# 4.17.18

Created: 2025-02-20 09:27:54 +0000 UTC

Image Digest: `sha256:fd8f5562f0403504b35cc62e064b04c34e6baeb48384bddebffc98c3c69a2af3`


## Changes from 4.17.0

### Components

* Kubectl upgraded from 1.30.2 to 1.30.5
* Kubernetes upgraded from 1.30.4 to 1.30.9
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202409121747-0 to 417.94.202502181421-0


### New images

* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:c09aa241c2d7b36227b78559190405780403bc010724651fbee855411a702c45`


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3b99303b](https://github.com/openshift/agent-installer-utils/commit/3b99303bc6d1c85465139f1e1c4847c038e4dc8f) `sha256:2a4f02f8d9fc418bf0d432aa9d8f1976ba1a36b5d26fc4ee481f1a1a8e6b0509`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [cd426416](https://github.com/openshift/apiserver-network-proxy/commit/cd4264165057a0098c5d6e0b4e8727b4232cc3ce) `sha256:594e3fe827396d7d527a18bc0eb7665ae172ef01853447b03fc4aea50cbc3c45`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [8c77f418](https://github.com/openshift/cloud-provider-aws/commit/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a) `sha256:429e706f03021393bc324d4f71d5cc51029535a6593ddcfa3860fb99bb51340b`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:3fbed32ac90c7318f62851ade0b592ddd3c9257db8d7375395e413990c370bc6`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b91c75bd](https://github.com/openshift/aws-pod-identity-webhook/commit/b91c75bd2948189a150061ef799d688d75cf2a1d) `sha256:eb6aa494dac625216fd9651f47dfabe9ababb4bdd434b5f92bc3c849f8dab561`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d359bfe5](https://github.com/openshift/cluster-api-provider-azure/commit/d359bfe56764238e2881f0f003fd8206b2b40dec) `sha256:79f0dc573b8b01f39a1106d20c8427142a91f7454fa24360369b3624cc934356`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:1b84701dc71ec2952d5dea1c81c2b23fd487593c4634a544bfbda3ac2e07b93e`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:f05a54a6b5a1c753b918fbf8929129e92a1c1eb59ea19d99b2435c43f2ed2e53`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [75b1b4ce](https://github.com/openshift/azure-workload-identity/commit/75b1b4ce871da06195b39da0eddd7a68496e4a59) `sha256:10035d034cae56b2930a08ca76922e2e13b072ac719fd39ff34263bc9b50ac16`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [779b346c](https://github.com/openshift/cloud-network-config-controller/commit/779b346c8bccdb8590e403661ca57cc6ac544eb9) `sha256:6aac9b7ef5c2bf17c62397accece2925f769aa06e277101b07ceca2f97704168`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:7298eb7e97712e2d23135d32558dd2d1595e6ec635e1f789411efe0ff82c73f3`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0dc084f4](https://github.com/openshift/cluster-config-operator/commit/0dc084f47be4c5ee02cf40495b6bd8f334c930eb) `sha256:afb36ca6dcd02774a485f1ab69910db8e3a135dc10f20ff23c29983be5def0a5`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:a8462d9b3e4b640ef3bb5eca867e2d2e5ca9cfff06a29962c40cc9d4c39f36e1`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [54eea5bb](https://github.com/openshift/cluster-dns-operator/commit/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7) `sha256:e3800ad08c52ff45533c28e1cf10f8e4b643ceae731ac75d912f4b4f0a38ca0e`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [cb5306d7](https://github.com/openshift/cluster-ingress-operator/commit/cb5306d7f68ba35b9a065d65f46c69a836556cb2) `sha256:45733384a73617592a32d124d3c7c03d7972adbdc0af3b6b988a8151b6fe7fcb`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0a9ed573](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0a9ed573e35751455bfb24842fd2de0b05379ed0) `sha256:e40a3f1a34476a221bce2c8af6e371a7545d5bd68bb6685b29ecf1eccdffaff0`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [98ca953b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/98ca953ba6955401023e219f37e0af49879355d2) `sha256:f72127b508d9f652431ace78214b3c241d55656f0a736e050834434da84436c6`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:87d5c75634e044b838642563040a63e5174ebdf2266b042cc8425f7925195ef6`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:a8e97fcf75a2c87eea18f6c7bd4abc443479502969f0c3b14d2d195bd94a963d`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2ce31fc5](https://github.com/openshift/cluster-update-keys/commit/2ce31fc513224e76ac5924addc6207c205d95742) `sha256:0e6362e4ae066a25f597491cc3d31ddf3a92e8c83758e259a9b92ce8aac8599b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b877222b](https://github.com/openshift/configmap-reload/commit/b877222b8c5527450447079e33d86dd9fe288e54) `sha256:57494cd7f4cc41a46d413832298be985498b1933b9448beb3ba7dd12b3ca4677`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:4ae8ba23d4db9f5beee572b5f7d93fa28973de3c114d8f85d2ea5e6de183bc37`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:f9caf388149e7c01766f15f9ed2d8da866d47fce16e79f1b487bd3c6279f6f10`
* [coredns](https://github.com/openshift/coredns) git [d3b441c1](https://github.com/openshift/coredns/commit/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1) `sha256:0d17e1c6c8d5ba773194e1fcd94745744fc3b8ddf8f732013f6cf5181ed7e42c`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [6a72c254](https://github.com/openshift/csi-driver-nfs/commit/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7) `sha256:7694d3f490c4f7e9bd530f25d7def5bef76531319c8618e116a241534b6ad29b`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:6cf00899740ac165e79a2ce09bb80d4368cf5e2790e07cdc0ac9bab14193d9f7`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:8b16a1776015bb00bb4e4011416007767f0269f8e34df7258183ecbf5638d371`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:99c2ff5c33ce5394bec08f1097d3aff5e531b6970e2ec001e3ccbace6b10f912`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ab87a938](https://github.com/openshift/csi-external-resizer/commit/ab87a93853882d6ede0a8fe0a61469cd4fa61a62) `sha256:4c7676b17ca7e6674e49de1bc9f15e9eb39a45f0d38415e995c80e9a923275aa`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:9ee0d3e8ba7218d10fb0fa0abb04ae3528dd94d495a93c09b77a06b4bb538c61`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [075ebcdc](https://github.com/openshift/csi-livenessprobe/commit/075ebcdcb83929571fbea0a4d8ef5e2429e7a259) `sha256:5e7e159a2e0e0ac0825cd127149632391eac407c7e9e27b5d14148c4d0fad58b`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [436a1f33](https://github.com/openshift/csi-node-driver-registrar/commit/436a1f334dd75ae75206f52223b7933f7ff5036f) `sha256:a0cabc8d576a4d0e9c70e9e55efce56ce2ca86c4f029a7143c18f6d11d2648b7`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:92ba1abb7e1ca29bce2c559b9316c6b73a951f4a51a5518c956934cf4ee761c3`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:1e42c493873e1e7a3215a65c51a2860fd450091d10b1561f0d625612bf04e748`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:58132e0e30cff950293e940e3188f0e74fba91fd60ade4908239d11a0e9d988c`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:f8460943eef2506f3b082b44c3e96d6306e4f552b2e4474eb9f2ffa9ab6d2b15`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:ecfa3b1996bfe6c9bcb1097c8fd6a81434f16fffb1ae111dc883e2dd004b1aac`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9c561f2d](https://github.com/openshift/cluster-api-provider-gcp/commit/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f) `sha256:1862a0d26ad8f2dbd7cab1e5ec00fbb9cda27e9f1655e6ca44990b207191f352`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c770b412](https://github.com/openshift/gcp-pd-csi-driver/commit/c770b41229e39d8859fc11ec709ab57a0e0ad06a) `sha256:e2b9e99ac313f1bf8f78f079f6c0634d58f65c7a683bc6ea92dda1f93693267f`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:037815c4a9e017f08f9413189ddb81dc0c61b9de22c5396cf78ba9ee3799093e`
* [haproxy-router](https://github.com/openshift/router) git [a33f2b6a](https://github.com/openshift/router/commit/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a) `sha256:5b8d8f0525641e407663e7636a3320d2483df607d97ff58081b18a4031fb123d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:4cf8c7e741868dff1a98d75bdaecf65c629ccecb1335dc762b60a70487421844`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [3a3a62f7](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/3a3a62f7a200d2042cb64757f2d60faed20b6218) `sha256:db4d476564cf91a921e3237a828454e7a4997fdbf968d34828389b210bef0f7d`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [b698ea3e](https://github.com/openshift/ironic-rhcos-downloader/commit/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818) `sha256:e6c4f8d724d9af2b6a6feecdc2fd19cb6be739b41871d57d3168debce1a0ae0e`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:b86cf12072c12fcd34b6f92c2ed2c7eadc3b0b02093ae93e88013b627fdd4901`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [462e63f6](https://github.com/openshift/kube-state-metrics/commit/462e63f6223817d3610f030f6166a790d793c572) `sha256:8f938f1cba4ea38a0109ef5b23be7c8c4befd51a22f8814e6d2047aa5481310e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [34fafc04](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/34fafc04e5f2872e282617da31175a7e091ffdb2) `sha256:b5420b7605384bd2de51d6280e73a5228373f5cf7002c8074041ce3812cb4a07`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:4ccf1942210beed0ef24106a722320abf2b400a27af4daf09d5a637b22c265be`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:cae90bf198e488be5576316797f8d03da78568ef762ef2a7e48d20219da62b0d`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [74bee374](https://github.com/openshift/image-customization-controller/commit/74bee37482b0e9d581c2e12c8040195169e49032) `sha256:abb37bc419635ddf3d40ad200d603ed2080fb92001f054e8493851a16cf9bbd8`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e76dac7](https://github.com/openshift/machine-os-images/commit/9e76dac7c015538cea342bb0d4b226a9ffe58754) `sha256:0c7b8ba691d809fb74a16eb243740207b35926da129d33f2290385ce01e33347`
* [metallb-frr](https://github.com/openshift/frr) git [377d02f9](https://github.com/openshift/frr/commit/377d02f94181d26dac3ab2e2067ced9fe8d73763) `sha256:becad9f634411183e26e4a72af2d534ff6869afbb12bc4a09e56f2624a8548fc`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [076f0caa](https://github.com/openshift/multus-admission-controller/commit/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7) `sha256:d3b420223ebeb88416bea00add703af75e351c1c92d32ab00d2f2be6a3d53c96`
* [multus-cni](https://github.com/openshift/multus-cni) git [b8d8d5c0](https://github.com/openshift/multus-cni/commit/b8d8d5c0128743d5d3c188ad37004c0a4bc00337) `sha256:e350dd8e52e6f303b055d6106a318a07249dedb2f7cf095dfa66a6e73a2e0541`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b8d8d5c0](https://github.com/openshift/multus-cni/commit/b8d8d5c0128743d5d3c188ad37004c0a4bc00337) `sha256:b3bab0e9220e989461fba5420edcb178ef5207132cb879498fc714fa7d081da2`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7d01ea1c](https://github.com/openshift/multus-networkpolicy/commit/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8) `sha256:27c3e03a744bf4ccc97075945a02240c72b46324b5e526b514aebab2fcfa2be9`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:c9c767bdcb90b984e085db5ec6950d761fbf586a2d3cfd74eccde5fb82714c11`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8630f336](https://github.com/openshift/bond-cni/commit/8630f336431ccca04de465f991dbdf3ab736913b) `sha256:79c85c2ea2dd9db1985caf5192694cff08dcf403c9cbb27a06cc7112dd568e4d`
* [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:882959690158fff8b660a5112b05b977ed977b9d21ab961556a5961912258a2e`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:b896ca87b15d85b2fca358638fcc7e2a116d8b59a47193573972928af3485f3f`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [68aa2bbf](https://github.com/openshift/machine-api-provider-nutanix/commit/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0) `sha256:6b29590fa5521d1fef171b660702de74254773a96c444229797f9a5157214851`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1e963eb5](https://github.com/openshift/openshift-state-metrics/commit/1e963eb5839e2408734e37765d4d6b8fc48b343d) `sha256:926ce339a0eeb4a74435d11e3201e43b7a56d66efd265af73bb5e8c603c7cd29`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:dcb11f6bfd2997c07124034db7f0a3c7afd485fa74c10f42033534e48c3e3c35`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [68971874](https://github.com/openshift/machine-api-provider-openstack/commit/689718740b923e516c037d7862d81a462ecdbbd3) `sha256:05664ab81bf704fc1066f5414d4ef0be9142035f95a56fe933fe36a64b16e322`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:60faed51ad9bb627d8b2d448d4b2b41da65cddf48a755dc47d61a06e25aa09bf`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:43ef78cf07ab3c47a13d2e1ea1f8069509308282b70fcf0f268664ec2e1682a9`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [abb91c84](https://github.com/openshift/cluster-api-provider-ovirt/commit/abb91c84083dd139780921673da64fa5cd13bccb) `sha256:dc9a06fec173c1540b767842d9a239f36ad08ef0d5c28adc2bd8eb6efc2297dc`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:aaba2395fe84b3b7728d55870284cb91500f7778414bf5b59c17b0a9f19d8895`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:13adb87d41b379e04cdb4fae3f80834844a0660ac943d0dfdba01104b013d7a1`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:392fd8cce8d07d3ddb3bd097ccce1757b705f307679e33caee5f9f5c6f6313b7`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [fe7a877c](https://github.com/openshift/machine-api-provider-powervs/commit/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea) `sha256:dae0aadc59c79509779a9e904e0aeaa6d5c5e3f24eedc5c114c6bca1b15ea3b1`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [d80e9044](https://github.com/openshift/prom-label-proxy/commit/d80e904430effd51a5f00bf6345a2108b33bc15e) `sha256:150e6c750c9e6f44a6b094efb3c5aa5952530d7743f2919cfbe4f32667c665a5`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [d7c1a7c6](https://github.com/openshift/prometheus-alertmanager/commit/d7c1a7c6ac4b5482174797649834a47fc39d2575) `sha256:8e00d522b3a086df17b1932f60169ea3d4906fb1273eb9910c94740036856981`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d88fd69b](https://github.com/openshift/node_exporter/commit/d88fd69b579485146a584e8640c82a09daed2d5e) `sha256:0617589f291c4fcbf63f9fc81f4a061646e516f1cc817bed967f502eddc8f22b`
* rhel-coreos `sha256:3ae707a85a1d6d8d56c2a896f7aafc73046e27c3795ef2a012ed8413904b5597`
* rhel-coreos-extensions `sha256:6db8b9318856a5430e971c0a1fcffb4dda740d5498e2bc4276e236d6dc88c0a2`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [a47f6be3](https://github.com/openshift/route-controller-manager/commit/a47f6be3676d3eabb864ca339584fe857e1076c5) `sha256:36556209cae3540c5e9b00e9d2c7fda977d97ee2a31111cbdcb2025dacf48a99`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [1f7d6472](https://github.com/openshift/service-ca-operator/commit/1f7d6472fea332fc307d9c8911f8c3cf57347755) `sha256:b695b14af5064758eb72f201e750a3f1e153e75c6717854c931967c5ef951ead`
* [telemeter](https://github.com/openshift/telemeter) git [e2b25245](https://github.com/openshift/telemeter/commit/e2b25245eb81ba6bc3821574f889678ceae1b16a) `sha256:a86016eae28efcc2955eb1f96c8bf1e6d92c18f217eeb6d696da7dbb0a1f3001`
* [thanos](https://github.com/openshift/thanos) git [5b567365](https://github.com/openshift/thanos/commit/5b567365230115e5c242dd719110bac52fc2a4ef) `sha256:9657c0fe9e9f4fa010be4cfcfbd60e2297ddc35218ccd4c38107aac4af7fc67f`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1661cc3f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1661cc3f7997902caf0ea71fbef9ea394f3b14ef) `sha256:f3fc6e24148dfaf386b8ba8546135efecd3f9118615e469e81d9ffe17d293d38`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [cd0df71f](https://github.com/openshift/vsphere-problem-detector/commit/cd0df71f2ec22d84676f40b042d4603e9c94c360) `sha256:d73099eb0e41682a0f46e91188cba019371697d9c7b76f16c90994512b0db839`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9145aec2a9daa97078f47bbae1d577d9e2d566ce)

