.com/openshift/cluster-monitoring-operator/pull/2467)
* [OCPBUGS-41910](https://issues.redhat.com/browse/OCPBUGS-41910): filter alerts sent to Telemeter [#2471](https://github.com/openshift/cluster-monitoring-operator/pull/2471)
* [OCPBUGS-39170](https://issues.redhat.com/browse/OCPBUGS-39170): Backport #2441 for 4.16 [#2447](https://github.com/openshift/cluster-monitoring-operator/pull/2447)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/cb3d884237cda666ad740cc9a104fc885b05bdae...4af900ea18ec33a6dabe84aaa9c2c78a64c412eb)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fd6dd92100c00fb7e29213029b37a4e667d3bd7b)

* [OCPBUGS-43035](https://issues.redhat.com/browse/OCPBUGS-43035): Configure narrowing=yes for IPsec connections [#2528](https://github.com/openshift/cluster-network-operator/pull/2528)
* [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430)
* [OCPBUGS-41840](https://issues.redhat.com/browse/OCPBUGS-41840): Add configurable subnets while running hybrid-overlay-node binary [#2502](https://github.com/openshift/cluster-network-operator/pull/2502)
* [OCPBUGS-37763](https://issues.redhat.com/browse/OCPBUGS-37763): Handle random crictl errors in iptables-alerter [#2452](https://github.com/openshift/cluster-network-operator/pull/2452)
* [OCPBUGS-41555](https://issues.redhat.com/browse/OCPBUGS-41555): HyperShift: do not use antiaffinity on single replica control planes [#2494](https://github.com/openshift/cluster-network-operator/pull/2494)
* [OCPBUGS-37937](https://issues.redhat.com/browse/OCPBUGS-37937): Add proxy env vars to onvkube-node [#2457](https://github.com/openshift/cluster-network-operator/pull/2457)
* [OCPBUGS-41607](https://issues.redhat.com/browse/OCPBUGS-41607): set required-scc for openshift workloads [#2496](https://github.com/openshift/cluster-network-operator/pull/2496)
* [OCPBUGS-35407](https://issues.redhat.com/browse/OCPBUGS-35407): Use applyconfigurations for updating network.oprerator status [#2413](https://github.com/openshift/cluster-network-operator/pull/2413)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/739536971534310704707375a4903858d7331ad3...fd6dd92100c00fb7e29213029b37a4e667d3bd7b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/329937c1acd693cf754b1e11ef6d1e88fac11aa6)

* E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1166) [#1166](https://github.com/openshift/cluster-node-tuning-operator/pull/1166)
* OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) [#1152](https://github.com/openshift/cluster-node-tuning-operator/pull/1152)
* E2E: Remove checking of reserved cpus in irqbalance file (#1156) [#1156](https://github.com/openshift/cluster-node-tuning-operator/pull/1156)
* Fix the destination of asset's copy (#1134) [#1134](https://github.com/openshift/cluster-node-tuning-operator/pull/1134)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2bd8891ead93e161b9a871ac2eaa947bfc17309f...329937c1acd693cf754b1e11ef6d1e88fac11aa6)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6541dd7e1fdb3d40896956a56f1dc800fae5d8b8)

* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#576](https://github.com/openshift/cluster-samples-operator/pull/576)
* [OCPBUGS-38159](https://issues.redhat.com/browse/OCPBUGS-38159): add owners [#555](https://github.com/openshift/cluster-samples-operator/pull/555)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d4dd84396472c5e974f0562046a6ad068b6f20f8...6541dd7e1fdb3d40896956a56f1dc800fae5d8b8)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7af2fc42078179ca658047873a1cace763078af2)

* NO-JIRA: release-4.16: Run make update [#512](https://github.com/openshift/cluster-storage-operator/pull/512)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b990582d516e3fc8452dd658608a5e15522c3d1e...7af2fc42078179ca658047873a1cace763078af2)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/e8478585cca88314094112aa5933e5281f4707ea)

* [OCPBUGS-43467](https://issues.redhat.com/browse/OCPBUGS-43467): keys: Update Red Hat keys to use SHA256 signatures [#64](https://github.com/openshift/cluster-update-keys/pull/64)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24...e8478585cca88314094112aa5933e5281f4707ea)


