# 4.17.28

Created: 2025-05-01 16:46:01 +0000 UTC

Image Digest: `sha256:035baf97e4c715fc1afb681a9f789d99ebaf568b2656584d59f72962e0d14bcd`


## Changes from 4.17.12

### Components

* Kubectl 1.30.5
* Kubernetes upgraded from 1.30.7 to 1.30.11
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202501071621-0 to 417.94.202504291434-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3b99303b](https://github.com/openshift/agent-installer-utils/commit/3b99303bc6d1c85465139f1e1c4847c038e4dc8f) `sha256:2e3c12f80ae0f3a058a76083a166f0f52d2c488757bff1ba8e3c3dcb78d151e5`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [cd426416](https://github.com/openshift/apiserver-network-proxy/commit/cd4264165057a0098c5d6e0b4e8727b4232cc3ce) `sha256:1462a7d9268b1f123b16e52e0916f99762235a593f1a370bd9747278f0bef42e`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [8c77f418](https://github.com/openshift/cloud-provider-aws/commit/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a) `sha256:57c421ec589d5bde9a9ae09a14dd401e6f4f7502383d9cc1d592c4cce6998920`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:2d10b0d8215610e706014b0d201ed462caee0d4d5d530c5c3727b9d6ea026a9d`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9d401670](https://github.com/openshift/aws-encryption-provider/commit/9d4016701d355cd3a47f5ebe10f266d8971febc6) `sha256:e97e40543c09b130e3d36eeb5800d9d4ee989f5b16314f33534b32a2b11b39b6`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [b41b8c8f](https://github.com/openshift/machine-api-provider-aws/commit/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e) `sha256:d2dc62bb9ab60ef004894f78e80c143e8c7d027ff073a3c238dd88b14b3b80fd`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:f570c441261f111a11c675d9b162425dcc65a595c311a1e3d5dc23317e6ef4ef`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [626ecd1c](https://github.com/openshift/cloud-provider-azure/commit/626ecd1c32f50953e84fd1cb499077d52fe53e43) `sha256:ed5ff08bfddf0d60939abf900a5af6c85d7010e8ec1b3e832f3e9c0eb610feec`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d359bfe5](https://github.com/openshift/cluster-api-provider-azure/commit/d359bfe56764238e2881f0f003fd8206b2b40dec) `sha256:dc21bf04fe634e62e83a5df806c81b014fd77f71ee574892334b84a66095b5f9`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:88411c5fea9d080379418df9f140189954d82eba1d11390f5ae357e399262582`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:3959dc623d65e2352382307e411589e9d01ce3d9f7a7a2659f02413d9256de05`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [779b346c](https://github.com/openshift/cloud-network-config-controller/commit/779b346c8bccdb8590e403661ca57cc6ac544eb9) `sha256:698211795dbabe068f87d21f624e09d28742483015be770b1cdb5c6138283b69`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [ea4a8878](https://github.com/openshift/cluster-autoscaler-operator/commit/ea4a88786cf9b237dc446e01fdacd6fd65b73144) `sha256:0ea9c22f0f63b3360d8e74a52026b3302cb7012b7ce6987111464e37bb5f4ff7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:1f28e7920db92d5f1cdb04b95f51c8e457e5af97a7320ad98fc9d56f18c314e4`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:34f8869cd85d3c50ffb737883786ddaea37f7c3f222241ea6a34e429fde1a01b`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [32fd8399](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/32fd83999e7eae9941abe7da915bacae1d50e49c) `sha256:980c46d6fe13ecfcfa85e4cf6871e4abbf13b7ce84b19d3ad64d89bcd937c015`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0dc084f4](https://github.com/openshift/cluster-config-operator/commit/0dc084f47be4c5ee02cf40495b6bd8f334c930eb) `sha256:d8048fd42ae41e8eb61f9fb2f484ecd84212b858b419447e70d95b90f1562c42`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:8a49993a5a30453a7c113578470d2736aa2db4b3cfcd6f858a3c4b0d8151d71c`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:38bbe69d4b7db72c4fa3715e9a76395d4666b02eea19a4a983d71e599f0638db`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [cb5306d7](https://github.com/openshift/cluster-ingress-operator/commit/cb5306d7f68ba35b9a065d65f46c69a836556cb2) `sha256:c987ba71f8168f0a523f2be6507e00fff6c262d4bfad59f4c87841330fa96dd9`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [aed5f6c7](https://github.com/openshift/cluster-api-operator/commit/aed5f6c74a0e174901709f18eecad6573cd80784) `sha256:eb97662076a8459ebccb9ee6a0958c77d1ab516b4375a9925b895af0a613f549`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0a9ed573](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0a9ed573e35751455bfb24842fd2de0b05379ed0) `sha256:a2184bde2de353cf90eddabb81dd1c85ee5ceec3f6914af58db453ee2c13197f`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [98ca953b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/98ca953ba6955401023e219f37e0af49879355d2) `sha256:7ca513675dbe0e79573c841589f823a39d7eada90e0a41a39ee94fa7348242bc`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [ab40b611](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/ab40b61142a30f21eec8301b2e98f2fafb25164b) `sha256:dd12e5771a31f16c83c707ad28a9f4dde97ede79379e31880ce678e964d1c244`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [ff3a4f02](https://github.com/openshift/cluster-monitoring-operator/commit/ff3a4f0218f4985874f2ab872f6f6f440a38e17d) `sha256:e60530a77777fa413558e66ff0339ae782a3badf9dcd491dc0c642edcb87d953`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:0ca3d57b8877810f82784753ba1bc8b67a764245e0530addc811cad61843f039`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [2b2ba3be](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e) `sha256:9d108d09eb9a9c98cc7665a3dd68d93917bdb05b30f6269bb3a00c7218fac306`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:0d24d9508157347f020c6b99eefef619585dc37542b36f45ca62e10330e4deef`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2ce31fc5](https://github.com/openshift/cluster-update-keys/commit/2ce31fc513224e76ac5924addc6207c205d95742) `sha256:772397f5e6cf6068df029ec793486d9ae08d0af8098cae011a4ce986be675425`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b877222b](https://github.com/openshift/configmap-reload/commit/b877222b8c5527450447079e33d86dd9fe288e54) `sha256:9c9c5a3e7e9909130823093870ac570b67be9bb5dd35906af266ef6391cd1354`
* [console-operator](https://github.com/openshift/console-operator) git [253854e7](https://github.com/openshift/console-operator/commit/253854e7e529fb42e90b71038eff4aabf8f31cf7) `sha256:a46f91522c131f3dc43a0f35973752bb7c27914f122f208e3e1837da09ff909f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:19647286f9c75dd092be4de0edb723882af3961300a18c4aed6881bf259e6c70`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:44ab8531897438f9b25f0b6d90e5b224e3928a3f12f8b24dd18113d7bbb40ece`
* [coredns](https://github.com/openshift/coredns) git [d3b441c1](https://github.com/openshift/coredns/commit/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1) `sha256:8be1b918af3a97bea0f8aaddd1920fabdd64d23621ae73fb61a403c611515c3a`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:1a4d5f47f9f0bf1054fd192251f1c84f20acdd4a2f839e333091daf83c549584`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [6a72c254](https://github.com/openshift/csi-driver-nfs/commit/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7) `sha256:470652ca1988e7b75fe22f5b211175ffeb91c8fd4a602c40f92f3b22e8567655`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [027a8c4e](https://github.com/openshift/csi-driver-shared-resource/commit/027a8c4e106d7c02e1688c38015b8fd2bd94a304) `sha256:749ef641d5b6b47b6950988e3efc5cafc00495410f1ce16a276e2599a076d367`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:cdcd032de3bccab45d6c7cbb5d2ac3107eaff5b4b279d67f081a39ddc1320b49`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [027a8c4e](https://github.com/openshift/csi-driver-shared-resource/commit/027a8c4e106d7c02e1688c38015b8fd2bd94a304) `sha256:887ab068161de5a1ffb64a96515351bd02e81b0dc239c187f12128279b953ad8`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:9a65583194250712313a1e893bd5e03a9345a16c4f5174e9c9e6e7d18413bc9a`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:3ae17709e7c44b06b85543548ddfec54c8c1c04167ca10b8ab82e3cc4cf8a29b`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ab87a938](https://github.com/openshift/csi-external-resizer/commit/ab87a93853882d6ede0a8fe0a61469cd4fa61a62) `sha256:deaf59f4cfc7254ab8b35634ac18281cf88ff0ddc151d0498a21d6e91c30a4e3`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:cf848a2e0ca5bdcb850bef50193c8db40c18521c2e5d7f1b5658329a485f8d42`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [075ebcdc](https://github.com/openshift/csi-livenessprobe/commit/075ebcdcb83929571fbea0a4d8ef5e2429e7a259) `sha256:150cf47c016ea3a318be89b0fb80b5f81a3ddc38aaaae9f4f9ab08478b054a85`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [436a1f33](https://github.com/openshift/csi-node-driver-registrar/commit/436a1f334dd75ae75206f52223b7933f7ff5036f) `sha256:6bf2240cfccf984fdc0a6f33318c681704a495d62527d2f7242934f098378221`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:5d1dd18616427bc717e49b781e6434ca616c31fc7daeb5596d1703f2d3379ef2`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:4ca3355941315a1db451ba8c6ce329c2f7d0286b3585196a30e1ed35ba1ee228`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:8edadcbdbe43b80cea7a3076897e893c8e3d974c6cea165cd8ecb00e03d1ce78`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:9d5ce7ba2746d808b7bda9c491ecbaa158917b2659546eb9be7752d14a79f845`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:35098fdc72303c21755abaad4cc05553d6c969dc601d6a2ab91d7aabcadf923e`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9c561f2d](https://github.com/openshift/cluster-api-provider-gcp/commit/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f) `sha256:6433c81cd98c85abe6b1bbd8e74a776462ad78575cc6bde0664458ed685611ac`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c770b412](https://github.com/openshift/gcp-pd-csi-driver/commit/c770b41229e39d8859fc11ec709ab57a0e0ad06a) `sha256:ba5d03691cb09bc208c30c6c9ce746911468a4fb772dbef5520f723063bf2a94`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:3bf929bf48fec827cf4f54ff5fec04de0740b1f14a4e1da63ad580bb9245a103`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:3d72794fcd40b847e3fbaf3529231fe9149a6dede2a45dfe31fbd306df9b50b9`