* [OCPBUGS-48390](https://issues.redhat.com/browse/OCPBUGS-48390): Bump moby from v26.0.0 to v27.2.1 (#7188) [#7188](https://github.com/openshift/assisted-service/pull/7188)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7129) [#7129](https://github.com/openshift/assisted-service/pull/7129)
* [OCPBUGS-42525](https://issues.redhat.com/browse/OCPBUGS-42525): Disable pprof for agent-based installer (#6897) [#6897](https://github.com/openshift/assisted-service/pull/6897)
* [OCPBUGS-43020](https://issues.redhat.com/browse/OCPBUGS-43020): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6892) [#6892](https://github.com/openshift/assisted-service/pull/6892)
* Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.17 (#6709) [#6709](https://github.com/openshift/assisted-service/pull/6709)
* [OCPBUGS-42569](https://issues.redhat.com/browse/OCPBUGS-42569): Libraries bump to mitigate CVE-2024-27289 (#6832) [#6832](https://github.com/openshift/assisted-service/pull/6832)
* [MGMT-17805](https://issues.redhat.com/browse/MGMT-17805): Fix MCO reboot error for s390x (#6727) [#6727](https://github.com/openshift/assisted-service/pull/6727)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) [#6750](https://github.com/openshift/assisted-service/pull/6750)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4965b257ea30e1cf098a81bb6808c5db1bfe79eb...9145aec2a9daa97078f47bbae1d577d9e2d566ce)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/faffde9e0f731819b3833c26a55324f96bcd0450)

* [OCPBUGS-47493](https://issues.redhat.com/browse/OCPBUGS-47493): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) [#989](https://github.com/openshift/assisted-installer/pull/989)
* [OCPBUGS-44904](https://issues.redhat.com/browse/OCPBUGS-44904): Rhcos fails to reboot for skip mco reboot on s390x (#942) [#942](https://github.com/openshift/assisted-installer/pull/942)
* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#918) [#918](https://github.com/openshift/assisted-installer/pull/918)
* [OCPBUGS-43023](https://issues.redhat.com/browse/OCPBUGS-43023): Pick up latest CVE changes by bumping service (#919) [#919](https://github.com/openshift/assisted-installer/pull/919)
* [OCPBUGS-42156](https://issues.redhat.com/browse/OCPBUGS-42156): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#904) [#904](https://github.com/openshift/assisted-installer/pull/904)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/37fd43a46b3743208c1ddea98cf3b98faf0792ad...faffde9e0f731819b3833c26a55324f96bcd0450)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05e480dd8cf0ee88b1cce68ebdde9ea41ca847c7)

* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#873) [#873](https://github.com/openshift/assisted-installer-agent/pull/873)
* [OCPBUGS-43024](https://issues.redhat.com/browse/OCPBUGS-43024): Pick up latest CVE changes by bumping service (#805) [#805](https://github.com/openshift/assisted-installer-agent/pull/805)
* [OCPBUGS-42157](https://issues.redhat.com/browse/OCPBUGS-42157): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#783) [#783](https://github.com/openshift/assisted-installer-agent/pull/783)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ef533920d8ea0cc6c96632d042e9cdd8fa0db7bf...05e480dd8cf0ee88b1cce68ebdde9ea41ca847c7)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/1f1c59f0ffd0bda9101e74356142e62305259590)

* [OCPBUGS-43921](https://issues.redhat.com/browse/OCPBUGS-43921): OSD-25934: Only tag NetworkInterfaces in `RunInstances` if IAM Allows It [#528](https://github.com/openshift/cluster-api-provider-aws/pull/528)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b722659d11fcdbc4ed003aa866ed877ce654af3a...1f1c59f0ffd0bda9101e74356142e62305259590)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cc862109d5a24f4b246af6bd4b1404dbf4227be0)

* [OCPBUGS-46512](https://issues.redhat.com/browse/OCPBUGS-46512): remove EFS driver metrics [#350](https://github.com/openshift/csi-operator/pull/350)
* [OCPBUGS-44974](https://issues.redhat.com/browse/OCPBUGS-44974): Set separate secrets for file and disk config on HyperShift [#331](https://github.com/openshift/csi-operator/pull/331)
* [OCPBUGS-42949](https://issues.redhat.com/browse/OCPBUGS-42949): add tag matching to Azure File storage class [#291](https://github.com/openshift/csi-operator/pull/291)
* [OCPBUGS-43789](https://issues.redhat.com/browse/OCPBUGS-43789): add ability to control kube rbac proxy container image… [#310](https://github.com/openshift/csi-operator/pull/310)
* [OCPBUGS-42997](https://issues.redhat.com/browse/OCPBUGS-42997): Correct aws efs csi driver config as removable [#296](https://github.com/openshift/csi-operator/pull/296)
* [Full changelog](https://github.com/openshift/csi-operator/compare/df0b8234c1233cabc0085a7d63a7fd81bf05fd5a...cc862109d5a24f4b246af6bd4b1404dbf4227be0)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9d4016701d355cd3a47f5ebe10f266d8971febc6)

* [OCPBUGS-34314](https://issues.redhat.com/browse/OCPBUGS-34314): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.17 [#19](https://github.com/openshift/aws-encryption-provider/pull/19)
* hack: display diff on verify-mod-tidy failure [#25](https://github.com/openshift/aws-encryption-provider/pull/25)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/003c3caa034c46701157f84989838793683e3fe4...9d4016701d355cd3a47f5ebe10f266d8971febc6)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)

* [OCPBUGS-45186](https://issues.redhat.com/browse/OCPBUGS-45186): fix Associate*IpAddress flag when launch EC2 [#118](https://github.com/openshift/machine-api-provider-aws/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7...b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/626ecd1c32f50953e84fd1cb499077d52fe53e43)

* [OCPBUGS-46039](https://issues.redhat.com/browse/OCPBUGS-46039): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#132](https://github.com/openshift/cloud-provider-azure/pull/132)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/b9204e2197b922ecd080fcbe112b4a09e18344db...626ecd1c32f50953e84fd1cb499077d52fe53e43)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)

* [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/eab1dcfcf4a5758aad6b50dcefe85c93b7bcce59...b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/f45dd3459184500d1967a89785298c7ecc3a655a)

* [OCPBUGS-50017](https://issues.redhat.com/browse/OCPBUGS-50017): dynamically setting the amount of fault domains [#127](https://github.com/openshift/machine-api-provider-azure/pull/127)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/d69a3e35d8cb0c9497eab723563f18d46f860bb8...f45dd3459184500d1967a89785298c7ecc3a655a)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/8754bf63984c6879e34abf8413e27e9811bf0655)

* [OCPBUGS-47049](https://issues.redhat.com/browse/OCPBUGS-47049): Bump x/net to 0.33.0 [#32](https://github.com/openshift/cluster-api-provider-metal3/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e6d2bd4f848a0137040e618c2df4eecce4caed7...8754bf63984c6879e34abf8413e27e9811bf0655)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/48ea1264d0c852f8f15c1efcfe543e3ac1a96aeb)

* [OCPBUGS-50846](https://issues.redhat.com/browse/OCPBUGS-50846): OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest [#9470](https://github.com/openshift/installer/pull/9470)
* [OCPBUGS-50876](https://issues.redhat.com/browse/OCPBUGS-50876): correct typo [#9484](https://github.com/openshift/installer/pull/9484)
* [OCPBUGS-49975](https://issues.redhat.com/browse/OCPBUGS-49975): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9445](https://github.com/openshift/installer/pull/9445)
* [OCPBUGS-48761](https://issues.redhat.com/browse/OCPBUGS-48761): Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 [#9448](https://github.com/openshift/installer/pull/9448)
* [OCPBUGS-49993](https://issues.redhat.com/browse/OCPBUGS-49993): Disable IP Forwarding for CAPG Machines [#9446](https://github.com/openshift/installer/pull/9446)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure: Update SecurityType passed in at Image creation [#9409](https://github.com/openshift/installer/pull/9409)
* [OCPBUGS-49362](https://issues.redhat.com/browse/OCPBUGS-49362): [Nutanix] Installation failed with timeout when uploading images to PC [#9406](https://github.com/openshift/installer/pull/9406)
* [OCPBUGS-48645](https://issues.redhat.com/browse/OCPBUGS-48645): azure: use separate /var to avoid growfs timeouts [#9381](https://github.com/openshift/installer/pull/9381)
* [OCPBUGS-45340](https://issues.redhat.com/browse/OCPBUGS-45340): move GCP zone filtering client-side [#9264](https://github.com/openshift/installer/pull/9264)
* [OCPBUGS-48257](https://issues.redhat.com/browse/OCPBUGS-48257): remove the types which failed by RHEL-59521 and add the new gpu vm type [#9354](https://github.com/openshift/installer/pull/9354)
* [OCPBUGS-45813](https://issues.redhat.com/browse/OCPBUGS-45813): Remove unused variable from ASH arm template 06_workers.json [#9285](https://github.com/openshift/installer/pull/9285)
* [OCPBUGS-48359](https://issues.redhat.com/browse/OCPBUGS-48359): Allow more time for Service Account Creation [#9362](https://github.com/openshift/installer/pull/9362)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): support additionalNTPSources in node-joiner tool [#9265](https://github.com/openshift/installer/pull/9265)
* [OCPBUGS-48119](https://issues.redhat.com/browse/OCPBUGS-48119): Always set AllowCrossTenantReplication parameter to false [#9346](https://github.com/openshift/installer/pull/9346)
* [OCPBUGS-46432](https://issues.redhat.com/browse/OCPBUGS-46432): Power VS: Create region-zone-sysType hierarchy [#9319](https://github.com/openshift/installer/pull/9319)
* [OCPBUGS-46360](https://issues.redhat.com/browse/OCPBUGS-46360): aws: add ec2:AllocateAddress perm requirement. [#9313](https://github.com/openshift/installer/pull/9313)
* no-jira: Collect bootstrap logs when control plane provisioning fails [#9308](https://github.com/openshift/installer/pull/9308)
* [OCPBUGS-45726](https://issues.redhat.com/browse/OCPBUGS-45726): IBMCloud: Add service overrides [#9267](https://github.com/openshift/installer/pull/9267)
* [OCPBUGS-42117](https://issues.redhat.com/browse/OCPBUGS-42117): Remove destroy search for regional target tcp proxies [#9025](https://github.com/openshift/installer/pull/9025)
* [OCPBUGS-45484](https://issues.redhat.com/browse/OCPBUGS-45484): PowerVS: Listen to machineNetwork [#9271](https://github.com/openshift/installer/pull/9271)
* [OCPBUGS-44848](https://issues.redhat.com/browse/OCPBUGS-44848): aws: user right perm for untagging BYO IAM profiles [#9228](https://github.com/openshift/installer/pull/9228)
* [OCPBUGS-45276](https://issues.redhat.com/browse/OCPBUGS-45276): Bump Azure Machine Timeout [#9257](https://github.com/openshift/installer/pull/9257)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9258](https://github.com/openshift/installer/pull/9258)
* [OCPBUGS-43047](https://issues.redhat.com/browse/OCPBUGS-43047): fix slice init length [#9089](https://github.com/openshift/installer/pull/9089)
* [OCPBUGS-43800](https://issues.redhat.com/browse/OCPBUGS-43800): pkg/asset/installconfig/azure: send full certifcate chain [#9140](https://github.com/openshift/installer/pull/9140)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9219](https://github.com/openshift/installer/pull/9219)
* [OCPBUGS-44611](https://issues.redhat.com/browse/OCPBUGS-44611): [release-4.17] capi/aws: set Node Port Service CIDR override [#9209](https://github.com/openshift/installer/pull/9209)
* [OCPBUGS-44230](https://issues.redhat.com/browse/OCPBUGS-44230): Add C4A instance types [#9181](https://github.com/openshift/installer/pull/9181)
* [OCPBUGS-44231](https://issues.redhat.com/browse/OCPBUGS-44231): [release-4.17]  capi/aws: bump provider for LB DNS lookup fix [#9179](https://github.com/openshift/installer/pull/9179)
* [OCPBUGS-44261](https://issues.redhat.com/browse/OCPBUGS-44261): Ensure rendezvousIP is checked against host IP [#9184](https://github.com/openshift/installer/pull/9184)
* [OCPBUGS-43972](https://issues.redhat.com/browse/OCPBUGS-43972): Cherrypick oci ccm fix to 4.17 [#9152](https://github.com/openshift/installer/pull/9152)
* [OCPBUGS-44247](https://issues.redhat.com/browse/OCPBUGS-44247): PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 [#9182](https://github.com/openshift/installer/pull/9182)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up v4.17 capability sets [#9013](https://github.com/openshift/installer/pull/9013)
* [OCPBUGS-44226](https://issues.redhat.com/browse/OCPBUGS-44226): PowerVS: Fix MissingSecurityGroupRules [#9175](https://github.com/openshift/installer/pull/9175)
* [OCPBUGS-44227](https://issues.redhat.com/browse/OCPBUGS-44227): PowerVS: Fix destroy persistent TG [#9176](https://github.com/openshift/installer/pull/9176)
* [OCPBUGS-44228](https://issues.redhat.com/browse/OCPBUGS-44228): PowerVS: Change CAPI verbosity level [#9177](https://github.com/openshift/installer/pull/9177)
* [OCPBUGS-43846](https://issues.redhat.com/browse/OCPBUGS-43846): add chrony.conf file when additional NTP sources are configured [#9142](https://github.com/openshift/installer/pull/9142)
* [OCPBUGS-43735](https://issues.redhat.com/browse/OCPBUGS-43735): Add C4 instance validation [#9130](https://github.com/openshift/installer/pull/9130)
* [OCPBUGS-43897](https://issues.redhat.com/browse/OCPBUGS-43897): Revendor assisted service external platform oci [#9147](https://github.com/openshift/installer/pull/9147)
* [OCPBUGS-43786](https://issues.redhat.com/browse/OCPBUGS-43786): Limit GCP API firewall rule for internal clusters [#9138](https://github.com/openshift/installer/pull/9138)
* [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112)
* [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091)
* [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096)
* [OCPBUGS-42716](https://issues.redhat.com/browse/OCPBUGS-42716): Update RHCOS 4.17 bootimage metadata to 417.94.202410090854-0 [#9092](https://github.com/openshift/installer/pull/9092)
* [OCPBUGS-42806](https://issues.redhat.com/browse/OCPBUGS-42806): gather: simplify service regex for analyze [#9079](https://github.com/openshift/installer/pull/9079)
* [OCPBUGS-42996](https://issues.redhat.com/browse/OCPBUGS-42996): Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS [#9086](https://github.com/openshift/installer/pull/9086)
* [OCPBUGS-42115](https://issues.redhat.com/browse/OCPBUGS-42115): Add validation for gcp disk and instance types [#9023](https://github.com/openshift/installer/pull/9023)
* [OCPBUGS-42842](https://issues.redhat.com/browse/OCPBUGS-42842): add new tested azure instance types detected during QE 4.17 full function test [#9080](https://github.com/openshift/installer/pull/9080)
* [OCPBUGS-41812](https://issues.redhat.com/browse/OCPBUGS-41812): Validate MTU for custom network [#9084](https://github.com/openshift/installer/pull/9084)
* [OCPBUGS-42794](https://issues.redhat.com/browse/OCPBUGS-42794): PowerVS: Add support for persistent Transit Gateways [#9078](https://github.com/openshift/installer/pull/9078)
* [OCPBUGS-42699](https://issues.redhat.com/browse/OCPBUGS-42699): machines: don't sort mpool zones [#9065](https://github.com/openshift/installer/pull/9065)
* [OCPBUGS-42483](https://issues.redhat.com/browse/OCPBUGS-42483): PowerVS: update capi ibmcloud c6bcd313 for 4.17 [#9054](https://github.com/openshift/installer/pull/9054)
* [OCPBUGS-39414](https://issues.redhat.com/browse/OCPBUGS-39414): OpenStack: Install CI dependencies from rpm [#8994](https://github.com/openshift/installer/pull/8994)
* [OCPBUGS-42142](https://issues.redhat.com/browse/OCPBUGS-42142): Skip private managed zone creation for xpn installs [#9033](https://github.com/openshift/installer/pull/9033)
* [OCPBUGS-42183](https://issues.redhat.com/browse/OCPBUGS-42183): Add GCP N4 Machine Series to tested instances for OCP [#9041](https://github.com/openshift/installer/pull/9041)
* [OCPBUGS-42126](https://issues.redhat.com/browse/OCPBUGS-42126): add tested IBMCloud instance types in 4.17 test [#9030](https://github.com/openshift/installer/pull/9030)
* [OCPBUGS-42118](https://issues.redhat.com/browse/OCPBUGS-42118): Set default release image to 4.17 [#9026](https://github.com/openshift/installer/pull/9026)
* [OCPBUGS-42116](https://issues.redhat.com/browse/OCPBUGS-42116): Remove bindings for XPN installs [#9024](https://github.com/openshift/installer/pull/9024)
* [OCPBUGS-39409](https://issues.redhat.com/browse/OCPBUGS-39409): Fix IPv6 security group rule for schedulable master [#8970](https://github.com/openshift/installer/pull/8970)
* [OCPBUGS-41622](https://issues.redhat.com/browse/OCPBUGS-41622): update RHCOS 4.17 bootimage metadata to 417.94.202409120353-0 [#9019](https://github.com/openshift/installer/pull/9019)
* [OCPBUGS-42051](https://issues.redhat.com/browse/OCPBUGS-42051): Fix integration tests [#9018](https://github.com/openshift/installer/pull/9018)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk [#9007](https://github.com/openshift/installer/pull/9007)
* [OCPBUGS-39286](https://issues.redhat.com/browse/OCPBUGS-39286): Fix var_files syntax to work on older version of ansible [#8933](https://github.com/openshift/installer/pull/8933)
* [OCPBUGS-41896](https://issues.redhat.com/browse/OCPBUGS-41896): Add AWS c7g,m7g,r8g to tested instance types [#9005](https://github.com/openshift/installer/pull/9005)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Update publicAccess for Blob Containers [#9006](https://github.com/openshift/installer/pull/9006)
* [OCPBUGS-41702](https://issues.redhat.com/browse/OCPBUGS-41702): aws: bump capa to fix EIP leak on bootstrap when BYOIP [#8991](https://github.com/openshift/installer/pull/8991)
* [Full changelog](https://github.com/openshift/installer/compare/dfd4c085a7210e49111fa8d6747016d78f98ecf2...48ea1264d0c852f8f15c1efcfe543e3ac1a96aeb)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/6e7aa77e5e144adc97b498ada5a6ab400f97ca39)

