# 4.12.40

Created: 2023-10-19 15:17:03 +0000 UTC

Image Digest: `sha256:b0b1aac82f9083d20e7e4269b05dd3679299d277d122fa9d29b772f38d2cacff`

Promoted from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-10-17-195946


## Changes from 4.12.2

### Components

* Kubernetes upgraded from 1.25.4 to 1.25.14
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202301311551-0 to 412.86.202310170023-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [1959de0e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/1959de0e3f2c3457c32fd2f545fe5ca65f12cd6c) `sha256:6ded2e469992886c4e03db988c8dce6189bcf9779a4a2f6cf0800eb99d5b3882`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [664d8cb0](https://github.com/openshift/alibaba-cloud-csi-driver/commit/664d8cb0a1f1263bad3797ac3cd3f910664dce8b) `sha256:14e9d1873e0a5804203f3074599288b972f1579b7f6cc7f801db89bf8ba64c13`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [b9287c05](https://github.com/openshift/cluster-api-provider-alibaba/commit/b9287c05091424c4d21fd95454020ccc225f5bcb) `sha256:8907608ba0b7d81c62120ad980d65e24721f7dc647adee9ede686b9a70d405dd`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [7fb891f4](https://github.com/openshift/cloud-provider-aws/commit/7fb891f4a534ff4f0a12a50ca3e13db8833560be) `sha256:f2cbc92e8dd1225db67b70428cf7b28840866618222dab20b069003e1cf02319`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [b82e889d](https://github.com/openshift/machine-api-provider-aws/commit/b82e889d6eb39f72b0246175315ec0a7e5ac4126) `sha256:34e330d81f8b7d0effe073de732e6664718d047fbd0df6045f87f4453d7b5d0b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [6197630b](https://github.com/openshift/aws-pod-identity-webhook/commit/6197630be12b6a6df32f647e368e5664307fd04b) `sha256:240c123d6b4355e4f005b9cf1dee470a49f55b6edc716713e0bab5b7c83eab5e`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d1d4f770](https://github.com/openshift/cluster-api-provider-azure/commit/d1d4f7700ca6c2d576fe43c988222c62545cdb00) `sha256:e5b0fb95336faf5912bbffbe388159e4b8c296068d9f10a7d2745306648df6a3`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [ba105788](https://github.com/openshift/azure-disk-csi-driver/commit/ba10578832b8389cd81373ef72bcc3749094ed27) `sha256:73c2c087338aead3095cc0fccebdc7432e76cd066924b5a0cac274c2b1479cdc`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [746fab2b](https://github.com/openshift/azure-file-csi-driver/commit/746fab2b699a791064088a3544b8db06fbd50628) `sha256:feaac95d8ca7df82dfac97fd007724e7c7b789bcaba5a31caf3be8150b08d1c0`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [63dcaf1e](https://github.com/openshift/cluster-api-provider-baremetal/commit/63dcaf1e98d673ac1c00bcb0119397c7fb1d3ef4) `sha256:622bfb8dcf923c0c74f4955a53aa3cf9c93eea62b3fce1bfa3897cfef44201bc`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [6ab8e62b](https://github.com/openshift/kubernetes-autoscaler/commit/6ab8e62b7089dabaded0de89be3a9621f92b7653) `sha256:cd7271e0ac4bb38373a5f38e40517eb1acb88943520f48ef90ca23fd4e2780c7`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8b232255](https://github.com/openshift/cluster-autoscaler-operator/commit/8b2322559f794ffcb4580a9c11c3b5e16fc8e306) `sha256:e4e67534d645d58efaafb2d8e2d7700eebbcb5cf59868207a59772c96477e924`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f9c215c4](https://github.com/openshift/cluster-api/commit/f9c215c4f298710ccf76676395465685b5d15268) `sha256:29d4d6bcd23266b0aa8005755e1d80f80bd0583c636be314ac1d34221bf93901`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [3bfe36aa](https://github.com/openshift/cluster-capi-operator/commit/3bfe36aa9d1abbdfb11facf86a7ec6510abc390a) `sha256:8127f7872e14051ab13f4c8ed8895bcd798083a15905f37014d8c8feae28c8c9`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [7bb05468](https://github.com/openshift/cluster-api-operator/commit/7bb05468cc7d1c0752c81ca3f9e5d8e19c966f24) `sha256:ec4db6aaba39db7d1a400579ec28f4ea854c9d9097ff0af31c88b272f90ca05d`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [12d050ab](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/12d050abd0cf37dae8973d453930bcf494a2499b) `sha256:cc4631021dd1b52d209bffbc6b27e8a0589e7bdcb048b12bc69e4c28c9447c61`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [60081982](https://github.com/openshift/cluster-machine-approver/commit/60081982654993534de29d224d6a42c251762420) `sha256:41567c8fa1f5c2668ee4dd5d1ace21f0d6c1c0e285aef52fff50407943a7efca`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [d1915d13](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/d1915d130481541b8bacb5b98eddbc1541809d0a) `sha256:08f02b754fcf15db68506a6b6e9831a9f3e8ba3489b5e993b230432ad6c3cfef`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [d40fae81](https://github.com/openshift/platform-operators/commit/d40fae81256939670a8fd96b3822fbf1edf21d98) `sha256:5e0ce696af72c78af11e06c78337069b9db795af33b8d884616bd4276a5bad83`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:222330b621caabbdf4bc368501b431ee808687f430a608e672e9f952c2fd6f52`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e4d9170e](https://github.com/openshift/configmap-reload/commit/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) `sha256:e714f1a8bcdada6e626a2e3059bca19d8fec58117792a1a1802e924bf64a60da`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [6d237727](https://github.com/openshift/containernetworking-plugins/commit/6d237727d7af8981b373cb62509dce1fe19d35b8) `sha256:939cb36adc721074dd40d5fa3b6757513f73c10f846e500f7ddbed9b3c20e686`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [20cffc04](https://github.com/openshift/csi-driver-shared-resource/commit/20cffc04d37e0ac2ea5014c08513c8408715179c) `sha256:d06c33f5a3207290f01a0e9ffa0dc0276e37c2c42d39205cd231d23685cf559f`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [3201431c](https://github.com/openshift/csi-driver-shared-resource-operator/commit/3201431c8f52827d599556fd041049ec121cc067) `sha256:dee3fd61db4349a4a7ab21d7692aba3105ffa428f6f4479eb4e0a79f8b85be5b`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [20cffc04](https://github.com/openshift/csi-driver-shared-resource/commit/20cffc04d37e0ac2ea5014c08513c8408715179c) `sha256:14538fa09fbddeeeba83d5bdef88f078105ddf71b62bf38a7a805ffad271dee3`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6945eef8](https://github.com/openshift/csi-external-attacher/commit/6945eef88ccf4e57545fea636113afe4103058bc) `sha256:ce600885810ccb3da00476fe9ae16be8861bfff9f4b521a6e15797b24d0210f3`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [140851f6](https://github.com/openshift/csi-external-provisioner/commit/140851f6c0e70cf917b3361808b31628c68ea8a5) `sha256:6c368cb4dce9683129608792113e29b6d00f402e7972beea0fd44042a8699b70`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [239d751f](https://github.com/openshift/csi-external-resizer/commit/239d751f51743214417dd5058645c2c1d390d1b5) `sha256:306a711cd1578d40342293b178cdd0bdfe29426e1476b0a16c93b8795727e08b`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:d25c98827218b96860e1c8722b17da1d1b2ecf1bb99e00cfcc208ce4780fa949`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [805d5ac2](https://github.com/openshift/csi-node-driver-registrar/commit/805d5ac247137b02e6081e3eb7aa1fb9f4c7b4b2) `sha256:2b11dd89e9c30e695710601a853b1c6e1ac7da3ce0ab0c96c589764d03b22c6a`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:80540cbd5cc7c2dc4d96173afede65b5f84ed1003949eaa22a8a5d68f568ba4f`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:eb8e3af5c96159797039e3f171a6509a1c80a1196b53b6aef312ccfe5f5a7f07`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [6e5c04c0](https://github.com/openshift/driver-toolkit/commit/6e5c04c066a428047d1755478cf88b290d32ad8f) `sha256:c6028d79687f87d4bd78d3dbcd582b5b4d20952c74cf7536299fe3bf71a46287`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a92e4157](https://github.com/openshift/egress-router-cni/commit/a92e415791b531ca15ec84953550b71bd3534566) `sha256:635b15478f717a49ad336ecb4ac7b2974bd31784aadfd6aaea89ee515c64c271`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8d208a7f](https://github.com/openshift/cloud-provider-gcp/commit/8d208a7f549b0c039420f67ca7aeff43fc1dcdfc) `sha256:d69c2ef0c865918756f342d4a875033fe56ba55a2b682a81dbf5de8bbe4d772b`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [eea0586c](https://github.com/openshift/cluster-api-provider-gcp/commit/eea0586cdf2bc859533fa874e1b6df536a6df40d) `sha256:9483af7706a1e7fb49bc5f00709a5fd56ca5e1887a0735faf67877317fbe0db7`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [223d8464](https://github.com/openshift/gcp-pd-csi-driver/commit/223d84646af2611d801ad5633e9ce4088772cab4) `sha256:27f3ebabd8dd2e866fbf2403e850d6fd9cbd79fe0f77d6c99aa06453bcdc4812`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [e5f25fc6](https://github.com/openshift/cloud-provider-ibm/commit/e5f25fc64911215a3a78cab186cba49cbd51dec6) `sha256:ed002cebd55aa75f937566befb5cdb8d56e63aab8f31bce99730ecf20cc34b1d`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [f70fccea](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/f70fcceadbe82a58c92157df3e4d5a047e87fba0) `sha256:24f96458798b4157a2a98100f264b2ff1eb7a565d6005ed93db9e88cfa20c9d9`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [737d00c9](https://github.com/openshift/ibm-vpc-node-label-updater/commit/737d00c9dd2aa49dbe421e7bbc0df4f94239f78a) `sha256:c7a9c116cb9ddffdb8a846e9119479be4235d8aed72c56768c9b6c2ace662383`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [c1304c80](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/c1304c80d736559ced3049c076535d53020d5d9d) `sha256:2ff93e2d1880a46075eb77a889897190d401f659d6bbcee0215094a0184cde79`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [31a67dac](https://github.com/openshift/machine-api-provider-ibmcloud/commit/31a67daca92c374cb4d9a87928ec8c28528a0c0e) `sha256:2f682dfb5cceeb556c5fc75fc82b744dea367db07c5922e3987557ec2725d3ea`
* [keepalived-ipfailover](https://github.com/openshift/images) git [7e8a0105](https://github.com/openshift/images/commit/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) `sha256:b7645aa3974909450a3c194cb0f92ddfa921cdf5ee95bb9ef580bfff1ccde273`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9a1bf9b8](https://github.com/openshift/kube-state-metrics/commit/9a1bf9b8c6b2da07214eb934e4d1f86d1700a2ce) `sha256:bb0303469ff9ac257efe236775f5c746458e3d55126666de80e460e451dfa383`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [596745ce](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/596745cec38b8401d1d906bfb9d3d78fdaeabcde) `sha256:56976be04e4573759d1d21570479256bc3f16fcd318b777f548bb398b79cb849`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a19615cd](https://github.com/openshift/cloud-provider-kubevirt/commit/a19615cda3daf69008253d75cc848ac0ad397179) `sha256:d3e0c66fe9509d928816fb77f097455ac3ad32ff9bebf766e1dd78da66241581`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f407c8a7](https://github.com/openshift/kubevirt-csi-driver/commit/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) `sha256:58c546b1a68f4bf8467a7bec9820ceaaf1ccaf7f1d243639c240ee10d23ea43a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a2882f7a](https://github.com/openshift/cluster-api-provider-libvirt/commit/a2882f7aa56d4059a20bdc02486da905b5764062) `sha256:7d5f6a770bc97e13eb2e1188dbfb8b4e522ad5ef667784ce361055bc4e00d529`
* machine-os-content `sha256:c9f3895c6016cf0239f8524eefb540dbde0c1a29c271e11885cc963e10203f4b`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [566bf595](https://github.com/openshift/machine-os-images/commit/566bf59501f178bd80e410fda66cc424de6a4891) `sha256:c88533a77815c337a4f75214a702e58713f546ecb1149eea801db3327bfe9d2d`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [421718ab](https://github.com/openshift/multus-networkpolicy/commit/421718ab8efebb735fd8e0ec5a3c94d78d1d7ac1) `sha256:28354eb69e0d4199946d43dcd85f1ee7b47c1b2f1c2edeb38f240443bf871286`
* [must-gather](https://github.com/openshift/must-gather) git [5fd21761](https://github.com/openshift/must-gather/commit/5fd2176182e7aec687da553fe185b9f6f739bbb2) `sha256:9792bae1ec1404e9f3609c1dfac3a2759347d54f3055be205a0ae66e81b935f2`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:1f64e67093165f8c485e15772909898238331c952596b698bc49d39cf01d03c1`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [25aea2d4](https://github.com/openshift/machine-api-provider-nutanix/commit/25aea2d4b370e42e67edab85c15c9ed56b98e134) `sha256:686a23af32a538e01c81aca4408ba36839489afc7d2c9438471177a5986fdf80`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [03e5b13b](https://github.com/openshift/oauth-proxy/commit/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) `sha256:8cee1c6d7316b2108cc2d0272ebf2932ee999c9eb05d5c6e296df362da58e9ce`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [1b52bfeb](https://github.com/openshift/operator-framework-rukpak/commit/1b52bfeb6823c07702bd3b3fb63972ef8e5e718a) `sha256:47d2ae718f9227962ccd5b7fe0ffa7bff6accb67eb2882be0ebb6016d45e4e30`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [b6528f9e](https://github.com/openshift/openshift-controller-manager/commit/b6528f9ea28164af9f1ceea0e50f18116fe3c90e) `sha256:547a5ca42dd1d4d1cba262c8c650cb12102daa4e9bea8a0e29782350360f7449`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [4c711c74](https://github.com/openshift/openshift-state-metrics/commit/4c711c74a0857e55604d11bd975b32b9956db6a0) `sha256:5501a4680652bbd1aafd6435771725f6462bd2061f4ebe82a22a66f630bc6f72`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [8bd9c35f](https://github.com/openshift/cluster-api-provider-openstack/commit/8bd9c35fa7dfa81697f9e62b9ea598cba699ca02) `sha256:1ac497a32f3fbb2a7ac3a67d1ed497d6791b1ba2dc1459ae523545d5edd21958`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [64d58fb5](https://github.com/openshift/ovirt-csi-driver/commit/64d58fb5438d5f22550ab20951cad32a886952ef) `sha256:c7e5a5e8d553b22c260d311ae4585669e92ea9236559c59ca56ac016ff089cc4`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [03e8cb50](https://github.com/openshift/cluster-api-provider-ovirt/commit/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) `sha256:971ebc204aad0b8b6c0cb6384f0e2f8977351547c1ffc58964ddc9337fea1ec7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b1907888](https://github.com/openshift/prom-label-proxy/commit/b1907888004888b977918cf911b189de736642b2) `sha256:4626710ac6a341bf707b2d5be57607ebc39ddd9d300ca9496e40fcfc75f20f3e`
* [prometheus](https://github.com/openshift/prometheus) git [c749fdb4](https://github.com/openshift/prometheus/commit/c749fdb468ee6d0ac586156832ad9b094c76d867) `sha256:fa95237ef8610b026a5a449655c0618c79f666501265dd75d07724c3427a71a1`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [86b18354](https://github.com/openshift/prometheus-alertmanager/commit/86b18354a463c04bb8d54b1e686d9fe54ff449e9) `sha256:738076ced738ea22a37704ba3e0dab4925ea85c0c16e41d33556818977358f50`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [af2f49ca](https://github.com/openshift/node_exporter/commit/af2f49cac92d4ec56fd495c0ecfc0e0a4149eea5) `sha256:0ffbe781c9401b58689afb90fc6fd618f97bc465d0feffbda9e0e75a268aec2f`
* rhel-coreos-8 `sha256:269be65b879a5e00a9a6091406d31de116da205c16b1bbc4fad05d948706a0d5`
* rhel-coreos-8-extensions `sha256:e4dac69902aabbb1bec01a5d88a33b461e277dd459a64fb32cf173dd803a1a49`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [299b7097](https://github.com/openshift/service-ca-operator/commit/299b7097a49385fdd4f86eccedc07f3a192e2504) `sha256:81ca4f326c4c3a9ab82eacdee46941ca454a617eaa27a7015bb6f77707b83502`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [e993e31f](https://github.com/openshift/cloud-provider-vsphere/commit/e993e31f6a3b02938b11fb2f18d67681d60d8922) `sha256:c77369e7356e414a862ae6ede69169ebab5dc2498c3669af5e622933557f2cbc`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [5c261b3b](https://github.com/openshift/cluster-api-provider-vsphere/commit/5c261b3bc8acb84fdf8263a67a80dd384fba698e) `sha256:58517cd3e3956a7099f3ba528b6f7be1ea78ffff6fc9456f92de90d1a964f35d`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8149b9ca554ae6e1d716daa9f1c4f322ad710e07)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5347) [#5347](https://github.com/openshift/assisted-service/pull/5347)
* [OCPBUGS-13356](https://issues.redhat.com/browse/OCPBUGS-13356): Fix 'vendor' root device hint evaluation (#5206) [#5206](https://github.com/openshift/assisted-service/pull/5206)
* [OCPBUGS-13529](https://issues.redhat.com/browse/OCPBUGS-13529): Support by-path root device hints (#5214) [#5214](https://github.com/openshift/assisted-service/pull/5214)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b03e2db9f58b8bc2fdcb339659b47973688436e3...8149b9ca554ae6e1d716daa9f1c4f322ad710e07)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/61115db06f970b8fab00f8e0beeb49d4db3ee041)