* [haproxy-router](https://github.com/openshift/router) git [a33f2b6a](https://github.com/openshift/router/commit/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a) `sha256:1c122143be877d7d89163a4c9f3780eef8b8686057ad1889aa3102321e54a98c`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:1384411d0b3794e280491e0b0e14252c5e4f9e43e58e6602b0442ab9a3fb2b0c`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [8443d86b](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/8443d86bf284684b7849fa76d40795d141ef86d2) `sha256:e9876a36c4810b4e68e1f6668d3324d8e71ba145f3d214007bc4486375d55be3`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [b698ea3e](https://github.com/openshift/ironic-rhcos-downloader/commit/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818) `sha256:1726d045b526bd930e04ceaa125da6477f7a44b18c9b01f723ff3cc1320da9ba`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:dcb142b3a5afe0e7b7a51a1c94661855bd54776ca51575630bc43f02ba12c554`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [e870adbd](https://github.com/openshift/kubernetes-metrics-server/commit/e870adbd46e2b0f9afa88227f951b37d5ba4dc0c) `sha256:233be71aea1d6daf6162eb3a7f91c2f052b47e3ad1d8778e519761c678a32327`
* [kube-proxy](https://github.com/openshift/sdn) git [dee082de](https://github.com/openshift/sdn/commit/dee082def2014ab85a0e5ff9a056d3fe2461eab7) `sha256:cbafb2565fe2baf4d54fe0cc5ad883bbe0632a4736771f55dd55b9d3823a7716`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [7718265c](https://github.com/openshift/kube-rbac-proxy/commit/7718265cc7640f6fa0d75eee366e424911d6f00f) `sha256:74af69d301e49c08c9c0fab6bf929b6443beddf21d578273fd332ec73d7b8a24`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [462e63f6](https://github.com/openshift/kube-state-metrics/commit/462e63f6223817d3610f030f6166a790d793c572) `sha256:bfd60907c9836d089067b19a287d3267fa9ab98e09420e6a4f0e1ffb51506d04`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [34fafc04](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/34fafc04e5f2872e282617da31175a7e091ffdb2) `sha256:63059adfd5fb0042f492f3fdf938beb0de950f3c86fcef51fd595099e3638e51`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:352ba91a72d19fa2b0006740b6e0e22b9824f73d3fad3ccf3cfdee0735525aab`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:fa4bd7d988c14418df8c332de4fea3b5ea57dc0727a461f68472925aa6eb9696`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [74bee374](https://github.com/openshift/image-customization-controller/commit/74bee37482b0e9d581c2e12c8040195169e49032) `sha256:8bd8caf2fac84354a4407c48651d11d055c90e09f06ea57c1825d2be59ca18fc`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [076f0caa](https://github.com/openshift/multus-admission-controller/commit/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7) `sha256:878826b56658eac597d692338bc3e7d469568776c9d6f71c11b63bcd0932e01a`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7d01ea1c](https://github.com/openshift/multus-networkpolicy/commit/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8) `sha256:93e501b312ea23b290e46c14787acecdb02636333f5388429b5400bc4599be9b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:5784e4d821cc26ffffad6e6e3ed101fc2842ebc3d89b16eac041dde506c1ce01`
* [must-gather](https://github.com/openshift/must-gather) git [56b34277](https://github.com/openshift/must-gather/commit/56b34277f6e67963db422373c360509176e5565a) `sha256:60ec7816beae30bef25a0a50633d77cb669c472d4f1adb0356b547c13cdc2282`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8630f336](https://github.com/openshift/bond-cni/commit/8630f336431ccca04de465f991dbdf3ab736913b) `sha256:66eb46a96bd308c39af00caad02b3dd77cc7d1dedfba70ead48c9390dc9ca9f9`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [ddb486ae](https://github.com/openshift/network-metrics-daemon/commit/ddb486ae8c68d228a1421c779ec8fe35fc436ccb) `sha256:0e47e27fce44f690b6b358249a26dd334d40d77a934c289f5c6d700825339850`
* [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:4b75b7fd029742eb75968481f181fd1f219b6b9fa0da0b48987cf988ca48d5f1`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:065ce9ed541af2ee48a9c7d803865180f3c0431c2e96edfa1b09bab0bbbf40bf`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [68aa2bbf](https://github.com/openshift/machine-api-provider-nutanix/commit/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0) `sha256:d8add7c0ed65ac5c6a053c21fe96fe8955b6541f9b05a47863974d18a7021ad4`
* [oauth-server](https://github.com/openshift/oauth-server) git [5a70bcef](https://github.com/openshift/oauth-server/commit/5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db) `sha256:a033f65ebaddebea7d66135299e2fe0451f3b3c939ff26c77c3bcdb053c581dd`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:2b350e41bc865f8cf3d91ec774a1ef90efcb1dc695031d54cfcbcba445ec576b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1e963eb5](https://github.com/openshift/openshift-state-metrics/commit/1e963eb5839e2408734e37765d4d6b8fc48b343d) `sha256:62724925ca3ab5c18ebd7692e89e41ecf7e0d33176850f67eeae9692a6927cb5`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:213222f7adf001b898109567c42c82d6d9325ee707615caa1ac0fc15fae574f0`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [23512b67](https://github.com/openshift/cluster-api-provider-openstack/commit/23512b675c57095bc03ac0da8cad39561d6aef9b) `sha256:ba3ced5cd94c0bcc2a3295ce47dc28a60078d7db8c4edf2bc8d6f5b12d573879`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [68971874](https://github.com/openshift/machine-api-provider-openstack/commit/689718740b923e516c037d7862d81a462ecdbbd3) `sha256:1396e057385c7d8da1dc40c52033b1bbbedab984703de3e484cfea750652b224`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:0c5c2dc265383ca172155921b1984557dc71532d880ee3f105d86b736d46f48d`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:1d55ee07b1be3dbd3b9a2e46aa5b8eeceb055c531c49362ace9423327fbf57bc`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:d08894b4f991791b4f1a1603c215538b1b6ebed430e07533287abf86baa2c3cd`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:9fdf5e3812eef56895b938f68f8d148c2888158d01fcd817ef8292deff66fc34`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:5ce97b705cd6ea00a6d5517f13e468c0b2bbe902d425ec3048d90d7dbdc7bedf`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [d80e9044](https://github.com/openshift/prom-label-proxy/commit/d80e904430effd51a5f00bf6345a2108b33bc15e) `sha256:db3b3649eec224de4af5c5223bf4928f8e302c5f54ec9d501ce8bb71c3c627a3`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [d7c1a7c6](https://github.com/openshift/prometheus-alertmanager/commit/d7c1a7c6ac4b5482174797649834a47fc39d2575) `sha256:693a75146dc6f1436bc4998d59185e379a695b57c7e9d20945e84589fb142d6d`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [77cedd6c](https://github.com/openshift/prometheus-operator/commit/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867) `sha256:a8739133a6616a7a34ef4cbd7eeb731b3839d4e5ac4d5f2ef52894b493b0503e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d88fd69b](https://github.com/openshift/node_exporter/commit/d88fd69b579485146a584e8640c82a09daed2d5e) `sha256:ba960fd338ec7abcc2a936137587076f80ec113a081be8d1df91fec8d3ce09df`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [77cedd6c](https://github.com/openshift/prometheus-operator/commit/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867) `sha256:c0d1e70914880e19b13f1c899623c78b880777ffd0d54f813a8c78f2f172a4d2`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [77cedd6c](https://github.com/openshift/prometheus-operator/commit/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867) `sha256:b064cb6d4991fa87e75776f37bb8602d006e296d213f5bbd6b47c6de2903f152`
* rhel-coreos `sha256:2ff359d354396fbb2e16c7daf5333f3e46293bc372f21faf4805b21abfcd6ac4`
* rhel-coreos-extensions `sha256:ad7d7f59ce4297d875e78cbfbf77c28f90126288981f1e4e050f9631abc63835`
* [telemeter](https://github.com/openshift/telemeter) git [e2b25245](https://github.com/openshift/telemeter/commit/e2b25245eb81ba6bc3821574f889678ceae1b16a) `sha256:93a0c6f59c4f920371c1210668bc5c0a9d6fca17dfe978d8427f772464e16af4`
* [thanos](https://github.com/openshift/thanos) git [5b567365](https://github.com/openshift/thanos/commit/5b567365230115e5c242dd719110bac52fc2a4ef) `sha256:171a666373eefa0b34cc77d1c1e1361020055746c641f81bdf55581304ef1a45`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [097d823b](https://github.com/openshift/cloud-provider-vsphere/commit/097d823bd10abbc6cd016c34a1c5c3cd1b514031) `sha256:4dec733ed9c56865b1cc97f2f82ecf81ce6c7949cee3b6a1599075e54f893d67`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1661cc3f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1661cc3f7997902caf0ea71fbef9ea394f3b14ef) `sha256:8f5f4a8c8d9b31039b46e2297ba597600522fefd00eb2472c4f7a64739136723`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [039ee368](https://github.com/openshift/vmware-vsphere-csi-driver/commit/039ee3684d5addee3ff8436b19462def77bd5804) `sha256:19295e454699d1dd59b159aef11ca3d4d410f051d5344dd1b0aff527fc3088dd`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [039ee368](https://github.com/openshift/vmware-vsphere-csi-driver/commit/039ee3684d5addee3ff8436b19462def77bd5804) `sha256:768cb3d11c268969e4eb1759e8d67394501e51380d2e498e3d3b06ddb98d6a29`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [cd0df71f](https://github.com/openshift/vsphere-problem-detector/commit/cd0df71f2ec22d84676f40b042d4603e9c94c360) `sha256:8f0fc81d0fa8ab13f02d4aa1827cf2e48b4de3d7b8f46b612fe1483f8e34f559`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/a020810d9bf1b2f4b55158e418a5e36ac043385a)

* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Revert go-jose from v4.0.5 to v0.3.04 (#7605) [#7605](https://github.com/openshift/assisted-service/pull/7605)
* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) [#7574](https://github.com/openshift/assisted-service/pull/7574)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) [#7484](https://github.com/openshift/assisted-service/pull/7484)
* [OCPBUGS-48390](https://issues.redhat.com/browse/OCPBUGS-48390): Bump moby from v26.0.0 to v27.2.1 (#7188) [#7188](https://github.com/openshift/assisted-service/pull/7188)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7129) [#7129](https://github.com/openshift/assisted-service/pull/7129)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b2babb90b439acef3b05ccd8400b49b7ef9ecada...a020810d9bf1b2f4b55158e418a5e36ac043385a)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6a8ebdd16729ed8f81c83a2a3efbd81be2495637)

* [OCPBUGS-53719](https://issues.redhat.com/browse/OCPBUGS-53719): Bump jwt to 4.5.2 in release-4.17 (#1086) [#1086](https://github.com/openshift/assisted-installer/pull/1086)
* abi: let the bootstrap waiting for workers before rebooting (#1028) [#1028](https://github.com/openshift/assisted-installer/pull/1028)
* [OCPBUGS-47493](https://issues.redhat.com/browse/OCPBUGS-47493): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) [#989](https://github.com/openshift/assisted-installer/pull/989)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/89f9cbab469a4433318c30f548ae02468b20fd2f...6a8ebdd16729ed8f81c83a2a3efbd81be2495637)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/24cbafb5bb40869cb00ac6f7f9494ebeccb8a539)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#986) [#986](https://github.com/openshift/assisted-installer-agent/pull/986)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) [#798](https://github.com/openshift/assisted-installer-agent/pull/798)
* [OCPBUGS-53711](https://issues.redhat.com/browse/OCPBUGS-53711): Bump jwt to 4.5.2 in release-4.17 (#964) [#964](https://github.com/openshift/assisted-installer-agent/pull/964)
* NO-ISSUE: Increase image pull timeout during install (#922) [#922](https://github.com/openshift/assisted-installer-agent/pull/922)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#873) [#873](https://github.com/openshift/assisted-installer-agent/pull/873)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/29149b7793e1f15dcb0e39a54e79fddcac744ff8...24cbafb5bb40869cb00ac6f7f9494ebeccb8a539)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d09f3179fdc353006b1cbb16bab3e740dcb586be)

* [OCPBUGS-53727](https://issues.redhat.com/browse/OCPBUGS-53727): bump to github.com/golang-jwt/jwt/v4@v4.5.2 [#546](https://github.com/openshift/cluster-api-provider-aws/pull/546)
* [OCPBUGS-51309](https://issues.redhat.com/browse/OCPBUGS-51309): UPSTREAM: 5339: Bump glog for recent fixes [#539](https://github.com/openshift/cluster-api-provider-aws/pull/539)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/1f1c59f0ffd0bda9101e74356142e62305259590...d09f3179fdc353006b1cbb16bab3e740dcb586be)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cc862109d5a24f4b246af6bd4b1404dbf4227be0)

* [OCPBUGS-46512](https://issues.redhat.com/browse/OCPBUGS-46512): remove EFS driver metrics [#350](https://github.com/openshift/csi-operator/pull/350)
* [OCPBUGS-44974](https://issues.redhat.com/browse/OCPBUGS-44974): Set separate secrets for file and disk config on HyperShift [#331](https://github.com/openshift/csi-operator/pull/331)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d27753a267f723bab2ce7b28f5d164024f847feb...cc862109d5a24f4b246af6bd4b1404dbf4227be0)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56)

* [OCPBUGS-51232](https://issues.redhat.com/browse/OCPBUGS-51232): github.com/go-jose/go-jose/v4 v4.0.5 [#202](https://github.com/openshift/aws-pod-identity-webhook/pull/202)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/b91c75bd2948189a150061ef799d688d75cf2a1d...80efc4ea7cdec14eb5d552ace3fdac7049b4fb56)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/f1e56a2244ba5ac4deda50e103b4764f963c4a83)

* [OCPBUGS-53495](https://issues.redhat.com/browse/OCPBUGS-53495): bump golang-jwt v4 [#12](https://github.com/openshift/azure-kubernetes-kms/pull/12)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4...f1e56a2244ba5ac4deda50e103b4764f963c4a83)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/0bff150f6641f68c3712b3b83367c64bc52cfabd)

* [OCPBUGS-54393](https://issues.redhat.com/browse/OCPBUGS-54393): Re-reconcile machine on NIC provisioning failure [#136](https://github.com/openshift/machine-api-provider-azure/pull/136)
* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unused vnet package [#130](https://github.com/openshift/machine-api-provider-azure/pull/130)
* [OCPBUGS-50017](https://issues.redhat.com/browse/OCPBUGS-50017): dynamically setting the amount of fault domains [#127](https://github.com/openshift/machine-api-provider-azure/pull/127)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/d69a3e35d8cb0c9497eab723563f18d46f860bb8...0bff150f6641f68c3712b3b83367c64bc52cfabd)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/6707f899c269e98a102ac72900bb96fa826ba652)

* [OCPBUGS-53799](https://issues.redhat.com/browse/OCPBUGS-53799): github.com/golang-jwt/jwt/v4 v4.5.2 [#32](https://github.com/openshift/azure-workload-identity/pull/32)
* [OCPBUGS-51234](https://issues.redhat.com/browse/OCPBUGS-51234): github.com/go-jose/go-jose/v4 v4.0.5 [#28](https://github.com/openshift/azure-workload-identity/pull/28)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/75b1b4ce871da06195b39da0eddd7a68496e4a59...6707f899c269e98a102ac72900bb96fa826ba652)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/8754bf63984c6879e34abf8413e27e9811bf0655)

* [OCPBUGS-47049](https://issues.redhat.com/browse/OCPBUGS-47049): Bump x/net to 0.33.0 [#32](https://github.com/openshift/cluster-api-provider-metal3/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e6d2bd4f848a0137040e618c2df4eecce4caed7...8754bf63984c6879e34abf8413e27e9811bf0655)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/5e4e2af58d0ba03707b21d6511cbb83ae97fcad7)

* [OCPBUGS-55224](https://issues.redhat.com/browse/OCPBUGS-55224): Fix Load balancer IP setup [#9675](https://github.com/openshift/installer/pull/9675)
* [OCPBUGS-51116](https://issues.redhat.com/browse/OCPBUGS-51116): update resolv.conf every time on bootstrap node [#9504](https://github.com/openshift/installer/pull/9504)
* [OCPBUGS-51210](https://issues.redhat.com/browse/OCPBUGS-51210): Fixes panic during GCP tags fetch due to unstable network [#9512](https://github.com/openshift/installer/pull/9512)
* [OCPBUGS-46375](https://issues.redhat.com/browse/OCPBUGS-46375): Allow spaces in the aws tags [release-4.17] [#9315](https://github.com/openshift/installer/pull/9315)
* [OCPBUGS-54357](https://issues.redhat.com/browse/OCPBUGS-54357): IBMCloud: Move to IBM TF openshift fork [#9613](https://github.com/openshift/installer/pull/9613)
* [OCPBUGS-53378](https://issues.redhat.com/browse/OCPBUGS-53378): Remove error logging when determining image arch [#9581](https://github.com/openshift/installer/pull/9581)
* [OCPBUGS-53459](https://issues.redhat.com/browse/OCPBUGS-53459): aws: fix NLB creation in secret regions [#9071](https://github.com/openshift/installer/pull/9071)
* [OCPBUGS-52961](https://issues.redhat.com/browse/OCPBUGS-52961): Remove tmp directory used for agent pxe files [#9552](https://github.com/openshift/installer/pull/9552)
* [OCPBUGS-43528](https://issues.redhat.com/browse/OCPBUGS-43528): Prevent race with provisioning-interface service [#9110](https://github.com/openshift/installer/pull/9110)
* [OCPBUGS-44058](https://issues.redhat.com/browse/OCPBUGS-44058): Log correct hostname for validation status [#9162](https://github.com/openshift/installer/pull/9162)
* [OCPBUGS-50967](https://issues.redhat.com/browse/OCPBUGS-50967): PowerVS: destroy dhcp hack [#9494](https://github.com/openshift/installer/pull/9494)
* [OCPBUGS-50846](https://issues.redhat.com/browse/OCPBUGS-50846): OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest [#9470](https://github.com/openshift/installer/pull/9470)
* [OCPBUGS-50876](https://issues.redhat.com/browse/OCPBUGS-50876): correct typo [#9484](https://github.com/openshift/installer/pull/9484)
* [OCPBUGS-49975](https://issues.redhat.com/browse/OCPBUGS-49975): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9445](https://github.com/openshift/installer/pull/9445)
* [OCPBUGS-48761](https://issues.redhat.com/browse/OCPBUGS-48761): Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 [#9448](https://github.com/openshift/installer/pull/9448)
* [OCPBUGS-49993](https://issues.redhat.com/browse/OCPBUGS-49993): Disable IP Forwarding for CAPG Machines [#9446](https://github.com/openshift/installer/pull/9446)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure: Update SecurityType passed in at Image creation [#9409](https://github.com/openshift/installer/pull/9409)
* [OCPBUGS-49362](https://issues.redhat.com/browse/OCPBUGS-49362): [Nutanix] Installation failed with timeout when uploading images to PC [#9406](https://github.com/openshift/installer/pull/9406)
* [OCPBUGS-48645](https://issues.redhat.com/browse/OCPBUGS-48645): azure: use separate /var to avoid growfs timeouts [#9381](https://github.com/openshift/installer/pull/9381)
* [OCPBUGS-45340](https://issues.redhat.com/browse/OCPBUGS-45340): move GCP zone filtering client-side [#9264](https://github.com/openshift/installer/pull/9264)
* [OCPBUGS-48257](https://issues.redhat.com/browse/OCPBUGS-48257): remove the types which failed by RHEL-59521 and add the new gpu vm type [#9354](https://github.com/openshift/installer/pull/9354)
* [OCPBUGS-45813](https://issues.redhat.com/browse/OCPBUGS-45813): Remove unused variable from ASH arm template 06_workers.json [#9285](https://github.com/openshift/installer/pull/9285)
* [OCPBUGS-48359](https://issues.redhat.com/browse/OCPBUGS-48359): Allow more time for Service Account Creation [#9362](https://github.com/openshift/installer/pull/9362)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): support additionalNTPSources in node-joiner tool [#9265](https://github.com/openshift/installer/pull/9265)
* [OCPBUGS-48119](https://issues.redhat.com/browse/OCPBUGS-48119): Always set AllowCrossTenantReplication parameter to false [#9346](https://github.com/openshift/installer/pull/9346)
* [OCPBUGS-46432](https://issues.redhat.com/browse/OCPBUGS-46432): Power VS: Create region-zone-sysType hierarchy [#9319](https://github.com/openshift/installer/pull/9319)
* [Full changelog](https://github.com/openshift/installer/compare/baa59e5213e017d66a818c975f6093b1db697dda...5e4e2af58d0ba03707b21d6511cbb83ae97fcad7)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/6e7aa77e5e144adc97b498ada5a6ab400f97ca39)

