# 4.16.38

Created: 2025-03-27 09:39:53 +0000 UTC

Image Digest: `sha256:6da09834a9e0e30a79f77c13c2520a25172d8be3fc044dc2ad1392d69b2edfbf`


## Changes from 4.16.7

### Components

* Kubectl 1.29.7
* Kubernetes upgraded from 1.29.7 to 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202408062045-0 to 416.94.202503252048-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalRouteCertificate <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:b28b3c431aecafaa6e786c6804a1cfd283ffe7e0e33227446b0a7d9aeee5afd5`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:962814d101f0b19ade2cbe20ca622b9605f5c17e485538c23cfe393abb5f67b7`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:e3f56169a5a7ba59da3763f0022eeb53d93efc8b9fec428c07ecfab7a08fc807`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:b6567df203e2c424e8b13210f29fc0979ec40d457273274d2fccfaa7153d113b`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:e220de5b35809760c0289d92d80aafdb8360b15ea5e4db3568fcff0c997ee380`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a81e3b31](https://github.com/openshift/cluster-api-provider-azure/commit/a81e3b31948468d76ac744bbbb74b0c423fc969e) `sha256:5df9e8114e3d865570697327529f51ec6d6de989dfcf12c895a089d1983b901d`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:a26f197d648513d7eb64b8ec067dc6ca42808f753fd2f6bbf747e3992d8dbbdb`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:4d0b6d8235527bd06f86ed2682eb7f929869d9d836c55a63679d8a1834ef50dc`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [ff69cd03](https://github.com/openshift/csi-operator/commit/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17) `sha256:a8eae7f0ada3c4bc9f9aa759ee8ed09d4543105410074e815766939e8c6c86cb`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [f55a330f](https://github.com/openshift/baremetal-runtimecfg/commit/f55a330f8139ef660b3f60b735ef77538f7b9cbe) `sha256:f64405e024ce14049b3d7fcf6d5e8fb9f7cf2a790e605b0f47f0b2d1322b396e`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [8ceee788](https://github.com/openshift/cloud-network-config-controller/commit/8ceee78810756afaa2efb75f60bef0358502834f) `sha256:1c7ae3ff32c409c83209478c12b1017d6559e8f7d1f24c0fea0a2a099e2608b9`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:d7b8cc7dd69b1eeddcad87994530ba7c5b36d07877549abdf3cef92da9800d93`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:4c72e4a5a16fd0c02e4d95150ea848191bb3dddc3ad8d67ce531e82d15e7e544`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:728934589a9147093d0401a11be2c87350a1de642ee362801bc7afc4b297c140`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:7ad7ae8cf869c7698f8283b7caa9aac9b5cf1f5a62a733800df6b3ac693643b5`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:c4a0b031c120df6d0c6563939653b4f344da0c6340d27b8cbf49d076d5acd9e6`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0338b3be](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0338b3be6912024d03def2c26f0fa10218fc2c25) `sha256:d243f4bd09f71f6f8ac0be1b0dac8441a0cbd149db325cf5233bbd6e369ad7b1`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:9218a00c79b43ff1dafce7ebe184a633953349882485e83a5dae7a6d62e186e2`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [27bf70dd](https://github.com/openshift/cluster-olm-operator/commit/27bf70ddf9421637e1da18b249785b2cca177272) `sha256:36939a759fcca482e344e5bd0bf714e671786776b4234efec9d8caca0b94fb82`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:15afbf837f0f2dbc897be38787bc2e651eb83df67892a041d6b64b2cf2b62291`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:28f0ef1bf7598720aa53456a042658d5886a2c5be044cd434ac0443dd40182eb`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:e10a84c419669138f7c9375d5a17e3c8908989f598712319b5b7d7d985197995`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [73b4123c](https://github.com/openshift/containernetworking-plugins/commit/73b4123cc75abd22af8dc3b429836be2bea45fd5) `sha256:9e01cd8561cc5ceade71be32af55eda7fcfb5e71911cf6e00dfe2e198121ea17`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [73b4123c](https://github.com/openshift/containernetworking-plugins/commit/73b4123cc75abd22af8dc3b429836be2bea45fd5) `sha256:c17a221a731733b5d63a9d3d470616973bc2132f3433574696b6096f5be46e52`
* [coredns](https://github.com/openshift/coredns) git [1e417656](https://github.com/openshift/coredns/commit/1e417656c1c72d3410b31ee08caf25bcdf8836e3) `sha256:67dae90916d9b744e20cc1d38d854fb6eebabee1d7dc7d315e5eb9957342fe58`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:b35b23ddac28ffc128a3693ee5b8f1a43f3c4a8ffa74cfa4db8cb9c33bc70510`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:ffe42dbb97f065407466797e56d06e845fca408ac2f4bc5d90edcb5a8a084da1`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:09f1b9272b95d206e5088c92a144eeff023b6eaf24fd17d2b77319c27624012f`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:4ed0cd3d97b62c7e13d95ed2c8e8ce62dd85d4359aeca7dfe9fd802702bf0d9e`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:52f8478ba508a6ebf994ade2282fe73afd9911d6feb701396d26ad19ff7a0f2d`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:4e7d619a54407ccea4991d4ee2d4444312df6bc6b3005a1f8b234aeace7958e3`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:51d1b775384acbf0987b7d3ea9212c91bdc032b920ff8fb184e934deb8c531f7`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:273d50f299a20db2ddb4be6cad5dea84e9488d932aa83ea2c61967687b9ba8ce`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:564afbfd84026d55a58128028582668265d5fc7eff8209d39e119ffb7ddf3795`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:3692b5ce3b3cf3343eef7bcb12986203f8143e5489a022fbd9268b65063782f9`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:f678ce04651d1f8f752218522253bf4c583c03cca95dfd56a7add36ac0eedef6`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [5315d37a](https://github.com/openshift/csi-external-snapshotter/commit/5315d37a1e5415e8b6870f23e50238681979cc28) `sha256:d51159843c2f889fbfe6ea6ebb33d3244d1013127d8af83d5618a03bbf1834af`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:03336515e9dcdece823625978b0c09ec9f3f4c21c8ce0d54d5b3bc90d9365c23`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:2cf85d67b4702d4b093b20f26bb75a0c058b4c4caeecc12d5f13a094b6c56e2d`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:71c8e61c1406285afdded883b4946070f5a97fecf108f165b4def3af183c383f`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [02432df8](https://github.com/openshift/cluster-api-provider-gcp/commit/02432df87df9a731c8d630311854fbd515602e91) `sha256:bcb7882737a78db63964326e0047c41daaa694e47eea899424319152ecb22d06`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:1d1fc3aee494c82258acaa0ef6f1aa9fbbe343aa0bd316adf5fc00e217a1e2ef`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:920d74686e2a97fa442b36e92288bb3deaee815992c36004c1a1818ad5226248`
* [haproxy-router](https://github.com/openshift/router) git [4d9b8c4a](https://github.com/openshift/router/commit/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6) `sha256:f34084a54f1d4029f418c87adf663ef823125afaded7705cdcc4f6f959275cf6`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:7910416c1b644e9dc47904964f40d07ead49183d23f12f976233929d56049408`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [95719738](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/957197389ec49234c3883bbb730bb630b459e24f) `sha256:00d46a98697f4054d70b32447044eb2a8929d3d2bfabc94795d4e957a30752e3`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:232902187cc16117813cbbd3e8c370b50dd76fa26a43fd2fe41d7f1145f1f801`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:608c82b49e8606785d53eea4477c940c7010533d17ca2a8399213aa01434c179`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:1958c5cb4a0d1890becedd477be05cd25142ae708a1d2c068022fb01b7563d4c`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:372c3b66a83b9f72527f072ceec49f58dc5492736d0efba488dfeedff2a6b326`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [969a60e9](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51) `sha256:f202db792fffaa1d124f8261df03c887d3e7d3b87170b09f7f52b8066839cbd1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:512668afab4daba71a9256eae1ec4167c4a3125e7fa51f3179a9abc13e4f02a8`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:b8be8e279959726a60b14339ab4fd63609c7db0aa010a37f9164d1a9f5fb2b6b`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:fd16be924db880aca6aaad247bd5875b7dea0785d35c1e14ef0085a7c07803c3`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [88c596ed](https://github.com/openshift/multus-admission-controller/commit/88c596ed782cf6c3f94efa286b3568d12acde436) `sha256:29ecce5e257a08cc64bfe57bda736ba4ff742f5fcf9dfc6d16e3edd412e24f84`
* [multus-cni](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:bbed239175ab11023a5c5e95de5475f97118947e5a6f1ad643dfe2bfaf683507`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [c4aa21b9](https://github.com/openshift/multus-cni/commit/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f) `sha256:3fdcdce1e9a1cbac1b45c8d21f3b22e40543f25e478ac7f7488c3735a94cdd37`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:f01c34dac4db1cea54a0c9e083fff7684a504023a0a0c6af12f1d6ec1fabe741`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:ea2f61925fe7107d10021c1dfdcf62888881ae18be244b715c23e0c639f3f72b`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [bb911451](https://github.com/openshift/bond-cni/commit/bb911451158fc06f193917863778434944e88ae1) `sha256:de2d75d59be4adfa448f7a534e1c211ebb3206b9dd40cc9179dee34691a72a88`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [48059263](https://github.com/openshift/network-metrics-daemon/commit/48059263880572c52fb8b21f1441370100dc167a) `sha256:4cafd985bc893849ec8f5fd46ea97cbcb109231fe2667cdd75739dc81fecc139`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:5f7372932d47657683df69730ed4d2732af311c85a0c25668abf5e0efca4ee68`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [f053e5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/f053e5a0ee58d20066efff8db01578785ea83dad) `sha256:70580822917ff0776e5a0d245aafe6b2a741188be363a822f685fa36c9472204`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:42c50f4746ea78a4022f104e3380fde3ce942d6ae154783d6cd04ef947820bc6`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:a33549fe8019b84700c2417d915a5e496b8481806d0eff2ed3072f4f7b274636`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:03bdabd45cfdb5de1bf24b2dda4ae258e6663b62568c283314e3f34b79962f17`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:1a2a7343bfbe139b9ba2a637c496b711bc56addae41522397f83bdc4ae45d8db`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:277f883605adaea1d9b6cfefead78cf9210295e193cf44ef1683a3c255214373`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:e33948231337746cdd13177f439ab9ce3dedf161297e317e43efa2ce4e79bb0e`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:fd4cbdfe3a13e962dca6264c88c976253e8e6f3824b179a8c0ede7010b4cf16f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:457be64f6782af0d5ffbd4a6c0939c87d6218ac3423d17a4ff4c2230394df42b`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:e76dd97d8c01ee9b49456bfc7352a087ba72e0a7a863d20299a5b4900f4d30ee`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:ffc5cf2db7dd833dab20e836681adc440c026c31ebfddd686784b0769951a2bf`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:76ee687eba37b3e155131170d2e2921131af87abc3926c7ceb1cfe805137f442`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:fc612dbffad47f91bf45d28a115fc2f26700879f69c1c8c0240d4dd0ab45fb61`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:5ca0f32693ae8ab477eabca671feededbbc7c8b699b3b8fb64c4c0015a4400b0`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e9aea929](https://github.com/openshift/prometheus-alertmanager/commit/e9aea929f309f412678fdf1064e1f74db3ba08b4) `sha256:849e522af61967dbd8b07fe3c5e9e4d3b065b9b662ca39843778df4c7dcf33ce`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:170eb3a2b5232a8c0b73faf440b939c520401338ff4963fa6c6e2606edb76f15`
* rhel-coreos `sha256:f7dd130ddacf7814c9cad7ce1c457736152d560f1731c349bda600ddee980b42`
* rhel-coreos-extensions `sha256:288a688564a54665accf7c20fccbe95958a53b655311a4240784e8cc73ad275b`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [3112b458](https://github.com/openshift/route-controller-manager/commit/3112b458983c6fca6f77d5a945fb0026186dace6) `sha256:7a8b8ebec55edac02ef0068295e1a055c9920bb9ef8805207bf2fc5c6d01c45e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:c146fddea4d64809ccf3f52f65a1ef1c9f326cc6d01d1c1963cfbee744deac30`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:3ab095977dd7afcf66b3ae3ed47f6284c6517c2aff03c5e9d69d28794310e3d7`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:ab9d7bd150ee3436fdefdc6cd7aeebca7ecc1ddb3f158d6d734b77d699285d09`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [be22f10a](https://github.com/openshift/cluster-api-provider-vsphere/commit/be22f10a56a18cd94406eea442e0113d866618ea) `sha256:fe93dd6df31033f640334d86fd50f4600f151022175b53b534a3333c4114d2d9`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3683c120](https://github.com/openshift/vsphere-problem-detector/commit/3683c120278fb79a30340f66d22948aaddf3c16a) `sha256:71a1bc749fa7e2a1c4d2142b8a57f21429cae51f6d9aeee3a704b4aa2a8ee54d`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/ef6fa80b069b6b3cae3085061dee96b49968f10d)

* [OCPBUGS-45244](https://issues.redhat.com/browse/OCPBUGS-45244): Bump moby from v26.0.0 to v27.2.1 (#7189) [#7189](https://github.com/openshift/assisted-service/pull/7189)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7130) [#7130](https://github.com/openshift/assisted-service/pull/7130)
* [OCPBUGS-43021](https://issues.redhat.com/browse/OCPBUGS-43021): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) [#6893](https://github.com/openshift/assisted-service/pull/6893)
* [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) [#6752](https://github.com/openshift/assisted-service/pull/6752)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a...ef6fa80b069b6b3cae3085061dee96b49968f10d)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/27db6d764cbb244b6b817b0ddc289f0bd79f1930)

* abi: let the bootstrap waiting for workers before rebooting (#1047) [#1047](https://github.com/openshift/assisted-installer/pull/1047)
* [OCPBUGS-47494](https://issues.redhat.com/browse/OCPBUGS-47494): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) [#990](https://github.com/openshift/assisted-installer/pull/990)
* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#914) [#914](https://github.com/openshift/assisted-installer/pull/914)
* [OCPBUGS-43025](https://issues.redhat.com/browse/OCPBUGS-43025): Pick up latest CVE changes by bumping service (#920) [#920](https://github.com/openshift/assisted-installer/pull/920)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) [#906](https://github.com/openshift/assisted-installer/pull/906)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/182ecbdc7d808580e7f0ebfd668d61bc0f0641f9...27db6d764cbb244b6b817b0ddc289f0bd79f1930)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/5d581421e2cb97db33a111c82d06cb1d275139a7)

* NO-ISSUE: Increase image pull timeout during install (#923) [#923](https://github.com/openshift/assisted-installer-agent/pull/923)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#874) [#874](https://github.com/openshift/assisted-installer-agent/pull/874)
* [OCPBUGS-43028](https://issues.redhat.com/browse/OCPBUGS-43028): Pick up latest CVE changes by bumping service (#804) [#804](https://github.com/openshift/assisted-installer-agent/pull/804)
* [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9ca7b58d937c413f670a26c02435829b1fb3a196...5d581421e2cb97db33a111c82d06cb1d275139a7)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/248372a4f668111a7bf134527911cb656c44d47a)

* [OCPBUGS-44242](https://issues.redhat.com/browse/OCPBUGS-44242): change the VERSION makefile variable to use OS_GIT_VERSION [#58](https://github.com/openshift/cluster-api-provider-alibaba/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/064d4624c74d417dd31cf1c173c00c3fa98ffade...248372a4f668111a7bf134527911cb656c44d47a)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/ca81b6a32aff6ccb327f6889ec89c01afedd8efd)

* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#59](https://github.com/openshift/apiserver-network-proxy/pull/59)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/9a6028c48ae73bd8227f014635ce744452e70348...ca81b6a32aff6ccb327f6889ec89c01afedd8efd)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/60d797bea7418e10ec26ae1ccef4e42249705b6c)

* [OCPBUGS-44234](https://issues.redhat.com/browse/OCPBUGS-44234): [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#531](https://github.com/openshift/cluster-api-provider-aws/pull/531)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/aaaf00b18daf45c9eea93bc2924a6a7e22d27766...60d797bea7418e10ec26ae1ccef4e42249705b6c)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/c66065de639016b770f512e7cfcfcee9519fb89f)

* [OCPBUGS-33693](https://issues.redhat.com/browse/OCPBUGS-33693): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 [#18](https://github.com/openshift/aws-encryption-provider/pull/18)
* hack: display diff on verify-mod-tidy failure [#26](https://github.com/openshift/aws-encryption-provider/pull/26)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0...c66065de639016b770f512e7cfcfcee9519fb89f)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/0c8198618609197cc6cbcfd4016ba8400d8c13d5)

* [OCPBUGS-46508](https://issues.redhat.com/browse/OCPBUGS-46508): fix Associate*IpAddress flag on launch EC2 [#121](https://github.com/openshift/machine-api-provider-aws/pull/121)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/61d60f6ca20443df434456c2f3eeba859634e6a2...0c8198618609197cc6cbcfd4016ba8400d8c13d5)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/459c531487ae4dd94301e2996bf817d47124854c)

* [OCPBUGS-52513](https://issues.redhat.com/browse/OCPBUGS-52513): github.com/go-jose/go-jose/v4 v4.0.5 [#203](https://github.com/openshift/aws-pod-identity-webhook/pull/203)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/746491a64a4efc04132ceb641cee52c2ead3facd...459c531487ae4dd94301e2996bf817d47124854c)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/e5bac3341fce67c12047caaafcf188c3f3049dc3)

* [OCPBUGS-47645](https://issues.redhat.com/browse/OCPBUGS-47645): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#133](https://github.com/openshift/cloud-provider-azure/pull/133)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0e9553295ecd02d6ef0aff19dfc1dfe680993112...e5bac3341fce67c12047caaafcf188c3f3049dc3)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/7a36778add73d12eb08ff6be357d8d351af651a7)

* [OCPBUGS-39145](https://issues.redhat.com/browse/OCPBUGS-39145): bump mount-utils to treat ENODEV error as corrupted mount [#76](https://github.com/openshift/azure-file-csi-driver/pull/76)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/5ceb190a24730e4a3f951fa3e186e3cde9d86889...7a36778add73d12eb08ff6be357d8d351af651a7)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/47d243b5a993fd0817eecf89a6d7896a3c911ecb)

* [OCPBUGS-33692](https://issues.redhat.com/browse/OCPBUGS-33692): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 [#4](https://github.com/openshift/azure-kubernetes-kms/pull/4)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/bc92347bcd3863db05ce6c79f0b71145a3185e12...47d243b5a993fd0817eecf89a6d7896a3c911ecb)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7)

* [OCPBUGS-50966](https://issues.redhat.com/browse/OCPBUGS-50966): dynamically setting the amount of fault domains [#129](https://github.com/openshift/machine-api-provider-azure/pull/129)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e4e11505b645e2af8eb28c5dc353c41a6740db00...100d2bb8abf8bac723b1f01d7509ba5c3f3303c7)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/a7544969f9c3436f3126cca357c1edf96459e148)

* [OCPBUGS-52510](https://issues.redhat.com/browse/OCPBUGS-52510): github.com/go-jose/go-jose/v4 v4.0.5 [#29](https://github.com/openshift/azure-workload-identity/pull/29)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/4aca092a13f62e48c700a910e8f3f0f228a7d822...a7544969f9c3436f3126cca357c1edf96459e148)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/145d7e76a28510b0203736e240870529ba6fe54a)

* [OCPBUGS-52191](https://issues.redhat.com/browse/OCPBUGS-52191): [release-4.16] capi/aws: bump provider for LB DNS lookup fix [#9547](https://github.com/openshift/installer/pull/9547)
* [OCPBUGS-51207](https://issues.redhat.com/browse/OCPBUGS-51207): Log correct hostname for validation status [#9511](https://github.com/openshift/installer/pull/9511)
* [OCPBUGS-51111](https://issues.redhat.com/browse/OCPBUGS-51111): PowerVS: destroy dhcp hack [#9502](https://github.com/openshift/installer/pull/9502)
* [OCPBUGS-48762](https://issues.redhat.com/browse/OCPBUGS-48762): Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 [#9478](https://github.com/openshift/installer/pull/9478)
* [OCPBUGS-43469](https://issues.redhat.com/browse/OCPBUGS-43469): pkg/asset/installconfig/azure: send full certifcate chain [#9467](https://github.com/openshift/installer/pull/9467)
* [OCPBUGS-49416](https://issues.redhat.com/browse/OCPBUGS-49416): [Nutanix] Installation failed with timeout when uploading images to PC [#9412](https://github.com/openshift/installer/pull/9412)
* [OCPBUGS-47663](https://issues.redhat.com/browse/OCPBUGS-47663): [release-4.16] Power VS: Create region-zone-sysType hierarchy [#9338](https://github.com/openshift/installer/pull/9338)
* [OCPBUGS-48442](https://issues.redhat.com/browse/OCPBUGS-48442): Ensure rendezvousIP is checked against host IP [#9369](https://github.com/openshift/installer/pull/9369)
* [OCPBUGS-45999](https://issues.redhat.com/browse/OCPBUGS-45999): Always set cross_tenant_replication_enabled parameter to false [#9321](https://github.com/openshift/installer/pull/9321)
* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): aws: fix Node Port Service rule removal [#9312](https://github.com/openshift/installer/pull/9312)
* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): [release-4.16] capi/aws: remove allow-all Node Port Service [#9281](https://github.com/openshift/installer/pull/9281)
* [OCPBUGS-39434](https://issues.redhat.com/browse/OCPBUGS-39434): dropping this warning as the move from terraform is transparent to the end user [#8951](https://github.com/openshift/installer/pull/8951)
* [OCPBUGS-45852](https://issues.redhat.com/browse/OCPBUGS-45852): Update upi references to api-internal [#9290](https://github.com/openshift/installer/pull/9290)
* [OCPBUGS-41813](https://issues.redhat.com/browse/OCPBUGS-41813): Validate MTU for custom network [#9104](https://github.com/openshift/installer/pull/9104)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9259](https://github.com/openshift/installer/pull/9259)
* [OCPBUGS-45181](https://issues.redhat.com/browse/OCPBUGS-45181): add chrony.conf file when additional NTP sources are configured [#9247](https://github.com/openshift/installer/pull/9247)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9220](https://github.com/openshift/installer/pull/9220)
* [OCPBUGS-44348](https://issues.redhat.com/browse/OCPBUGS-44348): Cherrypick oci ccm fix to 4.16 [#9188](https://github.com/openshift/installer/pull/9188)
* [OCPBUGS-43967](https://issues.redhat.com/browse/OCPBUGS-43967): Revendor assisted service external platform oci [#9150](https://github.com/openshift/installer/pull/9150)
* [OCPBUGS-38930](https://issues.redhat.com/browse/OCPBUGS-38930): import failure when esxi config is not the same in the cluster [#8898](https://github.com/openshift/installer/pull/8898)
* [OCPBUGS-36290](https://issues.redhat.com/browse/OCPBUGS-36290): IBMCloud: Ignore failed VPC regions [#8674](https://github.com/openshift/installer/pull/8674)
* [OCPBUGS-41885](https://issues.redhat.com/browse/OCPBUGS-41885): vSphere - If template is defined skip downloading [#8999](https://github.com/openshift/installer/pull/8999)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 [#9158](https://github.com/openshift/installer/pull/9158)
* [OCPBUGS-43476](https://issues.redhat.com/browse/OCPBUGS-43476): IBMCloud: Handle pagination for subnets [#9102](https://github.com/openshift/installer/pull/9102)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 [#9132](https://github.com/openshift/installer/pull/9132)
* [OCPBUGS-42014](https://issues.redhat.com/browse/OCPBUGS-42014): Update terraform provider for google [#9077](https://github.com/openshift/installer/pull/9077)
* [OCPBUGS-38732](https://issues.redhat.com/browse/OCPBUGS-38732): vsphere, if secureboot is enabled, disable it in the template [#8904](https://github.com/openshift/installer/pull/8904)
* [OCPBUGS-39415](https://issues.redhat.com/browse/OCPBUGS-39415): OpenStack: Install CI dependencies from rpm [#8995](https://github.com/openshift/installer/pull/8995)
* [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971)
* [OCPBUGS-38687](https://issues.redhat.com/browse/OCPBUGS-38687): only allow a single network in failure domain topology [#8875](https://github.com/openshift/installer/pull/8875)
* [OCPBUGS-42062](https://issues.redhat.com/browse/OCPBUGS-42062): OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 [#9036](https://github.com/openshift/installer/pull/9036)
* [OCPBUGS-42012](https://issues.redhat.com/browse/OCPBUGS-42012): Systemd Fails to Parse Multiline EC Keys [#9037](https://github.com/openshift/installer/pull/9037)
* [OCPBUGS-41845](https://issues.redhat.com/browse/OCPBUGS-41845): Bump extract-machine-os timout to 20m [#8997](https://github.com/openshift/installer/pull/8997)
* [OCPBUGS-38964](https://issues.redhat.com/browse/OCPBUGS-38964): IngressController subnet selection in AWS [#8910](https://github.com/openshift/installer/pull/8910)
* [OCPBUGS-42138](https://issues.redhat.com/browse/OCPBUGS-42138): add tested instance type for IBMCloud [#9031](https://github.com/openshift/installer/pull/9031)
* [OCPBUGS-39287](https://issues.redhat.com/browse/OCPBUGS-39287): Fix var_files syntax to work on older version of ansible [#8936](https://github.com/openshift/installer/pull/8936)
* [OCPBUGS-41929](https://issues.redhat.com/browse/OCPBUGS-41929): Add AWS c7g,m7g,r8g to tested instance types [#9009](https://github.com/openshift/installer/pull/9009)
* [OCPBUGS-36855](https://issues.redhat.com/browse/OCPBUGS-36855): Openstack UPI - Reintroduce unique resource names. [#8724](https://github.com/openshift/installer/pull/8724)
* [OCPBUGS-39082](https://issues.redhat.com/browse/OCPBUGS-39082): incorrect folder gen, workaround govmomi vm folder path bug [#8912](https://github.com/openshift/installer/pull/8912)
* [OCPBUGS-39496](https://issues.redhat.com/browse/OCPBUGS-39496): capi/aws/byo-vpc/multi-cidr: fix group rules [#8953](https://github.com/openshift/installer/pull/8953)
* [OCPBUGS-36861](https://issues.redhat.com/browse/OCPBUGS-36861): Updates GCP terraform worker role [#8939](https://github.com/openshift/installer/pull/8939)
* [OCPBUGS-38956](https://issues.redhat.com/browse/OCPBUGS-38956): failed to install Nutanix OCP 4.16 cluster with DHCP [#8905](https://github.com/openshift/installer/pull/8905)
* [OCPBUGS-38822](https://issues.redhat.com/browse/OCPBUGS-38822): upstream capv bug causes session timeout [#8891](https://github.com/openshift/installer/pull/8891)
* [OCPBUGS-39468](https://issues.redhat.com/browse/OCPBUGS-39468): Enable TLS for virtual media in initial ironic deployment [#8955](https://github.com/openshift/installer/pull/8955)
* [OCPBUGS-37606](https://issues.redhat.com/browse/OCPBUGS-37606): vSphere validation fails if dc is in a folder [#8777](https://github.com/openshift/installer/pull/8777)
* [OCPBUGS-39206](https://issues.redhat.com/browse/OCPBUGS-39206): Update GCP Disk Types 4.16 [#8920](https://github.com/openshift/installer/pull/8920)
* [OCPBUGS-39087](https://issues.redhat.com/browse/OCPBUGS-39087): aws: validate public-only subnets configs [#8913](https://github.com/openshift/installer/pull/8913)
* [OCPBUGS-38821](https://issues.redhat.com/browse/OCPBUGS-38821): [release-4.16] Azure: Disable shared key access when using a managed identity [#8855](https://github.com/openshift/installer/pull/8855)
* [OCPBUGS-38302](https://issues.redhat.com/browse/OCPBUGS-38302): upi/aws: update lambda runtime python version [#8897](https://github.com/openshift/installer/pull/8897)
* [OCPBUGS-38826](https://issues.redhat.com/browse/OCPBUGS-38826): aws: add support for clusters with public-only subnets [#8892](https://github.com/openshift/installer/pull/8892)
* [OCPBUGS-38517](https://issues.redhat.com/browse/OCPBUGS-38517): [release-4.16] capi/aws: bump provider for instance register fix [#8848](https://github.com/openshift/installer/pull/8848)
* [OCPBUGS-38196](https://issues.redhat.com/browse/OCPBUGS-38196): Remove timed context for gcp client [#8818](https://github.com/openshift/installer/pull/8818)
* [OCPBUGS-38502](https://issues.redhat.com/browse/OCPBUGS-38502): PowerVS: Fix mad system pool [#8846](https://github.com/openshift/installer/pull/8846)
* [Full changelog](https://github.com/openshift/installer/compare/4f78aec1c86c5f51f560f56193f7be1843ab2cd2...145d7e76a28510b0203736e240870529ba6fe54a)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2b396e06c0a92acbfa688cd782ec4bf319ff3608)

* [OCPBUGS-46645](https://issues.redhat.com/browse/OCPBUGS-46645): Bump x/net to 0.33.0 [#226](https://github.com/openshift/cluster-api-provider-baremetal/pull/226)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/11ba601fbca58557176fcc67ffe8d7d64b697a4a...2b396e06c0a92acbfa688cd782ec4bf319ff3608)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f3125db3aff53a63b215a514421505db6a28f4c5)

* [OCPBUGS-49703](https://issues.redhat.com/browse/OCPBUGS-49703): Handle HFC for non-redfish HW [#396](https://github.com/openshift/baremetal-operator/pull/396)
* [OCPBUGS-39490](https://issues.redhat.com/browse/OCPBUGS-39490): Disallow fetching secrets from namespaces different from the host's one [#378](https://github.com/openshift/baremetal-operator/pull/378)
* [OCPBUGS-38938](https://issues.redhat.com/browse/OCPBUGS-38938): [OCP] Ability to disable agent power off after deployment [#372](https://github.com/openshift/baremetal-operator/pull/372)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/4632bfb631abe1b202d6dd450c92e86df06db8b9...f3125db3aff53a63b215a514421505db6a28f4c5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c)

* [OCPBUGS-51043](https://issues.redhat.com/browse/OCPBUGS-51043): Add HOST env var in oc debug for sos report collects more [#1977](https://github.com/openshift/oc/pull/1977)
* [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891)
* [OCPBUGS-39341](https://issues.redhat.com/browse/OCPBUGS-39341): Ignore pruning when deployment points to replicationcontroller [#1862](https://github.com/openshift/oc/pull/1862)
* [Full changelog](https://github.com/openshift/oc/compare/e8fb3c0574da9189b61a87a53956aa820cbfcd2c...ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/aa7ad99f1c4ca2e0938e37549e1d03f38c99af5a)