* [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#726) [#670](https://github.com/openshift/assisted-installer/pull/670)
* [OCPBUGS-7149](https://issues.redhat.com/browse/OCPBUGS-7149): IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) [#631](https://github.com/openshift/assisted-installer/pull/631)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/0f14c3d16cb089b55ca3658038e83bc0bcd01f47...61115db06f970b8fab00f8e0beeb49d4db3ee041)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/a7aa60002fc11c7320dd17c1681feb9956dd288f)

* [MGMT-13946](https://issues.redhat.com/browse/MGMT-13946): Ignore Proliant Gen 11 serial (#524) [#524](https://github.com/openshift/assisted-installer-agent/pull/524)
* Add sg3_utils package (#497) (#500) [#497](https://github.com/openshift/assisted-installer-agent/pull/497)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/271a6f48486db5702d3ebc4b644b74722319d49d...a7aa60002fc11c7320dd17c1681feb9956dd288f)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/27200d77ed35fa98e172bacd1457d2ff768ac211)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#58](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/58)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/e324a71cb6c48ce4944cdc8dcc96bbf5fa55ba32...27200d77ed35fa98e172bacd1457d2ff768ac211)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f1e6d94ca51afe169bc038acb0b06cedea16d617)

* [OCPBUGS-19266](https://issues.redhat.com/browse/OCPBUGS-19266): Updating ose-apiserver-network-proxy images to be consistent with ART [#33](https://github.com/openshift/apiserver-network-proxy/pull/33)
* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...f1e6d94ca51afe169bc038acb0b06cedea16d617)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e3a8e43349986d8a9ca99749b9289a4151f5ee1a)

* [OCPBUGS-15548](https://issues.redhat.com/browse/OCPBUGS-15548): Pass right SGs for IsExternallyManaged on creation [#469](https://github.com/openshift/cluster-api-provider-aws/pull/469)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/15ff2acd6c2fa8b6220448669e5d27013abda669...e3a8e43349986d8a9ca99749b9289a4151f5ee1a)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/86fc1cd92a27b2bf1e51a88184fe534e8a202b4d)

* [OCPBUGS-14281](https://issues.redhat.com/browse/OCPBUGS-14281): Volume unmount repeats after successful unmount, preventing pod delete [#226](https://github.com/openshift/aws-ebs-csi-driver/pull/226)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/15841171ef177fa651384e1dad16b53bcaf6e0ef...86fc1cd92a27b2bf1e51a88184fe534e8a202b4d)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/fa3c8fb2a217626feea5fb2877ce4b8b8591c926)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#265](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/265)
* [OCPBUGS-13721](https://issues.redhat.com/browse/OCPBUGS-13721): assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets [#230](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/230)
* 4.12: OCPBUGS-10646: 4.12 hypershift set control plane [#208](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/208)
* [OCPBUGS-7892](https://issues.redhat.com/browse/OCPBUGS-7892): do not inject-proxy when deploying in hypershift control plane [#187](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/187)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/6bd7afa3fae087853c0210050bdc981c899426c4...fa3c8fb2a217626feea5fb2877ce4b8b8591c926)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/8bc8af271daa54e2836435a5343a374aa58393ae)

* [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#82](https://github.com/openshift/cloud-provider-azure/pull/82)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/6ff1c8e52ad75cb72682b022952c174a41c1e471...8bc8af271daa54e2836435a5343a374aa58393ae)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/0dab032efc868963ee0003d1f62d80e4f24f6a20)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#95](https://github.com/openshift/azure-disk-csi-driver-operator/pull/95)
* [OCPBUGS-7885](https://issues.redhat.com/browse/OCPBUGS-7885): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#70](https://github.com/openshift/azure-disk-csi-driver-operator/pull/70)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/e4ed4ee1123d34a1183e4ccb8a31a57ea3237c4f...0dab032efc868963ee0003d1f62d80e4f24f6a20)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/27de52643819b9ce6bb18694247524a5de7353b0)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#71](https://github.com/openshift/azure-file-csi-driver-operator/pull/71)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/0a02fa02dd5623413d07c226987ac1d3181774fa...27de52643819b9ce6bb18694247524a5de7353b0)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/e7f42fa8c9f2ef8d7b95b3f3420c681c8c05e2e6)

* [OCPBUGS-17960](https://issues.redhat.com/browse/OCPBUGS-17960): Machine Actuator should not set metadata.name [#71](https://github.com/openshift/machine-api-provider-azure/pull/71)
* [OCPBUGS-17221](https://issues.redhat.com/browse/OCPBUGS-17221): Add user defined Tags to NIC Azure resources [#69](https://github.com/openshift/machine-api-provider-azure/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/cfb76acd1429fa8be4925cf15789f1dc62252d7f...e7f42fa8c9f2ef8d7b95b3f3420c681c8c05e2e6)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/576d8157addb36d6f8fc27e0db4d8559d6889ac4)

* [OCPBUGS-17651](https://issues.redhat.com/browse/OCPBUGS-17651): Validate that the rendevousIP is assigned to a master [#7416](https://github.com/openshift/installer/pull/7416)
* [OCPBUGS-20145](https://issues.redhat.com/browse/OCPBUGS-20145): [release-4.12] Use updated ansible-core for Openstack image [#7560](https://github.com/openshift/installer/pull/7560)
* [OCPBUGS-18646](https://issues.redhat.com/browse/OCPBUGS-18646): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7474](https://github.com/openshift/installer/pull/7474)
* [OCPBUGS-10992](https://issues.redhat.com/browse/OCPBUGS-10992): bootstrap-pivot: skip pivot in SCOS Live ISO [#7035](https://github.com/openshift/installer/pull/7035)
* [CORS-2792](https://issues.redhat.com/browse/CORS-2792): AWS Shared VPC Backport [release-4.12] [#7435](https://github.com/openshift/installer/pull/7435)
* [OCPBUGS-18320](https://issues.redhat.com/browse/OCPBUGS-18320): CORS-2445: GCP: Add osImage to the install config [#7454](https://github.com/openshift/installer/pull/7454)
* [OCPBUGS-17404](https://issues.redhat.com/browse/OCPBUGS-17404): backport openstack UPI for ansible 2.10 [#7399](https://github.com/openshift/installer/pull/7399)
* [OCPBUGS-16778](https://issues.redhat.com/browse/OCPBUGS-16778): bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 [#7420](https://github.com/openshift/installer/pull/7420)
* [OCPBUGS-17467](https://issues.redhat.com/browse/OCPBUGS-17467): Allow override of networkType [#7406](https://github.com/openshift/installer/pull/7406)
* [OCPBUGS-17174](https://issues.redhat.com/browse/OCPBUGS-17174): Set AdditionalTrustBundle in override when mirroring not enabled [#7386](https://github.com/openshift/installer/pull/7386)
* [OCPBUGS-16382](https://issues.redhat.com/browse/OCPBUGS-16382): azure: skip LB creation when not needed [#7342](https://github.com/openshift/installer/pull/7342)
* [OCPBUGS-14868](https://issues.redhat.com/browse/OCPBUGS-14868): Shorten SNO installation duration by releasing CPC lease [#7242](https://github.com/openshift/installer/pull/7242)
* [OCPBUGS-14495](https://issues.redhat.com/browse/OCPBUGS-14495): Support /dev/disk/by-path root device hints [#7227](https://github.com/openshift/installer/pull/7227)
* [OCPBUGS-16151](https://issues.redhat.com/browse/OCPBUGS-16151): ic: azure: validate diskTypes in AzureStack [#7331](https://github.com/openshift/installer/pull/7331)
* [OCPBUGS-11199](https://issues.redhat.com/browse/OCPBUGS-11199): azure: upi: use Image Gallery in ARM templates [#7054](https://github.com/openshift/installer/pull/7054)
* [OCPBUGS-13940](https://issues.redhat.com/browse/OCPBUGS-13940): bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 [#7249](https://github.com/openshift/installer/pull/7249)
* [OCPBUGS-14664](https://issues.redhat.com/browse/OCPBUGS-14664): Shorten SNO installation duration by releasing CVO lease [#7235](https://github.com/openshift/installer/pull/7235)
* [OCPBUGS-7400](https://issues.redhat.com/browse/OCPBUGS-7400): Check for AWS STS installation before trying to get all IAM Roles [#7175](https://github.com/openshift/installer/pull/7175)
* [OCPBUGS-13819](https://issues.redhat.com/browse/OCPBUGS-13819): Bootstrap on aws should have same metadata service type as on other nodes [#7196](https://github.com/openshift/installer/pull/7196)
* [OCPBUGS-12202](https://issues.redhat.com/browse/OCPBUGS-12202): Relax vsphere, nutanix VIP validation [#7116](https://github.com/openshift/installer/pull/7116)
* [OCPBUGS-7551](https://issues.redhat.com/browse/OCPBUGS-7551): vSphere - ignore all bootstrap disk changes [#6860](https://github.com/openshift/installer/pull/6860)
* [OCPBUGS-14014](https://issues.redhat.com/browse/OCPBUGS-14014): Do not always output warning msg when releaseImage is digest [#7202](https://github.com/openshift/installer/pull/7202)
* [OCPBUGS-13052](https://issues.redhat.com/browse/OCPBUGS-13052): bump RHCOS 4.12 bootimage metadata [#7164](https://github.com/openshift/installer/pull/7164)
* [OCPBUGS-12956](https://issues.redhat.com/browse/OCPBUGS-12956): openstack: Add netcat to the Installer image [#7148](https://github.com/openshift/installer/pull/7148)
* [OCPBUGS-12749](https://issues.redhat.com/browse/OCPBUGS-12749): [Alibaba] update the bandwidth value of EIP [#7131](https://github.com/openshift/installer/pull/7131)
* [OCPBUGS-7400](https://issues.redhat.com/browse/OCPBUGS-7400): Check for AWS STS installation before trying to get all IAM Roles [#7141](https://github.com/openshift/installer/pull/7141)
* [OCPBUGS-11360](https://issues.redhat.com/browse/OCPBUGS-11360): Use 100 GB as minimum disk size in validations [#7065](https://github.com/openshift/installer/pull/7065)
* [OCPBUGS-11662](https://issues.redhat.com/browse/OCPBUGS-11662): AWS - Remove ACLs from s3 ign [#7084](https://github.com/openshift/installer/pull/7084)
* [OCPBUGS-11208](https://issues.redhat.com/browse/OCPBUGS-11208): GCP: add europe-west12 region to the survey as supported region [#7055](https://github.com/openshift/installer/pull/7055)
* [OCPBUGS-11108](https://issues.redhat.com/browse/OCPBUGS-11108): Kubelet Client Cert should include system:serviceaccounts group [#7050](https://github.com/openshift/installer/pull/7050)
* [OCPBUGS-8384](https://issues.redhat.com/browse/OCPBUGS-8384): Specify filename for default registries.conf [#6941](https://github.com/openshift/installer/pull/6941)
* [OCPBUGS-10904](https://issues.redhat.com/browse/OCPBUGS-10904): IBMCloud: Fix SSH Private bootstrap [#7028](https://github.com/openshift/installer/pull/7028)
* [OCPBUGS-10905](https://issues.redhat.com/browse/OCPBUGS-10905): IBMCloud set dnsrecords offset [#7029](https://github.com/openshift/installer/pull/7029)
* [OCPBUGS-10740](https://issues.redhat.com/browse/OCPBUGS-10740): bump RHCOS 4.12 bootimage metadata [#7019](https://github.com/openshift/installer/pull/7019)
* [OCPBUGS-7481](https://issues.redhat.com/browse/OCPBUGS-7481): Fix file check for loading openshift manifests [#6907](https://github.com/openshift/installer/pull/6907)
* [OCPBUGS-10497](https://issues.redhat.com/browse/OCPBUGS-10497): [release-4.12] aws: bump aws-sdk-go version [#6985](https://github.com/openshift/installer/pull/6985)
* [OCPBUGS-10439](https://issues.redhat.com/browse/OCPBUGS-10439): Sort userTags in Machine and Machineset manifests [#6984](https://github.com/openshift/installer/pull/6984)
* [OCPBUGS-7469](https://issues.redhat.com/browse/OCPBUGS-7469): [release-4.12] GCP XPN Featuregates [#6851](https://github.com/openshift/installer/pull/6851)
* [OCPBUGS-7063](https://issues.redhat.com/browse/OCPBUGS-7063): vSphere - Remove regexs in terraform ova import [#6868](https://github.com/openshift/installer/pull/6868)
* [OCPBUGS-8658](https://issues.redhat.com/browse/OCPBUGS-8658): Pass Capabilites from install-config to cluster [#6947](https://github.com/openshift/installer/pull/6947)
* [OCPBUGS-7594](https://issues.redhat.com/browse/OCPBUGS-7594): fully qualified username must be provided [#6864](https://github.com/openshift/installer/pull/6864)
* [OCPBUGS-7746](https://issues.redhat.com/browse/OCPBUGS-7746): Convert platform type for AgentClusterInstall [#6878](https://github.com/openshift/installer/pull/6878)
* [OCPBUGS-8015](https://issues.redhat.com/browse/OCPBUGS-8015): make VIP 168.63.129.16 noProxy in all clouds except Public [#6909](https://github.com/openshift/installer/pull/6909)
* [OCPBUGS-6087](https://issues.redhat.com/browse/OCPBUGS-6087): Warn if agent assets detected when using non-agent waitfor [#6788](https://github.com/openshift/installer/pull/6788)
* [OCPBUGS-7607](https://issues.redhat.com/browse/OCPBUGS-7607): IBMCloud: Handle COS reclamations [#6867](https://github.com/openshift/installer/pull/6867)
* [OCPBUGS-7529](https://issues.redhat.com/browse/OCPBUGS-7529): bump RHCOS 4.12 bootimage metadata [#6873](https://github.com/openshift/installer/pull/6873)
* [OCPBUGS-7521](https://issues.redhat.com/browse/OCPBUGS-7521): Update AgentConfig template [#6857](https://github.com/openshift/installer/pull/6857)
* [OCPBUGS-5992](https://issues.redhat.com/browse/OCPBUGS-5992): azure: validate Windows-only VM types [#6780](https://github.com/openshift/installer/pull/6780)
* [OCPBUGS-6991](https://issues.redhat.com/browse/OCPBUGS-6991): Don't require vSphere details for agent installer [#6826](https://github.com/openshift/installer/pull/6826)
* [OCPBUGS-6807](https://issues.redhat.com/browse/OCPBUGS-6807): Check platform baremetal settings against default values [#6815](https://github.com/openshift/installer/pull/6815)
* [OCPBUGS-7103](https://issues.redhat.com/browse/OCPBUGS-7103): Set the configured proxy settings for agent installer [#6830](https://github.com/openshift/installer/pull/6830)
* [OCPBUGS-7131](https://issues.redhat.com/browse/OCPBUGS-7131): bootstrap: set 0644 mode for registries.conf [#6804](https://github.com/openshift/installer/pull/6804)
* [OCPBUGS-5960](https://issues.redhat.com/browse/OCPBUGS-5960): bump RHCOS 4.12 bootimage metadata [#6791](https://github.com/openshift/installer/pull/6791)
* [OCPBUGS-5996](https://issues.redhat.com/browse/OCPBUGS-5996): vsphere: set default resource pool when missing failure domain topology [#6781](https://github.com/openshift/installer/pull/6781)
* [OCPBUGS-5667](https://issues.redhat.com/browse/OCPBUGS-5667): CVE-2021-4238: goutils: update for randomness fix [#6764](https://github.com/openshift/installer/pull/6764)
* [Full changelog](https://github.com/openshift/installer/compare/7fea1c4fc00312fdf91df361b4ec1a1a12288a97...576d8157addb36d6f8fc27e0db4d8559d6889ac4)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/968ceb05491ec0b5531728d76dfe04ccc08845ea)