* [OCPBUGS-46646](https://issues.redhat.com/browse/OCPBUGS-46646): Bump x/net to 0.33.0 [#225](https://github.com/openshift/cluster-api-provider-baremetal/pull/225)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/2549061c570a7ff152c66322978bb142647b8b4e...6e7aa77e5e144adc97b498ada5a6ab400f97ca39)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e6e5d54abf92a20d1b0d273a90581206b7ca0b15)

* [OCPBUGS-53325](https://issues.redhat.com/browse/OCPBUGS-53325): BMO can expose any secret via BMCEventSubscription CRD [#406](https://github.com/openshift/baremetal-operator/pull/406)
* [OCPBUGS-42387](https://issues.redhat.com/browse/OCPBUGS-42387): Remove dataImage finalizer if BMH is missing [#390](https://github.com/openshift/baremetal-operator/pull/390)
* [OCPBUGS-49701](https://issues.redhat.com/browse/OCPBUGS-49701): Handle HFC for non-redfish HW [#395](https://github.com/openshift/baremetal-operator/pull/395)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/94748225f29f3a7ef7dfe5844219c3856a421903...e6e5d54abf92a20d1b0d273a90581206b7ca0b15)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/8956d91bd982929d780580b8e2fe5f5351dad881)

* [OCPBUGS-48766](https://issues.redhat.com/browse/OCPBUGS-48766): Extend haproxy-monitor fall time [#340](https://github.com/openshift/baremetal-runtimecfg/pull/340)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/e1f3e0d105247d8a53fafe53de33a4ce92b88c41...8956d91bd982929d780580b8e2fe5f5351dad881)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0000b3ef257d07f423dfdf9b6d274214d1b0c846)

* [OCPBUGS-49607](https://issues.redhat.com/browse/OCPBUGS-49607): Address `golang.org/x/*` CVEs [#1962](https://github.com/openshift/oc/pull/1962)
* [OCPBUGS-50984](https://issues.redhat.com/browse/OCPBUGS-50984): Add HOST env var in oc debug for sos report collects more [#1976](https://github.com/openshift/oc/pull/1976)
* [OCPBUGS-49605](https://issues.redhat.com/browse/OCPBUGS-49605): Address `github.com/docker/docker` CVE [#1968](https://github.com/openshift/oc/pull/1968)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): additional rbac policy rules [#1937](https://github.com/openshift/oc/pull/1937)
* [Full changelog](https://github.com/openshift/oc/compare/f4525b82d768063bf14d5f15f0998d2217b7b792...0000b3ef257d07f423dfdf9b6d274214d1b0c846)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/8dff677d9916b7272e7552ae17a175f7272f16cf)

* [OCPBUGS-53415](https://issues.redhat.com/browse/OCPBUGS-53415): github.com/golang/glog v1.2.4 [#842](https://github.com/openshift/cloud-credential-operator/pull/842)
* [OCPBUGS-53823](https://issues.redhat.com/browse/OCPBUGS-53823): update github.com/golang-jwt/jwt [#838](https://github.com/openshift/cloud-credential-operator/pull/838)
* [OCPBUGS-51548](https://issues.redhat.com/browse/OCPBUGS-51548): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#828](https://github.com/openshift/cloud-credential-operator/pull/828)
* [OCPBUGS-51238](https://issues.redhat.com/browse/OCPBUGS-51238): github.com/go-jose/go-jose/v4 v4.0.5 [#825](https://github.com/openshift/cloud-credential-operator/pull/825)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a046a6fe8bdedd2744946d5eeffffd13327e6ac6...8dff677d9916b7272e7552ae17a175f7272f16cf)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/f641a4c6f858607f233866bb835704e784d57ef2)

* [OCPBUGS-54580](https://issues.redhat.com/browse/OCPBUGS-54580): Avoid duplicate OAuth client creation [#765](https://github.com/openshift/cluster-authentication-operator/pull/765)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/246d3726b1c541ef2bbe6def95783bee60b12a58...f641a4c6f858607f233866bb835704e784d57ef2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/12bd2a96d2cfcd4ca8715cbe144af2d0409d1563)

* [OCPBUGS-54325](https://issues.redhat.com/browse/OCPBUGS-54325): improve replica counting and decrease target size behavior [#352](https://github.com/openshift/kubernetes-autoscaler/pull/352)
* [OCPBUGS-48606](https://issues.redhat.com/browse/OCPBUGS-48606): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#337](https://github.com/openshift/kubernetes-autoscaler/pull/337)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/db8cb6812faa09b840d67d16a55277c2f4835ba3...12bd2a96d2cfcd4ca8715cbe144af2d0409d1563)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/caa33e34f41c689d4043550f1efe4716279a3581)

* [OCPBUGS-54542](https://issues.redhat.com/browse/OCPBUGS-54542): Add missing relatedObjects [#469](https://github.com/openshift/cluster-baremetal-operator/pull/469)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a...caa33e34f41c689d4043550f1efe4716279a3581)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)

* [OCPBUGS-48493](https://issues.redhat.com/browse/OCPBUGS-48493): fix: always update clusteroperator status versions when differing [#250](https://github.com/openshift/cluster-capi-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/f4bca806981f51160b5e5d69aa87d6e3cee15dac...6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)


### [cluster-config-api](https://github.com/openshift/api/tree/ace59d6ad5ceb98ff1d0760da329654f68b39d66)

* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2186](https://github.com/openshift/api/pull/2186)
* [OCPBUGS-39130](https://issues.redhat.com/browse/OCPBUGS-39130): Added checks to prevent vCenters from changing after install past 1 vCenter [#2014](https://github.com/openshift/api/pull/2014)
* [Full changelog](https://github.com/openshift/api/compare/0a88001628266522c84e6c6c25ed5a44aced6d8b...ace59d6ad5ceb98ff1d0760da329654f68b39d66)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/81507f04686df3e16793b270084ead0a2a67fb38)

* [OCPBUGS-52497](https://issues.redhat.com/browse/OCPBUGS-52497): [release-4.17] Add runbook_url for CoreDNSErrorsHigh [#430](https://github.com/openshift/cluster-dns-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7...81507f04686df3e16793b270084ead0a2a67fb38)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/50f554151e66f6339d5d49e9c9d6c8b96ec7e960)

* [OCPBUGS-53511](https://issues.redhat.com/browse/OCPBUGS-53511): fix CVE-2025-30204 [#1414](https://github.com/openshift/cluster-etcd-operator/pull/1414)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/975fc013a240a003f23e51b9dcd9bfcdb112e801...50f554151e66f6339d5d49e9c9d6c8b96ec7e960)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ce3e4844f80923ce0aa791a54933add7b867cf6c)

* [OCPBUGS-51103](https://issues.redhat.com/browse/OCPBUGS-51103): ensure that storage names don't end in dashes [#1180](https://github.com/openshift/cluster-image-registry-operator/pull/1180)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/46b5602933182b749b36727d97f1ee9f9d9ee15e...ce3e4844f80923ce0aa791a54933add7b867cf6c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)

* [OCPBUGS-50516](https://issues.redhat.com/browse/OCPBUGS-50516): Increase waitForFallbackDegradedConditionTimeout [#1803](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1803)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/aa95a2b0ecfe4892d6a936bb2da58412edce0fe0...4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)

* [OCPBUGS-48155](https://issues.redhat.com/browse/OCPBUGS-48155): Fix race condition in CO status controller test [#266](https://github.com/openshift/cluster-machine-approver/pull/266)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/9e1cff1f7a65714026e97ea6e0413b09b85bc3e6...acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5f2fe68003e8f17304d7000f8672a0f6ff2eaf8b)

* [OCPBUGS-55033](https://issues.redhat.com/browse/OCPBUGS-55033): Add IPv6 NGINX configuration [#2689](https://github.com/openshift/cluster-network-operator/pull/2689)
* [OCPBUGS-52951](https://issues.redhat.com/browse/OCPBUGS-52951): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2654](https://github.com/openshift/cluster-network-operator/pull/2654)
* [OCPBUGS-49816](https://issues.redhat.com/browse/OCPBUGS-49816): ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs [#2655](https://github.com/openshift/cluster-network-operator/pull/2655)
* [OCPBUGS-49961](https://issues.redhat.com/browse/OCPBUGS-49961): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2642](https://github.com/openshift/cluster-network-operator/pull/2642)
* : OCPBUGS-44863: Add nodeslicepool [#2574](https://github.com/openshift/cluster-network-operator/pull/2574)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807): ovn-k, cudn: Add missing permissions to ovnkube-node [#2575](https://github.com/openshift/cluster-network-operator/pull/2575)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/37be1f8c3b4296048a2bd385ffc6636fc3603f38...5f2fe68003e8f17304d7000f8672a0f6ff2eaf8b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b6712f369eddb39fa68021ffb3d31fed7e5663a6)