### [console](https://github.com/openshift/console/tree/95b891641aa974ed2f653b50db644d75ad6c6982)

* [OCPBUGS-42369](https://issues.redhat.com/browse/OCPBUGS-42369): Console crashes when ssh is selected in add secret for starting a pipeline run [#14320](https://github.com/openshift/console/pull/14320)
* [OCPBUGS-41904](https://issues.redhat.com/browse/OCPBUGS-41904): fix annotation for ovn localnet [#14366](https://github.com/openshift/console/pull/14366)
* [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091)
* [OCPBUGS-37689](https://issues.redhat.com/browse/OCPBUGS-37689): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14094](https://github.com/openshift/console/pull/14094)
* [OCPBUGS-42015](https://issues.redhat.com/browse/OCPBUGS-42015): Topology screen crashes when completed pod is selected [#14298](https://github.com/openshift/console/pull/14298)
* [OCPBUGS-35850](https://issues.redhat.com/browse/OCPBUGS-35850): Fix: Quick Start "next" button requires double click to move to next step [#13989](https://github.com/openshift/console/pull/13989)
* [OCPBUGS-42382](https://issues.redhat.com/browse/OCPBUGS-42382): Allow operators to enable monitoring by default [#14317](https://github.com/openshift/console/pull/14317)
* [OCPBUGS-41905](https://issues.redhat.com/browse/OCPBUGS-41905): List of default Camel K event sources disappears when adding a custom event source [#14290](https://github.com/openshift/console/pull/14290)
* [OCPBUGS-41709](https://issues.redhat.com/browse/OCPBUGS-41709): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14278](https://github.com/openshift/console/pull/14278)
* [OCPBUGS-42069](https://issues.redhat.com/browse/OCPBUGS-42069): add Create button to Console plugins tab [#14302](https://github.com/openshift/console/pull/14302)
* [OCPBUGS-41996](https://issues.redhat.com/browse/OCPBUGS-41996): Fix updating the "Until" field on the Silence &gt; Edit page [#14296](https://github.com/openshift/console/pull/14296)
* [OCPBUGS-38112](https://issues.redhat.com/browse/OCPBUGS-38112): do not directly mutate links in useMemo [#14117](https://github.com/openshift/console/pull/14117)
* [OCPBUGS-34518](https://issues.redhat.com/browse/OCPBUGS-34518): Restore user toggle when authentification is disabled [#13902](https://github.com/openshift/console/pull/13902)
* [OCPBUGS-41619](https://issues.redhat.com/browse/OCPBUGS-41619): Use vCenterCluster value from CM as primary resource [#14268](https://github.com/openshift/console/pull/14268)
* [OCPBUGS-37046](https://issues.redhat.com/browse/OCPBUGS-37046): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14059](https://github.com/openshift/console/pull/14059)
* [OCPBUGS-38911](https://issues.redhat.com/browse/OCPBUGS-38911): Values entered into the Instantiate Template form are automatically cleared [#14187](https://github.com/openshift/console/pull/14187)
* [OCPBUGS-38914](https://issues.redhat.com/browse/OCPBUGS-38914): Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart [#14188](https://github.com/openshift/console/pull/14188)
* [OCPBUGS-38968](https://issues.redhat.com/browse/OCPBUGS-38968): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14193](https://github.com/openshift/console/pull/14193)
* [OCPBUGS-38424](https://issues.redhat.com/browse/OCPBUGS-38424): fix bug where cluster version text appears black in da… [#14144](https://github.com/openshift/console/pull/14144)
* [OCPBUGS-38464](https://issues.redhat.com/browse/OCPBUGS-38464): correct casing in "Lightspeed" [#14148](https://github.com/openshift/console/pull/14148)
* [OCPBUGS-37430](https://issues.redhat.com/browse/OCPBUGS-37430): Fix utilization card limits/total display [#14082](https://github.com/openshift/console/pull/14082)
* [OCPBUGS-36510](https://issues.redhat.com/browse/OCPBUGS-36510): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14031](https://github.com/openshift/console/pull/14031)
* [OCPBUGS-37954](https://issues.redhat.com/browse/OCPBUGS-37954): No access to list pipelines.tekton.dev prevents from using Delete application form [#14107](https://github.com/openshift/console/pull/14107)
* [OCPBUGS-36601](https://issues.redhat.com/browse/OCPBUGS-36601): Tooltip on Pipeline when expression is not shows [#14033](https://github.com/openshift/console/pull/14033)
* [OCPBUGS-38803](https://issues.redhat.com/browse/OCPBUGS-38803): CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub [#14095](https://github.com/openshift/console/pull/14095)
* [OCPBUGS-37048](https://issues.redhat.com/browse/OCPBUGS-37048): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14060](https://github.com/openshift/console/pull/14060)
* [OCPBUGS-35839](https://issues.redhat.com/browse/OCPBUGS-35839): Fix placement of icons on WebKit [#13988](https://github.com/openshift/console/pull/13988)
* [OCPBUGS-35271](https://issues.redhat.com/browse/OCPBUGS-35271): Fix password set to Secret created through Start Pipeline form [#13954](https://github.com/openshift/console/pull/13954)
* [OCPBUGS-38093](https://issues.redhat.com/browse/OCPBUGS-38093): correct link for Lightspeed operator [#14112](https://github.com/openshift/console/pull/14112)
* [OCPBUGS-36484](https://issues.redhat.com/browse/OCPBUGS-36484): Revert - terminal: use username if uid is not present [#14027](https://github.com/openshift/console/pull/14027)
* [Full changelog](https://github.com/openshift/console/compare/96169cf25bbb168375af9a6123c437cf1871e0f4...95b891641aa974ed2f653b50db644d75ad6c6982)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b7e9010d795f78f39bf12433599658bbbdd9560e)