* [OCPBUGS-17703](https://issues.redhat.com/browse/OCPBUGS-17703): Trigger reconcile on Secret change [#298](https://github.com/openshift/baremetal-operator/pull/298)
* [OCPBUGS-17459](https://issues.redhat.com/browse/OCPBUGS-17459): Set minimum TLS version for webhook to 1.2 [#297](https://github.com/openshift/baremetal-operator/pull/297)
* [OCPBUGS-14188](https://issues.redhat.com/browse/OCPBUGS-14188): Deleting unmanaged BMH get stuck fix [#283](https://github.com/openshift/baremetal-operator/pull/283)
* [OCPBUGS-13530](https://issues.redhat.com/browse/OCPBUGS-13530): Support /dev/disk/by-path root device hints [#278](https://github.com/openshift/baremetal-operator/pull/278)
* [OCPBUGS-12175](https://issues.redhat.com/browse/OCPBUGS-12175): Revert live-iso validation [#269](https://github.com/openshift/baremetal-operator/pull/269)
* [OCPBUGS-9955](https://issues.redhat.com/browse/OCPBUGS-9955): allow namespace to continue with terminating when deprovisioning a bmh [#258](https://github.com/openshift/baremetal-operator/pull/258)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a5af4fc968cbfb7702c1422950c00168bd8d2564...968ceb05491ec0b5531728d76dfe04ccc08845ea)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/23c6c0e30abc58af62059160feee51bf3ed1e0d3)

* [OCPBUGS-18606](https://issues.redhat.com/browse/OCPBUGS-18606): Move haproxy firewall rule check earlier in loop [#272](https://github.com/openshift/baremetal-runtimecfg/pull/272)
* [OCPBUGS-17715](https://issues.redhat.com/browse/OCPBUGS-17715): Don't render config with incomplete unicast peer list [#268](https://github.com/openshift/baremetal-runtimecfg/pull/268)
* [OCPBUGS-15315](https://issues.redhat.com/browse/OCPBUGS-15315): Use machine-config state instead of comparing roles [#262](https://github.com/openshift/baremetal-runtimecfg/pull/262)
* [OCPBUGS-12805](https://issues.redhat.com/browse/OCPBUGS-12805): Make nested dual stack VIP configs respect EnableUnicast [#240](https://github.com/openshift/baremetal-runtimecfg/pull/240)
* [OCPBUGS-13405](https://issues.redhat.com/browse/OCPBUGS-13405): Verify kubelet version in upgrade check [#249](https://github.com/openshift/baremetal-runtimecfg/pull/249)
* [OCPBUGS-11145](https://issues.redhat.com/browse/OCPBUGS-11145): fix isUpgradeStillRunning() [#232](https://github.com/openshift/baremetal-runtimecfg/pull/232)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b3c82d0013281ab716f358f46fec6481ace5b27d...23c6c0e30abc58af62059160feee51bf3ed1e0d3)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7aa4009c7a5babaa8e51838d59e3221a7459ca0e)

* [OCPBUGS-20299](https://issues.redhat.com/browse/OCPBUGS-20299): Use quay redis image instead docker mysql [#1567](https://github.com/openshift/oc/pull/1567)
* [OCPBUGS-16173](https://issues.redhat.com/browse/OCPBUGS-16173): Add tls-server-name when property exists in kubeconfig [#1507](https://github.com/openshift/oc/pull/1507)
* [OCPBUGS-1283](https://issues.redhat.com/browse/OCPBUGS-1283): Bump golang.org/x dependencies [#1421](https://github.com/openshift/oc/pull/1421)
* [OCPBUGS-16056](https://issues.redhat.com/browse/OCPBUGS-16056): mcs cert: account for environments that use IP directly [#1501](https://github.com/openshift/oc/pull/1501)
* [OCPBUGS-16194](https://issues.redhat.com/browse/OCPBUGS-16194): reboot: set ignition version to 3.1 [#1509](https://github.com/openshift/oc/pull/1509)
* handle the error case of node retrieval while waiting for reboot [#1485](https://github.com/openshift/oc/pull/1485)
* bring some cert rotation helpers back into 4.12 [fix unit-tests] [#1478](https://github.com/openshift/oc/pull/1478)
* [OCPBUGS-14647](https://issues.redhat.com/browse/OCPBUGS-14647): [release-4.12] Do not set master node selector if there's no masters [#1366](https://github.com/openshift/oc/pull/1366)
* [OCPBUGS-14236](https://issues.redhat.com/browse/OCPBUGS-14236): Remove closed centos7 registry from newapp unit tests [#1434](https://github.com/openshift/oc/pull/1434)
* [OCPBUGS-10774](https://issues.redhat.com/browse/OCPBUGS-10774): bump repo sclorg/s2i-ruby-container location for newapp test [#1382](https://github.com/openshift/oc/pull/1382)
* [OCPBUGS-7960](https://issues.redhat.com/browse/OCPBUGS-7960): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1354](https://github.com/openshift/oc/pull/1354)
* [Full changelog](https://github.com/openshift/oc/compare/b05f7d40f9a2dac30771be620e9e9148d26ffd07...7aa4009c7a5babaa8e51838d59e3221a7459ca0e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d4f6bcaa06269bf2745b42de240ccdf15be4de37)

* [OCPBUGS-13739](https://issues.redhat.com/browse/OCPBUGS-13739): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#539](https://github.com/openshift/cloud-credential-operator/pull/539)
* [OCPBUGS-11707](https://issues.redhat.com/browse/OCPBUGS-11707): ccoctl: Enable public anon read access to default OIDC S3 bucket [#529](https://github.com/openshift/cloud-credential-operator/pull/529)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/3eb4889e9720647e6d3cd4653a3bca0d5a085afd...d4f6bcaa06269bf2745b42de240ccdf15be4de37)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d05b0abca416426868d770addd5b7f4d8b4d4541)

* [OCPBUGS-16325](https://issues.redhat.com/browse/OCPBUGS-16325): Azure: Handle already existing IP configurations [#117](https://github.com/openshift/cloud-network-config-controller/pull/117)
* [OCPBUGS-14717](https://issues.redhat.com/browse/OCPBUGS-14717): increase GCP egress ip capacity to 100 from 10 [#114](https://github.com/openshift/cloud-network-config-controller/pull/114)
* [OCPBUGS-13802](https://issues.redhat.com/browse/OCPBUGS-13802): sync CloudPrivateIpConfig when node is missing [#112](https://github.com/openshift/cloud-network-config-controller/pull/112)
* [OCPBUGS-13183](https://issues.redhat.com/browse/OCPBUGS-13183): pull project name from subnet uri [#108](https://github.com/openshift/cloud-network-config-controller/pull/108)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/e613bcbce51f15e41f9b77becd5598877a7cfa1d...d05b0abca416426868d770addd5b7f4d8b4d4541)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/fe4212ab101ff47fc72bde475d39f30158969974)

* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#622](https://github.com/openshift/cluster-authentication-operator/pull/622)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bb764848318a3f33275b75229a734e8bda5f471c...fe4212ab101ff47fc72bde475d39f30158969974)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5f4795c4e1750b84eaaee30ff0b0795c0fdd9e4d)

* [OCPBUGS-19557](https://issues.redhat.com/browse/OCPBUGS-19557): Guard against nil PlatformStatus [#367](https://github.com/openshift/cluster-baremetal-operator/pull/367)
* [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): use proxying for inspector in addition to ironic [#349](https://github.com/openshift/cluster-baremetal-operator/pull/349)
* [OCPBUGS-15715](https://issues.redhat.com/browse/OCPBUGS-15715): Limit role binding to openshift-machine-api namespace [#347](https://github.com/openshift/cluster-baremetal-operator/pull/347)
* [OCPBUGS-7585](https://issues.redhat.com/browse/OCPBUGS-7585): also use BMH.ConsumerRef for linking to master Machines [#326](https://github.com/openshift/cluster-baremetal-operator/pull/326)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/047391f09c68b3bb259262012693913af50c13a6...5f4795c4e1750b84eaaee30ff0b0795c0fdd9e4d)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/138a1cf2b98578acb4ccf098736bdf08614d2d6a)

* [OCPBUGS-14386](https://issues.redhat.com/browse/OCPBUGS-14386): Update dependencies and image [#91](https://github.com/openshift/cluster-bootstrap/pull/91)
* Add API team to the OWNERS [#97](https://github.com/openshift/cluster-bootstrap/pull/97)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9...138a1cf2b98578acb4ccf098736bdf08614d2d6a)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/103cb2ecf326e92f9d1d8d99324d2896d28afc58)

* [OCPBUGS-13862](https://issues.redhat.com/browse/OCPBUGS-13862): add separate upgradeable condition for the sync controller [#254](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/254)
* [OCPBUGS-13188](https://issues.redhat.com/browse/OCPBUGS-13188): update config sync controller to add upgrade status [#251](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/251)
* [OCPBUGS-7898](https://issues.redhat.com/browse/OCPBUGS-7898): add a check for nutanix cloud conf map [#239](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/239)
* [OCPBUGS-7884](https://issues.redhat.com/browse/OCPBUGS-7884): Restart pods if related configuration was changed [#228](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/83768c8057de19a6da8f58edf6430884e3081050...103cb2ecf326e92f9d1d8d99324d2896d28afc58)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/c589595f3839f6347226c9dd7945925ed3fd0985)

* [CORS-2794](https://issues.redhat.com/browse/CORS-2794): AWS Shared VPC API Bump [release-4.12] [#344](https://github.com/openshift/cluster-config-operator/pull/344)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/4c6e171d26cc3c302c6d6193060344456bc381a1...c589595f3839f6347226c9dd7945925ed3fd0985)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/119d7a734d3bda3380c32b6af716ab4e16846f13)

* [OCPBUGS-14960](https://issues.redhat.com/browse/OCPBUGS-14960): Check ProviderSpec before generating MachineInfo [#216](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/216)
* [OCPBUGS-15198](https://issues.redhat.com/browse/OCPBUGS-15198): Surface cpms vs machines diff [#219](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/219)
* [OCPBUGS-13943](https://issues.redhat.com/browse/OCPBUGS-13943): fix double machine creation on stale cache [#210](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/210)
* [OCPBUGS-12440](https://issues.redhat.com/browse/OCPBUGS-12440): Prioritise machine mapping over alphabetical mapping [#204](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/204)
* [OCPBUGS-11692](https://issues.redhat.com/browse/OCPBUGS-11692): E2E periodics test timeout failures improvement [#190](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/190)
* [OCPBUGS-8503](https://issues.redhat.com/browse/OCPBUGS-8503): machine's node must be ready for CPMS machine to be ready + fixes [#193](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/193)
* [OCPBUGS-11521](https://issues.redhat.com/browse/OCPBUGS-11521): Use PlatformStatus instead of PlatformSpec to determine platform [#188](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/188)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/89727d88312464361593a0ccc8ad07e79db9bd16...119d7a734d3bda3380c32b6af716ab4e16846f13)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/06bd5f665f2b9e70dee288a7e55f3c5038c330ac)

* [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Hypershift: set Deployment properties [#148](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/148)
* [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): [4.12] remove cluster-admin role. [#143](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/143)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/05d89ec796cf693cf80a2926f067683befea4b30...06bd5f665f2b9e70dee288a7e55f3c5038c330ac)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ffebbf4e92267a380fee92e3e3ead6a27670adc6)

* [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): update-node-resolver.sh: Check for errors from >> [#385](https://github.com/openshift/cluster-dns-operator/pull/385)
* [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): ensure original hosts file contents are preserved [#383](https://github.com/openshift/cluster-dns-operator/pull/383)
* [OCPBUGS-15251](https://issues.redhat.com/browse/OCPBUGS-15251): Add support for protocolStrategy API field to enable force_tcp configuration [#378](https://github.com/openshift/cluster-dns-operator/pull/378)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/1c136fe38b8cd5c0de99577d23157f884728d20b...ffebbf4e92267a380fee92e3e3ead6a27670adc6)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e49f1a396e694f58de57fbcc413c2bb9849cef08)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1128](https://github.com/openshift/cluster-etcd-operator/pull/1128)
* [OCPBUGS-17808](https://issues.redhat.com/browse/OCPBUGS-17808): reset snapshot default counts to avoid file already lo… [#1100](https://github.com/openshift/cluster-etcd-operator/pull/1100)
* [OCPBUGS-12473](https://issues.redhat.com/browse/OCPBUGS-12473): Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time [#1046](https://github.com/openshift/cluster-etcd-operator/pull/1046)
* [OCPBUGS-7830](https://issues.redhat.com/browse/OCPBUGS-7830): increase live/ready timeout and failure thresholds [#1011](https://github.com/openshift/cluster-etcd-operator/pull/1011)
* Update reviewers and approvers [#987](https://github.com/openshift/cluster-etcd-operator/pull/987)
* [OCPBUGS-7409](https://issues.redhat.com/browse/OCPBUGS-7409): set default timeouts in etcdcli [#1005](https://github.com/openshift/cluster-etcd-operator/pull/1005)
* [OCPBUGS-6935](https://issues.redhat.com/browse/OCPBUGS-6935): add dedicated success status for bootstrap removal [#999](https://github.com/openshift/cluster-etcd-operator/pull/999)
* [OCPBUGS-7373](https://issues.redhat.com/browse/OCPBUGS-7373): [release-4.12] fail early on missing node status envs [#1004](https://github.com/openshift/cluster-etcd-operator/pull/1004)
* [OCPBUGS-6898](https://issues.redhat.com/browse/OCPBUGS-6898): updating library-go for CVE-2022-41717 [#998](https://github.com/openshift/cluster-etcd-operator/pull/998)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a9aaf7d163b9f118347aca4080ce8cab746b241e...e49f1a396e694f58de57fbcc413c2bb9849cef08)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/e9a895af74906435bea0bb230773a3bc1898abc6)

* [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#846](https://github.com/openshift/cluster-image-registry-operator/pull/846)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/62a3aa8ff1ffcc5b52a762847ecf1391730fff92...e9a895af74906435bea0bb230773a3bc1898abc6)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0bb8ffc455b1f38c5cc378a66fe12bd61be471f1)