* use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) [#1290](https://github.com/openshift/cluster-node-tuning-operator/pull/1290)
* Add missing Polarion test case id (#1288) [#1288](https://github.com/openshift/cluster-node-tuning-operator/pull/1288)
* e2e: tuned degraded test fix (#1259) [#1259](https://github.com/openshift/cluster-node-tuning-operator/pull/1259)
* [OCPBUGS-48213](https://issues.redhat.com/browse/OCPBUGS-48213): [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) [#1277](https://github.com/openshift/cluster-node-tuning-operator/pull/1277)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f9369349180a295972d4031945f1b34dc7fc8dce...b6712f369eddb39fa68021ffb3d31fed7e5663a6)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/b05a249d6919978217aefa7060951af078eac931)

* [OCPBUGS-47770](https://issues.redhat.com/browse/OCPBUGS-47770): Add team members to the OWNERS file [#375](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/375)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2b962c71d5b3ac179898dc1ece6a98de0b33cd70...b05a249d6919978217aefa7060951af078eac931)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/7e221ddfda62299e969a96b56a7708f5e609b45f)

* [OCPBUGS-55042](https://issues.redhat.com/browse/OCPBUGS-55042): Adding mutex to func createSamples on handler.go [#632](https://github.com/openshift/cluster-samples-operator/pull/632)
* [OCPBUGS-54362](https://issues.redhat.com/browse/OCPBUGS-54362): add rhdmalone to owners [#619](https://github.com/openshift/cluster-samples-operator/pull/619)
* [OCPBUGS-48786](https://issues.redhat.com/browse/OCPBUGS-48786): add shannon and aroyoredhat as owners [#595](https://github.com/openshift/cluster-samples-operator/pull/595)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd...7e221ddfda62299e969a96b56a7708f5e609b45f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e4b8dceaf16926b5e4b7fc339b240af00e9539c9)

* [OCPBUGS-52222](https://issues.redhat.com/browse/OCPBUGS-52222): fix Vsphere cluster Storage operator in Unavailable state [#560](https://github.com/openshift/cluster-storage-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/5683ea22810815595761ff9e5309c656a7392125...e4b8dceaf16926b5e4b7fc339b240af00e9539c9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b06c46276c7ac146925dc927202af97b66856a38)

* [OCPBUGS-50589](https://issues.redhat.com/browse/OCPBUGS-50589): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1154](https://github.com/openshift/cluster-version-operator/pull/1154)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/bc60dbd5f73b9f0548f0bb3aef0468a630362dce...b06c46276c7ac146925dc927202af97b66856a38)


### [console](https://github.com/openshift/console/tree/2fcf4cc2a85fd855afdc5e7cbcf28c85ca451931)

* [OCPBUGS-55202](https://issues.redhat.com/browse/OCPBUGS-55202): Do not load CSRs if user does not have permissions [#14985](https://github.com/openshift/console/pull/14985)
* [OCPBUGS-52999](https://issues.redhat.com/browse/OCPBUGS-52999): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14862](https://github.com/openshift/console/pull/14862)
* [OCPBUGS-53168](https://issues.redhat.com/browse/OCPBUGS-53168): Remove logoutOpenShift method call [#14883](https://github.com/openshift/console/pull/14883)
* [OCPBUGS-51277](https://issues.redhat.com/browse/OCPBUGS-51277): Fix JSON annotation parsing issue and harden related code [#14795](https://github.com/openshift/console/pull/14795)
* [OCPBUGS-53086](https://issues.redhat.com/browse/OCPBUGS-53086): Update the monitoring topic used by the console team [#14871](https://github.com/openshift/console/pull/14871)
* [OCPBUGS-52205](https://issues.redhat.com/browse/OCPBUGS-52205): Show Observe section without PROMETHEUS and MONITORING flags [#14811](https://github.com/openshift/console/pull/14811)
* [OCPBUGS-51292](https://issues.redhat.com/browse/OCPBUGS-51292): fix run time error when no completed version exists [#14796](https://github.com/openshift/console/pull/14796)
* [OCPBUGS-51126](https://issues.redhat.com/browse/OCPBUGS-51126): Fix alert rule link to alert in dev perspective [#14785](https://github.com/openshift/console/pull/14785)
* [OCPBUGS-49795](https://issues.redhat.com/browse/OCPBUGS-49795): 'create a Project' button on Getting started page doesn't work [#14714](https://github.com/openshift/console/pull/14714)
* [OCPBUGS-39602](https://issues.redhat.com/browse/OCPBUGS-39602): Set default build option as BUILDS for Builder Image sample [#14241](https://github.com/openshift/console/pull/14241)
* [OCPBUGS-45740](https://issues.redhat.com/browse/OCPBUGS-45740): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14595](https://github.com/openshift/console/pull/14595)
* [OCPBUGS-45625](https://issues.redhat.com/browse/OCPBUGS-45625): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14589](https://github.com/openshift/console/pull/14589)
* [OCPBUGS-41596](https://issues.redhat.com/browse/OCPBUGS-41596): No need to supply 'User workload notifications' option on 'User Preference' page for normal user [#14265](https://github.com/openshift/console/pull/14265)
* [OCPBUGS-44220](https://issues.redhat.com/browse/OCPBUGS-44220): disable flaking and change pre-condition test for knative e2e [#14467](https://github.com/openshift/console/pull/14467)
* [OCPBUGS-43751](https://issues.redhat.com/browse/OCPBUGS-43751): Added token to proxy header [#14430](https://github.com/openshift/console/pull/14430)
* [OCPBUGS-48161](https://issues.redhat.com/browse/OCPBUGS-48161): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14667](https://github.com/openshift/console/pull/14667)
* [OCPBUGS-48227](https://issues.redhat.com/browse/OCPBUGS-48227): fix navigation from non-General User Preference tab to… [#14674](https://github.com/openshift/console/pull/14674)
* [Full changelog](https://github.com/openshift/console/compare/edbd12ecafccc067c441c47e373ef2f7353b5a5c...2fcf4cc2a85fd855afdc5e7cbcf28c85ca451931)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/0e338e1e82923f108be2315f7885b8b28e18d159)

* [OCPBUGS-52416](https://issues.redhat.com/browse/OCPBUGS-52416): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#319](https://github.com/openshift/cloud-provider-openstack/pull/319)
* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#314](https://github.com/openshift/cloud-provider-openstack/pull/314)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f5b13c522e62538892fa90e1e5ddc89fc31dc538...0e338e1e82923f108be2315f7885b8b28e18d159)


### [docker-builder](https://github.com/openshift/builder/tree/2bfbba1a477574840db035ad1024c9e4b317bc8f)

* [OCPBUGS-53075](https://issues.redhat.com/browse/OCPBUGS-53075): Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 [#465](https://github.com/openshift/builder/pull/465)
* [OCPBUGS-42894](https://issues.redhat.com/browse/OCPBUGS-42894): buildah dependency bump to 1.37.6 [#452](https://github.com/openshift/builder/pull/452)
* [OCPBUGS-33889](https://issues.redhat.com/browse/OCPBUGS-33889): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 [#393](https://github.com/openshift/builder/pull/393)
* [OCPBUGS-47768](https://issues.redhat.com/browse/OCPBUGS-47768): Add team members to the OWNERS file [#423](https://github.com/openshift/builder/pull/423)
* [Full changelog](https://github.com/openshift/builder/compare/bb33e13854b02c5e0fc98beae0f8a5cbe25f0c07...2bfbba1a477574840db035ad1024c9e4b317bc8f)


### [docker-registry](https://github.com/openshift/image-registry/tree/fe9b400ea5cf5121f5a867a620ea349fd8493c36)

* [OCPBUGS-49695](https://issues.redhat.com/browse/OCPBUGS-49695): bump docker distribution [#422](https://github.com/openshift/image-registry/pull/422)
* [Full changelog](https://github.com/openshift/image-registry/compare/ef9fa95763754c05beb32e1ddca406de67ae4bd6...fe9b400ea5cf5121f5a867a620ea349fd8493c36)


### [etcd](https://github.com/openshift/etcd/tree/0d9e0a907c4aea7c4b2bff627478785fb99511f5)

* DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue [#321](https://github.com/openshift/etcd/pull/321)
* [ETCD-714](https://issues.redhat.com/browse/ETCD-714): Rebase etcd 3.5.18 openshift 4.17 [#310](https://github.com/openshift/etcd/pull/310)
* [Full changelog](https://github.com/openshift/etcd/compare/23c5a247c3e601f7806a0bbffdc6d201a55bf469...0d9e0a907c4aea7c4b2bff627478785fb99511f5)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/86a1d902ab3989413be802a3daea422bc559012f)

* [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Disable shielded VMs for non-UEFI disks [#115](https://github.com/openshift/machine-api-provider-gcp/pull/115)
* [OCPBUGS-48064](https://issues.redhat.com/browse/OCPBUGS-48064): Refactor exists() to handle gcp API change [#105](https://github.com/openshift/machine-api-provider-gcp/pull/105)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/601931f471a4270e63fd524c7c0bd494a1800a21...86a1d902ab3989413be802a3daea422bc559012f)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/89ebee0309adcf066eb7e837f403269d85319513)

* [OCPBUGS-53016](https://issues.redhat.com/browse/OCPBUGS-53016): Bump k8s api to 1.30.11 [#2250](https://github.com/openshift/kubernetes/pull/2250)
* [OCPBUGS-51006](https://issues.redhat.com/browse/OCPBUGS-51006): Bump k8s api to 1.30.10 [#2210](https://github.com/openshift/kubernetes/pull/2210)
* [OCPBUGS-49905](https://issues.redhat.com/browse/OCPBUGS-49905): Bump k8s api to 1.30.9 [#2198](https://github.com/openshift/kubernetes/pull/2198)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f868289cea8577c895fa957b466f209b9af6a1a2...89ebee0309adcf066eb7e837f403269d85319513)