* [OCPBUGS-46646](https://issues.redhat.com/browse/OCPBUGS-46646): Bump x/net to 0.33.0 [#225](https://github.com/openshift/cluster-api-provider-baremetal/pull/225)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/2549061c570a7ff152c66322978bb142647b8b4e...6e7aa77e5e144adc97b498ada5a6ab400f97ca39)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c9a636279c4328d97d3d29bcea207f5f7279a4c8)

* [OCPBUGS-49701](https://issues.redhat.com/browse/OCPBUGS-49701): Handle HFC for non-redfish HW [#395](https://github.com/openshift/baremetal-operator/pull/395)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/94748225f29f3a7ef7dfe5844219c3856a421903...c9a636279c4328d97d3d29bcea207f5f7279a4c8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/8956d91bd982929d780580b8e2fe5f5351dad881)

* [OCPBUGS-48766](https://issues.redhat.com/browse/OCPBUGS-48766): Extend haproxy-monitor fall time [#340](https://github.com/openshift/baremetal-runtimecfg/pull/340)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/e1f3e0d105247d8a53fafe53de33a4ce92b88c41...8956d91bd982929d780580b8e2fe5f5351dad881)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1b0bf0849072a4d9ef2e79c1ed80a60b4b4c1bba)

* [OCPBUGS-49605](https://issues.redhat.com/browse/OCPBUGS-49605): Address `github.com/docker/docker` CVE [#1968](https://github.com/openshift/oc/pull/1968)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): additional rbac policy rules [#1937](https://github.com/openshift/oc/pull/1937)
* [OCPBUGS-45517](https://issues.redhat.com/browse/OCPBUGS-45517): add retry in case of image pull error [#1940](https://github.com/openshift/oc/pull/1940)
* [OCPBUGS-44508](https://issues.redhat.com/browse/OCPBUGS-44508): Show node-joiner container logs when error occurs [#1912](https://github.com/openshift/oc/pull/1912)
* [OCPBUGS-44830](https://issues.redhat.com/browse/OCPBUGS-44830): Fix newapp unit test failure by using different image [#1913](https://github.com/openshift/oc/pull/1913)
* [OCPBUGS-43696](https://issues.redhat.com/browse/OCPBUGS-43696): Bump k8s dependencies to 1.30.5 [#1902](https://github.com/openshift/oc/pull/1902)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876)
* [OCPBUGS-42176](https://issues.redhat.com/browse/OCPBUGS-42176): Fix copy artifacts for all CPU architectures [#1880](https://github.com/openshift/oc/pull/1880)
* [OCPBUGS-42721](https://issues.redhat.com/browse/OCPBUGS-42721): Update push targets of digest with new appended tags [#1892](https://github.com/openshift/oc/pull/1892)
* [OCPBUGS-42580](https://issues.redhat.com/browse/OCPBUGS-42580): fix outputname flag for node-image create command [#1888](https://github.com/openshift/oc/pull/1888)
* [OCPBUGS-42164](https://issues.redhat.com/browse/OCPBUGS-42164): Check cast result in adm prune deployments to prevent panic [#1879](https://github.com/openshift/oc/pull/1879)
* [Full changelog](https://github.com/openshift/oc/compare/bc58b3a9c70cee7b03d1943e95b48ced9357711b...1b0bf0849072a4d9ef2e79c1ed80a60b4b4c1bba)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a046a6fe8bdedd2744946d5eeffffd13327e6ac6)

* [OCPBUGS-47071](https://issues.redhat.com/browse/OCPBUGS-47071): golang.org/x/net v0.33.0 [#804](https://github.com/openshift/cloud-credential-operator/pull/804)
* [OCPBUGS-45938](https://issues.redhat.com/browse/OCPBUGS-45938): Add AWS region to aws-pod-identity-webhook [#799](https://github.com/openshift/cloud-credential-operator/pull/799)
* [OCPBUGS-45006](https://issues.redhat.com/browse/OCPBUGS-45006): Add retry to ccoctl gcp create functions [#793](https://github.com/openshift/cloud-credential-operator/pull/793)
* [OCPBUGS-45001](https://issues.redhat.com/browse/OCPBUGS-45001): github.com/golang-jwt/jwt/v4 v4.5.1 [#787](https://github.com/openshift/cloud-credential-operator/pull/787)
* [OCPBUGS-44123](https://issues.redhat.com/browse/OCPBUGS-44123): Add GCP pod identity webhook [#776](https://github.com/openshift/cloud-credential-operator/pull/776)
* [OCPBUGS-43644](https://issues.redhat.com/browse/OCPBUGS-43644): Only attempt timed token credentials on supported platforms. [#773](https://github.com/openshift/cloud-credential-operator/pull/773)
* [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7...a046a6fe8bdedd2744946d5eeffffd13327e6ac6)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/246d3726b1c541ef2bbe6def95783bee60b12a58)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#724](https://github.com/openshift/cluster-authentication-operator/pull/724)
* [OCPBUGS-42784](https://issues.redhat.com/browse/OCPBUGS-42784): manifests should not use APIs that are removed in upcoming releases [#712](https://github.com/openshift/cluster-authentication-operator/pull/712)
* [OCPBUGS-42545](https://issues.redhat.com/browse/OCPBUGS-42545): when no type is specified, don't make illegal condition [#703](https://github.com/openshift/cluster-authentication-operator/pull/703)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8e8a31d802182c00252221e8233f2d6df609f363...246d3726b1c541ef2bbe6def95783bee60b12a58)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/6c24c11494fcf92407d2b34b0912250170e8d259)

* [OCPBUGS-48606](https://issues.redhat.com/browse/OCPBUGS-48606): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#337](https://github.com/openshift/kubernetes-autoscaler/pull/337)
* [OCPBUGS-45147](https://issues.redhat.com/browse/OCPBUGS-45147): [release-4.17] VPA: Update OWNERS file [#324](https://github.com/openshift/kubernetes-autoscaler/pull/324)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9a013d5c1fb2b1a6332d371f882a0cbfee13a0d4...6c24c11494fcf92407d2b34b0912250170e8d259)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/ea4a88786cf9b237dc446e01fdacd6fd65b73144)

* [OCPBUGS-45929](https://issues.redhat.com/browse/OCPBUGS-45929): set max soft bulk taint count to zero [#337](https://github.com/openshift/cluster-autoscaler-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99b23ded9fb70aa29622d0f6c4254e54c51d2813...ea4a88786cf9b237dc446e01fdacd6fd65b73144)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)

* [OCPBUGS-41926](https://issues.redhat.com/browse/OCPBUGS-41926): SCC-pinning for metal3-baremetal-operator [#444](https://github.com/openshift/cluster-baremetal-operator/pull/444)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c09fb7310873c657a15c8541f7cc20cccdbc4ede...2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/95dd9129fa44410a0103fe087d13e27dddecab19)

* [OCPBUGS-34034](https://issues.redhat.com/browse/OCPBUGS-34034): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.17 [#108](https://github.com/openshift/cluster-bootstrap/pull/108)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/27bfb59fd0ff399224ee673869b8875ef10f1962...95dd9129fa44410a0103fe087d13e27dddecab19)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)

* [OCPBUGS-48493](https://issues.redhat.com/browse/OCPBUGS-48493): fix: always update clusteroperator status versions when differing [#250](https://github.com/openshift/cluster-capi-operator/pull/250)
* [OCPBUGS-41576](https://issues.redhat.com/browse/OCPBUGS-41576): Use CAPO v0.10 and API v1beta1 [#205](https://github.com/openshift/cluster-capi-operator/pull/205)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3f893aea1fad5fe124e888453ec0c67c0186da11...6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c)

* [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371)
* [OCPBUGS-41941](https://issues.redhat.com/browse/OCPBUGS-41941): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#365](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/94da1a47269dbacf4e841ab8a3f0a0f3db2e103e...32fd83999e7eae9941abe7da915bacae1d50e49c)


### [cluster-config-api](https://github.com/openshift/api/tree/0cfc958f642b11b1c2020d0da9eb96daff8fb588)

* [OCPBUGS-39130](https://issues.redhat.com/browse/OCPBUGS-39130): Added checks to prevent vCenters from changing after install past 1 vCenter [#2014](https://github.com/openshift/api/pull/2014)
* [Full changelog](https://github.com/openshift/api/compare/0a88001628266522c84e6c6c25ed5a44aced6d8b...0cfc958f642b11b1c2020d0da9eb96daff8fb588)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/f7e01c2f91628b25d1578c0a752f9b55c4233625)

* [OCPBUGS-44047](https://issues.redhat.com/browse/OCPBUGS-44047): relax validation on delete and if failureDomains not configured [#330](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/330)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/a52da80dbb374fcb91b610cc2688cc863615f97d...f7e01c2f91628b25d1578c0a752f9b55c4233625)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/975fc013a240a003f23e51b9dcd9bfcdb112e801)

* [OCPBUGS-38574](https://issues.redhat.com/browse/OCPBUGS-38574): use pooled client for etcd single member health checks [#1327](https://github.com/openshift/cluster-etcd-operator/pull/1327)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/8f04f689ce0dd513660e87ce4c12c7f0bf7747eb...975fc013a240a003f23e51b9dcd9bfcdb112e801)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/46b5602933182b749b36727d97f1ee9f9d9ee15e)