* [NE-1372](https://issues.redhat.com/browse/NE-1372): Add support for AWS shared VPC in another account #966 [#971](https://github.com/openshift/cluster-ingress-operator/pull/971)
* [OCPBUGS-13049](https://issues.redhat.com/browse/OCPBUGS-13049): bump controller-runtime to fix the multi namespace cache indexing [#922](https://github.com/openshift/cluster-ingress-operator/pull/922)
* [OCPBUGS-15467](https://issues.redhat.com/browse/OCPBUGS-15467): Add missing AWS permission for ListTagsForResources [#954](https://github.com/openshift/cluster-ingress-operator/pull/954)
* [OCPBUGS-16620](https://issues.redhat.com/browse/OCPBUGS-16620): Deflake TestRouterCompressionOperation [#963](https://github.com/openshift/cluster-ingress-operator/pull/963)
* [OCPBUGS-16621](https://issues.redhat.com/browse/OCPBUGS-16621): Fix TestClientTLS flakes [#964](https://github.com/openshift/cluster-ingress-operator/pull/964)
* [OCPBUGS-15644](https://issues.redhat.com/browse/OCPBUGS-15644): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#959](https://github.com/openshift/cluster-ingress-operator/pull/959)
* [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#941](https://github.com/openshift/cluster-ingress-operator/pull/941)
* [OCPBUGS-12464](https://issues.redhat.com/browse/OCPBUGS-12464): Target metrics port by name in internal service [#910](https://github.com/openshift/cluster-ingress-operator/pull/910)
* [OCPBUGS-3517](https://issues.redhat.com/browse/OCPBUGS-3517): Ingress controller should not have affinity policy in single-replica clusters [#857](https://github.com/openshift/cluster-ingress-operator/pull/857)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/992b43b3cf3e1784bfe8d3083229c7ecb410e7e3...0bb8ffc455b1f38c5cc378a66fe12bd61be471f1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/fe5e2a108165f10bdab3e75e933d93fe359b2660)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1559](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1559)
* [OCPBUGS-17139](https://issues.redhat.com/browse/OCPBUGS-17139): make webhook connection failure a warning in log [#1533](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1533)
* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#1524](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1524)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): enable pod security admission for techpreview [#1440](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1440)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): make the bootstrap kube-apiserver honor cluster-wide featuregates [#1439](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1439)
* [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard pod set readiness probe endpoint explicitly [#1445](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1445)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/336ffd5e7491f565faccf843571303377b1d4825...fe5e2a108165f10bdab3e75e933d93fe359b2660)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7f494d33fabb11f2cfaf16e8588ddcb69f7765c5)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#754](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/754)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): Enforce PSA when techpreview is enabled [#694](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/694)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): honor feature gates during bootstrapping [#695](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/695)
* [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard pod set readiness probe endpoint explicitly [#699](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/699)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/9243e022c42c6d55e1d97a15ed51831f6080984a...7f494d33fabb11f2cfaf16e8588ddcb69f7765c5)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4f0ac8dda3d83119a4ef81f893c53940889ac5f6)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#499](https://github.com/openshift/cluster-kube-scheduler-operator/pull/499)
* [OCPBUGS-14652](https://issues.redhat.com/browse/OCPBUGS-14652): disable debug pporf with unauthenticated port for 4.12 [#481](https://github.com/openshift/cluster-kube-scheduler-operator/pull/481)
* [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard controller: set the readiness probe endpoint explicitly [#462](https://github.com/openshift/cluster-kube-scheduler-operator/pull/462)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e0b6bf9c4ddb0da9268d504d23ca2ca11880d970...4f0ac8dda3d83119a4ef81f893c53940889ac5f6)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ee959ac1b7eead77d682249cae6373b4730295b7)

* [OCPBUGS-17125](https://issues.redhat.com/browse/OCPBUGS-17125): backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 [#2047](https://github.com/openshift/cluster-monitoring-operator/pull/2047)
* [OCPBUGS-16028](https://issues.redhat.com/browse/OCPBUGS-16028): Add the trusted CA bundle in UWM Prometheus pods [#2042](https://github.com/openshift/cluster-monitoring-operator/pull/2042)
* [OCPBUGS-15473](https://issues.redhat.com/browse/OCPBUGS-15473): Limit the value of GOMAXPROCS on node-exporter to 4 [#2023](https://github.com/openshift/cluster-monitoring-operator/pull/2023)
* [OCPBUGS-13008](https://issues.redhat.com/browse/OCPBUGS-13008): Add build number to vcenter version information [#1965](https://github.com/openshift/cluster-monitoring-operator/pull/1965)
* [OCPBUGS-12727](https://issues.redhat.com/browse/OCPBUGS-12727): backport OCPBUGS-5353 to 4.12 [#1955](https://github.com/openshift/cluster-monitoring-operator/pull/1955)
* [OCPBUGS-11508](https://issues.redhat.com/browse/OCPBUGS-11508): add startup probe for prometheus-adapter [#1940](https://github.com/openshift/cluster-monitoring-operator/pull/1940)
* [OCPBUGS-11623](https://issues.redhat.com/browse/OCPBUGS-11623): node-exporter: disable btrfs collector [#1944](https://github.com/openshift/cluster-monitoring-operator/pull/1944)
* [OCPBUGS-11404](https://issues.redhat.com/browse/OCPBUGS-11404): jsonnet: Add prometheus container in UWM [#1935](https://github.com/openshift/cluster-monitoring-operator/pull/1935)
* [OCPBUGS-2439](https://issues.redhat.com/browse/OCPBUGS-2439): set the argument path.udev.data in node exporter [#1800](https://github.com/openshift/cluster-monitoring-operator/pull/1800)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5a154c3dd01544adc280691be54fec94a5dc8d67...ee959ac1b7eead77d682249cae6373b4730295b7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c6d6aff9a41c3845e232fe307fdd3de6144adcf7)

* [OCPBUGS-17656](https://issues.redhat.com/browse/OCPBUGS-17656): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1948](https://github.com/openshift/cluster-network-operator/pull/1948)
* [OCPBUGS-11547](https://issues.redhat.com/browse/OCPBUGS-11547): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1775](https://github.com/openshift/cluster-network-operator/pull/1775)
* [OCPBUGS-16142](https://issues.redhat.com/browse/OCPBUGS-16142): fix reconciliation process of the allowlist controller [#1891](https://github.com/openshift/cluster-network-operator/pull/1891)
* [release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay [#1764](https://github.com/openshift/cluster-network-operator/pull/1764)
* [OCPBUGS-15588](https://issues.redhat.com/browse/OCPBUGS-15588): Add release version annotation to whereabouts-reconciler [#1856](https://github.com/openshift/cluster-network-operator/pull/1856)
* [OCPBUGS-13891](https://issues.redhat.com/browse/OCPBUGS-13891): [release-4.12] HyperShift: Support HostedControlPlane node selector [#1816](https://github.com/openshift/cluster-network-operator/pull/1816)
* [OCPBUGS-13067](https://issues.redhat.com/browse/OCPBUGS-13067): Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] [#1829](https://github.com/openshift/cluster-network-operator/pull/1829)
* [OCPBUGS-6061](https://issues.redhat.com/browse/OCPBUGS-6061): Update github.com/Masterminds/sprig to v3 [#1689](https://github.com/openshift/cluster-network-operator/pull/1689)
* [OCPBUGS-13013](https://issues.redhat.com/browse/OCPBUGS-13013): AUTH: update cluster-reader to include k8s.ovn.org [#1799](https://github.com/openshift/cluster-network-operator/pull/1799)
* [OCPBUGS-13067](https://issues.redhat.com/browse/OCPBUGS-13067): Whereabouts should implement the reconciliation controller [backport 4.12] [#1801](https://github.com/openshift/cluster-network-operator/pull/1801)
* [OCPBUGS-11559](https://issues.redhat.com/browse/OCPBUGS-11559): multus-admission-controller should not run as root under Hypershift [#1777](https://github.com/openshift/cluster-network-operator/pull/1777)
* Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net [#1671](https://github.com/openshift/cluster-network-operator/pull/1671)
* [OCPBUGS-10977](https://issues.redhat.com/browse/OCPBUGS-10977): HyperShift: Add POD_NAME env to ovnkube-node [#1753](https://github.com/openshift/cluster-network-operator/pull/1753)
* [OCPBUGS-11461](https://issues.redhat.com/browse/OCPBUGS-11461): Split out konnectivity certs [#1771](https://github.com/openshift/cluster-network-operator/pull/1771)
* [OCPBUGS-11178](https://issues.redhat.com/browse/OCPBUGS-11178): remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1759](https://github.com/openshift/cluster-network-operator/pull/1759)
* [OCPBUGS-11059](https://issues.redhat.com/browse/OCPBUGS-11059): Fix info log formatting [#1659](https://github.com/openshift/cluster-network-operator/pull/1659)
* [OCPBUGS-10319](https://issues.redhat.com/browse/OCPBUGS-10319): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1738](https://github.com/openshift/cluster-network-operator/pull/1738)
* [OCPBUGS-8014](https://issues.redhat.com/browse/OCPBUGS-8014): add default noProxy config for Azure [#1722](https://github.com/openshift/cluster-network-operator/pull/1722)
* [OCPBUGS-9927](https://issues.redhat.com/browse/OCPBUGS-9927): Enable configuration of node healthz server on ovnkube [#1731](https://github.com/openshift/cluster-network-operator/pull/1731)
* [OCPBUGS-5953](https://issues.redhat.com/browse/OCPBUGS-5953): Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] [#1685](https://github.com/openshift/cluster-network-operator/pull/1685)
* [OCPBUGS-7044](https://issues.redhat.com/browse/OCPBUGS-7044): HyperShift: Add .hypershift.local to no proxy list [#1706](https://github.com/openshift/cluster-network-operator/pull/1706)
* [OCPBUGS-7044](https://issues.redhat.com/browse/OCPBUGS-7044): HyperShift: Do not use proxy for internal routes [#1704](https://github.com/openshift/cluster-network-operator/pull/1704)
* [OCPBUGS-4778](https://issues.redhat.com/browse/OCPBUGS-4778): Fix handling of deployment and statefulset updates [#1663](https://github.com/openshift/cluster-network-operator/pull/1663)
* [OCPBUGS-4238](https://issues.redhat.com/browse/OCPBUGS-4238): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1645](https://github.com/openshift/cluster-network-operator/pull/1645)
* [OCPBUGS-6494](https://issues.redhat.com/browse/OCPBUGS-6494): OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB [#1691](https://github.com/openshift/cluster-network-operator/pull/1691)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/23536c020d3bddea96c955ecf5e379dded8a8327...c6d6aff9a41c3845e232fe307fdd3de6144adcf7)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3326048d6040f1aa34ba3fa51fa682157ccd6f78)

* Tighten the rules for modifying Tuned Profiles (#790) [#790](https://github.com/openshift/cluster-node-tuning-operator/pull/790)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#821) [#821](https://github.com/openshift/cluster-node-tuning-operator/pull/821)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Release leader election on manager exit (#789) [#789](https://github.com/openshift/cluster-node-tuning-operator/pull/789)
* Fix a race in e2e test rollback.go code (#742) [#742](https://github.com/openshift/cluster-node-tuning-operator/pull/742)
* pao: e2e: Make script executable (#734) [#734](https://github.com/openshift/cluster-node-tuning-operator/pull/734)
* pao e2e: Split gcp-pao lane (#728) [#728](https://github.com/openshift/cluster-node-tuning-operator/pull/728)
* Do not rollback settings on TuneD exit (#711) [#711](https://github.com/openshift/cluster-node-tuning-operator/pull/711)
* [OCPBUGS-15800](https://issues.redhat.com/browse/OCPBUGS-15800): e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) [#710](https://github.com/openshift/cluster-node-tuning-operator/pull/710)
* Revert "Remove optimization to allow full resync (#569)" (#688) [#569](https://github.com/openshift/cluster-node-tuning-operator/pull/569)
* update owners 20230109 (#549) [#549](https://github.com/openshift/cluster-node-tuning-operator/pull/549)
* Add PerformanceProfiles to 'oc adm must-gather' (#667) [#667](https://github.com/openshift/cluster-node-tuning-operator/pull/667)
* [OCPBUGS-14472](https://issues.redhat.com/browse/OCPBUGS-14472): Fix updating numa core siblings map in GetCpuSiblings function (#675) [#675](https://github.com/openshift/cluster-node-tuning-operator/pull/675)
* Remove trailing spaces from test names (#572) [#572](https://github.com/openshift/cluster-node-tuning-operator/pull/572)
* Remove optimization to allow full resync (#569) [#569](https://github.com/openshift/cluster-node-tuning-operator/pull/569)
* e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) [#539](https://github.com/openshift/cluster-node-tuning-operator/pull/539)
* e2e: add missing test id (#630) [#630](https://github.com/openshift/cluster-node-tuning-operator/pull/630)
* Remove subPaths, they are broken (#627) [#627](https://github.com/openshift/cluster-node-tuning-operator/pull/627)
* Remove the preStop hook for openshift-tuned (#621) [#621](https://github.com/openshift/cluster-node-tuning-operator/pull/621)
* E2E: Per Core Runtime Tuning Test automation (#509) (#568) [#509](https://github.com/openshift/cluster-node-tuning-operator/pull/509)
* E2E: Network stack Pinning tests (#533) [#533](https://github.com/openshift/cluster-node-tuning-operator/pull/533)
* Run node selector tests only if we 2 non Performanceworker nodes (#554) [#554](https://github.com/openshift/cluster-node-tuning-operator/pull/554)
* skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) [#543](https://github.com/openshift/cluster-node-tuning-operator/pull/543)
* pao: latency-tests: read test log directly from pod (#547) [#547](https://github.com/openshift/cluster-node-tuning-operator/pull/547)
* Add authentication to the /metrics endpoint (#553) [#553](https://github.com/openshift/cluster-node-tuning-operator/pull/553)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a1740c3a31505b95f1ff9da086e1ac63e62619fd...3326048d6040f1aa34ba3fa51fa682157ccd6f78)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/99197928a584d45697eddbf5f652d8eb1d2ecf68)

* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#543](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/543)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/4c5b4882e20944d9c44272551053fccbe16d6451...99197928a584d45697eddbf5f652d8eb1d2ecf68)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/67ef456a781429a06bdc744aae89783cff25315d)

* [OCPBUGS-12442](https://issues.redhat.com/browse/OCPBUGS-12442): psalabelsyncer: handle empty namespace of a rolebinding subject [#111](https://github.com/openshift/cluster-policy-controller/pull/111)
* [OCPBUGS-14092](https://issues.redhat.com/browse/OCPBUGS-14092): [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources [#117](https://github.com/openshift/cluster-policy-controller/pull/117)
* [OCPBUGS-13889](https://issues.redhat.com/browse/OCPBUGS-13889): external template and route Informer [#114](https://github.com/openshift/cluster-policy-controller/pull/114)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): backport feature gate honoring for PSa label syncer [#98](https://github.com/openshift/cluster-policy-controller/pull/98)
* [OCPBUGS-7705](https://issues.redhat.com/browse/OCPBUGS-7705): [release-4.12] update dependencies to point to v0.25.0 [#102](https://github.com/openshift/cluster-policy-controller/pull/102)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/105cc773b37f00be2351c9a4e6df24af94d547c1...67ef456a781429a06bdc744aae89783cff25315d)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f1b49e34512d38bf908183318edd1f9f9aeef883)

* [OCPBUGS-15757](https://issues.redhat.com/browse/OCPBUGS-15757): Update Jenkins and Jenkins Agent Base image versions [#506](https://github.com/openshift/cluster-samples-operator/pull/506)
* [OCPBUGS-10918](https://issues.redhat.com/browse/OCPBUGS-10918): update Jenkins to v4.12 [#492](https://github.com/openshift/cluster-samples-operator/pull/492)
* [OCPBUGS-7208](https://issues.redhat.com/browse/OCPBUGS-7208): When setting allowedRegistries urls the openshift-samples operator is degraded [#489](https://github.com/openshift/cluster-samples-operator/pull/489)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/212a4553b3bf87d56f2f360b562187a685099c3e...f1b49e34512d38bf908183318edd1f9f9aeef883)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7ac84a99b1be7acc759e55a2024ba364df999668)

* [OCPBUGS-18131](https://issues.redhat.com/browse/OCPBUGS-18131): Add patch for allowing configmap updates via clusterrole [#402](https://github.com/openshift/cluster-storage-operator/pull/402)
* [OCPBUGS-14307](https://issues.redhat.com/browse/OCPBUGS-14307): User real node name in failing mount alerts [#377](https://github.com/openshift/cluster-storage-operator/pull/377)
* [OCPBUGS-13719](https://issues.redhat.com/browse/OCPBUGS-13719): assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount [#370](https://github.com/openshift/cluster-storage-operator/pull/370)
* [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Hypershift: set control plane operand properties [#355](https://github.com/openshift/cluster-storage-operator/pull/355)
* [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): Add UID to CSO Pod to be able to run with custom SCCs [#347](https://github.com/openshift/cluster-storage-operator/pull/347)
* [OCPBUGS-7331](https://issues.redhat.com/browse/OCPBUGS-7331): hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment [#337](https://github.com/openshift/cluster-storage-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/220a777e094ff6b198007518d0734f9b54a7f9af...7ac84a99b1be7acc759e55a2024ba364df999668)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f9785d6cab936fda57e498df2c31742b84fc4677)