### [hypershift](https://github.com/openshift/hypershift/tree/98664c845408b0981acec8d3a85f02a20077d127)

* [OCPBUGS-51808](https://issues.redhat.com/browse/OCPBUGS-51808): Fix golang crypto dependency go.mod replacement [#5993](https://github.com/openshift/hypershift/pull/5993)
* [OCPBUGS-54841](https://issues.redhat.com/browse/OCPBUGS-54841): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6017](https://github.com/openshift/hypershift/pull/6017)
* [OCPBUGS-53323](https://issues.redhat.com/browse/OCPBUGS-53323): Handle multiple mirror entries for source [#5894](https://github.com/openshift/hypershift/pull/5894)
* [OCPBUGS-54631](https://issues.redhat.com/browse/OCPBUGS-54631): Sync RBAC for attaching volumes on VM level [#5997](https://github.com/openshift/hypershift/pull/5997)
* NO-JIRA: update konflux references [#5479](https://github.com/openshift/hypershift/pull/5479)
* [OCPBUGS-53903](https://issues.redhat.com/browse/OCPBUGS-53903): bump golang-jwt v4 and v5 [#5906](https://github.com/openshift/hypershift/pull/5906)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 [#5959](https://github.com/openshift/hypershift/pull/5959)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5920](https://github.com/openshift/hypershift/pull/5920)
* [OCPBUGS-51737](https://issues.redhat.com/browse/OCPBUGS-51737), [OCPBUGS-51808](https://issues.redhat.com/browse/OCPBUGS-51808): Bump dependencies to OCP fork in backports [#5900](https://github.com/openshift/hypershift/pull/5900)
* [OCPBUGS-48439](https://issues.redhat.com/browse/OCPBUGS-48439): kubevirt, Don't break on hostname NodePort.Address [#5394](https://github.com/openshift/hypershift/pull/5394)
* [OCPBUGS-51240](https://issues.redhat.com/browse/OCPBUGS-51240): bump go-jose [#5863](https://github.com/openshift/hypershift/pull/5863)
* [OCPBUGS-52657](https://issues.redhat.com/browse/OCPBUGS-52657): Make managed-trust-bundle optional [#5794](https://github.com/openshift/hypershift/pull/5794)
* [OCPBUGS-52425](https://issues.redhat.com/browse/OCPBUGS-52425): [release-4.17] refactor aws identity health check into new controller [#5772](https://github.com/openshift/hypershift/pull/5772)
* [OCPBUGS-46340](https://issues.redhat.com/browse/OCPBUGS-46340): change plaform to platform [#5562](https://github.com/openshift/hypershift/pull/5562)
* [OCPBUGS-51339](https://issues.redhat.com/browse/OCPBUGS-51339): [release-4.17] Fix IsProgressing condition in HostedClusters [#5712](https://github.com/openshift/hypershift/pull/5712)
* [OCPBUGS-50697](https://issues.redhat.com/browse/OCPBUGS-50697): add region to AWS creds passed to operators managed by CPO [#5671](https://github.com/openshift/hypershift/pull/5671)
* [OCPBUGS-51098](https://issues.redhat.com/browse/OCPBUGS-51098): 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5675](https://github.com/openshift/hypershift/pull/5675)
* NO-JIRA: Update dependency mkdocs-material to v9.6.5 [#5682](https://github.com/openshift/hypershift/pull/5682)
* [OCPBUGS-50596](https://issues.redhat.com/browse/OCPBUGS-50596): Honor proxy vars in the util insecure http client [#5605](https://github.com/openshift/hypershift/pull/5605)
* [OCPBUGS-49828](https://issues.redhat.com/browse/OCPBUGS-49828): Duplicate hostDevices.name when hostDevices.deviceName has multiple types. [#5558](https://github.com/openshift/hypershift/pull/5558)
* [OCPBUGS-48487](https://issues.redhat.com/browse/OCPBUGS-48487), [OCPBUGS-48488](https://issues.redhat.com/browse/OCPBUGS-48488), [OCPBUGS-48490](https://issues.redhat.com/browse/OCPBUGS-48490): Fix IPv6 Disconnected HCP deployments [#5402](https://github.com/openshift/hypershift/pull/5402)
* [OCPBUGS-47533](https://issues.redhat.com/browse/OCPBUGS-47533): Prevent IgnitionServer from flooding the API server with patch requests [#5332](https://github.com/openshift/hypershift/pull/5332)
* NO-JIRA: Update dependency mkdocs-material to v9.6.3 [#5590](https://github.com/openshift/hypershift/pull/5590)
* [OCPBUGS-45268](https://issues.redhat.com/browse/OCPBUGS-45268): Reconcile proxy CA bundle into hosted cluster [#5228](https://github.com/openshift/hypershift/pull/5228)
* [OCPBUGS-46465](https://issues.redhat.com/browse/OCPBUGS-46465): Consistently look up and dial cloud API hostnames [#5302](https://github.com/openshift/hypershift/pull/5302)
* NO-JIRA: Update dependency mkdocs-material to v9.6.1 [#5528](https://github.com/openshift/hypershift/pull/5528)
* [OCPBUGS-49638](https://issues.redhat.com/browse/OCPBUGS-49638): fix overwriting PKI operator HCP conditions [#5504](https://github.com/openshift/hypershift/pull/5504)
* [OCPBUGS-46440](https://issues.redhat.com/browse/OCPBUGS-46440): Allow ARM64 arch deployment on Agent platform [#5296](https://github.com/openshift/hypershift/pull/5296)
* [OCPBUGS-48170](https://issues.redhat.com/browse/OCPBUGS-48170): fix disconnected via CLI [#5465](https://github.com/openshift/hypershift/pull/5465)
* [OCPBUGS-38810](https://issues.redhat.com/browse/OCPBUGS-38810): nodepoolcontroller: `List()` PerformanceProfile status per NodePool [#4585](https://github.com/openshift/hypershift/pull/4585)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) [#5428](https://github.com/openshift/hypershift/pull/5428)
* NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) [#5427](https://github.com/openshift/hypershift/pull/5427)
* [OCPBUGS-44927](https://issues.redhat.com/browse/OCPBUGS-44927): Add multi-arch validation for HC/NodePool compatibility [#5238](https://github.com/openshift/hypershift/pull/5238)
* NO-JIRA:  [release-4.17] Bump golang.org/x/crypto and golang.org/x/net [#5368](https://github.com/openshift/hypershift/pull/5368)
* [Full changelog](https://github.com/openshift/hypershift/compare/42c519f0d5e9885a43233c1ea317b14be9c5f2aa...98664c845408b0981acec8d3a85f02a20077d127)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/5f18d29e73366557d8dfbfb2f1bf1949fe39dbf6)

* [OCPBUGS-53911](https://issues.redhat.com/browse/OCPBUGS-53911): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#83](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3a3a62f7a200d2042cb64757f2d60faed20b6218...5f18d29e73366557d8dfbfb2f1bf1949fe39dbf6)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/14489f69f70f6077bcc81ce2dfa4edba2b330801)

* [OCPBUGS-50566](https://issues.redhat.com/browse/OCPBUGS-50566): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 [#101](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/101)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/213d34ddedaebc23bd409ff904ecaf9eaa62c517...14489f69f70f6077bcc81ce2dfa4edba2b330801)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/0b8dd7abc69b9a2369005517846c95c619abf613)

* [OCPBUGS-52957](https://issues.redhat.com/browse/OCPBUGS-52957): IBMCloud: MAPI replacing unhealthy CP nodes [#63](https://github.com/openshift/machine-api-provider-ibmcloud/pull/63)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/238348d2d06feb540a360aeba81416c1134f86e9...0b8dd7abc69b9a2369005517846c95c619abf613)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2b1e2df05f67be7567d234f4150076a5aefd4ee2)

* Ignore previous status when disabling alerts (#1062) [#1062](https://github.com/openshift/insights-operator/pull/1062)
* [Full changelog](https://github.com/openshift/insights-operator/compare/85c2bb66bf02d507c40c060cfd0516219ccb029d...2b1e2df05f67be7567d234f4150076a5aefd4ee2)


### [ironic](https://github.com/openshift/ironic-image/tree/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c)

* [METAL-1305](https://issues.redhat.com/browse/METAL-1305): Do not use openstack packages [#647](https://github.com/openshift/ironic-image/pull/647)
* [OCPBUGS-52292](https://issues.redhat.com/browse/OCPBUGS-52292): Fix runlogwatch script [#643](https://github.com/openshift/ironic-image/pull/643)
* [OCPBUGS-50673](https://issues.redhat.com/browse/OCPBUGS-50673): Install python3-inotify pkg explicitly [#640](https://github.com/openshift/ironic-image/pull/640)
* [OCPBUGS-49998](https://issues.redhat.com/browse/OCPBUGS-49998): Fix runlogwatch failure if LOG_DIR does not exist [#637](https://github.com/openshift/ironic-image/pull/637)
* [OCPBUGS-49822](https://issues.redhat.com/browse/OCPBUGS-49822): Drop quiet option of grep to avoid race condition with pipefail [#633](https://github.com/openshift/ironic-image/pull/633)
* [OCPBUGS-49756](https://issues.redhat.com/browse/OCPBUGS-49756): Use pynotify instead of inotify-tools [#631](https://github.com/openshift/ironic-image/pull/631)
* [OCPBUGS-48149](https://issues.redhat.com/browse/OCPBUGS-48149): Bump jinja2 to 3.1.5 [#622](https://github.com/openshift/ironic-image/pull/622)
* [Full changelog](https://github.com/openshift/ironic-image/compare/073486f10e7f657b5082a1b1d06196a19c8f69be...391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/6d5c18e4fd49644c17893a949b1b8a067152f797)

* [METAL-1305](https://issues.redhat.com/browse/METAL-1305): Do not use openstack packages [#179](https://github.com/openshift/ironic-agent-image/pull/179)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f5f742d8df2b1879a565809632ce2b43b965b4d4...6d5c18e4fd49644c17893a949b1b8a067152f797)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/bc5b8a2c3209873231a7eabd83ace578c8e182f7)

* [OCPBUGS-49350](https://issues.redhat.com/browse/OCPBUGS-49350): Fix subnet validation [#47](https://github.com/openshift/ironic-static-ip-manager/pull/47)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/713378b37863d482b72051e3d7f1d0976abed0ce...bc5b8a2c3209873231a7eabd83ace578c8e182f7)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/757a8894fe4f5b569210ec695fe0615e291f42ec)