* [OCPBUGS-51544](https://issues.redhat.com/browse/OCPBUGS-51544): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#829](https://github.com/openshift/cloud-credential-operator/pull/829)
* [OCPBUGS-52512](https://issues.redhat.com/browse/OCPBUGS-52512): github.com/go-jose/go-jose/v4 v4.0.5 [#826](https://github.com/openshift/cloud-credential-operator/pull/826)
* [OCPBUGS-47070](https://issues.redhat.com/browse/OCPBUGS-47070): golang.org/x/net v0.33.0 [#805](https://github.com/openshift/cloud-credential-operator/pull/805)
* [OCPBUGS-45939](https://issues.redhat.com/browse/OCPBUGS-45939): Add AWS region to aws-pod-identity-webhook [#800](https://github.com/openshift/cloud-credential-operator/pull/800)
* [OCPBUGS-45007](https://issues.redhat.com/browse/OCPBUGS-45007): Add retry to ccoctl gcp create functions [#794](https://github.com/openshift/cloud-credential-operator/pull/794)
* [OCPBUGS-45002](https://issues.redhat.com/browse/OCPBUGS-45002): github.com/golang-jwt/jwt/v4 v4.5.1 [#788](https://github.com/openshift/cloud-credential-operator/pull/788)
* [OCPBUGS-43645](https://issues.redhat.com/browse/OCPBUGS-43645): Only attempt timed token credentials on supported platforms. [#772](https://github.com/openshift/cloud-credential-operator/pull/772)
* [OCPBUGS-43337](https://issues.redhat.com/browse/OCPBUGS-43337): Update github.com/sirupsen/logrus v1.9.3 [#767](https://github.com/openshift/cloud-credential-operator/pull/767)
* [OCPBUGS-41234](https://issues.redhat.com/browse/OCPBUGS-41234): List secrets in batches to avoid api timeout [#757](https://github.com/openshift/cloud-credential-operator/pull/757)
* [OCPBUGS-38376](https://issues.redhat.com/browse/OCPBUGS-38376): Update google.golang.org/grpc v1.65.0 [#748](https://github.com/openshift/cloud-credential-operator/pull/748)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/38ef552e182880d3053bcbd43bda3f45a11ed01e...aa7ad99f1c4ca2e0938e37549e1d03f38c99af5a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4782c451e1aab859b7db09aee01af10c1ebf428c)

* [OCPBUGS-43367](https://issues.redhat.com/browse/OCPBUGS-43367): manifests should not use APIs that are removed in upcoming releases [#717](https://github.com/openshift/cluster-authentication-operator/pull/717)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bae1e1c40ca48ed8049892ade79410faf4977166...4782c451e1aab859b7db09aee01af10c1ebf428c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f0bac124f7a1c6dee6e40fe90415cb95017f83a1)

* [OCPBUGS-48732](https://issues.redhat.com/browse/OCPBUGS-48732): UPSTREAM: &lt;carry&gt;: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#339](https://github.com/openshift/kubernetes-autoscaler/pull/339)
* [OCPBUGS-45148](https://issues.redhat.com/browse/OCPBUGS-45148): [release-4.16] VPA: Update OWNERS file [#325](https://github.com/openshift/kubernetes-autoscaler/pull/325)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/eecb123a3b02358046a2c2ce52adfc548a5caa17...f0bac124f7a1c6dee6e40fe90415cb95017f83a1)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/70164fc606a7b05352d92a8d07bd6ac42421c0ae)

* [OCPBUGS-52329](https://issues.redhat.com/browse/OCPBUGS-52329): set max soft bulk taint count to zero [#341](https://github.com/openshift/cluster-autoscaler-operator/pull/341)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/40cadf8a4729ca808a3413e9b8593ab7aab0bed7...70164fc606a7b05352d92a8d07bd6ac42421c0ae)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/03738f2d941b836800926fc701202b8d4b9d0605)

* [OCPBUGS-43556](https://issues.redhat.com/browse/OCPBUGS-43556): SCC-pinning for metal3-baremetal-operator [#453](https://github.com/openshift/cluster-baremetal-operator/pull/453)
* [OCPBUGS-31961](https://issues.redhat.com/browse/OCPBUGS-31961): bump x/net to 0.23.0 [#431](https://github.com/openshift/cluster-baremetal-operator/pull/431)
* [OCPBUGS-36415](https://issues.redhat.com/browse/OCPBUGS-36415): set required-scc for openshift workloads [#433](https://github.com/openshift/cluster-baremetal-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/cda1c4bd1c4a4d2b08c58e8153190016ac09c87c...03738f2d941b836800926fc701202b8d4b9d0605)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c699f6cfedbcd8509a85db2be3e6f90712b728fe)

* [OCPBUGS-49603](https://issues.redhat.com/browse/OCPBUGS-49603): fix: always update clusteroperator status versions when differing [#253](https://github.com/openshift/cluster-capi-operator/pull/253)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3a2f98fba9180a470d224aa662bb7df5ee5127bf...c699f6cfedbcd8509a85db2be3e6f90712b728fe)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1c26756f0b4ff5537e32db18d5fb16555f5bd58f)

* [OCPBUGS-42125](https://issues.redhat.com/browse/OCPBUGS-42125): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#366](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/366)
* [OCPBUGS-43473](https://issues.redhat.com/browse/OCPBUGS-43473): update goimports targets [#372](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/d4008130ad1283e9e384944ea54de3778c1003ad...1c26756f0b4ff5537e32db18d5fb16555f5bd58f)


### [cluster-config-api](https://github.com/openshift/api/tree/b7d0481c9094172326bc9462c4f85b8f3ff0d761)

* [OCPBUGS-38773](https://issues.redhat.com/browse/OCPBUGS-38773): remove duplicate featuregate 'ExternalRouteCertificate' [#2007](https://github.com/openshift/api/pull/2007)
* [OCPBUGS-37857](https://issues.redhat.com/browse/OCPBUGS-37857): [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features [#1985](https://github.com/openshift/api/pull/1985)
* [Full changelog](https://github.com/openshift/api/compare/4b89b3a92a17a92f3d3b84dbded5d874427787ab...b7d0481c9094172326bc9462c4f85b8f3ff0d761)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)

* [OCPBUGS-44179](https://issues.redhat.com/browse/OCPBUGS-44179): relax validation on delete and if failureDomains not configured [#331](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/331)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b0cb3dfa22cfd2ba52caec1c73dee5ea765735ec...14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/a4b1cfb4927052f4e21e919d0af05f78ca4fcace)

* [OCPBUGS-52498](https://issues.redhat.com/browse/OCPBUGS-52498): [release-4.16] Add runbook_url for CoreDNSErrorsHigh [#431](https://github.com/openshift/cluster-dns-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/8ddf28f959955e2b1b319856c0d47ae6729bcc31...a4b1cfb4927052f4e21e919d0af05f78ca4fcace)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd)

* [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348)
* [OCPBUGS-37820](https://issues.redhat.com/browse/OCPBUGS-37820): ensure ordering in member health checks [#1311](https://github.com/openshift/cluster-etcd-operator/pull/1311)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b0d0d6ad7ff87305a486e5f501c39e495931e4ac...3f2ce4889c255391323d8bdf07dece99e87dbccd)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/640eae64753083a12d9153904ed22a4f33dfe568)

* [OCPBUGS-51167](https://issues.redhat.com/browse/OCPBUGS-51167): ensure that storage names don't end in dashes [#1181](https://github.com/openshift/cluster-image-registry-operator/pull/1181)
* [OCPBUGS-43797](https://issues.redhat.com/browse/OCPBUGS-43797): fix proxy config and leader election test flakes [#1148](https://github.com/openshift/cluster-image-registry-operator/pull/1148)
* [OCPBUGS-43555](https://issues.redhat.com/browse/OCPBUGS-43555): pkg/storage/azure: also check for auth failure error code on deletion [#1143](https://github.com/openshift/cluster-image-registry-operator/pull/1143)
* [OCPBUGS-42933](https://issues.redhat.com/browse/OCPBUGS-42933): azureclient: stop validating credentials when creating the client [#1134](https://github.com/openshift/cluster-image-registry-operator/pull/1134)
* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126)
* Revert "[release-4.16]  OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage" [#1119](https://github.com/openshift/cluster-image-registry-operator/pull/1119)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): pkg/operator/azurepathfixcontroller: do not sync on non-azure storage [#1115](https://github.com/openshift/cluster-image-registry-operator/pull/1115)
* [OCPBUGS-39098](https://issues.redhat.com/browse/OCPBUGS-39098): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1104](https://github.com/openshift/cluster-image-registry-operator/pull/1104)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource/azurepathfixjob: invoke update-ca-trust extract with --output [#1102](https://github.com/openshift/cluster-image-registry-operator/pull/1102)
* [OCPBUGS-38894](https://issues.redhat.com/browse/OCPBUGS-38894): pkg/resource: invoke update-ca-trust extract with --output [#1098](https://github.com/openshift/cluster-image-registry-operator/pull/1098)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/335c9147242d4bf3e91e4377691101107a166b43...640eae64753083a12d9153904ed22a4f33dfe568)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/57f9674e75908ca11b24792fb9f077233cd7bcf1)

* [OCPBUGS-39324](https://issues.redhat.com/browse/OCPBUGS-39324): Refine logging for accurate infra CR status updates [#1139](https://github.com/openshift/cluster-ingress-operator/pull/1139)
* [OCPBUGS-39323](https://issues.redhat.com/browse/OCPBUGS-39323): Ingress operator status not degraded when canary route fails [#1138](https://github.com/openshift/cluster-ingress-operator/pull/1138)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/af5d3f6c171354c387e0cfc901110a7211715e9b...57f9674e75908ca11b24792fb9f077233cd7bcf1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/f47238554feb2fa6dbce3333adc7e26ffe2d8424)

* [OCPBUGS-50575](https://issues.redhat.com/browse/OCPBUGS-50575): Increase waitForFallbackDegradedConditionTimeout [#1805](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1805)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0...f47238554feb2fa6dbce3333adc7e26ffe2d8424)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e825811333c05b705c35d2e9a9a62e55e9ab0935)

* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): bump protobuf [#115](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/115)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/bf6afbb820531b4adc3a52f78a90f317c5580bad...e825811333c05b705c35d2e9a9a62e55e9ab0935)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7685374f0e84181801b6390876a0d12c61fa9913)

* [OCPBUGS-48258](https://issues.redhat.com/browse/OCPBUGS-48258): Fix race condition in CO status controller test [#267](https://github.com/openshift/cluster-machine-approver/pull/267)
* [OCPBUGS-47704](https://issues.redhat.com/browse/OCPBUGS-47704): Filter CSRs by signerName [#263](https://github.com/openshift/cluster-machine-approver/pull/263)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Ensure trailing dots on DNS names do not block serving cert auth [#257](https://github.com/openshift/cluster-machine-approver/pull/257)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Client internal DNS checks should ignore trailing dot [#251](https://github.com/openshift/cluster-machine-approver/pull/251)
* [OCPBUGS-44629](https://issues.redhat.com/browse/OCPBUGS-44629): Client internal DNS checks should be case insensitive [#244](https://github.com/openshift/cluster-machine-approver/pull/244)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/3eba7eeda244ea48c520d5384547659e9257cb58...7685374f0e84181801b6390876a0d12c61fa9913)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/09963a509301f71679e9c567f06c6a4deda222fd)

* [OCPBUGS-46066](https://issues.redhat.com/browse/OCPBUGS-46066): Add new metrics for OpenShift logging telemetry [#2537](https://github.com/openshift/cluster-monitoring-operator/pull/2537)
* [OCPBUGS-44005](https://issues.redhat.com/browse/OCPBUGS-44005): fix(monitoring-plugin): disable emitting nginx version on error pages [#2521](https://github.com/openshift/cluster-monitoring-operator/pull/2521)
* [OCPBUGS-43826](https://issues.redhat.com/browse/OCPBUGS-43826): Add runbook url for TelemeterClientFailures [#2508](https://github.com/openshift/cluster-monitoring-operator/pull/2508)
* [OCPBUGS-41967](https://issues.redhat.com/browse/OCPBUGS-41967): disable user-defined monitoring per object [#2474](https://github.com/openshift/cluster-monitoring-operator/pull/2474)
* [OCPBUGS-42067](https://issues.redhat.com/browse/OCPBUGS-42067): Reapply "chore: poll immediately in the e2e tests" [#2476](https://github.com/openshift/cluster-monitoring-operator/pull/2476)
* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Configure graceful shutdown for metrics-server (4.16 backport) [#2467](https://github.com/openshift/cluster-monitoring-operator/pull/2467)
* [OCPBUGS-41910](https://issues.redhat.com/browse/OCPBUGS-41910): filter alerts sent to Telemeter [#2471](https://github.com/openshift/cluster-monitoring-operator/pull/2471)
* [OCPBUGS-39170](https://issues.redhat.com/browse/OCPBUGS-39170): Backport #2441 for 4.16 [#2447](https://github.com/openshift/cluster-monitoring-operator/pull/2447)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/cb3d884237cda666ad740cc9a104fc885b05bdae...09963a509301f71679e9c567f06c6a4deda222fd)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/48848fe7e78418922f0cbb3b99d458cd484123c6)

* [Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty [#2651](https://github.com/openshift/cluster-network-operator/pull/2651)
* [OCPBUGS-51074](https://issues.redhat.com/browse/OCPBUGS-51074): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2650](https://github.com/openshift/cluster-network-operator/pull/2650)
* [OCPBUGS-43803](https://issues.redhat.com/browse/OCPBUGS-43803): Start feature migration when the cluster CNI is changed to the target type [#2552](https://github.com/openshift/cluster-network-operator/pull/2552)
* [OCPBUGS-43715](https://issues.redhat.com/browse/OCPBUGS-43715): Skip including default crypto policies to avoid authby issue [#2598](https://github.com/openshift/cluster-network-operator/pull/2598)
* [OCPBUGS-44338](https://issues.redhat.com/browse/OCPBUGS-44338): Prevent live migration process from flapping between step-2 and step-3 [#2565](https://github.com/openshift/cluster-network-operator/pull/2565)
* [OCPBUGS-46148](https://issues.redhat.com/browse/OCPBUGS-46148): Remove ip xfrm state when IPsec is disabled [#2595](https://github.com/openshift/cluster-network-operator/pull/2595)
* [OCPBUGS-45593](https://issues.redhat.com/browse/OCPBUGS-45593): Pass transit_switch_subnet options in ovnkube-node pod [#2584](https://github.com/openshift/cluster-network-operator/pull/2584)
* [OCPBUGS-44846](https://issues.redhat.com/browse/OCPBUGS-44846), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2571](https://github.com/openshift/cluster-network-operator/pull/2571)
* [OCPBUGS-42727](https://issues.redhat.com/browse/OCPBUGS-42727): Live migration: report network overlap via live_migration_blocked metric [#2519](https://github.com/openshift/cluster-network-operator/pull/2519)
* [OCPBUGS-43604](https://issues.redhat.com/browse/OCPBUGS-43604): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2538](https://github.com/openshift/cluster-network-operator/pull/2538)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Set global IP forwarding sysctl parameters while starting ovnkube-node [#2422](https://github.com/openshift/cluster-network-operator/pull/2422)
* [OCPBUGS-43544](https://issues.redhat.com/browse/OCPBUGS-43544): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2537](https://github.com/openshift/cluster-network-operator/pull/2537)
* [OCPBUGS-43035](https://issues.redhat.com/browse/OCPBUGS-43035): Configure narrowing=yes for IPsec connections [#2528](https://github.com/openshift/cluster-network-operator/pull/2528)
* [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430)
* [OCPBUGS-41840](https://issues.redhat.com/browse/OCPBUGS-41840): Add configurable subnets while running hybrid-overlay-node binary [#2502](https://github.com/openshift/cluster-network-operator/pull/2502)
* [OCPBUGS-37763](https://issues.redhat.com/browse/OCPBUGS-37763): Handle random crictl errors in iptables-alerter [#2452](https://github.com/openshift/cluster-network-operator/pull/2452)
* [OCPBUGS-41555](https://issues.redhat.com/browse/OCPBUGS-41555): HyperShift: do not use antiaffinity on single replica control planes [#2494](https://github.com/openshift/cluster-network-operator/pull/2494)
* [OCPBUGS-37937](https://issues.redhat.com/browse/OCPBUGS-37937): Add proxy env vars to onvkube-node [#2457](https://github.com/openshift/cluster-network-operator/pull/2457)
* [OCPBUGS-41607](https://issues.redhat.com/browse/OCPBUGS-41607): set required-scc for openshift workloads [#2496](https://github.com/openshift/cluster-network-operator/pull/2496)
* [OCPBUGS-35407](https://issues.redhat.com/browse/OCPBUGS-35407): Use applyconfigurations for updating network.oprerator status [#2413](https://github.com/openshift/cluster-network-operator/pull/2413)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/739536971534310704707375a4903858d7331ad3...48848fe7e78418922f0cbb3b99d458cd484123c6)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eacd6ee98ab26722603083768d4f58727a390dbe)