* [OCPBUGS-14096](https://issues.redhat.com/browse/OCPBUGS-14096): Trigger new sync round on ClusterOperator Available changes [#938](https://github.com/openshift/cluster-version-operator/pull/938)
* [OCPBUGS-12182](https://issues.redhat.com/browse/OCPBUGS-12182): Update dnsPolicy to allow consistent resolution of the internal LB [#931](https://github.com/openshift/cluster-version-operator/pull/931)
* [OCPBUGS-10565](https://issues.redhat.com/browse/OCPBUGS-10565): RetrievePayload: Improve timeouts and cover behavior with tests [#914](https://github.com/openshift/cluster-version-operator/pull/914)
* [OCPBUGS-10514](https://issues.redhat.com/browse/OCPBUGS-10514): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#913](https://github.com/openshift/cluster-version-operator/pull/913)
* [OCPBUGS-8304](https://issues.redhat.com/browse/OCPBUGS-8304): Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 [#908](https://github.com/openshift/cluster-version-operator/pull/908)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b24d60e55576e1997d6d450ba9106a80983f1512...f9785d6cab936fda57e498df2c31742b84fc4677)


### [console](https://github.com/openshift/console/tree/dea60d8886dff5fb51a9b7430257ced99b709077)

* [OCPBUGS-13580](https://issues.redhat.com/browse/OCPBUGS-13580): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12747](https://github.com/openshift/console/pull/12747)
* [OCPBUGS-19907](https://issues.redhat.com/browse/OCPBUGS-19907): Fixed Edit Application form for Knative Services [#13205](https://github.com/openshift/console/pull/13205)
* [OCPBUGS-19045](https://issues.redhat.com/browse/OCPBUGS-19045): Web console slowness on Project>Project access page [#13155](https://github.com/openshift/console/pull/13155)
* [OCPBUGS-18273](https://issues.redhat.com/browse/OCPBUGS-18273): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13113](https://github.com/openshift/console/pull/13113)
* [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#13055](https://github.com/openshift/console/pull/13055)
* [OCPBUGS-17530](https://issues.redhat.com/browse/OCPBUGS-17530): fix bug where binary secret values are corrupted on edit and add test coverage [#13087](https://github.com/openshift/console/pull/13087)
* [OCPBUGS-18366](https://issues.redhat.com/browse/OCPBUGS-18366): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13122](https://github.com/openshift/console/pull/13122)
* [OCPBUGS-16660](https://issues.redhat.com/browse/OCPBUGS-16660): Manual cherry-pick of #12978 [#13039](https://github.com/openshift/console/pull/13039)
* [OCPBUGS-17192](https://issues.redhat.com/browse/OCPBUGS-17192): "Duplicate RoleBinding" leads to "Unsupported value" error [#13063](https://github.com/openshift/console/pull/13063)
* [OCPBUGS-16846](https://issues.redhat.com/browse/OCPBUGS-16846): Fix stop PLR option [#13051](https://github.com/openshift/console/pull/13051)
* [OCPBUGS-2182](https://issues.redhat.com/browse/OCPBUGS-2182): re-enable operator-install-single-namespace.spec.ts test [#13013](https://github.com/openshift/console/pull/13013)
* [OCPBUGS-16732](https://issues.redhat.com/browse/OCPBUGS-16732): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13047](https://github.com/openshift/console/pull/13047)
* [OCPBUGS-16046](https://issues.redhat.com/browse/OCPBUGS-16046), [OCPBUGS-16047](https://issues.redhat.com/browse/OCPBUGS-16047), [OCPBUGS-16048](https://issues.redhat.com/browse/OCPBUGS-16048): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12997](https://github.com/openshift/console/pull/12997)
* [OCPBUGS-15898](https://issues.redhat.com/browse/OCPBUGS-15898): account for single object in status.conditions instead… [#12982](https://github.com/openshift/console/pull/12982)
* [OCPBUGS-16139](https://issues.redhat.com/browse/OCPBUGS-16139): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#13004](https://github.com/openshift/console/pull/13004)
* [OCPBUGS-15710](https://issues.redhat.com/browse/OCPBUGS-15710): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12962](https://github.com/openshift/console/pull/12962)
* [OCPBUGS-15849](https://issues.redhat.com/browse/OCPBUGS-15849): Add Pipeline metrics unsupported empty page [#12977](https://github.com/openshift/console/pull/12977)
* [OCPBUGS-9405](https://issues.redhat.com/browse/OCPBUGS-9405): [OSD] There is no error message shown on node label edi… [#12965](https://github.com/openshift/console/pull/12965)
* [OCPBUGS-15798](https://issues.redhat.com/browse/OCPBUGS-15798): Remove access review check for PipelineResource from Pipeline section [#12969](https://github.com/openshift/console/pull/12969)
* [OCPBUGS-13643](https://issues.redhat.com/browse/OCPBUGS-13643): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12813](https://github.com/openshift/console/pull/12813)
* [OCPBUGS-15569](https://issues.redhat.com/browse/OCPBUGS-15569): use service port name instead targetPort in the Pipeline Event listener route [#12958](https://github.com/openshift/console/pull/12958)
* [OCPBUGS-15535](https://issues.redhat.com/browse/OCPBUGS-15535): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12955](https://github.com/openshift/console/pull/12955)
* [OCPBUGS-15404](https://issues.redhat.com/browse/OCPBUGS-15404): Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected [#12935](https://github.com/openshift/console/pull/12935)
* [OCPBUGS-15057](https://issues.redhat.com/browse/OCPBUGS-15057): only copy workload annotations to debug pod [#12903](https://github.com/openshift/console/pull/12903)
* [OCPBUGS-15099](https://issues.redhat.com/browse/OCPBUGS-15099): visiting Configurations page returns error Cannot read… [#12906](https://github.com/openshift/console/pull/12906)
* [OCPBUGS-15482](https://issues.redhat.com/browse/OCPBUGS-15482): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore [#12948](https://github.com/openshift/console/pull/12948)
* [OCPBUGS-14190](https://issues.redhat.com/browse/OCPBUGS-14190): When Creating Sample Devfile from the Samples Page, Topology Icon is not set [#12859](https://github.com/openshift/console/pull/12859)
* [OCPBUGS-11989](https://issues.redhat.com/browse/OCPBUGS-11989): Modified git import flow module to handle create button enable-disable issue [#12775](https://github.com/openshift/console/pull/12775)
* [OCPBUGS-6848](https://issues.redhat.com/browse/OCPBUGS-6848): Service name search ability while creating the Route from console [#12505](https://github.com/openshift/console/pull/12505)
* [OCPBUGS-7619](https://issues.redhat.com/browse/OCPBUGS-7619): Search page: LazyActionMenus are shown below Add/Remove from navigation button [#12575](https://github.com/openshift/console/pull/12575)
* [OCPBUGS-7924](https://issues.redhat.com/browse/OCPBUGS-7924): Developer - Topology : 'Filter by resource' drop-down i18n misses [#12598](https://github.com/openshift/console/pull/12598)
* [OCPBUGS-13803](https://issues.redhat.com/browse/OCPBUGS-13803): add support for minimal status of tekton [#12831](https://github.com/openshift/console/pull/12831)
* [OCPBUGS-13750](https://issues.redhat.com/browse/OCPBUGS-13750): use PipelineRun template from 'pipelines-as-code-pipelinerun-go' configMap for Go runtime [#12829](https://github.com/openshift/console/pull/12829)
* [OCPBUGS-12839](https://issues.redhat.com/browse/OCPBUGS-12839): Show type of sample on the samples view [#12783](https://github.com/openshift/console/pull/12783)
* [OCPBUGS-12992](https://issues.redhat.com/browse/OCPBUGS-12992): Pipeline doesn't render correctly when displayed but looks fine in edit mode [#12791](https://github.com/openshift/console/pull/12791)
* [OCPBUGS-9336](https://issues.redhat.com/browse/OCPBUGS-9336): use buildconfig form also for create [#12770](https://github.com/openshift/console/pull/12770)
* [OCPBUGS-11601](https://issues.redhat.com/browse/OCPBUGS-11601): Move operator install status to it's own … [#12715](https://github.com/openshift/console/pull/12715)
* [OCPBUGS-12232](https://issues.redhat.com/browse/OCPBUGS-12232): Fix for broken Create key/value secrets e2e tests [#12750](https://github.com/openshift/console/pull/12750)
* [OCPBUGS-11844](https://issues.redhat.com/browse/OCPBUGS-11844): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12727](https://github.com/openshift/console/pull/12727)
* [OCPBUGS-11972](https://issues.redhat.com/browse/OCPBUGS-11972): update the default pipelineRun template name [#12687](https://github.com/openshift/console/pull/12687)
* [OCPBUGS-6888](https://issues.redhat.com/browse/OCPBUGS-6888): Show Git icon and repo link as per the Git provider [#12511](https://github.com/openshift/console/pull/12511)
* [OCPBUGS-12476](https://issues.redhat.com/browse/OCPBUGS-12476): Pipelines repository list and creation form doesn't show Tech Preview status [#12763](https://github.com/openshift/console/pull/12763)
* [OCPBUGS-1753](https://issues.redhat.com/browse/OCPBUGS-1753): Fix OLM descriptor components deletes operand e2e test failing [#12573](https://github.com/openshift/console/pull/12573)
* [OCPBUGS-12477](https://issues.redhat.com/browse/OCPBUGS-12477): Users don't know what type of resource is being created by Import from Git or Deploy Image flows [#12765](https://github.com/openshift/console/pull/12765)
* [OCPBUGS-11998](https://issues.redhat.com/browse/OCPBUGS-11998): Do not show builder ImageStreams without `sampleRepo` as samples [#12740](https://github.com/openshift/console/pull/12740)
* [OCPBUGS-5009](https://issues.redhat.com/browse/OCPBUGS-5009): Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization [#12382](https://github.com/openshift/console/pull/12382)
* [OCPBUGS-7953](https://issues.redhat.com/browse/OCPBUGS-7953): fix devfile error [#12605](https://github.com/openshift/console/pull/12605)
* [OCPBUGS-6672](https://issues.redhat.com/browse/OCPBUGS-6672): In DeploymentConfig both the Form view and Yaml view are not in sync [#12475](https://github.com/openshift/console/pull/12475)
* [OCPBUGS-8016](https://issues.redhat.com/browse/OCPBUGS-8016): PipelineRun templates must be fetched from OpenShift namespace [#12614](https://github.com/openshift/console/pull/12614)
* [OCPBUGS-10225](https://issues.redhat.com/browse/OCPBUGS-10225): Get the Event type value from the latest PLR of the Repository [#12643](https://github.com/openshift/console/pull/12643)
* [OCPBUGS-7333](https://issues.redhat.com/browse/OCPBUGS-7333): Add missing SDK extensions descriptions [#12556](https://github.com/openshift/console/pull/12556)
* [OCPBUGS-7951](https://issues.redhat.com/browse/OCPBUGS-7951): delete application should delete all part-of resources [#12604](https://github.com/openshift/console/pull/12604)
* [OCPBUGS-6036](https://issues.redhat.com/browse/OCPBUGS-6036): Project dropdown order is not as smart as project list page order [#12447](https://github.com/openshift/console/pull/12447)
* [OCPBUGS-7800](https://issues.redhat.com/browse/OCPBUGS-7800): add subject kind dropdown in the project access form [#12586](https://github.com/openshift/console/pull/12586)
* [OCPBUGS-8339](https://issues.redhat.com/browse/OCPBUGS-8339): disable operator-install-single-namespace.spec.ts until… [#12624](https://github.com/openshift/console/pull/12624)
* [OCPBUGS-3892](https://issues.redhat.com/browse/OCPBUGS-3892): Add cluster to query params of websocket requests [#12282](https://github.com/openshift/console/pull/12282)
* [OCPBUGS-5092](https://issues.redhat.com/browse/OCPBUGS-5092): Fix to use and set correct secretReference for build-config triggers [#12388](https://github.com/openshift/console/pull/12388)
* [OCPBUGS-7895](https://issues.redhat.com/browse/OCPBUGS-7895): Bump helm version to 3.10.1 [#12579](https://github.com/openshift/console/pull/12579)
* [OCPBUGS-6873](https://issues.redhat.com/browse/OCPBUGS-6873): The dropdown list component will be covered by deployment details page on Topology page [#12507](https://github.com/openshift/console/pull/12507)
* [OCPBUGS-6831](https://issues.redhat.com/browse/OCPBUGS-6831): Fix crash when pinnedResources is null [#12503](https://github.com/openshift/console/pull/12503)
* [OCPBUGS-7471](https://issues.redhat.com/browse/OCPBUGS-7471): Right border radius is 0 for the pipeline visualization wrapper in dark mode [#12565](https://github.com/openshift/console/pull/12565)
* [OCPBUGS-7506](https://issues.redhat.com/browse/OCPBUGS-7506): Fix different CI issues [#12555](https://github.com/openshift/console/pull/12555)
* [OCPBUGS-6966](https://issues.redhat.com/browse/OCPBUGS-6966): Remove description field from the PLR parameters page [#12519](https://github.com/openshift/console/pull/12519)
* [OCPBUGS-7437](https://issues.redhat.com/browse/OCPBUGS-7437): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12560](https://github.com/openshift/console/pull/12560)
* [OCPBUGS-6887](https://issues.redhat.com/browse/OCPBUGS-6887): Show Tag label and tag name if tag is detected in repository PipelineRun list and details page [#12510](https://github.com/openshift/console/pull/12510)
* [OCPBUGS-6816](https://issues.redhat.com/browse/OCPBUGS-6816): Repositories list does not show the running pipelinerun as last pipelinerun [#12500](https://github.com/openshift/console/pull/12500)
* [OCPBUGS-4072](https://issues.redhat.com/browse/OCPBUGS-4072): Fix rerender loop/crash when bindable-kinds is found but has no status [#12304](https://github.com/openshift/console/pull/12304)
* [OCPBUGS-6671](https://issues.redhat.com/browse/OCPBUGS-6671): fix broken pipeline secret [#12474](https://github.com/openshift/console/pull/12474)
* [OCPBUGS-6913](https://issues.redhat.com/browse/OCPBUGS-6913): PipelineRun task status overlaps status text [#12516](https://github.com/openshift/console/pull/12516)
* [OCPBUGS-6766](https://issues.redhat.com/browse/OCPBUGS-6766): Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC [#12491](https://github.com/openshift/console/pull/12491)
* [OCPBUGS-6969](https://issues.redhat.com/browse/OCPBUGS-6969): Added translation to Last used in resource type dropdown [#12521](https://github.com/openshift/console/pull/12521)
* [OCPBUGS-6764](https://issues.redhat.com/browse/OCPBUGS-6764): Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered [#12490](https://github.com/openshift/console/pull/12490)
* [OCPBUGS-4281](https://issues.redhat.com/browse/OCPBUGS-4281): Do not disable metrics when auth is disabled [#12323](https://github.com/openshift/console/pull/12323)
* [OCPBUGS-6669](https://issues.redhat.com/browse/OCPBUGS-6669): Do not show UpdateInProgress when status is Failing [#12473](https://github.com/openshift/console/pull/12473)
* [OCPBUGS-5093](https://issues.redhat.com/browse/OCPBUGS-5093): Fix to show correct help texts for each git repo status error code [#12389](https://github.com/openshift/console/pull/12389)
* [OCPBUGS-6085](https://issues.redhat.com/browse/OCPBUGS-6085): Editing Pipeline in the ocp console should show correct information [#12452](https://github.com/openshift/console/pull/12452)
* [OCPBUGS-6758](https://issues.redhat.com/browse/OCPBUGS-6758): Add RBAC check on Create a Project link in all-namespaces pages [#12489](https://github.com/openshift/console/pull/12489)
* [OCPBUGS-6755](https://issues.redhat.com/browse/OCPBUGS-6755): Remove `refs-heads` from the branch name for Repository pipelineRun row [#12487](https://github.com/openshift/console/pull/12487)
* [Full changelog](https://github.com/openshift/console/compare/e9c7ec8eb87725e3c69e990751bef3e582aa3bdf...dea60d8886dff5fb51a9b7430257ced99b709077)