* [OCPBUGS-43564](https://issues.redhat.com/browse/OCPBUGS-43564): fix proxy config and leader election test flakes [#1144](https://github.com/openshift/cluster-image-registry-operator/pull/1144)
* [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139)
* [OCPBUGS-42812](https://issues.redhat.com/browse/OCPBUGS-42812): azureclient: stop validating credentials when creating the client [#1130](https://github.com/openshift/cluster-image-registry-operator/pull/1130)
* [OCPBUGS-42394](https://issues.redhat.com/browse/OCPBUGS-42394): pkg/storage/azure: use cluster-api tag key to discover vnet [#1125](https://github.com/openshift/cluster-image-registry-operator/pull/1125)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1124](https://github.com/openshift/cluster-image-registry-operator/pull/1124)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/402a511b2d1cbb099f798075ef036180775e95e0...46b5602933182b749b36727d97f1ee9f9d9ee15e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)

* [OCPBUGS-50516](https://issues.redhat.com/browse/OCPBUGS-50516): Increase waitForFallbackDegradedConditionTimeout [#1803](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1803)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#1758](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1758)
* [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/937f8a77e3274c3ef8907424f4d3294ef642642e...4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/aed5f6c74a0e174901709f18eecad6573cd80784)

* [OCPBUGS-42612](https://issues.redhat.com/browse/OCPBUGS-42612): Sync Release 4.17 with UPSTREAM [#48](https://github.com/openshift/cluster-api-operator/pull/48)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b90945e939eb726ffd42a746add7d1e945df5128...aed5f6c74a0e174901709f18eecad6573cd80784)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/ab40b61142a30f21eec8301b2e98f2fafb25164b)

* [OCPBUGS-46593](https://issues.redhat.com/browse/OCPBUGS-46593): "gracefully" shutdown KSVM pod. [#123](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/123)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27...ab40b61142a30f21eec8301b2e98f2fafb25164b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)

* [OCPBUGS-48155](https://issues.redhat.com/browse/OCPBUGS-48155): Fix race condition in CO status controller test [#266](https://github.com/openshift/cluster-machine-approver/pull/266)
* [OCPBUGS-46429](https://issues.redhat.com/browse/OCPBUGS-46429): Filter CSRs by signerName [#261](https://github.com/openshift/cluster-machine-approver/pull/261)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Ensure trailing dots on DNS names do not block serving cert auth [#256](https://github.com/openshift/cluster-machine-approver/pull/256)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Client internal DNS checks should ignore trailing dot [#250](https://github.com/openshift/cluster-machine-approver/pull/250)
* [OCPBUGS-43312](https://issues.redhat.com/browse/OCPBUGS-43312): Client internal DNS checks should be case insensitive [#242](https://github.com/openshift/cluster-machine-approver/pull/242)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d29c16b2167bdf84f6f4b8fe60517182580e3a18...acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ff3a4f0218f4985874f2ab872f6f6f440a38e17d)

* [OCPBUGS-44971](https://issues.redhat.com/browse/OCPBUGS-44971): Add new metrics for OpenShift logging telemetry [#2526](https://github.com/openshift/cluster-monitoring-operator/pull/2526)
* [OCPBUGS-44003](https://issues.redhat.com/browse/OCPBUGS-44003): fix(monitoring-plugin): disable emitting nginx version on error pages [#2511](https://github.com/openshift/cluster-monitoring-operator/pull/2511)
* [OCPBUGS-43690](https://issues.redhat.com/browse/OCPBUGS-43690): chore: introduce a config parsing check via a strict unmarshaller for… [#2494](https://github.com/openshift/cluster-monitoring-operator/pull/2494)
* [OCPBUGS-43788](https://issues.redhat.com/browse/OCPBUGS-43788): Add runbook url for TelemeterClientFailures [#2507](https://github.com/openshift/cluster-monitoring-operator/pull/2507)
* [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501)
* [OCPBUGS-41341](https://issues.redhat.com/browse/OCPBUGS-41341): disable user-defined monitoring per object [#2458](https://github.com/openshift/cluster-monitoring-operator/pull/2458)
* [OCPBUGS-41908](https://issues.redhat.com/browse/OCPBUGS-41908): filter alerts sent to Telemeter [#2470](https://github.com/openshift/cluster-monitoring-operator/pull/2470)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9692e6e3e0595748c9c9f5ccf74045175043728f...ff3a4f0218f4985874f2ab872f6f6f440a38e17d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b0ce1c3b34921ec55bbb7686baafc43b20e7d1b3)

* : OCPBUGS-44863: Add nodeslicepool [#2574](https://github.com/openshift/cluster-network-operator/pull/2574)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807): ovn-k, cudn: Add missing permissions to ovnkube-node [#2575](https://github.com/openshift/cluster-network-operator/pull/2575)
* [OCPBUGS-43714](https://issues.redhat.com/browse/OCPBUGS-43714): Skip including default crypto policies to avoid authby issue [#2597](https://github.com/openshift/cluster-network-operator/pull/2597)
* [OCPBUGS-46146](https://issues.redhat.com/browse/OCPBUGS-46146): Remove ip xfrm state when IPsec is disabled [#2594](https://github.com/openshift/cluster-network-operator/pull/2594)
* [OCPBUGS-44415](https://issues.redhat.com/browse/OCPBUGS-44415): Pass transit_switch_subnet options in ovnkube-node pod [#2561](https://github.com/openshift/cluster-network-operator/pull/2561)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): OVN-Kubernetes node RBAC tightening [#2568](https://github.com/openshift/cluster-network-operator/pull/2568)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5472](https://issues.redhat.com/browse/SDN-5472): bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC [#2566](https://github.com/openshift/cluster-network-operator/pull/2566)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): ovn-k, udn: Update UserDefinedNetwork CRD [#2551](https://github.com/openshift/cluster-network-operator/pull/2551)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): Adds UDN list/watch to ovnknode rbac [#2540](https://github.com/openshift/cluster-network-operator/pull/2540)
* [OCPBUGS-44779](https://issues.redhat.com/browse/OCPBUGS-44779), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2564](https://github.com/openshift/cluster-network-operator/pull/2564)
* [OCPBUGS-44330](https://issues.redhat.com/browse/OCPBUGS-44330): Add controlplane cli image envar for use with hypershift [#2542](https://github.com/openshift/cluster-network-operator/pull/2542)
* [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536)
* [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): rebase openshift/api for openshift-sdn removal [4.17] [#2477](https://github.com/openshift/cluster-network-operator/pull/2477)
* [OCPBUGS-39121](https://issues.redhat.com/browse/OCPBUGS-39121): Live migration: report network overlap via live_migration_blocked metric [#2483](https://github.com/openshift/cluster-network-operator/pull/2483)
* [OCPBUGS-42260](https://issues.redhat.com/browse/OCPBUGS-42260): Configure narrowing=yes for IPsec connections [#2510](https://github.com/openshift/cluster-network-operator/pull/2510)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a3188633549ddd7241484d733f3282bad959482b...b0ce1c3b34921ec55bbb7686baafc43b20e7d1b3)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b6712f369eddb39fa68021ffb3d31fed7e5663a6)

* use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) [#1290](https://github.com/openshift/cluster-node-tuning-operator/pull/1290)
* Add missing Polarion test case id (#1288) [#1288](https://github.com/openshift/cluster-node-tuning-operator/pull/1288)
* e2e: tuned degraded test fix (#1259) [#1259](https://github.com/openshift/cluster-node-tuning-operator/pull/1259)
* [OCPBUGS-48213](https://issues.redhat.com/browse/OCPBUGS-48213): [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) [#1277](https://github.com/openshift/cluster-node-tuning-operator/pull/1277)
* PPC: correct EnableHardwareTuning flag value (#1271) [#1271](https://github.com/openshift/cluster-node-tuning-operator/pull/1271)
* e2e: add irdma to module_blacklist kernel args (#1266) [#1266](https://github.com/openshift/cluster-node-tuning-operator/pull/1266)
* [OCPBUGS-45964](https://issues.redhat.com/browse/OCPBUGS-45964): performanceprofile cpuset input validation (#1247) [#1247](https://github.com/openshift/cluster-node-tuning-operator/pull/1247)
* [OCPBUGS-43664](https://issues.redhat.com/browse/OCPBUGS-43664): Add vendor and architecture specific tuning options (#1191) [#1191](https://github.com/openshift/cluster-node-tuning-operator/pull/1191)
* [OCPBUGS-44644](https://issues.redhat.com/browse/OCPBUGS-44644): cmd: PPC: support tolerating heterogeneous core IDs (#1252) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* e2e: wait for node inspector deletion (#1205) [#1205](https://github.com/openshift/cluster-node-tuning-operator/pull/1205)
* Fixing empty tuned submodule when using Dockerfile (#1211) [#1211](https://github.com/openshift/cluster-node-tuning-operator/pull/1211)
* E2E: fix modify node selector to use lowercase (#1186) [#1186](https://github.com/openshift/cluster-node-tuning-operator/pull/1186)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1201) [#1201](https://github.com/openshift/cluster-node-tuning-operator/pull/1201)
* Make ocp-tuned-one-shot.service restart on-failure (#1187) [#1187](https://github.com/openshift/cluster-node-tuning-operator/pull/1187)
* Fix context deadlines in ExecCommandOnPod() (#1189) [#1189](https://github.com/openshift/cluster-node-tuning-operator/pull/1189)
* [OCPBUGS-43566](https://issues.redhat.com/browse/OCPBUGS-43566): CI: unblock (#1188) [#1188](https://github.com/openshift/cluster-node-tuning-operator/pull/1188)
* E2E: wait for ovs services affinity to reset after deployment deletion (#1160) [#1160](https://github.com/openshift/cluster-node-tuning-operator/pull/1160)
* [OCPBUGS-38721](https://issues.redhat.com/browse/OCPBUGS-38721): tuned: distinguish deferred updates (#1149) [#1149](https://github.com/openshift/cluster-node-tuning-operator/pull/1149)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1145) [#1145](https://github.com/openshift/cluster-node-tuning-operator/pull/1145)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8da7d69a2649a6a0a4faab781495dad92d99e109...b6712f369eddb39fa68021ffb3d31fed7e5663a6)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#599](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/599)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/56a90aeec7f94ddfe1be5365fe81ea3e5e52bea0...2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/b05a249d6919978217aefa7060951af078eac931)

* [OCPBUGS-47770](https://issues.redhat.com/browse/OCPBUGS-47770): Add team members to the OWNERS file [#375](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/375)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2b962c71d5b3ac179898dc1ece6a98de0b33cd70...b05a249d6919978217aefa7060951af078eac931)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0e64446ce67a05da30f603081d35f6b5e5ef79d4)

* [OCPBUGS-48786](https://issues.redhat.com/browse/OCPBUGS-48786): add shannon and aroyoredhat as owners [#595](https://github.com/openshift/cluster-samples-operator/pull/595)
* [OCPBUGS-39120](https://issues.redhat.com/browse/OCPBUGS-39120): Sync the non-OKD assets from master to release-4.17 [#577](https://github.com/openshift/cluster-samples-operator/pull/577)
* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#575](https://github.com/openshift/cluster-samples-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bef583cc67368d62316961b506f731af8810ecc7...0e64446ce67a05da30f603081d35f6b5e5ef79d4)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/5683ea22810815595761ff9e5309c656a7392125)

* [OCPBUGS-44997](https://issues.redhat.com/browse/OCPBUGS-44997): Fix PodStartupStorageOperationsFailing alert [#543](https://github.com/openshift/cluster-storage-operator/pull/543)
* [OCPBUGS-43794](https://issues.redhat.com/browse/OCPBUGS-43794): add ability to control kube rbac proxy container image on controlplane [#529](https://github.com/openshift/cluster-storage-operator/pull/529)
* [OCPBUGS-43112](https://issues.redhat.com/browse/OCPBUGS-43112): assets: shared-resource: hypershift: add pull-secret to operator SA [#520](https://github.com/openshift/cluster-storage-operator/pull/520)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/eba39ffecf5a7a55a46443c85fd0ecd9ccc0453f...5683ea22810815595761ff9e5309c656a7392125)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/bc60dbd5f73b9f0548f0bb3aef0468a630362dce)

* [OCPBUGS-39558](https://issues.redhat.com/browse/OCPBUGS-39558): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1114](https://github.com/openshift/cluster-version-operator/pull/1114)
* [OCPBUGS-45328](https://issues.redhat.com/browse/OCPBUGS-45328): deps: bump golang.org/x/net to 0.31.0 [#1117](https://github.com/openshift/cluster-version-operator/pull/1117)
* [OCPBUGS-43586](https://issues.redhat.com/browse/OCPBUGS-43586): Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z' retarget [#1095](https://github.com/openshift/cluster-version-operator/pull/1095)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability sets [#1087](https://github.com/openshift/cluster-version-operator/pull/1087)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ce6c0b89e14e4d26bc2918f160847fd7e9aeb083...bc60dbd5f73b9f0548f0bb3aef0468a630362dce)