* use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) [#1292](https://github.com/openshift/cluster-node-tuning-operator/pull/1292)
* e2e: tuned degraded test fix (#1282) [#1282](https://github.com/openshift/cluster-node-tuning-operator/pull/1282)
* Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) [#1277](https://github.com/openshift/cluster-node-tuning-operator/pull/1277)
* e2e:performance: decode to valid kubeletconfig object (#1273) [#1273](https://github.com/openshift/cluster-node-tuning-operator/pull/1273)
* cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* e2e: add irdma to module_blacklist kernel args (#1267) [#1267](https://github.com/openshift/cluster-node-tuning-operator/pull/1267)
* [OCPBUGS-47678](https://issues.redhat.com/browse/OCPBUGS-47678): performanceprofile cpuset input validation (#1264) [#1264](https://github.com/openshift/cluster-node-tuning-operator/pull/1264)
* Fix context deadlines in ExecCommandOnPod() (#1263) [#1263](https://github.com/openshift/cluster-node-tuning-operator/pull/1263)
* [OCPBUGS-46496](https://issues.redhat.com/browse/OCPBUGS-46496): [release-4.16] Add vendor and architecture specific tuning options (#1254) [#1254](https://github.com/openshift/cluster-node-tuning-operator/pull/1254)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* E2E: fix modify node selector to use lowercase (#1209) [#1209](https://github.com/openshift/cluster-node-tuning-operator/pull/1209)
* Fixing empty tuned submodule when using Dockerfile (#1212) [#1212](https://github.com/openshift/cluster-node-tuning-operator/pull/1212)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1203) [#1203](https://github.com/openshift/cluster-node-tuning-operator/pull/1203)
* Make ocp-tuned-one-shot.service restart on-failure (#1202) [#1202](https://github.com/openshift/cluster-node-tuning-operator/pull/1202)
* Unblock 4.16 CI (#1204) [#1204](https://github.com/openshift/cluster-node-tuning-operator/pull/1204)
* e2e: performance: verify tuned one-shot service vs kubelet (#1192) [#1192](https://github.com/openshift/cluster-node-tuning-operator/pull/1192)
* E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1166) [#1166](https://github.com/openshift/cluster-node-tuning-operator/pull/1166)
* OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) [#1152](https://github.com/openshift/cluster-node-tuning-operator/pull/1152)
* E2E: Remove checking of reserved cpus in irqbalance file (#1156) [#1156](https://github.com/openshift/cluster-node-tuning-operator/pull/1156)
* Fix the destination of asset's copy (#1134) [#1134](https://github.com/openshift/cluster-node-tuning-operator/pull/1134)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2bd8891ead93e161b9a871ac2eaa947bfc17309f...eacd6ee98ab26722603083768d4f58727a390dbe)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2ed3cf9965f8e6832cffde84f3de2fe210b79b49)

* [OCPBUGS-48657](https://issues.redhat.com/browse/OCPBUGS-48657): Add new team members to owners file [#378](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/378)
* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [#363](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/bcc371ccbc9cab9bcb80b3f1a281a40c28011f59...2ed3cf9965f8e6832cffde84f3de2fe210b79b49)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/34eec32b3f8d79e15fa5bc59ddcea0c67f1caeee)

* [OCPBUGS-48848](https://issues.redhat.com/browse/OCPBUGS-48848): add shannon and aroyoredhat as owners [#596](https://github.com/openshift/cluster-samples-operator/pull/596)
* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#576](https://github.com/openshift/cluster-samples-operator/pull/576)
* [OCPBUGS-38159](https://issues.redhat.com/browse/OCPBUGS-38159): add owners [#555](https://github.com/openshift/cluster-samples-operator/pull/555)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d4dd84396472c5e974f0562046a6ad068b6f20f8...34eec32b3f8d79e15fa5bc59ddcea0c67f1caeee)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/f3cf5ff2dc6848db6da947c538c032f89ad152d2)

* [OCPBUGS-52353](https://issues.redhat.com/browse/OCPBUGS-52353): fix Vsphere cluster Storage operator in Unavailable state [#563](https://github.com/openshift/cluster-storage-operator/pull/563)
* [OCPBUGS-46077](https://issues.redhat.com/browse/OCPBUGS-46077): Fix PodStartupStorageOperationsFailing alert [#548](https://github.com/openshift/cluster-storage-operator/pull/548)
* [OCPBUGS-43315](https://issues.redhat.com/browse/OCPBUGS-43315): assets: shared-resource: hypershift: add pull-secret to operator SA [#521](https://github.com/openshift/cluster-storage-operator/pull/521)
* NO-JIRA: release-4.16: Run make update [#512](https://github.com/openshift/cluster-storage-operator/pull/512)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b990582d516e3fc8452dd658608a5e15522c3d1e...f3cf5ff2dc6848db6da947c538c032f89ad152d2)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/e8478585cca88314094112aa5933e5281f4707ea)

* [OCPBUGS-43467](https://issues.redhat.com/browse/OCPBUGS-43467): keys: Update Red Hat keys to use SHA256 signatures [#64](https://github.com/openshift/cluster-update-keys/pull/64)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24...e8478585cca88314094112aa5933e5281f4707ea)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6af06e02dd84880a6389284840a8d95c91bf226b)

* [OCPBUGS-50590](https://issues.redhat.com/browse/OCPBUGS-50590): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1153](https://github.com/openshift/cluster-version-operator/pull/1153)
* [OCPBUGS-46408](https://issues.redhat.com/browse/OCPBUGS-46408): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1128](https://github.com/openshift/cluster-version-operator/pull/1128)
* [OCPBUGS-45329](https://issues.redhat.com/browse/OCPBUGS-45329): deps: bump golang.org/x/net to 0.31.0 [#1118](https://github.com/openshift/cluster-version-operator/pull/1118)
* [OCPBUGS-43964](https://issues.redhat.com/browse/OCPBUGS-43964): Fix desired before sync_worker's work is initialized [#1097](https://github.com/openshift/cluster-version-operator/pull/1097)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/617769f980c5b2b59ad6ee821aad511de44a798d...6af06e02dd84880a6389284840a8d95c91bf226b)


### [console](https://github.com/openshift/console/tree/4d862fcd8edc128b151be09f59ce284701391ae0)

* [OCPBUGS-52450](https://issues.redhat.com/browse/OCPBUGS-52450): fix run time error when no completed version exists [#14840](https://github.com/openshift/console/pull/14840)
* [OCPBUGS-52851](https://issues.redhat.com/browse/OCPBUGS-52851): Show Observe section without PROMETHEUS and MONITORING flags [#14849](https://github.com/openshift/console/pull/14849)
* [OCPBUGS-52288](https://issues.redhat.com/browse/OCPBUGS-52288): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14821](https://github.com/openshift/console/pull/14821)
* [OCPBUGS-49409](https://issues.redhat.com/browse/OCPBUGS-49409): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14703](https://github.com/openshift/console/pull/14703)
* [OCPBUGS-52418](https://issues.redhat.com/browse/OCPBUGS-52418): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14837](https://github.com/openshift/console/pull/14837)
* [OCPBUGS-49979](https://issues.redhat.com/browse/OCPBUGS-49979): Set default build option as BUILDS for Builder Image sample [#14730](https://github.com/openshift/console/pull/14730)
* [OCPBUGS-49800](https://issues.redhat.com/browse/OCPBUGS-49800): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14715](https://github.com/openshift/console/pull/14715)
* [OCPBUGS-49801](https://issues.redhat.com/browse/OCPBUGS-49801): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14716](https://github.com/openshift/console/pull/14716)
* [OCPBUGS-46388](https://issues.redhat.com/browse/OCPBUGS-46388): fix alert rule link [#14808](https://github.com/openshift/console/pull/14808)
* [OCPBUGS-52252](https://issues.redhat.com/browse/OCPBUGS-52252): Fix alert rule link to alert in dev perspective [#14817](https://github.com/openshift/console/pull/14817)
* [OCPBUGS-46441](https://issues.redhat.com/browse/OCPBUGS-46441): Do not pass CSV name to operand list page when an exen… [#14627](https://github.com/openshift/console/pull/14627)
* [OCPBUGS-36963](https://issues.redhat.com/browse/OCPBUGS-36963): Manually create an API token for a ServiceAccount [#14057](https://github.com/openshift/console/pull/14057)
* [OCPBUGS-35394](https://issues.redhat.com/browse/OCPBUGS-35394): sessions: fix sessions pruning [#13969](https://github.com/openshift/console/pull/13969)
* [OCPBUGS-46602](https://issues.redhat.com/browse/OCPBUGS-46602): ReRun of Resolver based PipelineRuns fails from UI [#14641](https://github.com/openshift/console/pull/14641)
* [OCPBUGS-46567](https://issues.redhat.com/browse/OCPBUGS-46567): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14636](https://github.com/openshift/console/pull/14636)
* [OCPBUGS-48162](https://issues.redhat.com/browse/OCPBUGS-48162): OCP web console show pod status as Init:0/1 after using Native sidecars [#14668](https://github.com/openshift/console/pull/14668)
* [OCPBUGS-43672](https://issues.redhat.com/browse/OCPBUGS-43672): Disable GQL introspection [#14638](https://github.com/openshift/console/pull/14638)
* [OCPBUGS-45334](https://issues.redhat.com/browse/OCPBUGS-45334): fix table combination [#14576](https://github.com/openshift/console/pull/14576)
* [OCPBUGS-41342](https://issues.redhat.com/browse/OCPBUGS-41342): fix namespace for networkpolicy [#14244](https://github.com/openshift/console/pull/14244)
* [OCPBUGS-46022](https://issues.redhat.com/browse/OCPBUGS-46022): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14612](https://github.com/openshift/console/pull/14612)
* [OCPBUGS-45229](https://issues.redhat.com/browse/OCPBUGS-45229): Unable to remove finally tasks in pipeline builder mode [#14558](https://github.com/openshift/console/pull/14558)
* [OCPBUGS-45245](https://issues.redhat.com/browse/OCPBUGS-45245): use TaskRuns results.tekton.dev/record annotation to get the logs [#14563](https://github.com/openshift/console/pull/14563)
* [OCPBUGS-41523](https://issues.redhat.com/browse/OCPBUGS-41523): i18n upload/download routine task - Sprint 254 [#14258](https://github.com/openshift/console/pull/14258)
* [OCPBUGS-45015](https://issues.redhat.com/browse/OCPBUGS-45015): Remove ClusterTask dependency in console from Pipelines 1.17 [#14537](https://github.com/openshift/console/pull/14537)
* [OCPBUGS-44792](https://issues.redhat.com/browse/OCPBUGS-44792): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14519](https://github.com/openshift/console/pull/14519)
* [OCPBUGS-44875](https://issues.redhat.com/browse/OCPBUGS-44875): Start last run do not work in buildConfig details page [#14529](https://github.com/openshift/console/pull/14529)
* [OCPBUGS-44874](https://issues.redhat.com/browse/OCPBUGS-44874): Telemetry userPreference results in empty nodes output to the DOM [#14528](https://github.com/openshift/console/pull/14528)
* [OCPBUGS-45124](https://issues.redhat.com/browse/OCPBUGS-45124): Add multiline support to template instantiation [#14545](https://github.com/openshift/console/pull/14545)
* [OCPBUGS-44885](https://issues.redhat.com/browse/OCPBUGS-44885): include external labels so silenced alerts not displayed in notifications [#14530](https://github.com/openshift/console/pull/14530)
* [OCPBUGS-44932](https://issues.redhat.com/browse/OCPBUGS-44932): Add IBM Block Storage CSI driver support for RWX [#14533](https://github.com/openshift/console/pull/14533)
* [OCPBUGS-43447](https://issues.redhat.com/browse/OCPBUGS-43447): Ensure envs are initted upon first load [#14405](https://github.com/openshift/console/pull/14405)
* [OCPBUGS-44806](https://issues.redhat.com/browse/OCPBUGS-44806): Don't request user settings configmap if no user has been loaded. [#14522](https://github.com/openshift/console/pull/14522)
* [OCPBUGS-44207](https://issues.redhat.com/browse/OCPBUGS-44207): Create RoleBinding will trigger Admission Webhook Warning [#14465](https://github.com/openshift/console/pull/14465)
* [OCPBUGS-44219](https://issues.redhat.com/browse/OCPBUGS-44219): Add flag to hide the pipelines-plugin pipeline builder extensions [#14466](https://github.com/openshift/console/pull/14466)
* [OCPBUGS-41673](https://issues.redhat.com/browse/OCPBUGS-41673): Update vendor imports to include all PatternFly components [#14273](https://github.com/openshift/console/pull/14273)
* [OCPBUGS-43834](https://issues.redhat.com/browse/OCPBUGS-43834): Enabling topology e2e tests on CI [#14438](https://github.com/openshift/console/pull/14438)
* [OCPBUGS-35204](https://issues.redhat.com/browse/OCPBUGS-35204): replace global refresh sync lock in OIDC provider with per-refresh-token one [#13950](https://github.com/openshift/console/pull/13950)
* [OCPBUGS-36556](https://issues.redhat.com/browse/OCPBUGS-36556): Increase login flow state paramater length/entropy [#14354](https://github.com/openshift/console/pull/14354)
* [OCPBUGS-42369](https://issues.redhat.com/browse/OCPBUGS-42369): Console crashes when ssh is selected in add secret for starting a pipeline run [#14320](https://github.com/openshift/console/pull/14320)
* [OCPBUGS-41904](https://issues.redhat.com/browse/OCPBUGS-41904): fix annotation for ovn localnet [#14366](https://github.com/openshift/console/pull/14366)
* [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091)
* [OCPBUGS-37689](https://issues.redhat.com/browse/OCPBUGS-37689): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14094](https://github.com/openshift/console/pull/14094)
* [OCPBUGS-42015](https://issues.redhat.com/browse/OCPBUGS-42015): Topology screen crashes when completed pod is selected [#14298](https://github.com/openshift/console/pull/14298)
* [OCPBUGS-35850](https://issues.redhat.com/browse/OCPBUGS-35850): Fix: Quick Start "next" button requires double click to move to next step [#13989](https://github.com/openshift/console/pull/13989)
* [OCPBUGS-42382](https://issues.redhat.com/browse/OCPBUGS-42382): Allow operators to enable monitoring by default [#14317](https://github.com/openshift/console/pull/14317)
* [OCPBUGS-41905](https://issues.redhat.com/browse/OCPBUGS-41905): List of default Camel K event sources disappears when adding a custom event source [#14290](https://github.com/openshift/console/pull/14290)
* [OCPBUGS-41709](https://issues.redhat.com/browse/OCPBUGS-41709): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14278](https://github.com/openshift/console/pull/14278)
* [OCPBUGS-42069](https://issues.redhat.com/browse/OCPBUGS-42069): add Create button to Console plugins tab [#14302](https://github.com/openshift/console/pull/14302)
* [OCPBUGS-41996](https://issues.redhat.com/browse/OCPBUGS-41996): Fix updating the "Until" field on the Silence &gt; Edit page [#14296](https://github.com/openshift/console/pull/14296)
* [OCPBUGS-38112](https://issues.redhat.com/browse/OCPBUGS-38112): do not directly mutate links in useMemo [#14117](https://github.com/openshift/console/pull/14117)
* [OCPBUGS-34518](https://issues.redhat.com/browse/OCPBUGS-34518): Restore user toggle when authentification is disabled [#13902](https://github.com/openshift/console/pull/13902)
* [OCPBUGS-41619](https://issues.redhat.com/browse/OCPBUGS-41619): Use vCenterCluster value from CM as primary resource [#14268](https://github.com/openshift/console/pull/14268)
* [OCPBUGS-37046](https://issues.redhat.com/browse/OCPBUGS-37046): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14059](https://github.com/openshift/console/pull/14059)
* [OCPBUGS-38911](https://issues.redhat.com/browse/OCPBUGS-38911): Values entered into the Instantiate Template form are automatically cleared [#14187](https://github.com/openshift/console/pull/14187)
* [OCPBUGS-38914](https://issues.redhat.com/browse/OCPBUGS-38914): Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart [#14188](https://github.com/openshift/console/pull/14188)
* [OCPBUGS-38968](https://issues.redhat.com/browse/OCPBUGS-38968): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14193](https://github.com/openshift/console/pull/14193)
* [OCPBUGS-38424](https://issues.redhat.com/browse/OCPBUGS-38424): fix bug where cluster version text appears black in da… [#14144](https://github.com/openshift/console/pull/14144)
* [OCPBUGS-38464](https://issues.redhat.com/browse/OCPBUGS-38464): correct casing in "Lightspeed" [#14148](https://github.com/openshift/console/pull/14148)
* [OCPBUGS-37430](https://issues.redhat.com/browse/OCPBUGS-37430): Fix utilization card limits/total display [#14082](https://github.com/openshift/console/pull/14082)
* [OCPBUGS-36510](https://issues.redhat.com/browse/OCPBUGS-36510): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14031](https://github.com/openshift/console/pull/14031)
* [OCPBUGS-37954](https://issues.redhat.com/browse/OCPBUGS-37954): No access to list pipelines.tekton.dev prevents from using Delete application form [#14107](https://github.com/openshift/console/pull/14107)
* [OCPBUGS-36601](https://issues.redhat.com/browse/OCPBUGS-36601): Tooltip on Pipeline when expression is not shows [#14033](https://github.com/openshift/console/pull/14033)
* [OCPBUGS-38803](https://issues.redhat.com/browse/OCPBUGS-38803): CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub [#14095](https://github.com/openshift/console/pull/14095)
* [OCPBUGS-37048](https://issues.redhat.com/browse/OCPBUGS-37048): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14060](https://github.com/openshift/console/pull/14060)
* [OCPBUGS-35839](https://issues.redhat.com/browse/OCPBUGS-35839): Fix placement of icons on WebKit [#13988](https://github.com/openshift/console/pull/13988)
* [OCPBUGS-35271](https://issues.redhat.com/browse/OCPBUGS-35271): Fix password set to Secret created through Start Pipeline form [#13954](https://github.com/openshift/console/pull/13954)
* [OCPBUGS-38093](https://issues.redhat.com/browse/OCPBUGS-38093): correct link for Lightspeed operator [#14112](https://github.com/openshift/console/pull/14112)
* [OCPBUGS-36484](https://issues.redhat.com/browse/OCPBUGS-36484): Revert - terminal: use username if uid is not present [#14027](https://github.com/openshift/console/pull/14027)
* [Full changelog](https://github.com/openshift/console/compare/96169cf25bbb168375af9a6123c437cf1871e0f4...4d862fcd8edc128b151be09f59ce284701391ae0)