### [console-operator](https://github.com/openshift/console-operator/tree/beba7a83da0113b590d1cfcf31fbadab27c03b63)

* [OCPBUGS-15834](https://issues.redhat.com/browse/OCPBUGS-15834): Dockerfile: Shift ConsolePlugin CRD after the operator Deployment [#791](https://github.com/openshift/console-operator/pull/791)
* [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#780](https://github.com/openshift/console-operator/pull/780)
* [OCPBUGS-13647](https://issues.redhat.com/browse/OCPBUGS-13647): Proper cleanup of route sync conditions [#762](https://github.com/openshift/console-operator/pull/762)
* [OCPBUGS-7999](https://issues.redhat.com/browse/OCPBUGS-7999): Distinguish between route conditions and remove the old ones [#735](https://github.com/openshift/console-operator/pull/735)
* [OCPBUGS-6921](https://issues.redhat.com/browse/OCPBUGS-6921): Recover ConsoleNotificationSync after being degraded [#728](https://github.com/openshift/console-operator/pull/728)
* [Full changelog](https://github.com/openshift/console-operator/compare/8c938a46686746518cc37e71b444d40d1b4e6c2d...beba7a83da0113b590d1cfcf31fbadab27c03b63)


### [coredns](https://github.com/openshift/coredns/tree/8d756b0ccbb73b377df3378848c69b69d3918338)

* [OCPBUGS-20144](https://issues.redhat.com/browse/OCPBUGS-20144): UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 [#98](https://github.com/openshift/coredns/pull/98)
* [Full changelog](https://github.com/openshift/coredns/compare/9aaa7e0a86b69bafb9f544a0e5cb1873535a8f6b...8d756b0ccbb73b377df3378848c69b69d3918338)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/501138d0701e53f30797a7ccc8e344abfb8032f4)

* [OCPBUGS-20573](https://issues.redhat.com/browse/OCPBUGS-20573): [release-4.12] CARRY: Add DOWNSTREAM_OWNERS [#229](https://github.com/openshift/cloud-provider-openstack/pull/229)
* [OCPBUGS-20124](https://issues.redhat.com/browse/OCPBUGS-20124): FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 [#220](https://github.com/openshift/cloud-provider-openstack/pull/220)
* [OCPBUGS-15971](https://issues.redhat.com/browse/OCPBUGS-15971): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 [#198](https://github.com/openshift/cloud-provider-openstack/pull/198)
* [OCPBUGS-11906](https://issues.redhat.com/browse/OCPBUGS-11906): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 [#193](https://github.com/openshift/cloud-provider-openstack/pull/193)
* [OCPBUGS-6591](https://issues.redhat.com/browse/OCPBUGS-6591): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 [#174](https://github.com/openshift/cloud-provider-openstack/pull/174)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3125fe729221139aa8c87b427655669880bbd06c...501138d0701e53f30797a7ccc8e344abfb8032f4)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/a0d079a079603589b9e272465f99befb001c23db)

* [OCPBUGS-18475](https://issues.redhat.com/browse/OCPBUGS-18475): Don't cache OpenStack client [#202](https://github.com/openshift/csi-driver-manila-operator/pull/202)
* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#199](https://github.com/openshift/csi-driver-manila-operator/pull/199)
* [OCPBUGS-10556](https://issues.redhat.com/browse/OCPBUGS-10556): Bump go.mongodb.org/mongo-driver to v1.5.1 [#176](https://github.com/openshift/csi-driver-manila-operator/pull/176)
* [OCPBUGS-6599](https://issues.redhat.com/browse/OCPBUGS-6599): Address CVE-2022-41717 [#166](https://github.com/openshift/csi-driver-manila-operator/pull/166)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/6cad8759f4456659c9397a61d20a7f084bd90304...a0d079a079603589b9e272465f99befb001c23db)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/d90992573acb3df6c7fbb6dbe1b215125d26fc34)

* [OCPBUGS-6590](https://issues.redhat.com/browse/OCPBUGS-6590): Address CVE-2022-41717 [#105](https://github.com/openshift/csi-driver-nfs/pull/105)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/b7393faceb18e18eae133a6de89e4b4339295fa8...d90992573acb3df6c7fbb6dbe1b215125d26fc34)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/9cb056421c5a2e37435dbedbd7d73de8db1e094a)

* [OCPBUGS-13821](https://issues.redhat.com/browse/OCPBUGS-13821): Bump gRPC from 1.38.0 to 1.49.0 [#43](https://github.com/openshift/csi-livenessprobe/pull/43)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/720e1d6e3e828dec9908091da9f5d80a31d75585...9cb056421c5a2e37435dbedbd7d73de8db1e094a)


### [docker-builder](https://github.com/openshift/builder/tree/1f99147cffbc3b92fe868aa9ccb7a11e82d91c18)

* [OCPBUGS-17228](https://issues.redhat.com/browse/OCPBUGS-17228): bump github.com/containers/buildah to v1.26.6 [#325](https://github.com/openshift/builder/pull/325)
* [OCPBUGS-15643](https://issues.redhat.com/browse/OCPBUGS-15643): Add the git-lfs package [#353](https://github.com/openshift/builder/pull/353)
* [OCPBUGS-6753](https://issues.redhat.com/browse/OCPBUGS-6753): manage-dockerfile: use the original form of HEALTHCHECK [#324](https://github.com/openshift/builder/pull/324)
* [Full changelog](https://github.com/openshift/builder/compare/e76828eb29e8afefc639706a7ead4e4584d4eb0a...1f99147cffbc3b92fe868aa9ccb7a11e82d91c18)


### [docker-registry](https://github.com/openshift/image-registry/tree/9e75355ca282cf5abac5595585a4b089e6a95e6f)

* [OCPBUGS-19306](https://issues.redhat.com/browse/OCPBUGS-19306): bump docker-distribution [#382](https://github.com/openshift/image-registry/pull/382)
* [OCPBUGS-10496](https://issues.redhat.com/browse/OCPBUGS-10496): bump docker-distribution [#365](https://github.com/openshift/image-registry/pull/365)
* [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#362](https://github.com/openshift/image-registry/pull/362)
* [Full changelog](https://github.com/openshift/image-registry/compare/3bf8e25d5694f7a4dbbe7620a1cc2e26d611cf60...9e75355ca282cf5abac5595585a4b089e6a95e6f)


### [etcd](https://github.com/openshift/etcd/tree/9f987a572bf0cbb244350f62731db57d9e05f9f7)

* [OCPBUGS-15860](https://issues.redhat.com/browse/OCPBUGS-15860): [4.12] Rebase openshift/etcd to 3.5.9 [#207](https://github.com/openshift/etcd/pull/207)
* Update owners [#185](https://github.com/openshift/etcd/pull/185)
* Updating ose-etcd images to be consistent with ART [#153](https://github.com/openshift/etcd/pull/153)
* [Full changelog](https://github.com/openshift/etcd/compare/978cfefd2f21c4ec1ac84ed95130cbff510fbe1b...9f987a572bf0cbb244350f62731db57d9e05f9f7)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e7cecfc120f25169435e3b00ee020e996f487034)

* [OCPBUGS-14120](https://issues.redhat.com/browse/OCPBUGS-14120): Register control plane machines to instance group [#52](https://github.com/openshift/machine-api-provider-gcp/pull/52)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/ada83dc67fc2efad2cc73f89ca3b33fd289e50ba...e7cecfc120f25169435e3b00ee020e996f487034)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/bcca07e9d155d9350dc44e3d66383994425cc3a2)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#82](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/82)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/020aeb670fa7897ae3e564d052577042c26b1921...bcca07e9d155d9350dc44e3d66383994425cc3a2)


### [haproxy-router](https://github.com/openshift/router/tree/cac95bc112da79454f6f18bd30ca53adf7d3da63)

* [OCPBUGS-17766](https://issues.redhat.com/browse/OCPBUGS-17766): haproxy/template: mitigate CVE-2023-40225 [#507](https://github.com/openshift/router/pull/507)
* [OCPBUGS-18639](https://issues.redhat.com/browse/OCPBUGS-18639): properly handle weight=0 [#511](https://github.com/openshift/router/pull/511)
* [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#491](https://github.com/openshift/router/pull/491)
* [Full changelog](https://github.com/openshift/router/compare/3065f6583f3925328fbdbfe95e3bc7bb7a084d33...cac95bc112da79454f6f18bd30ca53adf7d3da63)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/20cda6131c2f1f506955aec222ba95a6084db547)

* [OCPBUGS-21435](https://issues.redhat.com/browse/OCPBUGS-21435): [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1760](https://github.com/openshift/kubernetes/pull/1760)
* [OCPBUGS-18288](https://issues.redhat.com/browse/OCPBUGS-18288), [OCPBUGS-19483](https://issues.redhat.com/browse/OCPBUGS-19483): Update to kubernetes 1.25.14 [#1719](https://github.com/openshift/kubernetes/pull/1719)
* [OCPBUGS-18768](https://issues.redhat.com/browse/OCPBUGS-18768): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1694](https://github.com/openshift/kubernetes/pull/1694)
* [OCPBUGS-17188](https://issues.redhat.com/browse/OCPBUGS-17188): Update to Kubernetes 1.25.12 [#1669](https://github.com/openshift/kubernetes/pull/1669)
* [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#1662](https://github.com/openshift/kubernetes/pull/1662)
* [OCPBUGS-8737](https://issues.redhat.com/browse/OCPBUGS-8737): UPSTREAM: <drop>: bump apiserver-library-go for scc fix [#1619](https://github.com/openshift/kubernetes/pull/1619)
* [OCPBUGS-15309](https://issues.redhat.com/browse/OCPBUGS-15309): Bump to k8s 1.25.11 [#1615](https://github.com/openshift/kubernetes/pull/1615)
* [OCPBUGS-14745](https://issues.redhat.com/browse/OCPBUGS-14745): [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1600](https://github.com/openshift/kubernetes/pull/1600)
* [OCPBUGS-13173](https://issues.redhat.com/browse/OCPBUGS-13173): Bump to k8s 1.25.10 [#1582](https://github.com/openshift/kubernetes/pull/1582)
* [OCPBUGS-7589](https://issues.redhat.com/browse/OCPBUGS-7589): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1478](https://github.com/openshift/kubernetes/pull/1478)
* [OCPBUGS-11166](https://issues.redhat.com/browse/OCPBUGS-11166): UPSTREAM: <carry>: Force using the go tooling from the system [#1531](https://github.com/openshift/kubernetes/pull/1531)
* [OCPBUGS-11166](https://issues.redhat.com/browse/OCPBUGS-11166): Bump to k8s 1.25.8 [#1527](https://github.com/openshift/kubernetes/pull/1527)
* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Fix mounted volume expansion tests [#1503](https://github.com/openshift/kubernetes/pull/1503)
* [OCPBUGS-7078](https://issues.redhat.com/browse/OCPBUGS-7078): Bump to k8s 1.25.7 [#1496](https://github.com/openshift/kubernetes/pull/1496)
* [OCPBUGS-5769](https://issues.redhat.com/browse/OCPBUGS-5769): scc admission - seccomp profiles fix [#1471](https://github.com/openshift/kubernetes/pull/1471)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a34b9e9499e6c3a94e2326652bd8236a5378c0b2...20cda6131c2f1f506955aec222ba95a6084db547)