### [console](https://github.com/openshift/console/tree/6f7e5c9c98b518e66d38762e7d0fa3f75019beb5)

* [OCPBUGS-39602](https://issues.redhat.com/browse/OCPBUGS-39602): Set default build option as BUILDS for Builder Image sample [#14241](https://github.com/openshift/console/pull/14241)
* [OCPBUGS-45740](https://issues.redhat.com/browse/OCPBUGS-45740): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14595](https://github.com/openshift/console/pull/14595)
* [OCPBUGS-45625](https://issues.redhat.com/browse/OCPBUGS-45625): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14589](https://github.com/openshift/console/pull/14589)
* [OCPBUGS-41596](https://issues.redhat.com/browse/OCPBUGS-41596): No need to supply 'User workload notifications' option on 'User Preference' page for normal user [#14265](https://github.com/openshift/console/pull/14265)
* [OCPBUGS-44220](https://issues.redhat.com/browse/OCPBUGS-44220): disable flaking and change pre-condition test for knative e2e [#14467](https://github.com/openshift/console/pull/14467)
* [OCPBUGS-43751](https://issues.redhat.com/browse/OCPBUGS-43751): Added token to proxy header [#14430](https://github.com/openshift/console/pull/14430)
* [OCPBUGS-48161](https://issues.redhat.com/browse/OCPBUGS-48161): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14667](https://github.com/openshift/console/pull/14667)
* [OCPBUGS-48227](https://issues.redhat.com/browse/OCPBUGS-48227): fix navigation from non-General User Preference tab to… [#14674](https://github.com/openshift/console/pull/14674)
* [OCPBUGS-41672](https://issues.redhat.com/browse/OCPBUGS-41672): Update vendor imports to include all PatternFly components [#14272](https://github.com/openshift/console/pull/14272)
* [OCPBUGS-46344](https://issues.redhat.com/browse/OCPBUGS-46344): OCP web console show pod status as Init:0/1 after using Native sidecars [#14616](https://github.com/openshift/console/pull/14616)
* [OCPBUGS-47497](https://issues.redhat.com/browse/OCPBUGS-47497): Getting `Oh no, something went wrong` error when trying to install operator. [#14645](https://github.com/openshift/console/pull/14645)
* [OCPBUGS-43673](https://issues.redhat.com/browse/OCPBUGS-43673): Disable GQL introspection [#14640](https://github.com/openshift/console/pull/14640)
* [OCPBUGS-45949](https://issues.redhat.com/browse/OCPBUGS-45949): ReRun of Resolver based PipelineRuns fails from UI [#14605](https://github.com/openshift/console/pull/14605)
* [OCPBUGS-45954](https://issues.redhat.com/browse/OCPBUGS-45954): Fixed capitalization in OpenShift Lightspeed [#14607](https://github.com/openshift/console/pull/14607)
* [OCPBUGS-45948](https://issues.redhat.com/browse/OCPBUGS-45948): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14604](https://github.com/openshift/console/pull/14604)
* [OCPBUGS-45667](https://issues.redhat.com/browse/OCPBUGS-45667): Do not pass CSV name to operand list page when an exen… [#14591](https://github.com/openshift/console/pull/14591)
* [OCPBUGS-46000](https://issues.redhat.com/browse/OCPBUGS-46000): The description and name for GCP Pool ID is not consist [#14611](https://github.com/openshift/console/pull/14611)
* [OCPBUGS-42558](https://issues.redhat.com/browse/OCPBUGS-42558): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14344](https://github.com/openshift/console/pull/14344)
* [OCPBUGS-44656](https://issues.redhat.com/browse/OCPBUGS-44656): update ConditionalUpdates release type [#14505](https://github.com/openshift/console/pull/14505)
* [OCPBUGS-43888](https://issues.redhat.com/browse/OCPBUGS-43888): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14444](https://github.com/openshift/console/pull/14444)
* [OCPBUGS-43441](https://issues.redhat.com/browse/OCPBUGS-43441): fix table combination [#14546](https://github.com/openshift/console/pull/14546)
* [OCPBUGS-44169](https://issues.redhat.com/browse/OCPBUGS-44169): use TaskRuns results.tekton.dev/record annotation to get the logs [#14538](https://github.com/openshift/console/pull/14538)
* [OCPBUGS-44873](https://issues.redhat.com/browse/OCPBUGS-44873): Unable to remove finally tasks in pipeline builder mode [#14527](https://github.com/openshift/console/pull/14527)
* [OCPBUGS-42791](https://issues.redhat.com/browse/OCPBUGS-42791): Add missing pipelines plugin name to known plugins [#14377](https://github.com/openshift/console/pull/14377)
* [OCPBUGS-44699](https://issues.redhat.com/browse/OCPBUGS-44699): Add multiline support to template instantiation [#14508](https://github.com/openshift/console/pull/14508)
* [OCPBUGS-44183](https://issues.redhat.com/browse/OCPBUGS-44183): Remove ClusterTask dependency in console from Pipelines 1.17 [#14512](https://github.com/openshift/console/pull/14512)
* [OCPBUGS-44764](https://issues.redhat.com/browse/OCPBUGS-44764): Add IBM Block Storage CSI driver support for RWX [#14517](https://github.com/openshift/console/pull/14517)
* [OCPBUGS-43795](https://issues.redhat.com/browse/OCPBUGS-43795): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14433](https://github.com/openshift/console/pull/14433)
* [OCPBUGS-44722](https://issues.redhat.com/browse/OCPBUGS-44722): include external labels so silenced alerts not displayed in notifications [#14511](https://github.com/openshift/console/pull/14511)
* [OCPBUGS-44358](https://issues.redhat.com/browse/OCPBUGS-44358): BuildConfig form breaks on manually enter the Git URL [#14478](https://github.com/openshift/console/pull/14478)
* [OCPBUGS-43073](https://issues.redhat.com/browse/OCPBUGS-43073): Telemetry userPreference results in empty nodes output to the DOM [#14392](https://github.com/openshift/console/pull/14392)
* [OCPBUGS-44587](https://issues.redhat.com/browse/OCPBUGS-44587): Start last run do not work in buildConfig details page [#14499](https://github.com/openshift/console/pull/14499)
* [OCPBUGS-44586](https://issues.redhat.com/browse/OCPBUGS-44586): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14498](https://github.com/openshift/console/pull/14498)
* [OCPBUGS-44450](https://issues.redhat.com/browse/OCPBUGS-44450): Don't request user settings configmap if no user has been loaded. [#14482](https://github.com/openshift/console/pull/14482)
* [OCPBUGS-44479](https://issues.redhat.com/browse/OCPBUGS-44479): conditionally display MachineConfig details page Confi… [#14488](https://github.com/openshift/console/pull/14488)
* [OCPBUGS-43878](https://issues.redhat.com/browse/OCPBUGS-43878): Add flag to hide the pipelines-plugin pipeline builder extensions [#14457](https://github.com/openshift/console/pull/14457)
* [OCPBUGS-42824](https://issues.redhat.com/browse/OCPBUGS-42824): remove axios as it is no longer in use [#14381](https://github.com/openshift/console/pull/14381)
* [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402)
* [OCPBUGS-43009](https://issues.redhat.com/browse/OCPBUGS-43009): Project is "Undefined" on "VolumeSnapshot" create page [#14389](https://github.com/openshift/console/pull/14389)
* [OCPBUGS-42607](https://issues.redhat.com/browse/OCPBUGS-42607): add role exclusion to avoid unexpected triggering the namespace menu [#14351](https://github.com/openshift/console/pull/14351)
* [OCPBUGS-42606](https://issues.redhat.com/browse/OCPBUGS-42606): make createdBy mandatory and auto fill with the current user [#14352](https://github.com/openshift/console/pull/14352)
* [OCPBUGS-42585](https://issues.redhat.com/browse/OCPBUGS-42585): Red Hat Camel K Operator installation via cli [#14346](https://github.com/openshift/console/pull/14346)
* [OCPBUGS-42299](https://issues.redhat.com/browse/OCPBUGS-42299): Increase login flow state paramater length/entropy [#14318](https://github.com/openshift/console/pull/14318)
* [OCPBUGS-42391](https://issues.redhat.com/browse/OCPBUGS-42391): change "Partial cluster update" to "Control plane onl… [#14323](https://github.com/openshift/console/pull/14323)
* [OCPBUGS-42380](https://issues.redhat.com/browse/OCPBUGS-42380): Allow operators to enable monitoring by default [#14316](https://github.com/openshift/console/pull/14316)
* [OCPBUGS-42060](https://issues.redhat.com/browse/OCPBUGS-42060): Console crashes when ssh is selected in add secret for starting a pipeline run [#14301](https://github.com/openshift/console/pull/14301)
* [OCPBUGS-42223](https://issues.redhat.com/browse/OCPBUGS-42223): restore Spotlight removal on next click [#14314](https://github.com/openshift/console/pull/14314)
* [OCPBUGS-39181](https://issues.redhat.com/browse/OCPBUGS-39181): add Create button to Console plugins tab [#14220](https://github.com/openshift/console/pull/14220)
* [OCPBUGS-39091](https://issues.redhat.com/browse/OCPBUGS-39091): update Events ChipGroup to use integrated close [#14211](https://github.com/openshift/console/pull/14211)
* [OCPBUGS-38563](https://issues.redhat.com/browse/OCPBUGS-38563): do not directly mutate links in useMemo [#14159](https://github.com/openshift/console/pull/14159)
* [OCPBUGS-41685](https://issues.redhat.com/browse/OCPBUGS-41685): Topology screen crashes when completed pod is selected [#14276](https://github.com/openshift/console/pull/14276)
* [OCPBUGS-41482](https://issues.redhat.com/browse/OCPBUGS-41482): Unit Tests for the new Ask Lightspeed Button [#14249](https://github.com/openshift/console/pull/14249)
* [OCPBUGS-39601](https://issues.redhat.com/browse/OCPBUGS-39601): Console user settings resources misses ownerRef, removing a user results in remaining data [#14240](https://github.com/openshift/console/pull/14240)
* [Full changelog](https://github.com/openshift/console/compare/5bbc956f78ecd2872c9630c15b9eb192c97ca80b...6f7e5c9c98b518e66d38762e7d0fa3f75019beb5)


### [console-operator](https://github.com/openshift/console-operator/tree/253854e7e529fb42e90b71038eff4aabf8f31cf7)

* [OCPBUGS-45302](https://issues.redhat.com/browse/OCPBUGS-45302): console/status: set initial value of Message field [#943](https://github.com/openshift/console-operator/pull/943)
* [OCPBUGS-46390](https://issues.redhat.com/browse/OCPBUGS-46390): Dont disable console when authConfig type is set to None [#951](https://github.com/openshift/console-operator/pull/951)
* [Full changelog](https://github.com/openshift/console-operator/compare/f41009e8511cf5a042ca81d18e44137b7d11ba05...253854e7e529fb42e90b71038eff4aabf8f31cf7)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/52264d6c73dd33d413263969b0c7f6ee795667d3)

* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#314](https://github.com/openshift/cloud-provider-openstack/pull/314)
* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#302](https://github.com/openshift/cloud-provider-openstack/pull/302)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/a13ed564f36bd295b53afde59f4ac90a92cb75b3...52264d6c73dd33d413263969b0c7f6ee795667d3)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)

* [OCPBUGS-38457](https://issues.redhat.com/browse/OCPBUGS-38457): Add missing healthchecks [#240](https://github.com/openshift/csi-driver-manila-operator/pull/240)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/34052f2570cd39144f7ba9ec2e382644e81dcc07...efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/027a8c4e106d7c02e1688c38015b8fd2bd94a304)

* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#188](https://github.com/openshift/csi-driver-shared-resource/pull/188)
* [OCPBUGS-44510](https://issues.redhat.com/browse/OCPBUGS-44510): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 [#233](https://github.com/openshift/csi-driver-shared-resource/pull/233)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/abbeb17206231cd9d7d8c32bf7cbdc592e121aa4...027a8c4e106d7c02e1688c38015b8fd2bd94a304)


### [docker-builder](https://github.com/openshift/builder/tree/a7531531bef4c1a5ef05d877a00cb07afcb669ef)

* [OCPBUGS-33889](https://issues.redhat.com/browse/OCPBUGS-33889): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 [#393](https://github.com/openshift/builder/pull/393)
* [OCPBUGS-47768](https://issues.redhat.com/browse/OCPBUGS-47768): Add team members to the OWNERS file [#423](https://github.com/openshift/builder/pull/423)
* [OCPBUGS-47712](https://issues.redhat.com/browse/OCPBUGS-47712): skipping some unit tests to avoid failures as they are duplicate [#421](https://github.com/openshift/builder/pull/421)
* [Full changelog](https://github.com/openshift/builder/compare/cfcf3bdf23c5e589b18577f038e4e2d6267e9409...a7531531bef4c1a5ef05d877a00cb07afcb669ef)


### [docker-registry](https://github.com/openshift/image-registry/tree/fe9b400ea5cf5121f5a867a620ea349fd8493c36)

* [OCPBUGS-49695](https://issues.redhat.com/browse/OCPBUGS-49695): bump docker distribution [#422](https://github.com/openshift/image-registry/pull/422)
* [Full changelog](https://github.com/openshift/image-registry/compare/ef9fa95763754c05beb32e1ddca406de67ae4bd6...fe9b400ea5cf5121f5a867a620ea349fd8493c36)


### [etcd](https://github.com/openshift/etcd/tree/23c5a247c3e601f7806a0bbffdc6d201a55bf469)

* NO-ISSUE: Add support for cachi2 based deps [#297](https://github.com/openshift/etcd/pull/297)
* [OCPBUGS-42680](https://issues.redhat.com/browse/OCPBUGS-42680): Rebase etcd 3.5.16 openshift 4.17 [#291](https://github.com/openshift/etcd/pull/291)
* NO-JIRA: use golang 1.22 image [#286](https://github.com/openshift/etcd/pull/286)
* [Full changelog](https://github.com/openshift/etcd/compare/1fb3165305efc8d986344b555b22592e6e6c1786...23c5a247c3e601f7806a0bbffdc6d201a55bf469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/3a27d3ce75bab31b9a04c212c929db8d507f3962)

* [OCPBUGS-48064](https://issues.redhat.com/browse/OCPBUGS-48064): Refactor exists() to handle gcp API change [#105](https://github.com/openshift/machine-api-provider-gcp/pull/105)
* [OCPBUGS-46082](https://issues.redhat.com/browse/OCPBUGS-46082): update a2 gpu detection logic to be dynamic [#100](https://github.com/openshift/machine-api-provider-gcp/pull/100)
* [OCPBUGS-43738](https://issues.redhat.com/browse/OCPBUGS-43738): Add c4a instance as arm type [#95](https://github.com/openshift/machine-api-provider-gcp/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/f2711c6d7a7ceb809dfe553525157ed88dd3713c...3a27d3ce75bab31b9a04c212c929db8d507f3962)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/75240ebc82a1963a5474049f7ab30cfd09d85cd6)

* [OCPBUGS-49905](https://issues.redhat.com/browse/OCPBUGS-49905): Bump k8s api to 1.30.9 [#2198](https://github.com/openshift/kubernetes/pull/2198)
* : OCPBUGS-46364: Fix grace period used for immediate evictions [#2164](https://github.com/openshift/kubernetes/pull/2164)
* [OCPBUGS-46002](https://issues.redhat.com/browse/OCPBUGS-46002): Bump k8s api to 1.30.7 [#2160](https://github.com/openshift/kubernetes/pull/2160)
* [OCPBUGS-39318](https://issues.redhat.com/browse/OCPBUGS-39318): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2070](https://github.com/openshift/kubernetes/pull/2070)
* [OCPBUGS-43820](https://issues.redhat.com/browse/OCPBUGS-43820): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2126](https://github.com/openshift/kubernetes/pull/2126)
* [OCPBUGS-44897](https://issues.redhat.com/browse/OCPBUGS-44897): Backport format library to enable usage in 4.18 [#2140](https://github.com/openshift/kubernetes/pull/2140)
* [OCPBUGS-44512](https://issues.redhat.com/browse/OCPBUGS-44512): Bump k8s api to 1.30.6 [#2134](https://github.com/openshift/kubernetes/pull/2134)
* [OCPBUGS-42427](https://issues.redhat.com/browse/OCPBUGS-42427): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2097](https://github.com/openshift/kubernetes/pull/2097)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Unrevert Bump k8s api to 1.30.5" [#2107](https://github.com/openshift/kubernetes/pull/2107)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Revert #2089 "OCPBUGS-42167: Bump k8s api to 1.30.5" [#2100](https://github.com/openshift/kubernetes/pull/2100)
* [OCPBUGS-42167](https://issues.redhat.com/browse/OCPBUGS-42167): Bump k8s api to 1.30.5 [#2089](https://github.com/openshift/kubernetes/pull/2089)
* [OCPBUGS-42019](https://issues.redhat.com/browse/OCPBUGS-42019): UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2087](https://github.com/openshift/kubernetes/pull/2087)
* [Full changelog](https://github.com/openshift/kubernetes/compare/d3adea4933c942000ceb2c9ca98b1920814f5b34...75240ebc82a1963a5474049f7ab30cfd09d85cd6)