### [console-operator](https://github.com/openshift/console-operator/tree/2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1)

* [OCPBUGS-46481](https://issues.redhat.com/browse/OCPBUGS-46481): Dont disable console when authConfig type is set to None [#952](https://github.com/openshift/console-operator/pull/952)
* [Full changelog](https://github.com/openshift/console-operator/compare/92447df597eeca8a92bb9019e854619e19736638...2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/1d3aa2baae81b8c15260e87a816650b172c868f8)

* [OCPBUGS-43426](https://issues.redhat.com/browse/OCPBUGS-43426): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 [#303](https://github.com/openshift/cloud-provider-openstack/pull/303)
* [OCPBUGS-38167](https://issues.redhat.com/browse/OCPBUGS-38167): rebase CPO on 4.16 [#291](https://github.com/openshift/cloud-provider-openstack/pull/291)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5340eaab09d8057a705b7a7124e05231cfd37978...1d3aa2baae81b8c15260e87a816650b172c868f8)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/c25d1ff2677a882504b18220dcbbe153781f3883)

* [OCPBUGS-38458](https://issues.redhat.com/browse/OCPBUGS-38458): Add missing healthchecks [#241](https://github.com/openshift/csi-driver-manila-operator/pull/241)
* [OCPBUGS-30438](https://issues.redhat.com/browse/OCPBUGS-30438): Bump protobuf dependency [#237](https://github.com/openshift/csi-driver-manila-operator/pull/237)
* [OCPBUGS-38013](https://issues.redhat.com/browse/OCPBUGS-38013): Set required-scc for openshift workloads [#235](https://github.com/openshift/csi-driver-manila-operator/pull/235)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751...c25d1ff2677a882504b18220dcbbe153781f3883)


### [docker-builder](https://github.com/openshift/builder/tree/31c3c26bc8796e3c9377f66ad88940bc9219816d)

* [OCPBUGS-42893](https://issues.redhat.com/browse/OCPBUGS-42893), [OCPBUGS-42914](https://issues.redhat.com/browse/OCPBUGS-42914): buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library [#450](https://github.com/openshift/builder/pull/450)
* [OCPBUGS-43186](https://issues.redhat.com/browse/OCPBUGS-43186): runc library bump to 1.1.12 [#420](https://github.com/openshift/builder/pull/420)
* [OCPBUGS-47775](https://issues.redhat.com/browse/OCPBUGS-47775): skipping some unit tests to avoid failures as they are duplicate [#424](https://github.com/openshift/builder/pull/424)
* [OCPBUGS-48159](https://issues.redhat.com/browse/OCPBUGS-48159): Add team members to the OWNERS file [#426](https://github.com/openshift/builder/pull/426)
* [OCPBUGS-30455](https://issues.redhat.com/browse/OCPBUGS-30455): bump google.golang.org/protobuf to 1.33.0 [#402](https://github.com/openshift/builder/pull/402)
* [Full changelog](https://github.com/openshift/builder/compare/3b7a1b1be130d5068481fe005b0a119fbd7057a6...31c3c26bc8796e3c9377f66ad88940bc9219816d)


### [docker-registry](https://github.com/openshift/image-registry/tree/a9eeeb94bc3276ce60a7166bc4e955c7f82c10e6)

* [OCPBUGS-49696](https://issues.redhat.com/browse/OCPBUGS-49696): bump docker distribution [#423](https://github.com/openshift/image-registry/pull/423)
* [OCPBUGS-39412](https://issues.redhat.com/browse/OCPBUGS-39412): pull upstream distribution changes to use a consistent multipart chunk size [#410](https://github.com/openshift/image-registry/pull/410)
* [Full changelog](https://github.com/openshift/image-registry/compare/462fe76c150dc7b5c2d53169dc8da204779a5697...a9eeeb94bc3276ce60a7166bc4e955c7f82c10e6)


### [etcd](https://github.com/openshift/etcd/tree/e7911c0d19925c0a67328052a8580a80fb40cb5b)

* NO-ISSUE: Add support for cachi2 based deps [#298](https://github.com/openshift/etcd/pull/298)
* [OCPBUGS-34690](https://issues.redhat.com/browse/OCPBUGS-34690): Rebase etcd 3.5.14 openshift 4.16 [#274](https://github.com/openshift/etcd/pull/274)
* [Full changelog](https://github.com/openshift/etcd/compare/bc2fec27ff5b086436d438157c24396f280e0305...e7911c0d19925c0a67328052a8580a80fb40cb5b)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/380f339af123d187a24c4d6be972e18dd8308e6f)

* [OCPBUGS-48484](https://issues.redhat.com/browse/OCPBUGS-48484): Refactor exists() to handle gcp API change [#106](https://github.com/openshift/machine-api-provider-gcp/pull/106)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/e72657c0d2713842f701f1d43c777d6ec6880cb9...380f339af123d187a24c4d6be972e18dd8308e6f)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/7cf4c058dab19556d71e98c02bed1798cb0a4a9c)

* [OCPBUGS-49906](https://issues.redhat.com/browse/OCPBUGS-49906): Bump k8s api to 1.29.14 [#2211](https://github.com/openshift/kubernetes/pull/2211)
* [OCPBUGS-45931](https://issues.redhat.com/browse/OCPBUGS-45931): UPSTREAM: &lt;carry&gt;: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 [#2200](https://github.com/openshift/kubernetes/pull/2200)
* [OCPBUGS-46003](https://issues.redhat.com/browse/OCPBUGS-46003): Bump k8s api to 1.29.11 [#2161](https://github.com/openshift/kubernetes/pull/2161)
* [OCPBUGS-44513](https://issues.redhat.com/browse/OCPBUGS-44513): Bump k8s api to 1.29.10 [#2133](https://github.com/openshift/kubernetes/pull/2133)
* [OCPBUGS-42555](https://issues.redhat.com/browse/OCPBUGS-42555): Allow pod to be scheduled if node's name and hostname mismatch [#2099](https://github.com/openshift/kubernetes/pull/2099)
* [OCPBUGS-42168](https://issues.redhat.com/browse/OCPBUGS-42168): Bump k8s api to 1.29.9 [#2090](https://github.com/openshift/kubernetes/pull/2090)
* release-4.16] OCPBUGS-42057: UPSTREAM: &lt;drop&gt;: bump(github.com/openshift/apiserver-library-go) [#2096](https://github.com/openshift/kubernetes/pull/2096)
* [OCPBUGS-39015](https://issues.redhat.com/browse/OCPBUGS-39015): Bump k8s api to 1.29.8 [#2066](https://github.com/openshift/kubernetes/pull/2066)
* [OCPBUGS-36773](https://issues.redhat.com/browse/OCPBUGS-36773): UPSTREAM: &lt;carry&gt;: Disable vSphere tests with pre-provisioned volumes [#2021](https://github.com/openshift/kubernetes/pull/2021)
* NO-JIRA: update downstream owners [#2049](https://github.com/openshift/kubernetes/pull/2049)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6abe8a19439b7c352cd3b9ab6d40f1037caa3a10...7cf4c058dab19556d71e98c02bed1798cb0a4a9c)