* [OCPBUGS-54631](https://issues.redhat.com/browse/OCPBUGS-54631): Ensure volume stays attached through reboots [#56](https://github.com/openshift/kubevirt-csi-driver/pull/56)
* [OCPBUGS-44623](https://issues.redhat.com/browse/OCPBUGS-44623): During detach don't return error if VM is not found [#50](https://github.com/openshift/kubevirt-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/02f9a9211a89784aad3272ffe93aa305a00be736...757a8894fe4f5b569210ec695fe0615e291f42ec)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/1e7747d08d10dd65994b7aeb98f5351b25e053ef)

* [OCPBUGS-53036](https://issues.redhat.com/browse/OCPBUGS-53036), [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Updates GCP credentials request [#1345](https://github.com/openshift/machine-api-operator/pull/1345)
* [OCPBUGS-52576](https://issues.redhat.com/browse/OCPBUGS-52576): add image/read permissions [#1344](https://github.com/openshift/machine-api-operator/pull/1344)
* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unneeded VNet permissions from Azure CredentialsRequest [#1337](https://github.com/openshift/machine-api-operator/pull/1337)
* [OCPBUGS-51370](https://issues.redhat.com/browse/OCPBUGS-51370): Drop oVirt support [#1334](https://github.com/openshift/machine-api-operator/pull/1334)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/191a28d831b1f9493b54a25a3c75babd310bede5...1e7747d08d10dd65994b7aeb98f5351b25e053ef)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/95b720defc004d4da4b88292c4ab7d069cda1088)

* [OCPBUGS-54830](https://issues.redhat.com/browse/OCPBUGS-54830): Make mtu-migration run after wait-for-primary-ip [#4989](https://github.com/openshift/machine-config-operator/pull/4989)
* [OCPBUGS-52314](https://issues.redhat.com/browse/OCPBUGS-52314): on-prem/resolv-prepender: stop leaking tmp files [#4894](https://github.com/openshift/machine-config-operator/pull/4894)
* [OCPBUGS-45989](https://issues.redhat.com/browse/OCPBUGS-45989): Do not run resolv-prepender from NM dispatcher [#4785](https://github.com/openshift/machine-config-operator/pull/4785)
* [OCPBUGS-52188](https://issues.redhat.com/browse/OCPBUGS-52188): ignore mc not found error [#4957](https://github.com/openshift/machine-config-operator/pull/4957)
* [OCPBUGS-52951](https://issues.redhat.com/browse/OCPBUGS-52951): Add ipsec connect wait service [#4930](https://github.com/openshift/machine-config-operator/pull/4930)
* [OCPBUGS-53441](https://issues.redhat.com/browse/OCPBUGS-53441): Fixing typos for MachineConfigNode [#4936](https://github.com/openshift/machine-config-operator/pull/4936)
* [OCPBUGS-53186](https://issues.redhat.com/browse/OCPBUGS-53186): Update ObservedGeneration in KubeletConfig [#4919](https://github.com/openshift/machine-config-operator/pull/4919)
* [OCPBUGS-53225](https://issues.redhat.com/browse/OCPBUGS-53225): daemon: ensure ostree-finalize-staged is started before rebooting [#4920](https://github.com/openshift/machine-config-operator/pull/4920)
* [OCPBUGS-52160](https://issues.redhat.com/browse/OCPBUGS-52160): Enforce VIPs to be collocated at the same host [#4884](https://github.com/openshift/machine-config-operator/pull/4884)
* [OCPBUGS-52303](https://issues.redhat.com/browse/OCPBUGS-52303): Enable nmstate-configuration on all platforms [#4891](https://github.com/openshift/machine-config-operator/pull/4891)
* [OCPBUGS-51003](https://issues.redhat.com/browse/OCPBUGS-51003): daemon: add nil check for annotation fetching [#4862](https://github.com/openshift/machine-config-operator/pull/4862)
* [OCPBUGS-51353](https://issues.redhat.com/browse/OCPBUGS-51353): Update cluster-reader ClusterRole permissions [#4882](https://github.com/openshift/machine-config-operator/pull/4882)
* [OCPBUGS-50955](https://issues.redhat.com/browse/OCPBUGS-50955): create /run/nodeip-configuration before use [#4858](https://github.com/openshift/machine-config-operator/pull/4858)
* [OCPBUGS-51334](https://issues.redhat.com/browse/OCPBUGS-51334): Update format verbs for alert logs [#4880](https://github.com/openshift/machine-config-operator/pull/4880)
* [OCPBUGS-52257](https://issues.redhat.com/browse/OCPBUGS-52257): configure-ovs workaround for ovs-if-br-ex bug [#4889](https://github.com/openshift/machine-config-operator/pull/4889)
* [OCPBUGS-49973](https://issues.redhat.com/browse/OCPBUGS-49973): Update the storage.conf configuration file template [#4836](https://github.com/openshift/machine-config-operator/pull/4836)
* [OCPBUGS-49363](https://issues.redhat.com/browse/OCPBUGS-49363): Auto-recover from MC with invalid extension [#4824](https://github.com/openshift/machine-config-operator/pull/4824)
* [OCPBUGS-49716](https://issues.redhat.com/browse/OCPBUGS-49716): MCO CO degrades are stuck on until master pool updates complete [#4826](https://github.com/openshift/machine-config-operator/pull/4826)
* [OCPBUGS-49639](https://issues.redhat.com/browse/OCPBUGS-49639): Add clarification to invalid maxUnavailable alert [#4820](https://github.com/openshift/machine-config-operator/pull/4820)
* [OCPBUGS-47475](https://issues.redhat.com/browse/OCPBUGS-47475): Pausing Master MCP results in Alerts [#4769](https://github.com/openshift/machine-config-operator/pull/4769)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c5dc36a12c3c0e55e7379d39d3394b0fb34ed0d4...95b720defc004d4da4b88292c4ab7d069cda1088)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/f85666be7889cd6ba95926546a005fed5f3cb68a)

* [OCPBUGS-54146](https://issues.redhat.com/browse/OCPBUGS-54146): Change rhcos release browser url [#56](https://github.com/openshift/machine-os-images/pull/56)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e76dac7c015538cea342bb0d4b226a9ffe58754...f85666be7889cd6ba95926546a005fed5f3cb68a)


### [metallb-frr](https://github.com/openshift/frr/tree/58f202b9e4ad77b88a089b1b40466fae7b49b0b4)

* [OCPBUGS-55344](https://issues.redhat.com/browse/OCPBUGS-55344): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#89](https://github.com/openshift/frr/pull/89)
* [OCPBUGS-44111](https://issues.redhat.com/browse/OCPBUGS-44111): Use metrics for readiness/liveness probes [#77](https://github.com/openshift/frr/pull/77)
* [Full changelog](https://github.com/openshift/frr/compare/377d02f94181d26dac3ab2e2067ced9fe8d73763...58f202b9e4ad77b88a089b1b40466fae7b49b0b4)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/32463001843feb1cf87b175d75187fc35cfa3caf)

* [OCPBUGS-54211](https://issues.redhat.com/browse/OCPBUGS-54211): fix issue preventing dev silences from loading [#374](https://github.com/openshift/monitoring-plugin/pull/374)
* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#377](https://github.com/openshift/monitoring-plugin/pull/377)
* [OCPBUGS-51117](https://issues.redhat.com/browse/OCPBUGS-51117): Fix overview links [#357](https://github.com/openshift/monitoring-plugin/pull/357)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004...32463001843feb1cf87b175d75187fc35cfa3caf)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/af7b9cbf4fc26091e78c2db9e7742df969a27888)

* [OCPBUGS-47471](https://issues.redhat.com/browse/OCPBUGS-47471): adds getcontext (backport 4.17) [#260](https://github.com/openshift/multus-cni/pull/260)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b8d8d5c0128743d5d3c188ad37004c0a4bc00337...af7b9cbf4fc26091e78c2db9e7742df969a27888)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/a9576ed9e3bb9df10586a1e245880ef05156bdf4)

* [OCPBUGS-48745](https://issues.redhat.com/browse/OCPBUGS-48745): [Release-4.17]Kubeconfig loop [#334](https://github.com/openshift/whereabouts-cni/pull/334)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/b950d50da905e2174df6f93a1f49f69332f65f42...a9576ed9e3bb9df10586a1e245880ef05156bdf4)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/869e77a9ace27adc4844c075587874832341fab7)

* Add translations 4.17 [#239](https://github.com/openshift/networking-console-plugin/pull/239)
* Add translations scripts [#235](https://github.com/openshift/networking-console-plugin/pull/235)
* [OCPBUGS-49758](https://issues.redhat.com/browse/OCPBUGS-49758): Fix weight width [#208](https://github.com/openshift/networking-console-plugin/pull/208)
* [OCPBUGS-45791](https://issues.redhat.com/browse/OCPBUGS-45791): fix path-to-regex CVE [#196](https://github.com/openshift/networking-console-plugin/pull/196)
* [OCPBUGS-48704](https://issues.redhat.com/browse/OCPBUGS-48704): fix service name [#188](https://github.com/openshift/networking-console-plugin/pull/188)
* [OCPBUGS-48267](https://issues.redhat.com/browse/OCPBUGS-48267): UI crash accessing a Service in pending state [#168](https://github.com/openshift/networking-console-plugin/pull/168)
* [OCPBUGS-46553](https://issues.redhat.com/browse/OCPBUGS-46553): fix ports as number instead of strings [#169](https://github.com/openshift/networking-console-plugin/pull/169)
* [OCPBUGS-45876](https://issues.redhat.com/browse/OCPBUGS-45876): Bump nanoid from 3.3.7 to 3.3.8 [#172](https://github.com/openshift/networking-console-plugin/pull/172)
* [OCPBUGS-44140](https://issues.redhat.com/browse/OCPBUGS-44140): Bump dompurify from 2.4.9 to 2.5.8 [#166](https://github.com/openshift/networking-console-plugin/pull/166)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/fa9e6b018d0e72e4243194a0b5b6c88d5090bcf2...869e77a9ace27adc4844c075587874832341fab7)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/04782ff30cdc7c11ec12b266a76f83765aaadf34)

* [OCPBUGS-46044](https://issues.redhat.com/browse/OCPBUGS-46044): Update dependencies to address CVE-2024-24786 [#127](https://github.com/openshift/oauth-apiserver/pull/127)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e37ccb455e1b48d1af032315987baf1e93b4084f...04782ff30cdc7c11ec12b266a76f83765aaadf34)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/07d03d7169fcc6dd7733f09df47c2ffad46fda34)