### [hypershift](https://github.com/openshift/hypershift/tree/ab4eeb54c1bc3e17a7c37fd5e1123a711e2b5e11)

* [OCPBUGS-50596](https://issues.redhat.com/browse/OCPBUGS-50596): Honor proxy vars in the util insecure http client [#5605](https://github.com/openshift/hypershift/pull/5605)
* [OCPBUGS-49828](https://issues.redhat.com/browse/OCPBUGS-49828): Duplicate hostDevices.name when hostDevices.deviceName has multiple types. [#5558](https://github.com/openshift/hypershift/pull/5558)
* [OCPBUGS-48487](https://issues.redhat.com/browse/OCPBUGS-48487), [OCPBUGS-48488](https://issues.redhat.com/browse/OCPBUGS-48488), [OCPBUGS-48490](https://issues.redhat.com/browse/OCPBUGS-48490): Fix IPv6 Disconnected HCP deployments [#5402](https://github.com/openshift/hypershift/pull/5402)
* [OCPBUGS-47533](https://issues.redhat.com/browse/OCPBUGS-47533): Prevent IgnitionServer from flooding the API server with patch requests [#5332](https://github.com/openshift/hypershift/pull/5332)
* NO-JIRA: Update dependency mkdocs-material to v9.6.3 [#5590](https://github.com/openshift/hypershift/pull/5590)
* [OCPBUGS-45268](https://issues.redhat.com/browse/OCPBUGS-45268): Reconcile proxy CA bundle into hosted cluster [#5228](https://github.com/openshift/hypershift/pull/5228)
* [OCPBUGS-46465](https://issues.redhat.com/browse/OCPBUGS-46465): Consistently look up and dial cloud API hostnames [#5302](https://github.com/openshift/hypershift/pull/5302)
* NO-JIRA: Update dependency mkdocs-material to v9.6.1 [#5528](https://github.com/openshift/hypershift/pull/5528)
* [OCPBUGS-49638](https://issues.redhat.com/browse/OCPBUGS-49638): fix overwriting PKI operator HCP conditions [#5504](https://github.com/openshift/hypershift/pull/5504)
* [OCPBUGS-46440](https://issues.redhat.com/browse/OCPBUGS-46440): Allow ARM64 arch deployment on Agent platform [#5296](https://github.com/openshift/hypershift/pull/5296)
* [OCPBUGS-48170](https://issues.redhat.com/browse/OCPBUGS-48170): fix disconnected via CLI [#5465](https://github.com/openshift/hypershift/pull/5465)
* [OCPBUGS-38810](https://issues.redhat.com/browse/OCPBUGS-38810): nodepoolcontroller: `List()` PerformanceProfile status per NodePool [#4585](https://github.com/openshift/hypershift/pull/4585)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) [#5428](https://github.com/openshift/hypershift/pull/5428)
* NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) [#5427](https://github.com/openshift/hypershift/pull/5427)
* [OCPBUGS-44927](https://issues.redhat.com/browse/OCPBUGS-44927): Add multi-arch validation for HC/NodePool compatibility [#5238](https://github.com/openshift/hypershift/pull/5238)
* NO-JIRA:  [release-4.17] Bump golang.org/x/crypto and golang.org/x/net [#5368](https://github.com/openshift/hypershift/pull/5368)
* NO-JIRA: Update Konflux references (release-4.17) [#5329](https://github.com/openshift/hypershift/pull/5329)
* [OCPBUGS-46412](https://issues.redhat.com/browse/OCPBUGS-46412): Separate CPO containerfiles [#5285](https://github.com/openshift/hypershift/pull/5285)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5289](https://github.com/openshift/hypershift/pull/5289)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) [#5290](https://github.com/openshift/hypershift/pull/5290)
* [OCPBUGS-44114](https://issues.redhat.com/browse/OCPBUGS-44114): Add external kas address to no proxy skip list [#5028](https://github.com/openshift/hypershift/pull/5028)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 [#5174](https://github.com/openshift/hypershift/pull/5174)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5249](https://github.com/openshift/hypershift/pull/5249)
* [OCPBUGS-44630](https://issues.redhat.com/browse/OCPBUGS-44630): Use ingress role in private link controller for DNS operations [#5142](https://github.com/openshift/hypershift/pull/5142)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5183](https://github.com/openshift/hypershift/pull/5183)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5154](https://github.com/openshift/hypershift/pull/5154)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5144](https://github.com/openshift/hypershift/pull/5144)
* [OCPBUGS-44184](https://issues.redhat.com/browse/OCPBUGS-44184): dont use registryOverrides on kube rbac proxy image be… [#5033](https://github.com/openshift/hypershift/pull/5033)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5113](https://github.com/openshift/hypershift/pull/5113)
* [OCPBUGS-43929](https://issues.redhat.com/browse/OCPBUGS-43929): Return the right tagReference on Catalogs ImageStream [#4993](https://github.com/openshift/hypershift/pull/4993)
* [OCPBUGS-44276](https://issues.redhat.com/browse/OCPBUGS-44276): Configure OAuth https proxy to dial cloud endpoints directly [#5070](https://github.com/openshift/hypershift/pull/5070)
* [OCPBUGS-44268](https://issues.redhat.com/browse/OCPBUGS-44268): Fix order rendering HCP objects [#5064](https://github.com/openshift/hypershift/pull/5064)
* NO-JIRA: Update Konflux references (release-4.17) [#5098](https://github.com/openshift/hypershift/pull/5098)
* chore(deps): update konflux references (release-4.17) [#5075](https://github.com/openshift/hypershift/pull/5075)
* [HOSTEDCP-2046](https://issues.redhat.com/browse/HOSTEDCP-2046): CPO 4.17 tekton builds [#5006](https://github.com/openshift/hypershift/pull/5006)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5053](https://github.com/openshift/hypershift/pull/5053)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.17) [#5041](https://github.com/openshift/hypershift/pull/5041)
* chore(deps): update konflux references (release-4.17) [#5023](https://github.com/openshift/hypershift/pull/5023)
* chore(deps): update konflux references to f53fe54 (release-4.17) [#5018](https://github.com/openshift/hypershift/pull/5018)
* NO-JIRA: Update Konflux references (release-4.17) [#5009](https://github.com/openshift/hypershift/pull/5009)
* [OCPBUGS-42879](https://issues.redhat.com/browse/OCPBUGS-42879): Add network policies for konnectivity server and ignition server proxy [#4865](https://github.com/openshift/hypershift/pull/4865)
* NO-JIRA: bump catalog operators version [#4992](https://github.com/openshift/hypershift/pull/4992)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4972](https://github.com/openshift/hypershift/pull/4972)
* [OCPBUGS-43746](https://issues.redhat.com/browse/OCPBUGS-43746): add ValidIDPConfiguration condition to report IDP config issues [#4969](https://github.com/openshift/hypershift/pull/4969)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958)
* [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931)
* [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843)
* [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921)
* [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.17) [#4907](https://github.com/openshift/hypershift/pull/4907)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4895](https://github.com/openshift/hypershift/pull/4895)
* [OCPBUGS-43051](https://issues.redhat.com/browse/OCPBUGS-43051): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4885](https://github.com/openshift/hypershift/pull/4885)
* [HOSTEDCP-2020](https://issues.redhat.com/browse/HOSTEDCP-2020): [release-4.17] Add support for SharedVPC [#4873](https://github.com/openshift/hypershift/pull/4873)
* [HOSTEDCP-2023](https://issues.redhat.com/browse/HOSTEDCP-2023): [release-4.17] Split worker and vpc endpoint security groups [#4882](https://github.com/openshift/hypershift/pull/4882)
* [OCPBUGS-42974](https://issues.redhat.com/browse/OCPBUGS-42974): [release-4.17] Do not send traffic to local audit-webhook through konnectivity [#4869](https://github.com/openshift/hypershift/pull/4869)
* NO-JIRA: Remove EnsurePSANotPrivileged check [#4855](https://github.com/openshift/hypershift/pull/4855)
* [OCPBUGS-42714](https://issues.redhat.com/browse/OCPBUGS-42714): label routes only when HCP router used [#4845](https://github.com/openshift/hypershift/pull/4845)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.17) [#4854](https://github.com/openshift/hypershift/pull/4854)
* [OCPBUGS-42390](https://issues.redhat.com/browse/OCPBUGS-42390): Add Annotation to skip deleting hcp namespace [#4792](https://github.com/openshift/hypershift/pull/4792)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4812](https://github.com/openshift/hypershift/pull/4812)
* NO-JIRA: e2e: openstack: fix nil deref in route53 teardown [#4810](https://github.com/openshift/hypershift/pull/4810)
* [OCPBUGS-42261](https://issues.redhat.com/browse/OCPBUGS-42261): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4764](https://github.com/openshift/hypershift/pull/4764)
* [OCPBUGS-42098](https://issues.redhat.com/browse/OCPBUGS-42098): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4736](https://github.com/openshift/hypershift/pull/4736)
* chore(deps): update konflux references to 5ac9b24 (release-4.17) [#4780](https://github.com/openshift/hypershift/pull/4780)
* [OCPBUGS-41552](https://issues.redhat.com/browse/OCPBUGS-41552): Let payload generation pick the release for the NodePool [#4691](https://github.com/openshift/hypershift/pull/4691)
* chore(deps): update konflux references to 2c3426a (release-4.17) [#4774](https://github.com/openshift/hypershift/pull/4774)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4761](https://github.com/openshift/hypershift/pull/4761)
* NO-JIRA: Security fixes for openshift-ci-security job [#4748](https://github.com/openshift/hypershift/pull/4748)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4726](https://github.com/openshift/hypershift/pull/4726)
* [HOSTEDCP-1953](https://issues.redhat.com/browse/HOSTEDCP-1953): bump CCO version [#4694](https://github.com/openshift/hypershift/pull/4694)
* [Full changelog](https://github.com/openshift/hypershift/compare/05864f61f24a8517731664f8091cedcfc5f9b60d...ab4eeb54c1bc3e17a7c37fd5e1123a711e2b5e11)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/8443d86bf284684b7849fa76d40795d141ef86d2)

* [OCPBUGS-42277](https://issues.redhat.com/browse/OCPBUGS-42277): Reorder static resources to create RBAC first [#128](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/128)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f74c374bc09ee57a077c86d307b4544c01111956...8443d86bf284684b7849fa76d40795d141ef86d2)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/213d34ddedaebc23bd409ff904ecaf9eaa62c517)

* [OCPBUGS-44880](https://issues.redhat.com/browse/OCPBUGS-44880): Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id [#94](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/94)
* [OCPBUGS-37369](https://issues.redhat.com/browse/OCPBUGS-37369): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.17 [#86](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/9179e15477e8de38460db74b4ec1ac125ea9d625...213d34ddedaebc23bd409ff904ecaf9eaa62c517)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/238348d2d06feb540a360aeba81416c1134f86e9)

* [OCPBUGS-37379](https://issues.redhat.com/browse/OCPBUGS-37379): Bump dependency for CVE [#49](https://github.com/openshift/machine-api-provider-ibmcloud/pull/49)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/dce9d33e91d0f6eae88da8d233e7b4b002c5c1b0...238348d2d06feb540a360aeba81416c1134f86e9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2b1e2df05f67be7567d234f4150076a5aefd4ee2)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for dataGahtering jobs & pods [#1049](https://github.com/openshift/insights-operator/pull/1049)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d44b5f1be3be9c1630b1216cd231e47758dcd30f...2b1e2df05f67be7567d234f4150076a5aefd4ee2)


### [ironic](https://github.com/openshift/ironic-image/tree/26d66a3766ae7d85da0e4a470b9cbeae91a5868f)

* [OCPBUGS-50673](https://issues.redhat.com/browse/OCPBUGS-50673): Install python3-inotify pkg explicitly [#640](https://github.com/openshift/ironic-image/pull/640)
* [OCPBUGS-49998](https://issues.redhat.com/browse/OCPBUGS-49998): Fix runlogwatch failure if LOG_DIR does not exist [#637](https://github.com/openshift/ironic-image/pull/637)
* [OCPBUGS-49822](https://issues.redhat.com/browse/OCPBUGS-49822): Drop quiet option of grep to avoid race condition with pipefail [#633](https://github.com/openshift/ironic-image/pull/633)
* [OCPBUGS-49756](https://issues.redhat.com/browse/OCPBUGS-49756): Use pynotify instead of inotify-tools [#631](https://github.com/openshift/ironic-image/pull/631)
* [OCPBUGS-48149](https://issues.redhat.com/browse/OCPBUGS-48149): Bump jinja2 to 3.1.5 [#622](https://github.com/openshift/ironic-image/pull/622)
* [OCPBUGS-43955](https://issues.redhat.com/browse/OCPBUGS-43955), [OCPBUGS-43963](https://issues.redhat.com/browse/OCPBUGS-43963): Bump python-waitress [4.17] [#603](https://github.com/openshift/ironic-image/pull/603)
* [OCPBUGS-42692](https://issues.redhat.com/browse/OCPBUGS-42692): Include fixes for CVE-2024-5569 [#590](https://github.com/openshift/ironic-image/pull/590)
* [OCPBUGS-42509](https://issues.redhat.com/browse/OCPBUGS-42509): Include fix for CVE-2024-47211 [#593](https://github.com/openshift/ironic-image/pull/593)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f70cb6807c16e40bc0937f52e23422142ca19793...26d66a3766ae7d85da0e4a470b9cbeae91a5868f)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f5f742d8df2b1879a565809632ce2b43b965b4d4)

* [OCPBUGS-39013](https://issues.redhat.com/browse/OCPBUGS-39013): Bump ironic-lib to fix utf8 decoding issue [#155](https://github.com/openshift/ironic-agent-image/pull/155)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/8c92604b7557101eb0537c5f99418829948eec26...f5f742d8df2b1879a565809632ce2b43b965b4d4)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/bc5b8a2c3209873231a7eabd83ace578c8e182f7)