* [OCPBUGS-38167](https://issues.redhat.com/browse/OCPBUGS-38167): rebase CPO on 4.16 [#291](https://github.com/openshift/cloud-provider-openstack/pull/291)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5340eaab09d8057a705b7a7124e05231cfd37978...b7e9010d795f78f39bf12433599658bbbdd9560e)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/c25d1ff2677a882504b18220dcbbe153781f3883)

* [OCPBUGS-38458](https://issues.redhat.com/browse/OCPBUGS-38458): Add missing healthchecks [#241](https://github.com/openshift/csi-driver-manila-operator/pull/241)
* [OCPBUGS-30438](https://issues.redhat.com/browse/OCPBUGS-30438): Bump protobuf dependency [#237](https://github.com/openshift/csi-driver-manila-operator/pull/237)
* [OCPBUGS-38013](https://issues.redhat.com/browse/OCPBUGS-38013): Set required-scc for openshift workloads [#235](https://github.com/openshift/csi-driver-manila-operator/pull/235)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751...c25d1ff2677a882504b18220dcbbe153781f3883)


### [docker-builder](https://github.com/openshift/builder/tree/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)

* [OCPBUGS-30455](https://issues.redhat.com/browse/OCPBUGS-30455): bump google.golang.org/protobuf to 1.33.0 [#402](https://github.com/openshift/builder/pull/402)
* [Full changelog](https://github.com/openshift/builder/compare/3b7a1b1be130d5068481fe005b0a119fbd7057a6...5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)


### [docker-registry](https://github.com/openshift/image-registry/tree/e4d56625da1bde6f51fb84f05efe02df92b6f120)

* [OCPBUGS-39412](https://issues.redhat.com/browse/OCPBUGS-39412): pull upstream distribution changes to use a consistent multipart chunk size [#410](https://github.com/openshift/image-registry/pull/410)
* [Full changelog](https://github.com/openshift/image-registry/compare/462fe76c150dc7b5c2d53169dc8da204779a5697...e4d56625da1bde6f51fb84f05efe02df92b6f120)


### [etcd](https://github.com/openshift/etcd/tree/16202ec4ecea353650b3681979ba73c5d8664d8c)

* [OCPBUGS-34690](https://issues.redhat.com/browse/OCPBUGS-34690): Rebase etcd 3.5.14 openshift 4.16 [#274](https://github.com/openshift/etcd/pull/274)
* [Full changelog](https://github.com/openshift/etcd/compare/bc2fec27ff5b086436d438157c24396f280e0305...16202ec4ecea353650b3681979ba73c5d8664d8c)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/632b078b578ba9af3734f420c57e7e9d584b0930)

* release-4.16] OCPBUGS-42057: UPSTREAM: &lt;drop&gt;: bump(github.com/openshift/apiserver-library-go) [#2096](https://github.com/openshift/kubernetes/pull/2096)
* [OCPBUGS-39015](https://issues.redhat.com/browse/OCPBUGS-39015): Bump k8s api to 1.29.8 [#2066](https://github.com/openshift/kubernetes/pull/2066)
* [OCPBUGS-36773](https://issues.redhat.com/browse/OCPBUGS-36773): UPSTREAM: &lt;carry&gt;: Disable vSphere tests with pre-provisioned volumes [#2021](https://github.com/openshift/kubernetes/pull/2021)
* NO-JIRA: update downstream owners [#2049](https://github.com/openshift/kubernetes/pull/2049)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6abe8a19439b7c352cd3b9ab6d40f1037caa3a10...632b078b578ba9af3734f420c57e7e9d584b0930)