### [hypershift](https://github.com/openshift/hypershift/tree/7eada432f87821947a370176f4a8397a8c79186a)

* [OCPBUGS-53308](https://issues.redhat.com/browse/OCPBUGS-53308): fix(deps): bump go-jose [#5866](https://github.com/openshift/hypershift/pull/5866)
* [OCPBUGS-52506](https://issues.redhat.com/browse/OCPBUGS-52506): refactor aws identity health check into new controller [#5781](https://github.com/openshift/hypershift/pull/5781)
* [OCPBUGS-52857](https://issues.redhat.com/browse/OCPBUGS-52857): Make managed-trust-bundle optional [#5809](https://github.com/openshift/hypershift/pull/5809)
* [OCPBUGS-52426](https://issues.redhat.com/browse/OCPBUGS-52426): change plaform to platform [#5773](https://github.com/openshift/hypershift/pull/5773)
* [OCPBUGS-50993](https://issues.redhat.com/browse/OCPBUGS-50993): Honor proxy vars in the util insecure http client [#5662](https://github.com/openshift/hypershift/pull/5662)
* [OCPBUGS-46466](https://issues.redhat.com/browse/OCPBUGS-46466): Consistently look up and dial cloud API hostnames [#5301](https://github.com/openshift/hypershift/pull/5301)
* [OCPBUGS-50698](https://issues.redhat.com/browse/OCPBUGS-50698): add region to AWS creds passed to operators managed by CPO [#5670](https://github.com/openshift/hypershift/pull/5670)
* [OCPBUGS-51296](https://issues.redhat.com/browse/OCPBUGS-51296): 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5707](https://github.com/openshift/hypershift/pull/5707)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5686](https://github.com/openshift/hypershift/pull/5686)
* [OCPBUGS-50694](https://issues.redhat.com/browse/OCPBUGS-50694): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5620](https://github.com/openshift/hypershift/pull/5620)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5635](https://github.com/openshift/hypershift/pull/5635)
* [OCPBUGS-50557](https://issues.redhat.com/browse/OCPBUGS-50557): Prevent IgnitionServer from flooding the API server with patch requests [#5599](https://github.com/openshift/hypershift/pull/5599)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 [#5597](https://github.com/openshift/hypershift/pull/5597)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 [#5591](https://github.com/openshift/hypershift/pull/5591)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5587](https://github.com/openshift/hypershift/pull/5587)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 [#5574](https://github.com/openshift/hypershift/pull/5574)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5575](https://github.com/openshift/hypershift/pull/5575)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 [#5531](https://github.com/openshift/hypershift/pull/5531)
* NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 [#5532](https://github.com/openshift/hypershift/pull/5532)
* [OCPBUGS-49640](https://issues.redhat.com/browse/OCPBUGS-49640): fix overwriting PKI operator HCP conditions [#5506](https://github.com/openshift/hypershift/pull/5506)
* NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned [#5484](https://github.com/openshift/hypershift/pull/5484)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5477](https://github.com/openshift/hypershift/pull/5477)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) [#5437](https://github.com/openshift/hypershift/pull/5437)
* NO-JIRA: Update Konflux references (release-4.16) [#5431](https://github.com/openshift/hypershift/pull/5431)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5384](https://github.com/openshift/hypershift/pull/5384)
* NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) [#5298](https://github.com/openshift/hypershift/pull/5298)
* NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net [#5370](https://github.com/openshift/hypershift/pull/5370)
* NO-JIRA: Update Konflux references (release-4.16) [#5328](https://github.com/openshift/hypershift/pull/5328)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 [#5337](https://github.com/openshift/hypershift/pull/5337)
* [OCPBUGS-47539](https://issues.redhat.com/browse/OCPBUGS-47539): Separate CPO containerfiles [#5333](https://github.com/openshift/hypershift/pull/5333)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) [#5295](https://github.com/openshift/hypershift/pull/5295)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) [#5297](https://github.com/openshift/hypershift/pull/5297)
* NO-JIRA:  chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) [#5294](https://github.com/openshift/hypershift/pull/5294)
* NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 [#5261](https://github.com/openshift/hypershift/pull/5261)
* [OCPBUGS-39372](https://issues.redhat.com/browse/OCPBUGS-39372): Fixed NodePool version validation [#5219](https://github.com/openshift/hypershift/pull/5219)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) [#5209](https://github.com/openshift/hypershift/pull/5209)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5207](https://github.com/openshift/hypershift/pull/5207)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) [#5189](https://github.com/openshift/hypershift/pull/5189)
* [OCPBUGS-43930](https://issues.redhat.com/browse/OCPBUGS-43930): Return the right tagReference on Catalogs ImageStream [#5133](https://github.com/openshift/hypershift/pull/5133)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5161](https://github.com/openshift/hypershift/pull/5161)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) [#5163](https://github.com/openshift/hypershift/pull/5163)
* chore(deps): update konflux references (release-4.16) [#5135](https://github.com/openshift/hypershift/pull/5135)
* [OCPBUGS-44277](https://issues.redhat.com/browse/OCPBUGS-44277): Configure OAuth https proxy to dial cloud endpoints directly [#5069](https://github.com/openshift/hypershift/pull/5069)
* chore(deps): update konflux references (release-4.16) [#5119](https://github.com/openshift/hypershift/pull/5119)
* [OCPBUGS-43973](https://issues.redhat.com/browse/OCPBUGS-43973): Add network policies for konnectivity server and ignition server proxy [#4998](https://github.com/openshift/hypershift/pull/4998)
* NO-JIRA: Update Konflux references (release-4.16) [#5112](https://github.com/openshift/hypershift/pull/5112)
* NO-JIRA: Update Konflux references (release-4.16) [#5099](https://github.com/openshift/hypershift/pull/5099)
* chore(deps): update konflux references (release-4.16) [#5078](https://github.com/openshift/hypershift/pull/5078)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) [#5059](https://github.com/openshift/hypershift/pull/5059)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5058](https://github.com/openshift/hypershift/pull/5058)
* NO-JIRA: Update Konflux references (release-4.16) [#5042](https://github.com/openshift/hypershift/pull/5042)
* chore(deps): update konflux references (release-4.16) [#5024](https://github.com/openshift/hypershift/pull/5024)
* chore(deps): update konflux references (release-4.16) [#5019](https://github.com/openshift/hypershift/pull/5019)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) [#5017](https://github.com/openshift/hypershift/pull/5017)
* NO-JIRA: Update Konflux references (release-4.16) [#5012](https://github.com/openshift/hypershift/pull/5012)
* [OCPBUGS-43840](https://issues.redhat.com/browse/OCPBUGS-43840): add ValidIDPConfiguration condition to report IDP config issues [#4985](https://github.com/openshift/hypershift/pull/4985)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4971](https://github.com/openshift/hypershift/pull/4971)
* [OCPBUGS-43046](https://issues.redhat.com/browse/OCPBUGS-43046): Do not send traffic to local audit-webhook through konnectivity [#4883](https://github.com/openshift/hypershift/pull/4883)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4954](https://github.com/openshift/hypershift/pull/4954)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) [#4947](https://github.com/openshift/hypershift/pull/4947)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4933](https://github.com/openshift/hypershift/pull/4933)
* [OCPBUGS-43104](https://issues.redhat.com/browse/OCPBUGS-43104): label routes only when HCP router used [#4899](https://github.com/openshift/hypershift/pull/4899)
* [OCPBUGS-43308](https://issues.redhat.com/browse/OCPBUGS-43308): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4905](https://github.com/openshift/hypershift/pull/4905)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4923](https://github.com/openshift/hypershift/pull/4923)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) [#4919](https://github.com/openshift/hypershift/pull/4919)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) [#4908](https://github.com/openshift/hypershift/pull/4908)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4896](https://github.com/openshift/hypershift/pull/4896)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) [#4880](https://github.com/openshift/hypershift/pull/4880)
* [OCPBUGS-42432](https://issues.redhat.com/browse/OCPBUGS-42432): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4799](https://github.com/openshift/hypershift/pull/4799)
* [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787)
* [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798)
* NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853)
* [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) [#4827](https://github.com/openshift/hypershift/pull/4827)
* chore(deps): update konflux references (release-4.16) [#4816](https://github.com/openshift/hypershift/pull/4816)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) [#4806](https://github.com/openshift/hypershift/pull/4806)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) [#4796](https://github.com/openshift/hypershift/pull/4796)
* chore(deps): update konflux references (release-4.16) [#4781](https://github.com/openshift/hypershift/pull/4781)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4760](https://github.com/openshift/hypershift/pull/4760)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) [#4759](https://github.com/openshift/hypershift/pull/4759)
* NO-JIRA: Security fixes for openshift-ci-security job [#4750](https://github.com/openshift/hypershift/pull/4750)
* [OCPBUGS-41372](https://issues.redhat.com/browse/OCPBUGS-41372): CPO oauth idp converter: resolve names before dialing [#4689](https://github.com/openshift/hypershift/pull/4689)
* NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) [#4729](https://github.com/openshift/hypershift/pull/4729)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) [#4728](https://github.com/openshift/hypershift/pull/4728)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4727](https://github.com/openshift/hypershift/pull/4727)
* [OCPBUGS-38058](https://issues.redhat.com/browse/OCPBUGS-38058): Add HTTP konnectivity proxy to OAuth server [#4496](https://github.com/openshift/hypershift/pull/4496)
* [HOSTEDCP-1955](https://issues.redhat.com/browse/HOSTEDCP-1955): bump CCO version [#4696](https://github.com/openshift/hypershift/pull/4696)
* [OCPBUGS-34803](https://issues.redhat.com/browse/OCPBUGS-34803): cmd: report server version, supported OCP [#4141](https://github.com/openshift/hypershift/pull/4141)
* [OCPBUGS-39293](https://issues.redhat.com/browse/OCPBUGS-39293): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4647](https://github.com/openshift/hypershift/pull/4647)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) [#4685](https://github.com/openshift/hypershift/pull/4685)
* [OCPBUGS-38062](https://issues.redhat.com/browse/OCPBUGS-38062): [release-4.16] Use HTTP proxy for ingress controller [#4688](https://github.com/openshift/hypershift/pull/4688)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4684](https://github.com/openshift/hypershift/pull/4684)
* [OCPBUGS-39447](https://issues.redhat.com/browse/OCPBUGS-39447): handle version skewed NodePools that do not have rhel9 binaries [#4664](https://github.com/openshift/hypershift/pull/4664)
* [HOSTEDCP-1895](https://issues.redhat.com/browse/HOSTEDCP-1895): [release-4.16] Allow setting Kube APIServer maximum requests in flight [#4551](https://github.com/openshift/hypershift/pull/4551)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) [#4600](https://github.com/openshift/hypershift/pull/4600)
* chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) [#4602](https://github.com/openshift/hypershift/pull/4602)
* chore(deps): update konflux references (release-4.16) [#4599](https://github.com/openshift/hypershift/pull/4599)
* [OCPBUGS-38942](https://issues.redhat.com/browse/OCPBUGS-38942): copy oapi ca-trust recursively when building trust anchor [#4615](https://github.com/openshift/hypershift/pull/4615)
* NO-JIRA: Flaky cert validation test [#4622](https://github.com/openshift/hypershift/pull/4622)
* [OCPBUGS-38259](https://issues.redhat.com/browse/OCPBUGS-38259): Set KCM node monitor grace period [#4520](https://github.com/openshift/hypershift/pull/4520)
* [OCPBUGS-38726](https://issues.redhat.com/browse/OCPBUGS-38726): fix: bump github.com/IBM/go-sdk-core/v5 [#4611](https://github.com/openshift/hypershift/pull/4611)
* [HOSTEDCP-1764](https://issues.redhat.com/browse/HOSTEDCP-1764): retrieve registryOverrides when ImageStream is not ava… [#4541](https://github.com/openshift/hypershift/pull/4541)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) [#4525](https://github.com/openshift/hypershift/pull/4525)
* [OCPBUGS-36781](https://issues.redhat.com/browse/OCPBUGS-36781): Set Azure VM identity if user assigned identity set [#4341](https://github.com/openshift/hypershift/pull/4341)
* [OCPBUGS-37936](https://issues.redhat.com/browse/OCPBUGS-37936): set proxy envvars on aws and azure CCMs [#4476](https://github.com/openshift/hypershift/pull/4476)
* [OCPBUGS-38486](https://issues.redhat.com/browse/OCPBUGS-38486): hcco: reconcile apiserver config into hosted cluster [#4559](https://github.com/openshift/hypershift/pull/4559)
* NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results [#4534](https://github.com/openshift/hypershift/pull/4534)
* [OCPBUGS-38131](https://issues.redhat.com/browse/OCPBUGS-38131): Let the CPO oidc check resolve through data plane [#4505](https://github.com/openshift/hypershift/pull/4505)
* NO-JIRA: test: relax mgmt KAS egress check [#4561](https://github.com/openshift/hypershift/pull/4561)
* chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) [#4528](https://github.com/openshift/hypershift/pull/4528)
* chore(deps): update golang docker tag to v1.22 (release-4.16) [#4527](https://github.com/openshift/hypershift/pull/4527)
* NO-JIRA: Update Konflux references (release-4.16) [#4524](https://github.com/openshift/hypershift/pull/4524)
* [OCPBUGS-34801](https://issues.redhat.com/browse/OCPBUGS-34801): remove weak ciphers from security profile [#4518](https://github.com/openshift/hypershift/pull/4518)
* [OCPBUGS-37060](https://issues.redhat.com/browse/OCPBUGS-37060): OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates [#4366](https://github.com/openshift/hypershift/pull/4366)
* [Full changelog](https://github.com/openshift/hypershift/compare/156d87684f6e9cd0f2747f9fcf981eea9100efb8...7eada432f87821947a370176f4a8397a8c79186a)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/5d5d8010a59916cc264d0ab14962be85a35b7228)

* [OCPBUGS-42286](https://issues.redhat.com/browse/OCPBUGS-42286): Reorder static resources to create RBAC first [#129](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/129)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72...5d5d8010a59916cc264d0ab14962be85a35b7228)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7d4f93efe65a7c070ded6b889b61ae3d51e259fb)

* [OCPBUGS-43686](https://issues.redhat.com/browse/OCPBUGS-43686): UPSTREAM: &lt;carry&gt;: Fix go-retryablehttp CVE - 4.16 [#89](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/60b7ca98f5121f7e772437823b258a9fd0aa1d99...7d4f93efe65a7c070ded6b889b61ae3d51e259fb)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/d29506e7fea609bc8f004256c9c057e5429f72a1)

* [OCPBUGS-44870](https://issues.redhat.com/browse/OCPBUGS-44870): Bump dependency for CVE [#53](https://github.com/openshift/machine-api-provider-ibmcloud/pull/53)
* [OCPBUGS-36698](https://issues.redhat.com/browse/OCPBUGS-36698): IBMCloud: Handle pagination for subnets [#42](https://github.com/openshift/machine-api-provider-ibmcloud/pull/42)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/1a3a3030afcbbc0a26e794050d300b818069ba16...d29506e7fea609bc8f004256c9c057e5429f72a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/80aaae316ad37023a112db855525c0e7bf18db74)

* Ignore previous status when disabling alerts (#1061) [#1061](https://github.com/openshift/insights-operator/pull/1061)
* [OCPBUGS-45203](https://issues.redhat.com/browse/OCPBUGS-45203): LokiStack gatherer (#1051) [#1051](https://github.com/openshift/insights-operator/pull/1051)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1054) [#1054](https://github.com/openshift/insights-operator/pull/1054)
* gather selected clusterroles (#1023) [#1023](https://github.com/openshift/insights-operator/pull/1023)
* [OCPBUGS-39564](https://issues.redhat.com/browse/OCPBUGS-39564): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) [#1013](https://github.com/openshift/insights-operator/pull/1013)
* [OCPBUGS-39394](https://issues.redhat.com/browse/OCPBUGS-39394): collect some nmstate customresources (#986) (#989) (#995) [#986](https://github.com/openshift/insights-operator/pull/986)
* [OCPBUGS-38021](https://issues.redhat.com/browse/OCPBUGS-38021): Integration of the OpenStack CRs into the insights-operator (#974) [#974](https://github.com/openshift/insights-operator/pull/974)
* Add haproxy metric (#977) [#977](https://github.com/openshift/insights-operator/pull/977)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c9ba6b040d8e5c66eb1ad092b22d3336facc1b64...80aaae316ad37023a112db855525c0e7bf18db74)


### [ironic](https://github.com/openshift/ironic-image/tree/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#648](https://github.com/openshift/ironic-image/pull/648)
* [OCPBUGS-49895](https://issues.redhat.com/browse/OCPBUGS-49895): Drop quiet option of grep to avoid race condition with pipefail [#634](https://github.com/openshift/ironic-image/pull/634)
* [OCPBUGS-48151](https://issues.redhat.com/browse/OCPBUGS-48151), [OCPBUGS-48598](https://issues.redhat.com/browse/OCPBUGS-48598): Bump jinja2 to 3.0.1-6.el9.2 [#623](https://github.com/openshift/ironic-image/pull/623)
* [OCPBUGS-44895](https://issues.redhat.com/browse/OCPBUGS-44895): Bump Ironic [#610](https://github.com/openshift/ironic-image/pull/610)
* [OCPBUGS-43950](https://issues.redhat.com/browse/OCPBUGS-43950), [OCPBUGS-43958](https://issues.redhat.com/browse/OCPBUGS-43958): Bump python-waitress [4.16] [#604](https://github.com/openshift/ironic-image/pull/604)
* [OCPBUGS-43438](https://issues.redhat.com/browse/OCPBUGS-43438): Include fixes for CVE-2024-5569 [#599](https://github.com/openshift/ironic-image/pull/599)
* [OCPBUGS-42511](https://issues.redhat.com/browse/OCPBUGS-42511): Include fix for CVE-2024-47211 [#594](https://github.com/openshift/ironic-image/pull/594)
* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#569](https://github.com/openshift/ironic-image/pull/569)
* [OCPBUGS-38797](https://issues.redhat.com/browse/OCPBUGS-38797): redfish-virtualmedia fails on XFusion nodes [#564](https://github.com/openshift/ironic-image/pull/564)
* [OCPBUGS-42113](https://issues.redhat.com/browse/OCPBUGS-42113): Update ironic-inspector to fix the memory leak [#587](https://github.com/openshift/ironic-image/pull/587)
* [OCPBUGS-37758](https://issues.redhat.com/browse/OCPBUGS-37758), [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#579](https://github.com/openshift/ironic-image/pull/579)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set min version for python3-webob [#553](https://github.com/openshift/ironic-image/pull/553)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a428def3622bab2c00f22a9e3d1ba82ac6899e80...d08ca1e28ec84a3b34e87aea3dcb67a475b342e5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/aea138cd4ac822092199c141bb925b37527389cd)

* [METAL-1306](https://issues.redhat.com/browse/METAL-1306): Do not use openstack packages [#180](https://github.com/openshift/ironic-agent-image/pull/180)
* [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#156](https://github.com/openshift/ironic-agent-image/pull/156)
* [OCPBUGS-39383](https://issues.redhat.com/browse/OCPBUGS-39383): Include fixes for CVE-2024-44082 [#161](https://github.com/openshift/ironic-agent-image/pull/161)
* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set webob and bump werkzeug [#149](https://github.com/openshift/ironic-agent-image/pull/149)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/63681a469fdba2f223373ff36350bf2462b997a3...aea138cd4ac822092199c141bb925b37527389cd)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)