* [OCPBUGS-49350](https://issues.redhat.com/browse/OCPBUGS-49350): Fix subnet validation [#47](https://github.com/openshift/ironic-static-ip-manager/pull/47)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/713378b37863d482b72051e3d7f1d0976abed0ce...bc5b8a2c3209873231a7eabd83ace578c8e182f7)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)

* : OCPBUGS-46491: Disable HTTP2 [#40](https://github.com/openshift/kubernetes-metrics-server/pull/40)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c...e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)


### [kube-proxy](https://github.com/openshift/sdn/tree/dee082def2014ab85a0e5ff9a056d3fe2461eab7)

* [OCPBUGS-43807](https://issues.redhat.com/browse/OCPBUGS-43807): Revendor to a patched k/k with our prefer-local-DNS hack [#640](https://github.com/openshift/sdn/pull/640)
* [Full changelog](https://github.com/openshift/sdn/compare/307a0b2cdd1d5e97830e940d95ba9985e80f5d19...dee082def2014ab85a0e5ff9a056d3fe2461eab7)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/7718265cc7640f6fa0d75eee366e424911d6f00f)

* [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b2d2c462e801d7b8890347c017184153c3c8eaab...7718265cc7640f6fa0d75eee366e424911d6f00f)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f1bcfb5bcdf288b4f79b0e9accbe2368713360fd)

* [OCPBUGS-44623](https://issues.redhat.com/browse/OCPBUGS-44623): During detach don't return error if VM is not found [#50](https://github.com/openshift/kubevirt-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/02f9a9211a89784aad3272ffe93aa305a00be736...f1bcfb5bcdf288b4f79b0e9accbe2368713360fd)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/191a28d831b1f9493b54a25a3c75babd310bede5)

* [OCPBUGS-43851](https://issues.redhat.com/browse/OCPBUGS-43851): vSphere klog initialization preventing verbose log messages [#1302](https://github.com/openshift/machine-api-operator/pull/1302)
* [OCPBUGS-42414](https://issues.redhat.com/browse/OCPBUGS-42414): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1293](https://github.com/openshift/machine-api-operator/pull/1293)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/bb1ed5f76faafe99cfcc930e9e7ab7070d2aba88...191a28d831b1f9493b54a25a3c75babd310bede5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/263e1e421e9abae512ab60e443b512792965ebf2)

* [OCPBUGS-49363](https://issues.redhat.com/browse/OCPBUGS-49363): Auto-recover from MC with invalid extension [#4824](https://github.com/openshift/machine-config-operator/pull/4824)
* [OCPBUGS-49716](https://issues.redhat.com/browse/OCPBUGS-49716): MCO CO degrades are stuck on until master pool updates complete [#4826](https://github.com/openshift/machine-config-operator/pull/4826)
* [OCPBUGS-49639](https://issues.redhat.com/browse/OCPBUGS-49639): Add clarification to invalid maxUnavailable alert [#4820](https://github.com/openshift/machine-config-operator/pull/4820)
* [OCPBUGS-47475](https://issues.redhat.com/browse/OCPBUGS-47475): Pausing Master MCP results in Alerts [#4769](https://github.com/openshift/machine-config-operator/pull/4769)
* [OCPBUGS-47802](https://issues.redhat.com/browse/OCPBUGS-47802): OCPBUGS-47801: trying to wait for sub-controllers [#4775](https://github.com/openshift/machine-config-operator/pull/4775)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4715](https://github.com/openshift/machine-config-operator/pull/4715)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Remove trailing periods from AWS provided hostnames [#4738](https://github.com/openshift/machine-config-operator/pull/4738)
* [OCPBUGS-39223](https://issues.redhat.com/browse/OCPBUGS-39223): Do not enable on-prem-resolv-prepender.path for UPI [#4572](https://github.com/openshift/machine-config-operator/pull/4572)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): Revert "controller: default to runc when upgrading clusters from 4.17 to 4.18" [#4716](https://github.com/openshift/machine-config-operator/pull/4716)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4635](https://github.com/openshift/machine-config-operator/pull/4635)
* [OCPBUGS-44561](https://issues.redhat.com/browse/OCPBUGS-44561): Disable tx chksum for driver IDPF on GCP C3/C4 [#4701](https://github.com/openshift/machine-config-operator/pull/4701)
* [MCO-1343](https://issues.redhat.com/browse/MCO-1343): Backport Telemetry to 4.17 [#4650](https://github.com/openshift/machine-config-operator/pull/4650)
* [OCPBUGS-43917](https://issues.redhat.com/browse/OCPBUGS-43917): Disable ESP offload for OVS attached interfaces [#4667](https://github.com/openshift/machine-config-operator/pull/4667)
* [OCPBUGS-43719](https://issues.redhat.com/browse/OCPBUGS-43719): Soften haproxy timeout for kubeapi probe [#4657](https://github.com/openshift/machine-config-operator/pull/4657)
* [OCPBUGS-42577](https://issues.redhat.com/browse/OCPBUGS-42577): openstack: fix non-old systemd compatible unit [#4620](https://github.com/openshift/machine-config-operator/pull/4620)
* [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615)
* [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634)
* [OCPBUGS-42677](https://issues.redhat.com/browse/OCPBUGS-42677): The MCO does not properly degrade when pools are failing to render a new config [#4623](https://github.com/openshift/machine-config-operator/pull/4623)
* [OCPBUGS-42081](https://issues.redhat.com/browse/OCPBUGS-42081): Check for kernel arg diff in updateOnClusterBuild [#4595](https://github.com/openshift/machine-config-operator/pull/4595)
* [OCPBUGS-41255](https://issues.redhat.com/browse/OCPBUGS-41255): Set ESP offloads off in bonds if slaves don't support them [#4598](https://github.com/openshift/machine-config-operator/pull/4598)
* [OCPBUGS-42256](https://issues.redhat.com/browse/OCPBUGS-42256): Panic seen in CI job for MCC pod [#4603](https://github.com/openshift/machine-config-operator/pull/4603)
* [OCPBUGS-42200](https://issues.redhat.com/browse/OCPBUGS-42200): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4602](https://github.com/openshift/machine-config-operator/pull/4602)
* [OCPBUGS-41357](https://issues.redhat.com/browse/OCPBUGS-41357): Enable the use of Linux Bridge as the ovs default port connection [#4567](https://github.com/openshift/machine-config-operator/pull/4567)
* [OCPBUGS-41686](https://issues.redhat.com/browse/OCPBUGS-41686): MCPs with RHEL nodes are degraded when a userCA bundle is added to the cluster [#4580](https://github.com/openshift/machine-config-operator/pull/4580)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b170ad094e24cf4643acc3a8db8914aec1e964d4...263e1e421e9abae512ab60e443b512792965ebf2)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)

* [OCPBUGS-44394](https://issues.redhat.com/browse/OCPBUGS-44394): remove unused package and upgrade vulnerable dependency [#271](https://github.com/openshift/monitoring-plugin/pull/271)
* [OCPBUGS-43238](https://issues.redhat.com/browse/OCPBUGS-43238): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 [#216](https://github.com/openshift/monitoring-plugin/pull/216)
* [OCPBUGS-42408](https://issues.redhat.com/browse/OCPBUGS-42408): fix path-to-regexp dependency [#196](https://github.com/openshift/monitoring-plugin/pull/196)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ccaf40d66254b328a688abddef841b7763c726d6...ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/a9576ed9e3bb9df10586a1e245880ef05156bdf4)

* [OCPBUGS-48745](https://issues.redhat.com/browse/OCPBUGS-48745): [Release-4.17]Kubeconfig loop [#334](https://github.com/openshift/whereabouts-cni/pull/334)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/b950d50da905e2174df6f93a1f49f69332f65f42...a9576ed9e3bb9df10586a1e245880ef05156bdf4)


### [must-gather](https://github.com/openshift/must-gather/tree/56b34277f6e67963db422373c360509176e5565a)

* [OCPBUGS-48068](https://issues.redhat.com/browse/OCPBUGS-48068): Update owners [#452](https://github.com/openshift/must-gather/pull/452)
* [OCPBUGS-46281](https://issues.redhat.com/browse/OCPBUGS-46281): Support gathering IPsec data [#467](https://github.com/openshift/must-gather/pull/467)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): Removes reference to gather_multus_logs in 4.17 [#459](https://github.com/openshift/must-gather/pull/459)
* [OCPBUGS-42964](https://issues.redhat.com/browse/OCPBUGS-42964): Collect etcd object count [#453](https://github.com/openshift/must-gather/pull/453)
* [OCPBUGS-42958](https://issues.redhat.com/browse/OCPBUGS-42958): Gather OSUS data [#443](https://github.com/openshift/must-gather/pull/443)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): [Release-4.17] Network logs collection: skip unready nodes [#445](https://github.com/openshift/must-gather/pull/445)
* [Full changelog](https://github.com/openshift/must-gather/compare/6598b160656d8c51e12254278cb39576561a9b68...56b34277f6e67963db422373c360509176e5565a)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/ddb486ae8c68d228a1421c779ec8fe35fc436ccb)

* Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.17 (#93) [#93](https://github.com/openshift/network-metrics-daemon/pull/93)
* swtich golint install method (#103) [#103](https://github.com/openshift/network-metrics-daemon/pull/103)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f7a88331a9de217c6619dccd23bc701aa6712df8...ddb486ae8c68d228a1421c779ec8fe35fc436ccb)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9b76377b62664d7a0763c1dd5731af7080c4b1fb)

* [OCPBUGS-49758](https://issues.redhat.com/browse/OCPBUGS-49758): Fix weight width [#208](https://github.com/openshift/networking-console-plugin/pull/208)
* [OCPBUGS-45791](https://issues.redhat.com/browse/OCPBUGS-45791): fix path-to-regex CVE [#196](https://github.com/openshift/networking-console-plugin/pull/196)
* [OCPBUGS-48704](https://issues.redhat.com/browse/OCPBUGS-48704): fix service name [#188](https://github.com/openshift/networking-console-plugin/pull/188)
* [OCPBUGS-48267](https://issues.redhat.com/browse/OCPBUGS-48267): UI crash accessing a Service in pending state [#168](https://github.com/openshift/networking-console-plugin/pull/168)
* [OCPBUGS-46553](https://issues.redhat.com/browse/OCPBUGS-46553): fix ports as number instead of strings [#169](https://github.com/openshift/networking-console-plugin/pull/169)
* [OCPBUGS-45876](https://issues.redhat.com/browse/OCPBUGS-45876): Bump nanoid from 3.3.7 to 3.3.8 [#172](https://github.com/openshift/networking-console-plugin/pull/172)
* [OCPBUGS-44140](https://issues.redhat.com/browse/OCPBUGS-44140): Bump dompurify from 2.4.9 to 2.5.8 [#166](https://github.com/openshift/networking-console-plugin/pull/166)
* [OCPBUGS-44397](https://issues.redhat.com/browse/OCPBUGS-44397): OCPBUGS-44679: upgrade packages for cve [#141](https://github.com/openshift/networking-console-plugin/pull/141)
* [OCPBUGS-44650](https://issues.redhat.com/browse/OCPBUGS-44650): Routes list page shows correct status and location [#139](https://github.com/openshift/networking-console-plugin/pull/139)
* [OCPBUGS-44648](https://issues.redhat.com/browse/OCPBUGS-44648): Add Route Filter in route list [#138](https://github.com/openshift/networking-console-plugin/pull/138)
* [OCPBUGS-43037](https://issues.redhat.com/browse/OCPBUGS-43037): hide routes metrics non-admin users [#129](https://github.com/openshift/networking-console-plugin/pull/129)
* [OCPBUGS-43065](https://issues.redhat.com/browse/OCPBUGS-43065): Routes list sort by status [#131](https://github.com/openshift/networking-console-plugin/pull/131)
* [CNV-49305](https://issues.redhat.com/browse/CNV-49305): fix for virt perspective [#128](https://github.com/openshift/networking-console-plugin/pull/128)
* [OCPBUGS-42678](https://issues.redhat.com/browse/OCPBUGS-42678): OCPBUGS-42352: add service weight [#125](https://github.com/openshift/networking-console-plugin/pull/125)
* [OCPBUGS-39390](https://issues.redhat.com/browse/OCPBUGS-39390): fix sorting on lists [#123](https://github.com/openshift/networking-console-plugin/pull/123)
* [OCPBUGS-42582](https://issues.redhat.com/browse/OCPBUGS-42582): fix html in translations [#122](https://github.com/openshift/networking-console-plugin/pull/122)
* [OCPBUGS-42581](https://issues.redhat.com/browse/OCPBUGS-42581): Route edit form [#121](https://github.com/openshift/networking-console-plugin/pull/121)
* [CNV-48190](https://issues.redhat.com/browse/CNV-48190): move title networkpolicies above tabs [#120](https://github.com/openshift/networking-console-plugin/pull/120)
* Fix alert ServiceSelector [#111](https://github.com/openshift/networking-console-plugin/pull/111)
* [CNV-47528](https://issues.redhat.com/browse/CNV-47528): Fix key value in selector [#110](https://github.com/openshift/networking-console-plugin/pull/110)
* Revert IPAM (subnets input) [#115](https://github.com/openshift/networking-console-plugin/pull/115)
* [OCPBUGS-42248](https://issues.redhat.com/browse/OCPBUGS-42248): fix pagination during sorting [#109](https://github.com/openshift/networking-console-plugin/pull/109)
* [OCPBUGS-41868](https://issues.redhat.com/browse/OCPBUGS-41868): Add destination ca cert [#106](https://github.com/openshift/networking-console-plugin/pull/106)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f395bb620999a1ead055f59ebe02d1a4c258e764...9b76377b62664d7a0763c1dd5731af7080c4b1fb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/04782ff30cdc7c11ec12b266a76f83765aaadf34)

* [OCPBUGS-46044](https://issues.redhat.com/browse/OCPBUGS-46044): Update dependencies to address CVE-2024-24786 [#127](https://github.com/openshift/oauth-apiserver/pull/127)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e37ccb455e1b48d1af032315987baf1e93b4084f...04782ff30cdc7c11ec12b266a76f83765aaadf34)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/3451e8ba203c0facb5c90faf59a1fecc7df06153)

* [OCPBUGS-46659](https://issues.redhat.com/browse/OCPBUGS-46659): Fix oauth-proxy e2e-component tests [#303](https://github.com/openshift/oauth-proxy/pull/303)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/30f8012482023689655252dc2af2f17fe6a09253...3451e8ba203c0facb5c90faf59a1fecc7df06153)