### [hypershift](https://github.com/openshift/hypershift/tree/2b289df113afd2275d4ac24cd715508470381b6a)

* [OCPBUGS-43104](https://issues.redhat.com/browse/OCPBUGS-43104): label routes only when HCP router used [#4899](https://github.com/openshift/hypershift/pull/4899)
* [OCPBUGS-43308](https://issues.redhat.com/browse/OCPBUGS-43308): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4905](https://github.com/openshift/hypershift/pull/4905)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4923](https://github.com/openshift/hypershift/pull/4923)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) [#4919](https://github.com/openshift/hypershift/pull/4919)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) [#4908](https://github.com/openshift/hypershift/pull/4908)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4896](https://github.com/openshift/hypershift/pull/4896)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) [#4880](https://github.com/openshift/hypershift/pull/4880)
* [OCPBUGS-42432](https://issues.redhat.com/browse/OCPBUGS-42432): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4799](https://github.com/openshift/hypershift/pull/4799)
* [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787)
* [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798)
* NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853)
* [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) [#4827](https://github.com/openshift/hypershift/pull/4827)
* chore(deps): update konflux references (release-4.16) [#4816](https://github.com/openshift/hypershift/pull/4816)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) [#4806](https://github.com/openshift/hypershift/pull/4806)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) [#4796](https://github.com/openshift/hypershift/pull/4796)
* chore(deps): update konflux references (release-4.16) [#4781](https://github.com/openshift/hypershift/pull/4781)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4760](https://github.com/openshift/hypershift/pull/4760)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) [#4759](https://github.com/openshift/hypershift/pull/4759)
* NO-JIRA: Security fixes for openshift-ci-security job [#4750](https://github.com/openshift/hypershift/pull/4750)
* [OCPBUGS-41372](https://issues.redhat.com/browse/OCPBUGS-41372): CPO oauth idp converter: resolve names before dialing [#4689](https://github.com/openshift/hypershift/pull/4689)
* NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) [#4729](https://github.com/openshift/hypershift/pull/4729)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) [#4728](https://github.com/openshift/hypershift/pull/4728)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4727](https://github.com/openshift/hypershift/pull/4727)
* [OCPBUGS-38058](https://issues.redhat.com/browse/OCPBUGS-38058): Add HTTP konnectivity proxy to OAuth server [#4496](https://github.com/openshift/hypershift/pull/4496)
* [HOSTEDCP-1955](https://issues.redhat.com/browse/HOSTEDCP-1955): bump CCO version [#4696](https://github.com/openshift/hypershift/pull/4696)
* [OCPBUGS-34803](https://issues.redhat.com/browse/OCPBUGS-34803): cmd: report server version, supported OCP [#4141](https://github.com/openshift/hypershift/pull/4141)
* [OCPBUGS-39293](https://issues.redhat.com/browse/OCPBUGS-39293): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4647](https://github.com/openshift/hypershift/pull/4647)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) [#4685](https://github.com/openshift/hypershift/pull/4685)
* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): [release-4.16] Use HTTP proxy for ingress controller [#4688](https://github.com/openshift/hypershift/pull/4688)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4684](https://github.com/openshift/hypershift/pull/4684)
* [OCPBUGS-39447](https://issues.redhat.com/browse/OCPBUGS-39447): handle version skewed NodePools that do not have rhel9 binaries [#4664](https://github.com/openshift/hypershift/pull/4664)
* [HOSTEDCP-1895](https://issues.redhat.com/browse/HOSTEDCP-1895): [release-4.16] Allow setting Kube APIServer maximum requests in flight [#4551](https://github.com/openshift/hypershift/pull/4551)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) [#4600](https://github.com/openshift/hypershift/pull/4600)
* chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) [#4602](https://github.com/openshift/hypershift/pull/4602)
* chore(deps): update konflux references (release-4.16) [#4599](https://github.com/openshift/hypershift/pull/4599)
* [OCPBUGS-38942](https://issues.redhat.com/browse/OCPBUGS-38942): copy oapi ca-trust recursively when building trust anchor [#4615](https://github.com/openshift/hypershift/pull/4615)
* NO-JIRA: Flaky cert validation test [#4622](https://github.com/openshift/hypershift/pull/4622)
* [OCPBUGS-38259](https://issues.redhat.com/browse/OCPBUGS-38259): Set KCM node monitor grace period [#4520](https://github.com/openshift/hypershift/pull/4520)
* [OCPBUGS-38726](https://issues.redhat.com/browse/OCPBUGS-38726): fix: bump github.com/IBM/go-sdk-core/v5 [#4611](https://github.com/openshift/hypershift/pull/4611)
* [HOSTEDCP-1764](https://issues.redhat.com/browse/HOSTEDCP-1764): retrieve registryOverrides when ImageStream is not ava… [#4541](https://github.com/openshift/hypershift/pull/4541)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) [#4525](https://github.com/openshift/hypershift/pull/4525)
* [OCPBUGS-36781](https://issues.redhat.com/browse/OCPBUGS-36781): Set Azure VM identity if user assigned identity set [#4341](https://github.com/openshift/hypershift/pull/4341)
* [OCPBUGS-37936](https://issues.redhat.com/browse/OCPBUGS-37936): set proxy envvars on aws and azure CCMs [#4476](https://github.com/openshift/hypershift/pull/4476)
* [OCPBUGS-38486](https://issues.redhat.com/browse/OCPBUGS-38486): hcco: reconcile apiserver config into hosted cluster [#4559](https://github.com/openshift/hypershift/pull/4559)
* NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results [#4534](https://github.com/openshift/hypershift/pull/4534)
* [OCPBUGS-38131](https://issues.redhat.com/browse/OCPBUGS-38131): Let the CPO oidc check resolve through data plane [#4505](https://github.com/openshift/hypershift/pull/4505)
* NO-JIRA: test: relax mgmt KAS egress check [#4561](https://github.com/openshift/hypershift/pull/4561)
* chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) [#4528](https://github.com/openshift/hypershift/pull/4528)
* chore(deps): update golang docker tag to v1.22 (release-4.16) [#4527](https://github.com/openshift/hypershift/pull/4527)
* NO-JIRA: Update Konflux references (release-4.16) [#4524](https://github.com/openshift/hypershift/pull/4524)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak ciphers from security profile [#4518](https://github.com/openshift/hypershift/pull/4518)
* [OCPBUGS-37060](https://issues.redhat.com/browse/OCPBUGS-37060): OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates [#4366](https://github.com/openshift/hypershift/pull/4366)
* [Full changelog](https://github.com/openshift/hypershift/compare/156d87684f6e9cd0f2747f9fcf981eea9100efb8...2b289df113afd2275d4ac24cd715508470381b6a)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/5d5d8010a59916cc264d0ab14962be85a35b7228)