* [OCPBUGS-49595](https://issues.redhat.com/browse/OCPBUGS-49595): Fix subnet validation [#48](https://github.com/openshift/ironic-static-ip-manager/pull/48)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/e78e4c3e6db1805816308197eb9002dfbca27560...f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)

* : OCPBUGS-46663: Disable HTTP2 [#41](https://github.com/openshift/kubernetes-metrics-server/pull/41)
* [OCPBUGS-41717](https://issues.redhat.com/browse/OCPBUGS-41717): Wire server run options to flags. ([release-4.16]  backport) [#37](https://github.com/openshift/kubernetes-metrics-server/pull/37)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/7938f253e74f2259951cc882f2879a9860a38481...9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/cbddb0bee05ec89d1379ced8d1aab7269d55daf2)

* [OCPBUGS-44674](https://issues.redhat.com/browse/OCPBUGS-44674): Handle `openshift-host-network` namespace as special when it modifies [#648](https://github.com/openshift/sdn/pull/648)
* [OCPBUGS-46493](https://issues.redhat.com/browse/OCPBUGS-46493): Raise the minSyncPeriod for NetworkPolicies to 10s during migration [#649](https://github.com/openshift/sdn/pull/649)
* [OCPBUGS-46048](https://issues.redhat.com/browse/OCPBUGS-46048): clean up containernetworking/plugins vendoring in sdn [#645](https://github.com/openshift/sdn/pull/645)
* [OCPBUGS-45806](https://issues.redhat.com/browse/OCPBUGS-45806): Stop checking ruleVersion [4.16] [#643](https://github.com/openshift/sdn/pull/643)
* [OCPBUGS-44301](https://issues.redhat.com/browse/OCPBUGS-44301): Use copy() to duplicate a net.IP [#641](https://github.com/openshift/sdn/pull/641)
* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs [#635](https://github.com/openshift/sdn/pull/635)
* [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636)
* [OCPBUGS-42159](https://issues.redhat.com/browse/OCPBUGS-42159): fix redundant router-default iptables rule [#633](https://github.com/openshift/sdn/pull/633)
* [Full changelog](https://github.com/openshift/sdn/compare/5b658c433786797d0ac1b870db08346584794514...cbddb0bee05ec89d1379ced8d1aab7269d55daf2)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/c38f4734c6b6931c75d46674122fb4b838b6e64b)

* [OCPBUGS-30447](https://issues.redhat.com/browse/OCPBUGS-30447): protobuf bump [4.16] [#111](https://github.com/openshift/kube-rbac-proxy/pull/111)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/8ea2c994df4296ec161023d8ff85f9ea0e383216...c38f4734c6b6931c75d46674122fb4b838b6e64b)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/b3083010c7104c08efe72fae997465241fe145e6)

* [OCPBUGS-44622](https://issues.redhat.com/browse/OCPBUGS-44622): During detach don't return error if VM is not found [#49](https://github.com/openshift/kubevirt-csi-driver/pull/49)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/0693093f773c5046e231f174e7930315feabd996...b3083010c7104c08efe72fae997465241fe145e6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/693374418a09d902fa9e10c909b0c38b5a513505)

* [OCPBUGS-53045](https://issues.redhat.com/browse/OCPBUGS-53045): add image/read permissions [#1348](https://github.com/openshift/machine-api-operator/pull/1348)
* [OCPBUGS-52342](https://issues.redhat.com/browse/OCPBUGS-52342): Drop oVirt support [#1336](https://github.com/openshift/machine-api-operator/pull/1336)
* [OCPBUGS-45947](https://issues.redhat.com/browse/OCPBUGS-45947): vSphere klog initialization preventing verbose log messages [#1312](https://github.com/openshift/machine-api-operator/pull/1312)
* [OCPBUGS-45998](https://issues.redhat.com/browse/OCPBUGS-45998): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1313](https://github.com/openshift/machine-api-operator/pull/1313)
* [OCPBUGS-39028](https://issues.redhat.com/browse/OCPBUGS-39028): Updates message verbs to use %q where appropriate [#1282](https://github.com/openshift/machine-api-operator/pull/1282)
* [OCPBUGS-43433](https://issues.redhat.com/browse/OCPBUGS-43433): Vsphere: Handle cloned instance with lost taskID [#1298](https://github.com/openshift/machine-api-operator/pull/1298)
* [CORS-3648](https://issues.redhat.com/browse/CORS-3648): Add the hyperdisk-balanced disk type [#1279](https://github.com/openshift/machine-api-operator/pull/1279)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a3500bdf60d56350514a01fdc32f0e0a86557465...693374418a09d902fa9e10c909b0c38b5a513505)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/186b988e0db3232dc793fc515573906226b17701)

* [OCPBUGS-53434](https://issues.redhat.com/browse/OCPBUGS-53434): Update ObservedGeneration in KubeletConfig [#4935](https://github.com/openshift/machine-config-operator/pull/4935)
* [OCPBUGS-53313](https://issues.redhat.com/browse/OCPBUGS-53313): daemon: ensure ostree-finalize-staged is started before rebooting [#4928](https://github.com/openshift/machine-config-operator/pull/4928)
* [OCPBUGS-52421](https://issues.redhat.com/browse/OCPBUGS-52421): Update format verbs for alert logs [#4901](https://github.com/openshift/machine-config-operator/pull/4901)
* [OCPBUGS-51347](https://issues.redhat.com/browse/OCPBUGS-51347): Update the storage.conf configuration file template [#4881](https://github.com/openshift/machine-config-operator/pull/4881)
* [OCPBUGS-52593](https://issues.redhat.com/browse/OCPBUGS-52593): Update cluster-reader ClusterRole permissions [#4905](https://github.com/openshift/machine-config-operator/pull/4905)
* [OCPBUGS-52404](https://issues.redhat.com/browse/OCPBUGS-52404): create /run/nodeip-configuration before use [#4897](https://github.com/openshift/machine-config-operator/pull/4897)
* [OCPBUGS-52310](https://issues.redhat.com/browse/OCPBUGS-52310): configure-ovs workaround for ovs-if-br-ex bug [#4892](https://github.com/openshift/machine-config-operator/pull/4892)
* [OCPBUGS-50862](https://issues.redhat.com/browse/OCPBUGS-50862): Auto-recover from MC with invalid extension [#4853](https://github.com/openshift/machine-config-operator/pull/4853)
* [OCPBUGS-43680](https://issues.redhat.com/browse/OCPBUGS-43680): Regenerate the rendered MC in use when deleted [#4655](https://github.com/openshift/machine-config-operator/pull/4655)
* [OCPBUGS-49976](https://issues.redhat.com/browse/OCPBUGS-49976): Add clarification to invalid maxUnavailable alert [#4837](https://github.com/openshift/machine-config-operator/pull/4837)
* [OCPBUGS-39224](https://issues.redhat.com/browse/OCPBUGS-39224): Do not enable on-prem-resolv-prepender.path for UPI [#4573](https://github.com/openshift/machine-config-operator/pull/4573)
* [OCPBUGS-48290](https://issues.redhat.com/browse/OCPBUGS-48290): Pausing Master MCP results in Alerts [#4786](https://github.com/openshift/machine-config-operator/pull/4786)
* [OCPBUGS-43765](https://issues.redhat.com/browse/OCPBUGS-43765): openstack: fix non-old systemd compatible unit [#4660](https://github.com/openshift/machine-config-operator/pull/4660)
* [OCPBUGS-43741](https://issues.redhat.com/browse/OCPBUGS-43741): Soften haproxy timeout for kubeapi probe [#4662](https://github.com/openshift/machine-config-operator/pull/4662)
* [OCPBUGS-48116](https://issues.redhat.com/browse/OCPBUGS-48116): OCPBUGS-47801: trying to wait for sub-controllers [#4777](https://github.com/openshift/machine-config-operator/pull/4777)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Remove trailing periods from AWS provided hostnames [#4744](https://github.com/openshift/machine-config-operator/pull/4744)
* [OCPBUGS-44337](https://issues.redhat.com/browse/OCPBUGS-44337): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4688](https://github.com/openshift/machine-config-operator/pull/4688)
* [MCO-1342](https://issues.redhat.com/browse/MCO-1342): Backport Telemetry to 4.16 [#4649](https://github.com/openshift/machine-config-operator/pull/4649)
* [OCPBUGS-44043](https://issues.redhat.com/browse/OCPBUGS-44043): Disable ESP offload for OVS attached interfaces [#4676](https://github.com/openshift/machine-config-operator/pull/4676)
* [OCPBUGS-42109](https://issues.redhat.com/browse/OCPBUGS-42109): Do not use 'restart' for 'oneshot' service [#4616](https://github.com/openshift/machine-config-operator/pull/4616)
* [OCPBUGS-42744](https://issues.redhat.com/browse/OCPBUGS-42744): Check for kernel arg diff in updateOnClusterBuild [#4628](https://github.com/openshift/machine-config-operator/pull/4628)
* [OCPBUGS-42722](https://issues.redhat.com/browse/OCPBUGS-42722): Panic seen in CI job for MCC pod [#4626](https://github.com/openshift/machine-config-operator/pull/4626)
* [OCPBUGS-42719](https://issues.redhat.com/browse/OCPBUGS-42719): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4625](https://github.com/openshift/machine-config-operator/pull/4625)
* [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563)
* [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627)
* [OCPBUGS-41806](https://issues.redhat.com/browse/OCPBUGS-41806): When newly built images rolled out, the update progress is not displaying correctly (went 0 --&gt; 3) [#4584](https://github.com/openshift/machine-config-operator/pull/4584)
* [OCPBUGS-41518](https://issues.redhat.com/browse/OCPBUGS-41518): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4569](https://github.com/openshift/machine-config-operator/pull/4569)
* [OCPBUGS-38997](https://issues.redhat.com/browse/OCPBUGS-38997): Machine-config daemon ListPools panic during tech-preview CI runs [#4550](https://github.com/openshift/machine-config-operator/pull/4550)
* [OCPBUGS-38711](https://issues.redhat.com/browse/OCPBUGS-38711): SCC-pinning for openshift workloads [#4539](https://github.com/openshift/machine-config-operator/pull/4539)
* [OCPBUGS-36850](https://issues.redhat.com/browse/OCPBUGS-36850): Port number 22623 exposing weak ciphers to external client from master node IP [#4556](https://github.com/openshift/machine-config-operator/pull/4556)
* [OCPBUGS-38373](https://issues.redhat.com/browse/OCPBUGS-38373): Revert "MCD-pull: run after network-online.target in Azure" [#4528](https://github.com/openshift/machine-config-operator/pull/4528)
* [OCPBUGS-36171](https://issues.redhat.com/browse/OCPBUGS-36171), [OCPBUGS-36172](https://issues.redhat.com/browse/OCPBUGS-36172): fix secret canonicalization [#4432](https://github.com/openshift/machine-config-operator/pull/4432)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/64434515dba546949bcec20be26f3215a4fc5b53...186b988e0db3232dc793fc515573906226b17701)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/a99847b4450d58dbd0e487dd7e834586cd3e9289)

* [OCPBUGS-54169](https://issues.redhat.com/browse/OCPBUGS-54169): Change rhcos release browser url [#57](https://github.com/openshift/machine-os-images/pull/57)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c...a99847b4450d58dbd0e487dd7e834586cd3e9289)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24)

* [OU-559](https://issues.redhat.com/browse/OU-559): fix log based alerts namespace for dev console [#320](https://github.com/openshift/monitoring-plugin/pull/320)
* [OCPBUGS-44395](https://issues.redhat.com/browse/OCPBUGS-44395): remove unused package and upgrade vulnerable dependency [#272](https://github.com/openshift/monitoring-plugin/pull/272)
* [OCPBUGS-43239](https://issues.redhat.com/browse/OCPBUGS-43239): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 [#217](https://github.com/openshift/monitoring-plugin/pull/217)
* [OCPBUGS-42424](https://issues.redhat.com/browse/OCPBUGS-42424): fix path-to-regexp dependency [#197](https://github.com/openshift/monitoring-plugin/pull/197)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/aa339e459718c1644d53fcdaf6a59bb751bfecea...fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/36e2ad06f7637f867233bd7e9367f9faf12835b3)

* [OCPBUGS-50005](https://issues.redhat.com/browse/OCPBUGS-50005): [Release-4.17]Kubeconfig loop [#340](https://github.com/openshift/whereabouts-cni/pull/340)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dab1dd29b18521916c18a278faa734f038eccdf1...36e2ad06f7637f867233bd7e9367f9faf12835b3)


### [must-gather](https://github.com/openshift/must-gather/tree/774a4e024925cc6034969eb84c9030a338a187e5)

* [OCPBUGS-42960](https://issues.redhat.com/browse/OCPBUGS-42960): Gather OSUS data [#455](https://github.com/openshift/must-gather/pull/455)
* [OCPBUGS-48082](https://issues.redhat.com/browse/OCPBUGS-48082): Update owners [#473](https://github.com/openshift/must-gather/pull/473)
* [OCPBUGS-46407](https://issues.redhat.com/browse/OCPBUGS-46407): Support gathering IPsec data [#469](https://github.com/openshift/must-gather/pull/469)
* [OCPBUGS-42969](https://issues.redhat.com/browse/OCPBUGS-42969): Collect etcd object count [#454](https://github.com/openshift/must-gather/pull/454)
* [OCPBUGS-43056](https://issues.redhat.com/browse/OCPBUGS-43056): Open [Release-4.16] Multus is now a Pod and will be captured by normal [#449](https://github.com/openshift/must-gather/pull/449)
* [Full changelog](https://github.com/openshift/must-gather/compare/aea114c0e263e6148b6a26f69f45af559a4f7bc7...774a4e024925cc6034969eb84c9030a338a187e5)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/28bf5963c7f82ae8d966a69562a19f038d819950)

* [OCPBUGS-30524](https://issues.redhat.com/browse/OCPBUGS-30524): bump google.golang.org/protobuf to v1.33.0 [#38](https://github.com/openshift/cloud-provider-nutanix/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/c9bbc44c0200c8061506c465d0eb3c97fe94e197...28bf5963c7f82ae8d966a69562a19f038d819950)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/f09a9be33b6455664a6842980fca4bd8008e9e6e)

* [OCPBUGS-30525](https://issues.redhat.com/browse/OCPBUGS-30525): Update dependencies to address CVE-2024-24786 [#124](https://github.com/openshift/oauth-apiserver/pull/124)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/fa1f097c2800b06b3b56537651294d023762a4eb...f09a9be33b6455664a6842980fca4bd8008e9e6e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a)

* changes the owners file (#1015) [#1015](https://github.com/openshift/oc-mirror/pull/1015)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1021) [#1021](https://github.com/openshift/oc-mirror/pull/1021)
* [OCPBUGS-38035](https://issues.redhat.com/browse/OCPBUGS-38035): Rebuild catalogs -- without cache generation (#905) [#905](https://github.com/openshift/oc-mirror/pull/905)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/7ce43f4498a017bb1ae278442e79703b5a16b21d...b137a53a5360a41a70432ea2bfc98a6cee6f7a4a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/fcee0c265f79dcecccfd0d276e6fcc0af7dbcf11)

* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): prevent panic when no image and error are set [#494](https://github.com/openshift/openshift-apiserver/pull/494)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): validate image property isn't nil before using [#493](https://github.com/openshift/openshift-apiserver/pull/493)
* [OCPBUGS-49656](https://issues.redhat.com/browse/OCPBUGS-49656): move on to the next digest/tag during failures [#492](https://github.com/openshift/openshift-apiserver/pull/492)
* [OCPBUGS-45010](https://issues.redhat.com/browse/OCPBUGS-45010): Pass expected type to deploymentconfig/scale object validation. [#461](https://github.com/openshift/openshift-apiserver/pull/461)
* [OCPBUGS-42724](https://issues.redhat.com/browse/OCPBUGS-42724): fail image import when both image and error are nil [#455](https://github.com/openshift/openshift-apiserver/pull/455)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6b5184128103eaad64d7b00f0d1de9b7c3597112...fcee0c265f79dcecccfd0d276e6fcc0af7dbcf11)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/bcf6e58edbcc8e7ce6f7e4d0658635688e0fc114)

* [OCPBUGS-44186](https://issues.redhat.com/browse/OCPBUGS-44186): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#351](https://github.com/openshift/openshift-controller-manager/pull/351)
* [OCPBUGS-48202](https://issues.redhat.com/browse/OCPBUGS-48202): Add team members to the OWNERS file [#358](https://github.com/openshift/openshift-controller-manager/pull/358)
* NO-JIRA: cleanup root and app OWNERS [#347](https://github.com/openshift/openshift-controller-manager/pull/347)
* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#343](https://github.com/openshift/openshift-controller-manager/pull/343)
* [OCPBUGS-39191](https://issues.redhat.com/browse/OCPBUGS-39191): replaces deprecated square/go-jose wtih go-jose/go-jose [#329](https://github.com/openshift/openshift-controller-manager/pull/329)
* [OCPBUGS-37526](https://issues.redhat.com/browse/OCPBUGS-37526): Race condition when deleting ServiceAccount [#324](https://github.com/openshift/openshift-controller-manager/pull/324)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f0536caff57932e0b5fb88987477f4978463574a...bcf6e58edbcc8e7ce6f7e4d0658635688e0fc114)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/bafa26de94c06009f563c8283ac42a78478667c5)

* [OCPBUGS-44456](https://issues.redhat.com/browse/OCPBUGS-44456): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#328](https://github.com/openshift/cluster-api-provider-openstack/pull/328)
* [OCPBUGS-44990](https://issues.redhat.com/browse/OCPBUGS-44990): Makefile changes for merge-bot [#341](https://github.com/openshift/cluster-api-provider-openstack/pull/341)
* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): rebase on release-0.10 (to fix trunks deletion) [#321](https://github.com/openshift/cluster-api-provider-openstack/pull/321)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/86a58d8345c5c434817d0ecd6a91c93fc6438ac4...bafa26de94c06009f563c8283ac42a78478667c5)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5ada1cbab3a9354488b1e74e85c36285302c3382)

* [OCPBUGS-34931](https://issues.redhat.com/browse/OCPBUGS-34931): bump CAPO to v0.9.2 [#124](https://github.com/openshift/machine-api-provider-openstack/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/fb930638853b159a2e428e6200bd67a64a37295b...5ada1cbab3a9354488b1e74e85c36285302c3382)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/48d68f52674ad5afb2d40d032abb0892a5dafee6)

* [OCPBUGS-48696](https://issues.redhat.com/browse/OCPBUGS-48696): Fix excessive catalog source snapshots cause severe performance regression [#957](https://github.com/openshift/operator-framework-olm/pull/957)
* [OCPBUGS-48661](https://issues.redhat.com/browse/OCPBUGS-48661): Fix concurrent namespace resolution [#947](https://github.com/openshift/operator-framework-olm/pull/947)
* [OCPBUGS-46928](https://issues.redhat.com/browse/OCPBUGS-46928), [OCPBUGS-46935](https://issues.redhat.com/browse/OCPBUGS-46935), [OCPBUGS-47315](https://issues.redhat.com/browse/OCPBUGS-47315): x/net bump to v0.34.0 [release-4.16] [#939](https://github.com/openshift/operator-framework-olm/pull/939)
* [OCPBUGS-47738](https://issues.redhat.com/browse/OCPBUGS-47738): catalog-operator: Delete Pods that were evicted (#3459) [#925](https://github.com/openshift/operator-framework-olm/pull/925)
* [OCPBUGS-46434](https://issues.redhat.com/browse/OCPBUGS-46434): CRD upgrade existing CR validation fix [#916](https://github.com/openshift/operator-framework-olm/pull/916)
* [OCPBUGS-44802](https://issues.redhat.com/browse/OCPBUGS-44802): fix: call TokenRequest API when service account token secret is missing [#900](https://github.com/openshift/operator-framework-olm/pull/900)
* [OCPBUGS-41540](https://issues.redhat.com/browse/OCPBUGS-41540): [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#859](https://github.com/openshift/operator-framework-olm/pull/859)
* [OCPBUGS-41677](https://issues.redhat.com/browse/OCPBUGS-41677): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#863](https://github.com/openshift/operator-framework-olm/pull/863)
* [OCPBUGS-41557](https://issues.redhat.com/browse/OCPBUGS-41557): Fix e2e flake: upgrade CRD with deprecated version [#861](https://github.com/openshift/operator-framework-olm/pull/861)
* [OCPBUGS-41217](https://issues.redhat.com/browse/OCPBUGS-41217): (fix) registry pods do not come up again after node failure (#3366) [#854](https://github.com/openshift/operator-framework-olm/pull/854)
* [OCPBUGS-38290](https://issues.redhat.com/browse/OCPBUGS-38290): [release-4.16] (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#838](https://github.com/openshift/operator-framework-olm/pull/838)
* [OCPBUGS-38129](https://issues.redhat.com/browse/OCPBUGS-38129): [release-4.16]  Update junit report file name to show spec results on Test Grid [#833](https://github.com/openshift/operator-framework-olm/pull/833)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/97a3268a20581bb6b9f3fc9e41aed944fa538842...48d68f52674ad5afb2d40d032abb0892a5dafee6)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/208d5aa79e2f953d0e621070091409ab43cb54e1)

* [OCPBUGS-49429](https://issues.redhat.com/browse/OCPBUGS-49429): Upgrade golang.org/x/net [release-4.16] [#587](https://github.com/operator-framework/operator-marketplace/pull/587)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2...208d5aa79e2f953d0e621070091409ab43cb54e1)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/961bff913e2a04d640941f73d4632452adbaffaf)

* [OCPBUGS-54204](https://issues.redhat.com/browse/OCPBUGS-54204): Update OVN to FDP25.A.1 24.03.5-40. [#2497](https://github.com/openshift/ovn-kubernetes/pull/2497)
* [OCPBUGS-50595](https://issues.redhat.com/browse/OCPBUGS-50595): kubevirt, localnet: Reduce live migration downtime [#2469](https://github.com/openshift/ovn-kubernetes/pull/2469)
* [OCPBUGS-50594](https://issues.redhat.com/browse/OCPBUGS-50594): fixes overzealous deletion of SNAT in egressIP [#2456](https://github.com/openshift/ovn-kubernetes/pull/2456)
* [OCPBUGS-47634](https://issues.redhat.com/browse/OCPBUGS-47634): Let OVN-northd bind remote ports [#2406](https://github.com/openshift/ovn-kubernetes/pull/2406)
* [OCPBUGS-45958](https://issues.redhat.com/browse/OCPBUGS-45958): bump OVS to 3.3.0-62.el9fdp for OCP 4.16 [#2388](https://github.com/openshift/ovn-kubernetes/pull/2388)
* [OCPBUGS-44457](https://issues.redhat.com/browse/OCPBUGS-44457): Add static route to the hairpin masquerade IPs to pod [#2346](https://github.com/openshift/ovn-kubernetes/pull/2346)
* [OCPBUGS-45942](https://issues.redhat.com/browse/OCPBUGS-45942): pin libreswan to 4.6-3.el9_0.3 [#2386](https://github.com/openshift/ovn-kubernetes/pull/2386)
* [OCPBUGS-45343](https://issues.redhat.com/browse/OCPBUGS-45343): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2377](https://github.com/openshift/ovn-kubernetes/pull/2377)
* [OCPBUGS-42244](https://issues.redhat.com/browse/OCPBUGS-42244): Add hybird overlay pod IPs to the namespace address_set [#2352](https://github.com/openshift/ovn-kubernetes/pull/2352)
* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): Add SDN node subnet gateway IP to host-network address_set [#2328](https://github.com/openshift/ovn-kubernetes/pull/2328)
* [OCPBUGS-42942](https://issues.redhat.com/browse/OCPBUGS-42942): Fix egress gateway pod cleanup for remote zone pods. [#2341](https://github.com/openshift/ovn-kubernetes/pull/2341)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Implementation required to enable Forwarding if it is already disabled [#2212](https://github.com/openshift/ovn-kubernetes/pull/2212)
* [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306)
* [OCPBUGS-38697](https://issues.redhat.com/browse/OCPBUGS-38697): Use more exact name match when deleting static routes to HO nodes. [#2282](https://github.com/openshift/ovn-kubernetes/pull/2282)
* [OCPBUGS-24386](https://issues.redhat.com/browse/OCPBUGS-24386): [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW [#2278](https://github.com/openshift/ovn-kubernetes/pull/2278)
* [OCPBUGS-38705](https://issues.redhat.com/browse/OCPBUGS-38705): Delete EgressIP LRP stale nexthops when node is not found [#2271](https://github.com/openshift/ovn-kubernetes/pull/2271)
* [OCPBUGS-38054](https://issues.redhat.com/browse/OCPBUGS-38054): Fix per-pod MCS/metadata blocking [#2248](https://github.com/openshift/ovn-kubernetes/pull/2248)
* [OCPBUGS-38699](https://issues.redhat.com/browse/OCPBUGS-38699), [OCPBUGS-38704](https://issues.redhat.com/browse/OCPBUGS-38704): EgressIP VRF support & ignore localnet patch ports when bootstrapping [#2267](https://github.com/openshift/ovn-kubernetes/pull/2267)
* [OCPBUGS-37939](https://issues.redhat.com/browse/OCPBUGS-37939): [release-4.16] Bump OVSDBTimeout and make it configurable. [#2244](https://github.com/openshift/ovn-kubernetes/pull/2244)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/494993b7702336ed9d527c2c9899b85cdd22c7bf...961bff913e2a04d640941f73d4632452adbaffaf)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/60ebedf061fe1bb5279650fd637108b13b92d95f)

* [OCPBUGS-41976](https://issues.redhat.com/browse/OCPBUGS-41976): Update go.mod to fix CVE - 4.16 [#84](https://github.com/openshift/machine-api-provider-powervs/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1...60ebedf061fe1bb5279650fd637108b13b92d95f)


### [prometheus](https://github.com/openshift/prometheus/tree/09479fe37af9d9f187cb21796e73213c80c902fc)

* [OCPBUGS-43668](https://issues.redhat.com/browse/OCPBUGS-43668): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#231](https://github.com/openshift/prometheus/pull/231)
* [OCPBUGS-39179](https://issues.redhat.com/browse/OCPBUGS-39179): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#224](https://github.com/openshift/prometheus/pull/224)
* [OCPBUGS-36918](https://issues.redhat.com/browse/OCPBUGS-36918): cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. [#214](https://github.com/openshift/prometheus/pull/214)
* [Full changelog](https://github.com/openshift/prometheus/compare/bc04420c7556a9ba168ce160466a99461dd9746e...09479fe37af9d9f187cb21796e73213c80c902fc)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/c7262a43c0ddf2adc6be3863ac9a5056cb89c177)

* [OCPBUGS-38399](https://issues.redhat.com/browse/OCPBUGS-38399): feat: sync proxy settings in Alertmanager configuration [#299](https://github.com/openshift/prometheus-operator/pull/299)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/8bf4750af765730dc423213516245c7b0679e352...c7262a43c0ddf2adc6be3863ac9a5056cb89c177)


### [tests](https://github.com/openshift/origin/tree/de619ec2def9cc98eb8b0f187514199d7bf93872)

* [OCPBUGS-52581](https://issues.redhat.com/browse/OCPBUGS-52581): Use payload pullspec for image info test [#29589](https://github.com/openshift/origin/pull/29589)
* [OCPBUGS-52343](https://issues.redhat.com/browse/OCPBUGS-52343): Try also user CA for getting openshift-tests image [#29578](https://github.com/openshift/origin/pull/29578)
* [OCPBUGS-44119](https://issues.redhat.com/browse/OCPBUGS-44119): Ignore infra nodes on tap cni tests [#29261](https://github.com/openshift/origin/pull/29261)
* [OCPBUGS-48448](https://issues.redhat.com/browse/OCPBUGS-48448): Add team members to the OWNERS file for PR approvals [#29443](https://github.com/openshift/origin/pull/29443)
* [OCPBUGS-48348](https://issues.redhat.com/browse/OCPBUGS-48348): Fixing build s2i ruby test data inline with latest ruby version(&gt;=3.0) [#29431](https://github.com/openshift/origin/pull/29431)
* [OCPBUGS-44105](https://issues.redhat.com/browse/OCPBUGS-44105): Adjust createDNSPod() to support hypershift dual-stack test [#29258](https://github.com/openshift/origin/pull/29258)
* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [OCPBUGS-41611](https://issues.redhat.com/browse/OCPBUGS-41611): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] [#29079](https://github.com/openshift/origin/pull/29079)
* [OCPBUGS-38707](https://issues.redhat.com/browse/OCPBUGS-38707): run vsphere driver config test on non techpreview clusters [#28992](https://github.com/openshift/origin/pull/28992)
* [OCPBUGS-38788](https://issues.redhat.com/browse/OCPBUGS-38788): [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28938](https://github.com/openshift/origin/pull/28938)
* [OCPBUGS-38015](https://issues.redhat.com/browse/OCPBUGS-38015): vertical scaling test should not rely on CPMS replicas [#28981](https://github.com/openshift/origin/pull/28981)
* [Full changelog](https://github.com/openshift/origin/compare/83fcc4d5baf659bdb472dfab085751c331baa849...de619ec2def9cc98eb8b0f187514199d7bf93872)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/023a3655c181512a870fe1c865dbdbd31690f439)

* [OCPBUGS-46341](https://issues.redhat.com/browse/OCPBUGS-46341): update check-fmt goimports command [#83](https://github.com/openshift/cloud-provider-vsphere/pull/83)
* [OCPBUGS-37660](https://issues.redhat.com/browse/OCPBUGS-37660): Bump otelgrpc to v0.53.0 [#72](https://github.com/openshift/cloud-provider-vsphere/pull/72)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/8777b9a5ec4b34cefab7708987731a1fd224a739...023a3655c181512a870fe1c865dbdbd31690f439)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/03b7e8ebf2c6347b40a340d892e1a66d47806300)

* [OCPBUGS-43881](https://issues.redhat.com/browse/OCPBUGS-43881): redact sensitive information when logging VCenter config [#134](https://github.com/openshift/vmware-vsphere-csi-driver/pull/134)
* [OCPBUGS-42878](https://issues.redhat.com/browse/OCPBUGS-42878): Add compute resource entity to consider a standalone cluster for volu… [#131](https://github.com/openshift/vmware-vsphere-csi-driver/pull/131)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/3cd689f3f1ff59467885ee8ef42997eef5f81972...03b7e8ebf2c6347b40a340d892e1a66d47806300)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/7940ea1685dee6d3f29a6360dac9a82dd1b09230)

* [OCPBUGS-51206](https://issues.redhat.com/browse/OCPBUGS-51206): Set reconcile-sync to 10 minute for ListVolume [#294](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/294)
* [OCPBUGS-49862](https://issues.redhat.com/browse/OCPBUGS-49862): List only linux nodes [#289](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/289)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4...7940ea1685dee6d3f29a6360dac9a82dd1b09230)