### [hypershift](https://github.com/openshift/hypershift/tree/6f1e70162329ed38cb7e58622fc79955e4338f02)

* [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2994](https://github.com/openshift/hypershift/pull/2994)
* [MULTIARCH-3732](https://issues.redhat.com/browse/MULTIARCH-3732): PowerVS - Fix cluster deletion when existing resources passed [#2993](https://github.com/openshift/hypershift/pull/2993)
* [MULTIARCH-3733](https://issues.redhat.com/browse/MULTIARCH-3733): Add dev flags in destroy cluster powervs command [#2998](https://github.com/openshift/hypershift/pull/2998)
* Updated secret permissions for openshift-route-controller-manager [#2924](https://github.com/openshift/hypershift/pull/2924)
* fix(hcco): Add HCP label to HCCO by default [#2972](https://github.com/openshift/hypershift/pull/2972)
* fix(ignition): Add HCP label to ignition-server by default [#2949](https://github.com/openshift/hypershift/pull/2949)
* [OCPBUGS-16847](https://issues.redhat.com/browse/OCPBUGS-16847): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2855](https://github.com/openshift/hypershift/pull/2855)
* [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 [#2803](https://github.com/openshift/hypershift/pull/2803)
* [OCPBUGS-16411](https://issues.redhat.com/browse/OCPBUGS-16411): fix deletion bug when hostedzone is already deleted [#2835](https://github.com/openshift/hypershift/pull/2835)
* Kas policy 4.12 [#2826](https://github.com/openshift/hypershift/pull/2826)
* Leader election config update. [#2800](https://github.com/openshift/hypershift/pull/2800)
* [OCPBUGS-15614](https://issues.redhat.com/browse/OCPBUGS-15614): Check OwningIngressController also in Labels [#2759](https://github.com/openshift/hypershift/pull/2759)
* [OCPBUGS-16086](https://issues.redhat.com/browse/OCPBUGS-16086): autoscaling balance similar groups [#2806](https://github.com/openshift/hypershift/pull/2806)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2749](https://github.com/openshift/hypershift/pull/2749)
* [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Update vendored openshift API for 4.12 [#2734](https://github.com/openshift/hypershift/pull/2734)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2745](https://github.com/openshift/hypershift/pull/2745)
* properly handle user CA bundle not existing [#2711](https://github.com/openshift/hypershift/pull/2711)
* [OCPBUGS-15304](https://issues.redhat.com/browse/OCPBUGS-15304): [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2695](https://github.com/openshift/hypershift/pull/2695)
* [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Honor global ingress configuration LoadBalancer type on AWS [#2678](https://github.com/openshift/hypershift/pull/2678)
* [OCPBUGS-14803](https://issues.redhat.com/browse/OCPBUGS-14803): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2667](https://github.com/openshift/hypershift/pull/2667)
* [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount [#2512](https://github.com/openshift/hypershift/pull/2512)
* [OCPBUGS-14156](https://issues.redhat.com/browse/OCPBUGS-14156): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2614](https://github.com/openshift/hypershift/pull/2614)
* [OCPBUGS-14031](https://issues.redhat.com/browse/OCPBUGS-14031): Include default ingress CA in root CA bundle [#2600](https://github.com/openshift/hypershift/pull/2600)
* [OCPBUGS-13626](https://issues.redhat.com/browse/OCPBUGS-13626): Sync proxy TrustedCA to guest cluster [#2557](https://github.com/openshift/hypershift/pull/2557)
* [OCPBUGS-13639](https://issues.redhat.com/browse/OCPBUGS-13639): Cherry pick aws endpoint sg [#2579](https://github.com/openshift/hypershift/pull/2579)
* [OCPBUGS-12787](https://issues.redhat.com/browse/OCPBUGS-12787): fix(hcco): Get OLM CatalogSource images from defined map [#2485](https://github.com/openshift/hypershift/pull/2485)
* ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials [#2486](https://github.com/openshift/hypershift/pull/2486)
* Configurable SRE MetricsSet [#2545](https://github.com/openshift/hypershift/pull/2545)
* [OCPBUGS-13077](https://issues.redhat.com/browse/OCPBUGS-13077): Ensure ingress controllers are removed before load balancers [#2515](https://github.com/openshift/hypershift/pull/2515)
* [OCPBUGS-11544](https://issues.redhat.com/browse/OCPBUGS-11544): Pass runAsUser to CNO so it can run its managed services with proper security context [#2391](https://github.com/openshift/hypershift/pull/2391)
* [OCPBUGS-12845](https://issues.redhat.com/browse/OCPBUGS-12845): Delete kubeadmin secret when an idp is defined [#2492](https://github.com/openshift/hypershift/pull/2492)
* [OCPBUGS-12738](https://issues.redhat.com/browse/OCPBUGS-12738): Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO [#2473](https://github.com/openshift/hypershift/pull/2473)
* [OCPBUGS-12199](https://issues.redhat.com/browse/OCPBUGS-12199): remove ACL for aws bucket [#2458](https://github.com/openshift/hypershift/pull/2458)
* [OCPBUGS-11607](https://issues.redhat.com/browse/OCPBUGS-11607): properly reconcile with user specified changes for in proxy configuration [#2395](https://github.com/openshift/hypershift/pull/2395)
* [OCPBUGS-11726](https://issues.redhat.com/browse/OCPBUGS-11726): Update HostedCluster oauthCallbackURLTemplate [#2410](https://github.com/openshift/hypershift/pull/2410)
* e2e: Cleanup shared OIDC provider on SIGTERM [#2449](https://github.com/openshift/hypershift/pull/2449)
* [HOSTEDCP-568](https://issues.redhat.com/browse/HOSTEDCP-568): Update Konnectiviy socks5 proxy for IBM exception [#2406](https://github.com/openshift/hypershift/pull/2406)
* [OCPBUGS-10584](https://issues.redhat.com/browse/OCPBUGS-10584): Switch NTO metrics auth to certs generated by HCP controller [#2293](https://github.com/openshift/hypershift/pull/2293)
* [OCPBUGS-11014](https://issues.redhat.com/browse/OCPBUGS-11014): Do not proxy when guest cluster resolution fails [#2340](https://github.com/openshift/hypershift/pull/2340)
* [OCPBUGS-11654](https://issues.redhat.com/browse/OCPBUGS-11654): [release-4.12] Create new EC2 client for AWS identity provider health check [#2403](https://github.com/openshift/hypershift/pull/2403)
* [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Add storage operators perms. to watch HostedControlPlane [#2306](https://github.com/openshift/hypershift/pull/2306)
* [HOSTEDCP-939](https://issues.redhat.com/browse/HOSTEDCP-939): [release-4.12] Setup shared OIDC provider for e2e clusters [#2365](https://github.com/openshift/hypershift/pull/2365)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2362](https://github.com/openshift/hypershift/pull/2362)
* [OCPBUGS-11056](https://issues.redhat.com/browse/OCPBUGS-11056): fix external APIServer address selection based on endpointAccess [#2350](https://github.com/openshift/hypershift/pull/2350)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2351](https://github.com/openshift/hypershift/pull/2351)
* [SDA-8707](https://issues.redhat.com/browse/SDA-8707): No more specifying the scrape interval at servicemonitors & podmonitors level [#2356](https://github.com/openshift/hypershift/pull/2356)
* [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2285](https://github.com/openshift/hypershift/pull/2285)
* [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2310](https://github.com/openshift/hypershift/pull/2310)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): [release-4.12] Validate etcd KMS config [#2273](https://github.com/openshift/hypershift/pull/2273)
* [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): [release-4.12] Expose external DNS for private cluster endpoints [#2314](https://github.com/openshift/hypershift/pull/2314)
* [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2297](https://github.com/openshift/hypershift/pull/2297)
* [OCPBUGS-10587](https://issues.redhat.com/browse/OCPBUGS-10587): Use appropriate serving certificate for OAuth [#2295](https://github.com/openshift/hypershift/pull/2295)
* [OSD-15099](https://issues.redhat.com/browse/OSD-15099): Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed [#2274](https://github.com/openshift/hypershift/pull/2274)
* Add PodMonitor for ingress-operator pods in HCP namespaces [#2275](https://github.com/openshift/hypershift/pull/2275)
* [OCPBUGS-8334](https://issues.redhat.com/browse/OCPBUGS-8334): [release-4.12] Update the pull secret source for ignition payload [#2268](https://github.com/openshift/hypershift/pull/2268)
* Force controleplane upgrade always [#2289](https://github.com/openshift/hypershift/pull/2289)
* [OCPBUGS-8370](https://issues.redhat.com/browse/OCPBUGS-8370): Fix cleanup of volumes on cluster deletion [#2253](https://github.com/openshift/hypershift/pull/2253)
* [OCPBUGS-8241](https://issues.redhat.com/browse/OCPBUGS-8241): Add external DNS health condition / release-4.12 [#2206](https://github.com/openshift/hypershift/pull/2206)
* [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2263](https://github.com/openshift/hypershift/pull/2263)
* Add configuration for automatic labeling and label commands [#2255](https://github.com/openshift/hypershift/pull/2255)
* fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2251](https://github.com/openshift/hypershift/pull/2251)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2242](https://github.com/openshift/hypershift/pull/2242)
* kms addition for pod identity workflow [#2247](https://github.com/openshift/hypershift/pull/2247)
* Add e2e test for hosted cluster behind a proxy [#2199](https://github.com/openshift/hypershift/pull/2199)
* Add e2e test for cluster creation with AWS KMS [#2201](https://github.com/openshift/hypershift/pull/2201)
* [HOSTEDCP-826](https://issues.redhat.com/browse/HOSTEDCP-826): Customize DNS base domain prefix [#2235](https://github.com/openshift/hypershift/pull/2235)
* feat: Add pod gone check to prober + DNS operator leader elect [#2209](https://github.com/openshift/hypershift/pull/2209)
* fix(ibmcloud): Explicitly set HCCO controllers [#2208](https://github.com/openshift/hypershift/pull/2208)
* ensure reconcilation of apiserver port is in 4.12 [#2195](https://github.com/openshift/hypershift/pull/2195)
* Cleanup default security group only if authorized [#2212](https://github.com/openshift/hypershift/pull/2212)
* fix(cpo): Set restart annotation on multus-admission-controller [#2190](https://github.com/openshift/hypershift/pull/2190)
* fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac [#2189](https://github.com/openshift/hypershift/pull/2189)
* fix(cpo): Reduce CNO access if Calico used as network provider [#2184](https://github.com/openshift/hypershift/pull/2184)
* Skip destroyAWSDefaultSecurityGroup if not AWS [#2168](https://github.com/openshift/hypershift/pull/2168)
* Create default security group for AWS clusters [#2162](https://github.com/openshift/hypershift/pull/2162)
* [AUTH-323](https://issues.redhat.com/browse/AUTH-323): pki: split out konnectivity certs from the rootCA [#2156](https://github.com/openshift/hypershift/pull/2156)
* fix(ibmcloud): Initialize image registry config on creates and bad config [#2104](https://github.com/openshift/hypershift/pull/2104)
* fix(cpo): Allow KAS profiling disablement [#2122](https://github.com/openshift/hypershift/pull/2122)
* reduce ignition server scope [#2140](https://github.com/openshift/hypershift/pull/2140)
* OpenID add support for groups claim in the config [#2129](https://github.com/openshift/hypershift/pull/2129)
* fix(cpo): Restart registry operator on annotation [#2121](https://github.com/openshift/hypershift/pull/2121)
* Fix CAPA crd generation [#2120](https://github.com/openshift/hypershift/pull/2120)
* Set k8s.io/kubernetes dependency to v0.23.3 [#2118](https://github.com/openshift/hypershift/pull/2118)
* fix(cpo): Separate RBAC for NTO + CNO [#2112](https://github.com/openshift/hypershift/pull/2112)
* Merge main up to db7c22ae into 'release-4.12' [#2101](https://github.com/openshift/hypershift/pull/2101)
* [Full changelog](https://github.com/openshift/hypershift/compare/8f27c51c4306e12e2c5e926f9095f1d74d08c5ab...6f1e70162329ed38cb7e58622fc79955e4338f02)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)

* [OCPBUGS-8451](https://issues.redhat.com/browse/OCPBUGS-8451): Rebase to v5.1.2 for OCP 4.12 [#32](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/32)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/2364e6a3835070cdcec29375aa0a3bf296720f64...e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/6c16f871d3d93517d5eaafe0c07d47fbf9a289e6)

* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#831) [#831](https://github.com/openshift/insights-operator/pull/831)
* [OCPBUGS-19405](https://issues.redhat.com/browse/OCPBUGS-19405): workload info gatherer, add external image repo (#823) [#823](https://github.com/openshift/insights-operator/pull/823)
* [OCPBUGS-15031](https://issues.redhat.com/browse/OCPBUGS-15031): fix the config serialization & add test (#794) (#800) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-15459](https://issues.redhat.com/browse/OCPBUGS-15459): gather PDBs only from openshift namespaces (#804) [#804](https://github.com/openshift/insights-operator/pull/804)
* [OCPBUGS-15414](https://issues.redhat.com/browse/OCPBUGS-15414): extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) [#788](https://github.com/openshift/insights-operator/pull/788)
* [OCPBUGS-7871](https://issues.redhat.com/browse/OCPBUGS-7871): Collect info about monitoring pods pv  (#769) [#769](https://github.com/openshift/insights-operator/pull/769)
* [OCPBUGS-11008](https://issues.redhat.com/browse/OCPBUGS-11008): update the cluster transfer interval to 12h (#765) [#765](https://github.com/openshift/insights-operator/pull/765)
* [OCPBUGS-10531](https://issues.redhat.com/browse/OCPBUGS-10531): service_accounts.go Marshal fix (#754) [#754](https://github.com/openshift/insights-operator/pull/754)
* [OCPBUGS-6732](https://issues.redhat.com/browse/OCPBUGS-6732): Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) [#727](https://github.com/openshift/insights-operator/pull/727)
* [OCPBUGS-6833](https://issues.redhat.com/browse/OCPBUGS-6833): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) [#736](https://github.com/openshift/insights-operator/pull/736)
* [OCPBUGS-6782](https://issues.redhat.com/browse/OCPBUGS-6782): Create gatherer for gathering machines. (#734) [#734](https://github.com/openshift/insights-operator/pull/734)
* [Full changelog](https://github.com/openshift/insights-operator/compare/9b28d553555da54585cc05b018a1828fb8f81a5e...6c16f871d3d93517d5eaafe0c07d47fbf9a289e6)


### [ironic](https://github.com/openshift/ironic-image/tree/e626e7e7af6af9a99331fc370e2c175db0918af8)

* [OCPBUGS-17642](https://issues.redhat.com/browse/OCPBUGS-17642): Expand regex for fcos/okd packages list [#392](https://github.com/openshift/ironic-image/pull/392)
* [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): allow inspector to also be proxied [#385](https://github.com/openshift/ironic-image/pull/385)
* [OCPBUGS-13586](https://issues.redhat.com/browse/OCPBUGS-13586): Add python-flask dependency [#373](https://github.com/openshift/ironic-image/pull/373)
* Bug OCPBUGS-13335: Bump ironic version to include fix to OCPBUGS-13335. [#367](https://github.com/openshift/ironic-image/pull/367)
* [OCPBUGS-13041](https://issues.redhat.com/browse/OCPBUGS-13041): Bump python-sushy [#363](https://github.com/openshift/ironic-image/pull/363)
* [OCPBUGS-7566](https://issues.redhat.com/browse/OCPBUGS-7566): Bump werkzeug 4.12 [#352](https://github.com/openshift/ironic-image/pull/352)
* [Full changelog](https://github.com/openshift/ironic-image/compare/27695b69851b0687e17b4325e364792026282d9f...e626e7e7af6af9a99331fc370e2c175db0918af8)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a822924833c76efde334a1118996612e809f7880)

* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): backport hostname fixes [#90](https://github.com/openshift/ironic-agent-image/pull/90)
* "Bug OCPBUGS-15831: Switch to udevadm command install instead of package" [#82](https://github.com/openshift/ironic-agent-image/pull/82)
* [OCPBUGS-9934](https://issues.redhat.com/browse/OCPBUGS-9934): Adding dep on python3-werkzeug >= 2.0.3-4 [#72](https://github.com/openshift/ironic-agent-image/pull/72)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fb675baa5849e2decd90e9e19e36b7031dc70a55...a822924833c76efde334a1118996612e809f7880)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29)

* [OCPBUGS-15735](https://issues.redhat.com/browse/OCPBUGS-15735): Binary should be compiled on rhel9 [#92](https://github.com/openshift/ironic-rhcos-downloader/pull/92)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/a580a4479cb6988f3065ef3d4c5fcfcfc3609d12...c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/a8ade8fe60ad5fb1ab225a514ec331123b256cff)

* [OCPBUGS-14415](https://issues.redhat.com/browse/OCPBUGS-14415): Flush addresses on provisioning interface with global scope only [#37](https://github.com/openshift/ironic-static-ip-manager/pull/37)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/0c7fbba926e18978d7c0d6a5948d7722a07bbc12...a8ade8fe60ad5fb1ab225a514ec331123b256cff)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/5fc351d2b57da06005e6d31c2e31a60963123a67)

* [OCPBUGS-20580](https://issues.redhat.com/browse/OCPBUGS-20580): limit number of simultaneous client requests [#79](https://github.com/openshift/k8s-prometheus-adapter/pull/79)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/987e5da8ebf294300e16500b201fb72d03af8ed3...5fc351d2b57da06005e6d31c2e31a60963123a67)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/dc9f9af9098af5d29801b12d33c123f02c21cae0)

* [OCPBUGS-18325](https://issues.redhat.com/browse/OCPBUGS-18325): Vendor o/k to consume update to prefer local TCP eps for DNS [#573](https://github.com/openshift/sdn/pull/573)
* [OCPBUGS-13785](https://issues.redhat.com/browse/OCPBUGS-13785): EgressNetworkPolicy DNS resolution does not fall back to TCP [#542](https://github.com/openshift/sdn/pull/542)
* [OCPBUGS-14304](https://issues.redhat.com/browse/OCPBUGS-14304): fix possible concurrent map read/write [#551](https://github.com/openshift/sdn/pull/551)
* [OCPBUGS-13058](https://issues.redhat.com/browse/OCPBUGS-13058): save and delete the old egress network policy [#539](https://github.com/openshift/sdn/pull/539)
* [OCPBUGS-13761](https://issues.redhat.com/browse/OCPBUGS-13761): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [#541](https://github.com/openshift/sdn/pull/541)
* [OCPBUGS-10805](https://issues.redhat.com/browse/OCPBUGS-10805): Fix race in Egress IP Tracker start [#521](https://github.com/openshift/sdn/pull/521)
* [OCPBUGS-7474](https://issues.redhat.com/browse/OCPBUGS-7474): Initialize egress node monitoring struct with previous reachability status [#505](https://github.com/openshift/sdn/pull/505)
* [OCPBUGS-6842](https://issues.redhat.com/browse/OCPBUGS-6842): Handle race condition to setup default vnid flows [#497](https://github.com/openshift/sdn/pull/497)
* [OCPBUGS-7227](https://issues.redhat.com/browse/OCPBUGS-7227): Update for 4.12 / go 1.19, including gofmt updates [#482](https://github.com/openshift/sdn/pull/482)
* [Full changelog](https://github.com/openshift/sdn/compare/d6903305ca12bf21f4ef6b96cb7aeed7defa2fc2...dc9f9af9098af5d29801b12d33c123f02c21cae0)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/94f3fde785a22afdc77768f5c346c7d3195274d2)

* [OCPBUGS-11645](https://issues.redhat.com/browse/OCPBUGS-11645): Updating kube-rbac-proxy images to be consistent with ART [#56](https://github.com/openshift/kube-rbac-proxy/pull/56)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/513fd32175af4bb03f2e8a31030477e63380b5bc...94f3fde785a22afdc77768f5c346c7d3195274d2)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/8fd2f8b0f7e2849b1a7db252beba0c8250552e36)

* Bug OCPBUGS-16376: Fix np retry [#740](https://github.com/openshift/kuryr-kubernetes/pull/740)
* [OCPBUGS-15493](https://issues.redhat.com/browse/OCPBUGS-15493): Remove unneeded grpcio dependencies from RPM [#737](https://github.com/openshift/kuryr-kubernetes/pull/737)
* [OCPBUGS-13778](https://issues.redhat.com/browse/OCPBUGS-13778): KuryrPort cleanup: Fix issue of subport not found [#731](https://github.com/openshift/kuryr-kubernetes/pull/731)
* Bug OCPBUGS-12164: Fix ValueError when Pod has no IP address [#722](https://github.com/openshift/kuryr-kubernetes/pull/722)
* [OCPBUGS-11993](https://issues.redhat.com/browse/OCPBUGS-11993): Fix VIF revert on KuryrPort status update error [#721](https://github.com/openshift/kuryr-kubernetes/pull/721)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/92b9be25999aee9c3b225606510c56fd14378bdf...8fd2f8b0f7e2849b1a7db252beba0c8250552e36)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a6c42a425610c1f634475f5e1014ee8b2dbd9437)

* [OCPBUGS-10943](https://issues.redhat.com/browse/OCPBUGS-10943): Fix empty component version [#1132](https://github.com/openshift/machine-api-operator/pull/1132)
* [OCPBUGS-7882](https://issues.redhat.com/browse/OCPBUGS-7882): Block machine deletion if extra disks are attached [#1120](https://github.com/openshift/machine-api-operator/pull/1120)
* [OCPBUGS-8286](https://issues.redhat.com/browse/OCPBUGS-8286): Short circuit misfiring [#1109](https://github.com/openshift/machine-api-operator/pull/1109)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a99a63b994407212a5dcc83cc5bc7c02222350b3...a6c42a425610c1f634475f5e1014ee8b2dbd9437)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b483cddc0c77e98a44fa31ee6beb6efc15783440)