* [OCPBUGS-42286](https://issues.redhat.com/browse/OCPBUGS-42286): Reorder static resources to create RBAC first [#129](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/129)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72...5d5d8010a59916cc264d0ab14962be85a35b7228)


### [insights-operator](https://github.com/openshift/insights-operator/tree/9088c0d70cea4ec1d7f57ad2953430ee47f0fa29)

* [OCPBUGS-39564](https://issues.redhat.com/browse/OCPBUGS-39564): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) [#1013](https://github.com/openshift/insights-operator/pull/1013)
* [OCPBUGS-39394](https://issues.redhat.com/browse/OCPBUGS-39394): collect some nmstate customresources (#986) (#989) (#995) [#986](https://github.com/openshift/insights-operator/pull/986)
* [OCPBUGS-38021](https://issues.redhat.com/browse/OCPBUGS-38021): Integration of the OpenStack CRs into the insights-operator (#974) [#974](https://github.com/openshift/insights-operator/pull/974)
* Add haproxy metric (#977) [#977](https://github.com/openshift/insights-operator/pull/977)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c9ba6b040d8e5c66eb1ad092b22d3336facc1b64...9088c0d70cea4ec1d7f57ad2953430ee47f0fa29)


### [ironic](https://github.com/openshift/ironic-image/tree/f8a69556ca9fab8742bc6a91ccce56bc6de90360)

* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#569](https://github.com/openshift/ironic-image/pull/569)
* [OCPBUGS-38797](https://issues.redhat.com/browse/OCPBUGS-38797): redfish-virtualmedia fails on XFusion nodes [#564](https://github.com/openshift/ironic-image/pull/564)
* [OCPBUGS-42113](https://issues.redhat.com/browse/OCPBUGS-42113): Update ironic-inspector to fix the memory leak [#587](https://github.com/openshift/ironic-image/pull/587)
* [OCPBUGS-37758](https://issues.redhat.com/browse/OCPBUGS-37758), [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#579](https://github.com/openshift/ironic-image/pull/579)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set min version for python3-webob [#553](https://github.com/openshift/ironic-image/pull/553)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a428def3622bab2c00f22a9e3d1ba82ac6899e80...f8a69556ca9fab8742bc6a91ccce56bc6de90360)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3c5298e05497b59a876c73c51359f49f3cc2cb99)

* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#156](https://github.com/openshift/ironic-agent-image/pull/156)
* [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#161](https://github.com/openshift/ironic-agent-image/pull/161)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set webob and bump werkzeug [#149](https://github.com/openshift/ironic-agent-image/pull/149)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/63681a469fdba2f223373ff36350bf2462b997a3...3c5298e05497b59a876c73c51359f49f3cc2cb99)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/8c2920c24c3705e43cefd6c6e65409b7da341ddc)

* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Wire server run options to flags. ([release-4.16]  backport) [#37](https://github.com/openshift/kubernetes-metrics-server/pull/37)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/7938f253e74f2259951cc882f2879a9860a38481...8c2920c24c3705e43cefd6c6e65409b7da341ddc)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/aec8163c76a7ba11e02c3ba1e9ce46f770210957)

* [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636)
* [OCPBUGS-42159](https://issues.redhat.com/browse/OCPBUGS-42159): fix redundant router-default iptables rule [#633](https://github.com/openshift/sdn/pull/633)
* [Full changelog](https://github.com/openshift/sdn/compare/5b658c433786797d0ac1b870db08346584794514...aec8163c76a7ba11e02c3ba1e9ce46f770210957)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7d6867c5fef45c08ddce1a95e9e5e7b3bd47ef80)

* [OCPBUGS-43433](https://issues.redhat.com/browse/OCPBUGS-43433): Vsphere: Handle cloned instance with lost taskID [#1298](https://github.com/openshift/machine-api-operator/pull/1298)
* [CORS-3648](https://issues.redhat.com/browse/CORS-3648): Add the hyperdisk-balanced disk type [#1279](https://github.com/openshift/machine-api-operator/pull/1279)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a3500bdf60d56350514a01fdc32f0e0a86557465...7d6867c5fef45c08ddce1a95e9e5e7b3bd47ef80)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee)

* [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563)
* [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627)
* [OCPBUGS-41806](https://issues.redhat.com/browse/OCPBUGS-41806): When newly built images rolled out, the update progress is not displaying correctly (went 0 --&gt; 3) [#4584](https://github.com/openshift/machine-config-operator/pull/4584)
* [OCPBUGS-41518](https://issues.redhat.com/browse/OCPBUGS-41518): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4569](https://github.com/openshift/machine-config-operator/pull/4569)
* [OCPBUGS-38997](https://issues.redhat.com/browse/OCPBUGS-38997): Machine-config daemon ListPools panic during tech-preview CI runs [#4550](https://github.com/openshift/machine-config-operator/pull/4550)
* [OCPBUGS-38711](https://issues.redhat.com/browse/OCPBUGS-38711): SCC-pinning for openshift workloads [#4539](https://github.com/openshift/machine-config-operator/pull/4539)
* [OCPBUGS-36850](https://issues.redhat.com/browse/OCPBUGS-36850): Port number 22623 exposing weak ciphers to external client from master node IP [#4556](https://github.com/openshift/machine-config-operator/pull/4556)
* [OCPBUGS-38373](https://issues.redhat.com/browse/OCPBUGS-38373): Revert "MCD-pull: run after network-online.target in Azure" [#4528](https://github.com/openshift/machine-config-operator/pull/4528)
* [OCPBUGS-36171](https://issues.redhat.com/browse/OCPBUGS-36171), [OCPBUGS-36172](https://issues.redhat.com/browse/OCPBUGS-36172): fix secret canonicalization [#4432](https://github.com/openshift/machine-config-operator/pull/4432)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/64434515dba546949bcec20be26f3215a4fc5b53...6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/6a049e3acc8e2efd9e7fcfdc4395b14789941b34)

* [OCPBUGS-42424](https://issues.redhat.com/browse/OCPBUGS-42424): fix path-to-regexp dependency [#197](https://github.com/openshift/monitoring-plugin/pull/197)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/aa339e459718c1644d53fcdaf6a59bb751bfecea...6a049e3acc8e2efd9e7fcfdc4395b14789941b34)