* [OCPBUGS-30443](https://issues.redhat.com/browse/OCPBUGS-30443): Update dependencies to address CVE-2024-24786 [#298](https://github.com/openshift/oauth-proxy/pull/298)
* [OCPBUGS-46659](https://issues.redhat.com/browse/OCPBUGS-46659): Fix oauth-proxy e2e-component tests [#303](https://github.com/openshift/oauth-proxy/pull/303)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/30f8012482023689655252dc2af2f17fe6a09253...07d03d7169fcc6dd7733f09df47c2ffad46fda34)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/39bedc78d79bd13ea7271e5d4c72a12890b05631)

* fixes CVEs upgrading go-git dependency (#1033) [#1033](https://github.com/openshift/oc-mirror/pull/1033)
* [OCPBUGS-47453](https://issues.redhat.com/browse/OCPBUGS-47453): Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) [#1000](https://github.com/openshift/oc-mirror/pull/1000)
* changes the owners file (#1017) [#1017](https://github.com/openshift/oc-mirror/pull/1017)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1020) [#1020](https://github.com/openshift/oc-mirror/pull/1020)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2...39bedc78d79bd13ea7271e5d4c72a12890b05631)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/58f7b42a71637c63e8fd7943661c98bd92657426)

* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): prevent panic when no image and error are set [#488](https://github.com/openshift/openshift-apiserver/pull/488)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): validate image property isn't nil before using [#489](https://github.com/openshift/openshift-apiserver/pull/489)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): move on to the next digest/tag during failures [#487](https://github.com/openshift/openshift-apiserver/pull/487)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/05a4611f68caee0ba8ef49514ec0e0c6b95d7184...58f7b42a71637c63e8fd7943661c98bd92657426)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/70aa014585cd33fc21f27ba20a722c71faf3c411)

* [OCPBUGS-47769](https://issues.redhat.com/browse/OCPBUGS-47769): Add team members to the OWNERS file [#357](https://github.com/openshift/openshift-controller-manager/pull/357)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f299e54abad2f06a51f95bf40b611a5f1519b31e...70aa014585cd33fc21f27ba20a722c71faf3c411)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d3b1715867b6e96a9ee71e158a9f0fd6ab6f792f)

* [OCPBUGS-53071](https://issues.redhat.com/browse/OCPBUGS-53071): add missing pod disruption reasons to isPodDead [#982](https://github.com/openshift/operator-framework-olm/pull/982)
* [OCPBUGS-53283](https://issues.redhat.com/browse/OCPBUGS-53283): Ensure that PSA label is latest instead of pinning versions [#985](https://github.com/openshift/operator-framework-olm/pull/985)
* [OCPBUGS-50829](https://issues.redhat.com/browse/OCPBUGS-50829), [OCPBUGS-50831](https://issues.redhat.com/browse/OCPBUGS-50831), [OCPBUGS-50835](https://issues.redhat.com/browse/OCPBUGS-50835): CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] [#968](https://github.com/openshift/operator-framework-olm/pull/968)
* [OCPBUGS-48695](https://issues.redhat.com/browse/OCPBUGS-48695): Fix excessive catalog source snapshots cause severe performance regression [#956](https://github.com/openshift/operator-framework-olm/pull/956)
* [OCPBUGS-45845](https://issues.redhat.com/browse/OCPBUGS-45845): Fix concurrent namespace resolution [#944](https://github.com/openshift/operator-framework-olm/pull/944)
* [OCPBUGS-46929](https://issues.redhat.com/browse/OCPBUGS-46929), [OCPBUGS-46936](https://issues.redhat.com/browse/OCPBUGS-46936), [OCPBUGS-47316](https://issues.redhat.com/browse/OCPBUGS-47316): x/net bump to v0.34.0 [release-4.17] [#938](https://github.com/openshift/operator-framework-olm/pull/938)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b31ed59e501aa4853c29126af6857d3639498b7b...d3b1715867b6e96a9ee71e158a9f0fd6ab6f792f)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/f03e282a50ae794ec1b84a611a9fbbbd35d9f0ac)

* [OCPBUGS-53179](https://issues.redhat.com/browse/OCPBUGS-53179): Ensure that PSA label is latest instead of pinning versions [#607](https://github.com/operator-framework/operator-marketplace/pull/607)
* [OCPBUGS-49431](https://issues.redhat.com/browse/OCPBUGS-49431): Upgrade golang.org/x/net [release-4.17] [#585](https://github.com/operator-framework/operator-marketplace/pull/585)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/51f871a51fdfec73932100e13201301ddeb35fa1...f03e282a50ae794ec1b84a611a9fbbbd35d9f0ac)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b02d1af7d45ae88c91785ebc83ddec23348596cf)

* [OCPBUGS-54203](https://issues.redhat.com/browse/OCPBUGS-54203): Update OVN to FDP25.A.1 24.03.5-40. [#2496](https://github.com/openshift/ovn-kubernetes/pull/2496)
* [OCPBUGS-52409](https://issues.redhat.com/browse/OCPBUGS-52409): Change dynamic_neigh_routers to false for the Interconnect topology. [#2476](https://github.com/openshift/ovn-kubernetes/pull/2476)
* [OCPBUGS-50519](https://issues.redhat.com/browse/OCPBUGS-50519): kubevirt, localnet: Reduce live migration downtime [#2458](https://github.com/openshift/ovn-kubernetes/pull/2458)
* [OCPBUGS-48777](https://issues.redhat.com/browse/OCPBUGS-48777): Fixes unexpected mp0 route removal during start up [#2423](https://github.com/openshift/ovn-kubernetes/pull/2423)
* [OCPBUGS-48828](https://issues.redhat.com/browse/OCPBUGS-48828): fixes overzealous deletion of SNAT in egressIP [#2425](https://github.com/openshift/ovn-kubernetes/pull/2425)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/d60fad7b368831724701ebc90f6581a554eb673f...b02d1af7d45ae88c91785ebc83ddec23348596cf)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/d7b13a63a1b221ca745ace326f92ec3a6162941f)

* [OCPBUGS-54750](https://issues.redhat.com/browse/OCPBUGS-54750): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 [#113](https://github.com/openshift/machine-api-provider-powervs/pull/113)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea...d7b13a63a1b221ca745ace326f92ec3a6162941f)


### [prometheus](https://github.com/openshift/prometheus/tree/b43f995336f617a43c9aebacc309b1605cb81d3c)

* [OCPBUGS-54941](https://issues.redhat.com/browse/OCPBUGS-54941): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#249](https://github.com/openshift/prometheus/pull/249)
* [Full changelog](https://github.com/openshift/prometheus/compare/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8...b43f995336f617a43c9aebacc309b1605cb81d3c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/cd4a3dc28ce3a7fe5a65a00df20cfcddb561bf49)

* [OCPBUGS-53077](https://issues.redhat.com/browse/OCPBUGS-53077): ingress: Reset metrics when ingress is deleted [#57](https://github.com/openshift/route-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/a47f6be3676d3eabb864ca339584fe857e1076c5...cd4a3dc28ce3a7fe5a65a00df20cfcddb561bf49)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f1b63073aa91cf1c226d0ec46d3dfc2d65c3877f)

* [OCPBUGS-34228](https://issues.redhat.com/browse/OCPBUGS-34228): Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 [#261](https://github.com/openshift/service-ca-operator/pull/261)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1f7d6472fea332fc307d9c8911f8c3cf57347755...f1b63073aa91cf1c226d0ec46d3dfc2d65c3877f)


### [tests](https://github.com/openshift/origin/tree/95cbab598b1c8c32d7f82ebb1f2ebd5b8c672d64)

* [OCPBUGS-54767](https://issues.redhat.com/browse/OCPBUGS-54767): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29660](https://github.com/openshift/origin/pull/29660)
* [OCPBUGS-52580](https://issues.redhat.com/browse/OCPBUGS-52580): Use payload pullspec for image info test [#29588](https://github.com/openshift/origin/pull/29588)
* [OCPBUGS-38835](https://issues.redhat.com/browse/OCPBUGS-38835): Try also user CA for getting openshift-tests image [#29029](https://github.com/openshift/origin/pull/29029)
* [OCPBUGS-49411](https://issues.redhat.com/browse/OCPBUGS-49411): Add a monitor test to detect concurrent installer pod or static pod [#29487](https://github.com/openshift/origin/pull/29487)
* [OCPBUGS-48634](https://issues.redhat.com/browse/OCPBUGS-48634): Revert "[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion" [#29453](https://github.com/openshift/origin/pull/29453)
* [OCPBUGS-48459](https://issues.redhat.com/browse/OCPBUGS-48459), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): ovn-k, udn crd e2e: Fix status report consumer assertion [#29301](https://github.com/openshift/origin/pull/29301)
* [OCPBUGS-48345](https://issues.redhat.com/browse/OCPBUGS-48345): Add team members to the OWNERS file for PR approvals [#29430](https://github.com/openshift/origin/pull/29430)
* [OCPBUGS-48188](https://issues.redhat.com/browse/OCPBUGS-48188): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29409](https://github.com/openshift/origin/pull/29409)
* [Full changelog](https://github.com/openshift/origin/compare/3019778fd550714afeed0af44069c3c91448cee9...95cbab598b1c8c32d7f82ebb1f2ebd5b8c672d64)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)

* [OCPBUGS-52207](https://issues.redhat.com/browse/OCPBUGS-52207): fix panic when vcenter address is incorrect [#295](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/295)
* [OCPBUGS-50593](https://issues.redhat.com/browse/OCPBUGS-50593): Set reconcile-sync to 10 minute for ListVolume [#291](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/291)
* [OCPBUGS-49858](https://issues.redhat.com/browse/OCPBUGS-49858): Escape backslash in vCenter username [#288](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/288)
* [OCPBUGS-49685](https://issues.redhat.com/browse/OCPBUGS-49685): List only linux nodes [#285](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/285)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/c9ad7eca24e515bc6555b65ffd172ebc2702c5ff...e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)