### [oauth-server](https://github.com/openshift/oauth-server/tree/5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)

* [OCPBUGS-44118](https://issues.redhat.com/browse/OCPBUGS-44118): escape spaces in oauth callback path [#167](https://github.com/openshift/oauth-server/pull/167)
* [OCPBUGS-43587](https://issues.redhat.com/browse/OCPBUGS-43587): Fix login path for go1.22 mux pattern matching [#162](https://github.com/openshift/oauth-server/pull/162)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a44685102fbccd24a68207eacdc0a63435af5dde...5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/39bedc78d79bd13ea7271e5d4c72a12890b05631)

* fixes CVEs upgrading go-git dependency (#1033) [#1033](https://github.com/openshift/oc-mirror/pull/1033)
* [OCPBUGS-47453](https://issues.redhat.com/browse/OCPBUGS-47453): Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) [#1000](https://github.com/openshift/oc-mirror/pull/1000)
* changes the owners file (#1017) [#1017](https://github.com/openshift/oc-mirror/pull/1017)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1020) [#1020](https://github.com/openshift/oc-mirror/pull/1020)
* [OCPBUGS-37867](https://issues.redhat.com/browse/OCPBUGS-37867): Use tag only when image by tag and digest (#911) (#932) [#911](https://github.com/openshift/oc-mirror/pull/911)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c9123030d5df99847cf3779856d90ff83cf64dcb...39bedc78d79bd13ea7271e5d4c72a12890b05631)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/58f7b42a71637c63e8fd7943661c98bd92657426)

* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): prevent panic when no image and error are set [#488](https://github.com/openshift/openshift-apiserver/pull/488)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): validate image property isn't nil before using [#489](https://github.com/openshift/openshift-apiserver/pull/489)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): move on to the next digest/tag during failures [#487](https://github.com/openshift/openshift-apiserver/pull/487)
* [OCPBUGS-42752](https://issues.redhat.com/browse/OCPBUGS-42752): Pass expected type to deploymentconfig/scale object validation. [#457](https://github.com/openshift/openshift-apiserver/pull/457)
* [OCPBUGS-42232](https://issues.redhat.com/browse/OCPBUGS-42232): fail image import when both image and error are nil [#450](https://github.com/openshift/openshift-apiserver/pull/450)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3c3cb886cb4621e7584156af68bdcf108c27cdaa...58f7b42a71637c63e8fd7943661c98bd92657426)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/70aa014585cd33fc21f27ba20a722c71faf3c411)

* [OCPBUGS-47769](https://issues.redhat.com/browse/OCPBUGS-47769): Add team members to the OWNERS file [#357](https://github.com/openshift/openshift-controller-manager/pull/357)
* [OCPBUGS-44093](https://issues.redhat.com/browse/OCPBUGS-44093): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#350](https://github.com/openshift/openshift-controller-manager/pull/350)
* NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#339](https://github.com/openshift/openshift-controller-manager/pull/339)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/7682a61bedd0db855bb9696bfb08f6078688ea4e...70aa014585cd33fc21f27ba20a722c71faf3c411)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/23512b675c57095bc03ac0da8cad39561d6aef9b)

* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#342](https://github.com/openshift/cluster-api-provider-openstack/pull/342)
* [OCPBUGS-44959](https://issues.redhat.com/browse/OCPBUGS-44959): Makefile changes for merge-bot [#340](https://github.com/openshift/cluster-api-provider-openstack/pull/340)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#329](https://github.com/openshift/cluster-api-provider-openstack/pull/329)
* [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9db571c5fc2ce02aa3296ced348d082ee4cddaba...23512b675c57095bc03ac0da8cad39561d6aef9b)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f667826eb6c9e2bfe779922f0b8e6a9bf2a833ed)

* [OCPBUGS-48695](https://issues.redhat.com/browse/OCPBUGS-48695): Fix excessive catalog source snapshots cause severe performance regression [#956](https://github.com/openshift/operator-framework-olm/pull/956)
* [OCPBUGS-45845](https://issues.redhat.com/browse/OCPBUGS-45845): Fix concurrent namespace resolution [#944](https://github.com/openshift/operator-framework-olm/pull/944)
* [OCPBUGS-46929](https://issues.redhat.com/browse/OCPBUGS-46929), [OCPBUGS-46936](https://issues.redhat.com/browse/OCPBUGS-46936), [OCPBUGS-47316](https://issues.redhat.com/browse/OCPBUGS-47316): x/net bump to v0.34.0 [release-4.17] [#938](https://github.com/openshift/operator-framework-olm/pull/938)
* [OCPBUGS-46598](https://issues.redhat.com/browse/OCPBUGS-46598): catalog-operator: Delete Pods that were evicted (#3459) [#922](https://github.com/openshift/operator-framework-olm/pull/922)
* [OCPBUGS-46054](https://issues.redhat.com/browse/OCPBUGS-46054): CRD upgrade existing CR validation fix [#913](https://github.com/openshift/operator-framework-olm/pull/913)
* [OCPBUGS-44760](https://issues.redhat.com/browse/OCPBUGS-44760): fix: call TokenRequest API when service account token secret is missing [#898](https://github.com/openshift/operator-framework-olm/pull/898)
* [OCPBUGS-43965](https://issues.redhat.com/browse/OCPBUGS-43965): Return an error when the IP status cannot be updated [#885](https://github.com/openshift/operator-framework-olm/pull/885)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b0d86a042d2b36be77b3b5bca74e73194bfdeee8...f667826eb6c9e2bfe779922f0b8e6a9bf2a833ed)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/0c85261d8f898f650bd3c67d81d6d1a2bda04550)

* [OCPBUGS-49431](https://issues.redhat.com/browse/OCPBUGS-49431): Upgrade golang.org/x/net [release-4.17] [#585](https://github.com/operator-framework/operator-marketplace/pull/585)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/51f871a51fdfec73932100e13201301ddeb35fa1...0c85261d8f898f650bd3c67d81d6d1a2bda04550)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/aa5bec3a1ac01ed11f8df4501747c993ef11f78e)

* [OCPBUGS-48777](https://issues.redhat.com/browse/OCPBUGS-48777): Fixes unexpected mp0 route removal during start up [#2423](https://github.com/openshift/ovn-kubernetes/pull/2423)
* [OCPBUGS-48828](https://issues.redhat.com/browse/OCPBUGS-48828): fixes overzealous deletion of SNAT in egressIP [#2425](https://github.com/openshift/ovn-kubernetes/pull/2425)
* [OCPBUGS-47506](https://issues.redhat.com/browse/OCPBUGS-47506): Let OVN-northd bind remote ports [#2404](https://github.com/openshift/ovn-kubernetes/pull/2404)
* [OCPBUGS-45953](https://issues.redhat.com/browse/OCPBUGS-45953): bump OVS version to 3.4.0-18 [#2393](https://github.com/openshift/ovn-kubernetes/pull/2393)
* [OCPBUGS-45312](https://issues.redhat.com/browse/OCPBUGS-45312): pin libreswan to 4.6-3.el9_0.3 [#2384](https://github.com/openshift/ovn-kubernetes/pull/2384)
* [OCPBUGS-45339](https://issues.redhat.com/browse/OCPBUGS-45339): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2376](https://github.com/openshift/ovn-kubernetes/pull/2376)
* [OCPBUGS-43454](https://issues.redhat.com/browse/OCPBUGS-43454): Ignore cluster manager topology not managed errors for localnet with no subnets [#2362](https://github.com/openshift/ovn-kubernetes/pull/2362)
* [OCPBUGS-44303](https://issues.redhat.com/browse/OCPBUGS-44303): Add hybird overlay pod IPs to the namespace address_set [#2340](https://github.com/openshift/ovn-kubernetes/pull/2340)
* [OCPBUGS-42931](https://issues.redhat.com/browse/OCPBUGS-42931): Add static route to the hairpin masquerade IPs to pod [#2315](https://github.com/openshift/ovn-kubernetes/pull/2315)
* [OCPBUGS-39200](https://issues.redhat.com/browse/OCPBUGS-39200): Dockerfile: Bump OVS to 3.4.0-1 [#2287](https://github.com/openshift/ovn-kubernetes/pull/2287)
* [OCPBUGS-42940](https://issues.redhat.com/browse/OCPBUGS-42940): Fix egress gateway pod cleanup for remote zone pods. [#2316](https://github.com/openshift/ovn-kubernetes/pull/2316)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/62451d12851aebdd1a3b009a9829f8df796998ad...aa5bec3a1ac01ed11f8df4501747c993ef11f78e)


### [prometheus](https://github.com/openshift/prometheus/tree/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)

* [OCPBUGS-43667](https://issues.redhat.com/browse/OCPBUGS-43667): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#230](https://github.com/openshift/prometheus/pull/230)
* [Full changelog](https://github.com/openshift/prometheus/compare/6853164ae2073146f78cbe9cbda92ebfe1e744d7...e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)

* [OCPBUGS-48069](https://issues.redhat.com/browse/OCPBUGS-48069): fix: validate smtp smarthost and smtp from fields [#323](https://github.com/openshift/prometheus-operator/pull/323)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c...77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)


### [tests](https://github.com/openshift/origin/tree/73c604144fd0ddfcd98205ca9ce64453a7205096)

* [OCPBUGS-49411](https://issues.redhat.com/browse/OCPBUGS-49411): Add a monitor test to detect concurrent installer pod or static pod [#29487](https://github.com/openshift/origin/pull/29487)
* [OCPBUGS-48634](https://issues.redhat.com/browse/OCPBUGS-48634): Revert "[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion" [#29453](https://github.com/openshift/origin/pull/29453)
* [OCPBUGS-48459](https://issues.redhat.com/browse/OCPBUGS-48459), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): ovn-k, udn crd e2e: Fix status report consumer assertion [#29301](https://github.com/openshift/origin/pull/29301)
* [OCPBUGS-48345](https://issues.redhat.com/browse/OCPBUGS-48345): Add team members to the OWNERS file for PR approvals [#29430](https://github.com/openshift/origin/pull/29430)
* [OCPBUGS-48188](https://issues.redhat.com/browse/OCPBUGS-48188): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29409](https://github.com/openshift/origin/pull/29409)
* : OCPBUGS-48093: fix unit test for compare against string [#29405](https://github.com/openshift/origin/pull/29405)
* [OCPBUGS-44190](https://issues.redhat.com/browse/OCPBUGS-44190): Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable [#29306](https://github.com/openshift/origin/pull/29306)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Don't modify pod routes in tests [#29250](https://github.com/openshift/origin/pull/29250)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Set startup probe for UDN tests [#29244](https://github.com/openshift/origin/pull/29244)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 [#29241](https://github.com/openshift/origin/pull/29241)
* [OCPBUGS-44795](https://issues.redhat.com/browse/OCPBUGS-44795): fix: adding oslat updates and outputting test results to the artifacts [#29193](https://github.com/openshift/origin/pull/29193)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): network_segmentation: allow multiple UDN status conditions [#29259](https://github.com/openshift/origin/pull/29259)
* [OCPBUGS-44494](https://issues.redhat.com/browse/OCPBUGS-44494): removing rteval from the realtime test suite [#29194](https://github.com/openshift/origin/pull/29194)
* [OCPBUGS-44496](https://issues.redhat.com/browse/OCPBUGS-44496): fix: adding in a SNO time override for AWS Metal [#29192](https://github.com/openshift/origin/pull/29192)
* [OCPBUGS-44062](https://issues.redhat.com/browse/OCPBUGS-44062): Adjust createDNSPod() to support hypershift dual-stack test [#29254](https://github.com/openshift/origin/pull/29254)
* [OCPBUGS-44045](https://issues.redhat.com/browse/OCPBUGS-44045): Ignore infra nodes on tap cni tests [#29251](https://github.com/openshift/origin/pull/29251)
* [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181)
* [OCPBUGS-39606](https://issues.redhat.com/browse/OCPBUGS-39606): Add image registry capability check [#29174](https://github.com/openshift/origin/pull/29174)
* [OCPBUGS-42814](https://issues.redhat.com/browse/OCPBUGS-42814): ruby:3.0-ubi8 => ruby:3.1-ubi8 [#29162](https://github.com/openshift/origin/pull/29162)
* [OCPBUGS-42336](https://issues.redhat.com/browse/OCPBUGS-42336): Fix image ecosystem tests 4.17 [#29126](https://github.com/openshift/origin/pull/29126)
* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): Update the NotFound case for CNI plugin to reflect changes [#29091](https://github.com/openshift/origin/pull/29091)
* [Full changelog](https://github.com/openshift/origin/compare/08f2f5f123f1058a849372fd36802765d0e4ebb2...73c604144fd0ddfcd98205ca9ce64453a7205096)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/097d823bd10abbc6cd016c34a1c5c3cd1b514031)

* [OCPBUGS-43432](https://issues.redhat.com/browse/OCPBUGS-43432): update check-fmt goimports command [#78](https://github.com/openshift/cloud-provider-vsphere/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/07abced061d16b906b19d1eb49f9bea5c2c77662...097d823bd10abbc6cd016c34a1c5c3cd1b514031)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/039ee3684d5addee3ff8436b19462def77bd5804)

* [OCPBUGS-43705](https://issues.redhat.com/browse/OCPBUGS-43705): redact sensitive information when logging VCenter config [#133](https://github.com/openshift/vmware-vsphere-csi-driver/pull/133)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/738c43cfac38f92f5304935368bb3c41a147069f...039ee3684d5addee3ff8436b19462def77bd5804)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/f737ba5e53e3934e042c08001cde13076f5548b2)

* [OCPBUGS-49858](https://issues.redhat.com/browse/OCPBUGS-49858): Escape backslash in vCenter username [#288](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/288)
* [OCPBUGS-49685](https://issues.redhat.com/browse/OCPBUGS-49685): List only linux nodes [#285](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/285)
* [OCPBUGS-43778](https://issues.redhat.com/browse/OCPBUGS-43778): Fix panic on nil infrastructure Spec.PlatformSpec.VSphere [#264](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/264)
* [OCPBUGS-42327](https://issues.redhat.com/browse/OCPBUGS-42327): Fix the config loading warning [#259](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/259)
* [OCPBUGS-42007](https://issues.redhat.com/browse/OCPBUGS-42007): Remove conditions and controllers [#254](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/254)
* [OCPBUGS-42006](https://issues.redhat.com/browse/OCPBUGS-42006): Add check for vCenter version [#253](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/253)
* [OCPBUGS-42008](https://issues.redhat.com/browse/OCPBUGS-42008): Implement minor quality of life improvements. [#255](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/255)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/6054116d4adde0ce92e43f5637e984053c21aa84...f737ba5e53e3934e042c08001cde13076f5548b2)