### [must-gather](https://github.com/openshift/must-gather/tree/a30f939e9fec211253eaf1c91d4b5c7401f300a4)

* [OCPBUGS-43056](https://issues.redhat.com/browse/OCPBUGS-43056): Open [Release-4.16] Multus is now a Pod and will be captured by normal [#449](https://github.com/openshift/must-gather/pull/449)
* [Full changelog](https://github.com/openshift/must-gather/compare/aea114c0e263e6148b6a26f69f45af559a4f7bc7...a30f939e9fec211253eaf1c91d4b5c7401f300a4)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/819f0115e4be3f55ed7d4edae1c38035811771ae)

* [OCPBUGS-38035](https://issues.redhat.com/browse/OCPBUGS-38035): Rebuild catalogs -- without cache generation (#905) [#905](https://github.com/openshift/oc-mirror/pull/905)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/7ce43f4498a017bb1ae278442e79703b5a16b21d...819f0115e4be3f55ed7d4edae1c38035811771ae)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f09402cfac07d6e5040ac8b6f068703eba3c700f)

* [OCPBUGS-42724](https://issues.redhat.com/browse/OCPBUGS-42724): fail image import when both image and error are nil [#455](https://github.com/openshift/openshift-apiserver/pull/455)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6b5184128103eaad64d7b00f0d1de9b7c3597112...f09402cfac07d6e5040ac8b6f068703eba3c700f)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/256e5282590ac92dd896df9630b8e7417376478b)

* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#343](https://github.com/openshift/openshift-controller-manager/pull/343)
* [OCPBUGS-39191](https://issues.redhat.com/browse/OCPBUGS-39191): replaces deprecated square/go-jose wtih go-jose/go-jose [#329](https://github.com/openshift/openshift-controller-manager/pull/329)
* [OCPBUGS-37526](https://issues.redhat.com/browse/OCPBUGS-37526): Race condition when deleting ServiceAccount [#324](https://github.com/openshift/openshift-controller-manager/pull/324)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f0536caff57932e0b5fb88987477f4978463574a...256e5282590ac92dd896df9630b8e7417376478b)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/10aa50e3b19a233c77f18fe6aa616e03874fa511)

* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): rebase on release-0.10 (to fix trunks deletion) [#321](https://github.com/openshift/cluster-api-provider-openstack/pull/321)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/86a58d8345c5c434817d0ecd6a91c93fc6438ac4...10aa50e3b19a233c77f18fe6aa616e03874fa511)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5ada1cbab3a9354488b1e74e85c36285302c3382)

* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): bump CAPO to v0.9.2 [#124](https://github.com/openshift/machine-api-provider-openstack/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/fb930638853b159a2e428e6200bd67a64a37295b...5ada1cbab3a9354488b1e74e85c36285302c3382)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)

* [OCPBUGS-41540](https://issues.redhat.com/browse/OCPBUGS-41540): [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#859](https://github.com/openshift/operator-framework-olm/pull/859)
* [OCPBUGS-41677](https://issues.redhat.com/browse/OCPBUGS-41677): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#863](https://github.com/openshift/operator-framework-olm/pull/863)
* [OCPBUGS-41557](https://issues.redhat.com/browse/OCPBUGS-41557): Fix e2e flake: upgrade CRD with deprecated version [#861](https://github.com/openshift/operator-framework-olm/pull/861)
* [OCPBUGS-41217](https://issues.redhat.com/browse/OCPBUGS-41217): (fix) registry pods do not come up again after node failure (#3366) [#854](https://github.com/openshift/operator-framework-olm/pull/854)
* [OCPBUGS-38290](https://issues.redhat.com/browse/OCPBUGS-38290): [release-4.16] (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#838](https://github.com/openshift/operator-framework-olm/pull/838)
* [OCPBUGS-38129](https://issues.redhat.com/browse/OCPBUGS-38129): [release-4.16]  Update junit report file name to show spec results on Test Grid [#833](https://github.com/openshift/operator-framework-olm/pull/833)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/97a3268a20581bb6b9f3fc9e41aed944fa538842...c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/52c7ebe90417a98c4e276f735e1824ea04b27cf6)

* [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306)
* [OCPBUGS-38697](https://issues.redhat.com/browse/OCPBUGS-38697): Use more exact name match when deleting static routes to HO nodes. [#2282](https://github.com/openshift/ovn-kubernetes/pull/2282)
* [OCPBUGS-24386](https://issues.redhat.com/browse/OCPBUGS-24386): [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW [#2278](https://github.com/openshift/ovn-kubernetes/pull/2278)
* [OCPBUGS-38705](https://issues.redhat.com/browse/OCPBUGS-38705): Delete EgressIP LRP stale nexthops when node is not found [#2271](https://github.com/openshift/ovn-kubernetes/pull/2271)
* [OCPBUGS-38054](https://issues.redhat.com/browse/OCPBUGS-38054): Fix per-pod MCS/metadata blocking [#2248](https://github.com/openshift/ovn-kubernetes/pull/2248)
* [OCPBUGS-38699](https://issues.redhat.com/browse/OCPBUGS-38699), [OCPBUGS-38704](https://issues.redhat.com/browse/OCPBUGS-38704): EgressIP VRF support & ignore localnet patch ports when bootstrapping [#2267](https://github.com/openshift/ovn-kubernetes/pull/2267)
* [OCPBUGS-37939](https://issues.redhat.com/browse/OCPBUGS-37939): [release-4.16] Bump OVSDBTimeout and make it configurable. [#2244](https://github.com/openshift/ovn-kubernetes/pull/2244)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/494993b7702336ed9d527c2c9899b85cdd22c7bf...52c7ebe90417a98c4e276f735e1824ea04b27cf6)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/60ebedf061fe1bb5279650fd637108b13b92d95f)

* [OCPBUGS-41976](https://issues.redhat.com/browse/OCPBUGS-41976): Update go.mod to fix CVE - 4.16 [#84](https://github.com/openshift/machine-api-provider-powervs/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1...60ebedf061fe1bb5279650fd637108b13b92d95f)


### [prometheus](https://github.com/openshift/prometheus/tree/c5c08df947236f3917abf14de481eb2f99fb07de)

* [OCPBUGS-39179](https://issues.redhat.com/browse/OCPBUGS-39179): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#224](https://github.com/openshift/prometheus/pull/224)
* [OCPBUGS-36918](https://issues.redhat.com/browse/OCPBUGS-36918): cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. [#214](https://github.com/openshift/prometheus/pull/214)
* [Full changelog](https://github.com/openshift/prometheus/compare/bc04420c7556a9ba168ce160466a99461dd9746e...c5c08df947236f3917abf14de481eb2f99fb07de)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/c7262a43c0ddf2adc6be3863ac9a5056cb89c177)

* [OCPBUGS-38399](https://issues.redhat.com/browse/OCPBUGS-38399): feat: sync proxy settings in Alertmanager configuration [#299](https://github.com/openshift/prometheus-operator/pull/299)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/8bf4750af765730dc423213516245c7b0679e352...c7262a43c0ddf2adc6be3863ac9a5056cb89c177)


### [tests](https://github.com/openshift/origin/tree/06403d4defedd9b48c4a8755389516eeb3be2b13)

* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [OCPBUGS-41611](https://issues.redhat.com/browse/OCPBUGS-41611): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] [#29079](https://github.com/openshift/origin/pull/29079)
* [OCPBUGS-38707](https://issues.redhat.com/browse/OCPBUGS-38707): run vsphere driver config test on non techpreview clusters [#28992](https://github.com/openshift/origin/pull/28992)
* [OCPBUGS-38788](https://issues.redhat.com/browse/OCPBUGS-38788): [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28938](https://github.com/openshift/origin/pull/28938)
* [OCPBUGS-38015](https://issues.redhat.com/browse/OCPBUGS-38015): vertical scaling test should not rely on CPMS replicas [#28981](https://github.com/openshift/origin/pull/28981)
* [Full changelog](https://github.com/openshift/origin/compare/83fcc4d5baf659bdb472dfab085751c331baa849...06403d4defedd9b48c4a8755389516eeb3be2b13)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/44ea2b5825a5e200e12cb36f901393e97cbbf243)

* [OCPBUGS-37660](https://issues.redhat.com/browse/OCPBUGS-37660): Bump otelgrpc to v0.53.0 [#72](https://github.com/openshift/cloud-provider-vsphere/pull/72)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/8777b9a5ec4b34cefab7708987731a1fd224a739...44ea2b5825a5e200e12cb36f901393e97cbbf243)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0d0e8432aed0be6af7463dce0c630d3aa4a2ad60)

* [OCPBUGS-42878](https://issues.redhat.com/browse/OCPBUGS-42878): Add compute resource entity to consider a standalone cluster for volu… [#131](https://github.com/openshift/vmware-vsphere-csi-driver/pull/131)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/3cd689f3f1ff59467885ee8ef42997eef5f81972...0d0e8432aed0be6af7463dce0c630d3aa4a2ad60)