* [OCPBUGS-20509](https://issues.redhat.com/browse/OCPBUGS-20509): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … [#3969](https://github.com/openshift/machine-config-operator/pull/3969)
* [OCPBUGS-19779](https://issues.redhat.com/browse/OCPBUGS-19779): daemon: always use `podman cp` to copy extensions container content [#3944](https://github.com/openshift/machine-config-operator/pull/3944)
* [OCPBUGS-19515](https://issues.redhat.com/browse/OCPBUGS-19515): The kubeconfig copied on to each node has 644 permissions [#3931](https://github.com/openshift/machine-config-operator/pull/3931)
* [OCPBUGS-17862](https://issues.redhat.com/browse/OCPBUGS-17862): Agent-based install process the container machine-config-controller will be oom [#3875](https://github.com/openshift/machine-config-operator/pull/3875)
* [OCPBUGS-17461](https://issues.redhat.com/browse/OCPBUGS-17461): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3844](https://github.com/openshift/machine-config-operator/pull/3844)
* [OCPBUGS-15570](https://issues.redhat.com/browse/OCPBUGS-15570): configure-ovs: support UUID in vlan.parent [#3768](https://github.com/openshift/machine-config-operator/pull/3768)
* [OCPBUGS-16754](https://issues.redhat.com/browse/OCPBUGS-16754): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3818](https://github.com/openshift/machine-config-operator/pull/3818)
* [OCPBUGS-11303](https://issues.redhat.com/browse/OCPBUGS-11303): Fix regex dot in coredns config file [#3660](https://github.com/openshift/machine-config-operator/pull/3660)
* [OCPBUGS-13757](https://issues.redhat.com/browse/OCPBUGS-13757): The MCD has a non-functional pivot command that should be removed [#3710](https://github.com/openshift/machine-config-operator/pull/3710)
* [OCPBUGS-7718](https://issues.redhat.com/browse/OCPBUGS-7718): Prevent possible split-brain scenario with keepalived unicast [#3562](https://github.com/openshift/machine-config-operator/pull/3562)
* [OCPBUGS-7945](https://issues.redhat.com/browse/OCPBUGS-7945): [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd [#3573](https://github.com/openshift/machine-config-operator/pull/3573)
* [OCPBUGS-5935](https://issues.redhat.com/browse/OCPBUGS-5935): Wrap podman commands in a while loop [#3495](https://github.com/openshift/machine-config-operator/pull/3495)
* [OCPBUGS-7167](https://issues.redhat.com/browse/OCPBUGS-7167): Avoid 'too restrictive' SCC problems by being more explicit [#3542](https://github.com/openshift/machine-config-operator/pull/3542)
* [OCPBUGS-10505](https://issues.redhat.com/browse/OCPBUGS-10505): daemon: Drop duplicate `--authfile` used in `run` [#3617](https://github.com/openshift/machine-config-operator/pull/3617)
* [OCPBUGS-10372](https://issues.redhat.com/browse/OCPBUGS-10372): Remove hard requirement for the afterburn from early-running aws-related services [#3613](https://github.com/openshift/machine-config-operator/pull/3613)
* [OCPBUGS-9993](https://issues.redhat.com/browse/OCPBUGS-9993): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3608](https://github.com/openshift/machine-config-operator/pull/3608)
* [OCPBUGS-7445](https://issues.redhat.com/browse/OCPBUGS-7445): configure-ovs: fix mtu-migration cleanup [#3555](https://github.com/openshift/machine-config-operator/pull/3555)
* [OCPBUGS-8261](https://issues.redhat.com/browse/OCPBUGS-8261): [release-4.12] backport cleanupDuplicateMC [#3578](https://github.com/openshift/machine-config-operator/pull/3578)
* [OCPBUGS-6943](https://issues.redhat.com/browse/OCPBUGS-6943): Improvements for `configure-ovs.sh` [#3528](https://github.com/openshift/machine-config-operator/pull/3528)
* [OCPBUGS-6045](https://issues.redhat.com/browse/OCPBUGS-6045): There are not enough logs in case "oc extract" is stuck in mco first boot [#3503](https://github.com/openshift/machine-config-operator/pull/3503)
* [OCPBUGS-6973](https://issues.redhat.com/browse/OCPBUGS-6973): configure-ovs: optionally generate configuration in /run [#3532](https://github.com/openshift/machine-config-operator/pull/3532)
* [OCPBUGS-6779](https://issues.redhat.com/browse/OCPBUGS-6779): baremetal: clean state generated by NM when run by dracut [#3521](https://github.com/openshift/machine-config-operator/pull/3521)
* [OCPBUGS-7241](https://issues.redhat.com/browse/OCPBUGS-7241): controller: default overwrite to true for files [#3546](https://github.com/openshift/machine-config-operator/pull/3546)
* [OCPBUGS-6997](https://issues.redhat.com/browse/OCPBUGS-6997): Fix 4.12 art images [#3535](https://github.com/openshift/machine-config-operator/pull/3535)
* [OCPBUGS-6805](https://issues.redhat.com/browse/OCPBUGS-6805): Only check image type if we are sure there is work that needs to be done [#3526](https://github.com/openshift/machine-config-operator/pull/3526)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/e3dc9430ac753ac0440f55910370da22c65637f1...b483cddc0c77e98a44fa31ee6beb6efc15783440)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/30adb687218063f1f602e2eaa93a88c123364fbf)

* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Pass BareMetalHost name to IPA (take 2) [#101](https://github.com/openshift/image-customization-controller/pull/101)
* [OCPBUGS-18687](https://issues.redhat.com/browse/OCPBUGS-18687): Watch networkData Secrets for changes [#96](https://github.com/openshift/image-customization-controller/pull/96)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/27777d0e032119965c7ea5ce5b8f74bd885990bd...30adb687218063f1f602e2eaa93a88c123364fbf)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)

* Updating ose-multus-admission-controller images to be consistent with ART [#61](https://github.com/openshift/multus-admission-controller/pull/61)
* [OCPBUGS-10506](https://issues.redhat.com/browse/OCPBUGS-10506): Client golang [backport 4.12] [#59](https://github.com/openshift/multus-admission-controller/pull/59)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d9b6b11b817058b84056c93d5089f55ff815f271...5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)


### [multus-cni](https://github.com/openshift/multus-cni/tree/210e5408299551d74ef0129155ed665e7590b541)

* [OCPBUGS-7844](https://issues.redhat.com/browse/OCPBUGS-7844): Fix multus to support CNI plugin which does not create interface [backport 4.12] [#164](https://github.com/openshift/multus-cni/pull/164)
* [OCPBUGS-10535](https://issues.redhat.com/browse/OCPBUGS-10535): Multus sync Mar-20-2023 to OCP 4.12 [#149](https://github.com/openshift/multus-cni/pull/149)
* [OCPBUGS-7792](https://issues.redhat.com/browse/OCPBUGS-7792): Multus sync v3.9.3 to OCP 4.12 [#145](https://github.com/openshift/multus-cni/pull/145)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b34bd0f5ddaf6563b824e849c3819c684e74e567...210e5408299551d74ef0129155ed665e7590b541)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0)

* Updating ose-multus-route-override-cni images to be consistent with ART [#27](https://github.com/openshift/route-override-cni/pull/27)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/523b79044306b7590ad449d7eab06a233d687d86...efd6ffbb275a133196e30edfe9f241e2a3b4f0c0)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/e56594f9a848625d2997b0f159959114e8ff5970)

* [OCPBUGS-5953](https://issues.redhat.com/browse/OCPBUGS-5953): Denormalize IP name before checking if pod is alive [Backport 4.12] [#178](https://github.com/openshift/whereabouts-cni/pull/178)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#134](https://github.com/openshift/whereabouts-cni/pull/134)
* [OCPBUGS-8673](https://issues.redhat.com/browse/OCPBUGS-8673): Dual stack support [#131](https://github.com/openshift/whereabouts-cni/pull/131)
* [OCPBUGS-7429](https://issues.redhat.com/browse/OCPBUGS-7429): Invalid ipv6 backport 4.12 [#109](https://github.com/openshift/whereabouts-cni/pull/109)
* [OCPBUGS-11321](https://issues.redhat.com/browse/OCPBUGS-11321): respect requested allocation range when exluding ranges [Backport 4.12] [#123](https://github.com/openshift/whereabouts-cni/pull/123)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#93](https://github.com/openshift/whereabouts-cni/pull/93)
* [OCPBUGS-3941](https://issues.redhat.com/browse/OCPBUGS-3941): Backport Excluded ranges bug (#282) [#103](https://github.com/openshift/whereabouts-cni/pull/103)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/057715ebdd38f6cfbeda9bf5fa6ac20e21947a60...e56594f9a848625d2997b0f159959114e8ff5970)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/30386d6b8d4f3b05931842b6a9b85f15c241b09a)

* [OCPBUGS-13836](https://issues.redhat.com/browse/OCPBUGS-13836): Ignore missing links during delete command [#53](https://github.com/openshift/bond-cni/pull/53)
* Updating ose-network-interface-bond-cni images to be consistent with ART [#37](https://github.com/openshift/bond-cni/pull/37)
* [Full changelog](https://github.com/openshift/bond-cni/compare/a88d72fc5df78d3a43ec17cf313ac57678423b87...30386d6b8d4f3b05931842b6a9b85f15c241b09a)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/74202ec3b360556526e9652dc25ba6e2f19d19bb)

* Revert "Remove e2e tests that consistently fail in 4.12 (#74)" (#77) [#74](https://github.com/openshift/network-metrics-daemon/pull/74)
* Remove e2e tests that consistently fail in 4.12 (#74) [#74](https://github.com/openshift/network-metrics-daemon/pull/74)
* Updating ose-network-metrics-daemon images to be consistent with ART (#60) [#60](https://github.com/openshift/network-metrics-daemon/pull/60)
* Fix gofmt check issue (#68) [#68](https://github.com/openshift/network-metrics-daemon/pull/68)
* Update golang.org/x/text to 0.7.0 (#66) [#66](https://github.com/openshift/network-metrics-daemon/pull/66)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/2dfa218ea9feb2b80f22f16c27bddd16fbcbfb87...74202ec3b360556526e9652dc25ba6e2f19d19bb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/cfafdccf09150ab55b8b853df16e4395ff3bda4b)

* Updating ose-oauth-apiserver images to be consistent with ART [#80](https://github.com/openshift/oauth-apiserver/pull/80)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/94026d8cfe0ae214aec62a5f14ae5934676b4355...cfafdccf09150ab55b8b853df16e4395ff3bda4b)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0f83669be9b7caa6f82799b4bd2fd659d3b31aee)

* [OCPBUGS-13906](https://issues.redhat.com/browse/OCPBUGS-13906): don't log request query and fragment on failed authn request [#129](https://github.com/openshift/oauth-server/pull/129)
* [OCPBUGS-12757](https://issues.redhat.com/browse/OCPBUGS-12757): bump lib-go for group cache fix, kube 1.24->1.25 [#127](https://github.com/openshift/oauth-server/pull/127)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a803bf49503ed73a3eb1487b0a8798e5a3f6b241...0f83669be9b7caa6f82799b4bd2fd659d3b31aee)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3ac49d9bd7c2193ede794e328dfa1142d7735f2e)

* [OCPBUGS-14065](https://issues.redhat.com/browse/OCPBUGS-14065): Fix destination image reference (#650) [#650](https://github.com/openshift/oc-mirror/pull/650)
* [OCPBUGS-11908](https://issues.redhat.com/browse/OCPBUGS-11908): Fix (#607) (#641) [#607](https://github.com/openshift/oc-mirror/pull/607)
* [OCPBUGS-14065](https://issues.redhat.com/browse/OCPBUGS-14065): fix: Limit the nested repository path while mirroring the images (#642) [#642](https://github.com/openshift/oc-mirror/pull/642)
* updates the OWNERS file (#646) [#646](https://github.com/openshift/oc-mirror/pull/646)
* [OCPBUGS-12261](https://issues.redhat.com/browse/OCPBUGS-12261): fix: skips bundles with 'skips' field on head bundle (#618) [#618](https://github.com/openshift/oc-mirror/pull/618)
* [OCPBUGS-863](https://issues.redhat.com/browse/OCPBUGS-863): Add skip pruning flag and logic  (#591) [#591](https://github.com/openshift/oc-mirror/pull/591)
* Bugfix for destination registry nested paths length (#590) [#590](https://github.com/openshift/oc-mirror/pull/590)
* [OCPBUGS-6703](https://issues.redhat.com/browse/OCPBUGS-6703): fix: adds logic that searches for the correct name when using a heads… (#554) [#554](https://github.com/openshift/oc-mirror/pull/554)
* Updating oc-mirror-plugin images to be consistent with ART (#515) [#515](https://github.com/openshift/oc-mirror/pull/515)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/db7bea29a4c5fe85fcd2400cfcb7c57a99bcb7fa...3ac49d9bd7c2193ede794e328dfa1142d7735f2e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/635ed5cc49f0d9668969a8a78bec91d426b4d26b)

* [OCPBUGS-8717](https://issues.redhat.com/browse/OCPBUGS-8717): Clear metadata.namespace on projects before write. [#358](https://github.com/openshift/openshift-apiserver/pull/358)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/30c5f26d173c7576d396b8d74707de03da266ce2...635ed5cc49f0d9668969a8a78bec91d426b4d26b)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/db5a7df3758cf29a79425e5b067d8df96ce259ff)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#130](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/308a62d84a29b0d45c504fbe43a85fcb8e3199da...db5a7df3758cf29a79425e5b067d8df96ce259ff)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/05657663c02be6d03d074d0f39a2b247cef9286a)

* Bug OCPBUGS-19770: Set controller's SyncPeriod to 1 hour [#86](https://github.com/openshift/machine-api-provider-openstack/pull/86)
* [OCPBUGS-10607](https://issues.redhat.com/browse/OCPBUGS-10607): Use TenantID if ProjectID is empty [#66](https://github.com/openshift/machine-api-provider-openstack/pull/66)
* [OCPBUGS-10603](https://issues.redhat.com/browse/OCPBUGS-10603): machineset_controller: Stop caching clouds credentials [#65](https://github.com/openshift/machine-api-provider-openstack/pull/65)
* [OCPBUGS-7155](https://issues.redhat.com/browse/OCPBUGS-7155): Address CVE-2022-41717 [#55](https://github.com/openshift/machine-api-provider-openstack/pull/55)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5f1ea9f0dbdadb30f67e7539ff357170f9401773...05657663c02be6d03d074d0f39a2b247cef9286a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/dea707139641e96ca2d3fa472c25f0ff966ca5b4)

* [OCPBUGS-18512](https://issues.redhat.com/browse/OCPBUGS-18512), [RHIBMCS-168](https://issues.redhat.com/browse/RHIBMCS-168): Copied csv listing backport [#559](https://github.com/openshift/operator-framework-olm/pull/559)
* Introduce DOWNSTREAM_OWNERS file [#541](https://github.com/openshift/operator-framework-olm/pull/541)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#512](https://github.com/openshift/operator-framework-olm/pull/512)
* [OCPBUGS-15858](https://issues.redhat.com/browse/OCPBUGS-15858): fix dynamic conversion webhook [#503](https://github.com/openshift/operator-framework-olm/pull/503)
* [OCPBUGS-15737](https://issues.redhat.com/browse/OCPBUGS-15737): Re-enable psa plugin [#500](https://github.com/openshift/operator-framework-olm/pull/500)
* [OCPBUGS-7650](https://issues.redhat.com/browse/OCPBUGS-7650): Catalog Pod Startup Probe Timeout [#450](https://github.com/openshift/operator-framework-olm/pull/450)
* Updating operator-registry images to be consistent with ART [#397](https://github.com/openshift/operator-framework-olm/pull/397)
* [OCPBUGS-7825](https://issues.redhat.com/browse/OCPBUGS-7825): Set openshift.io/scc label to empty [#456](https://github.com/openshift/operator-framework-olm/pull/456)
* [OCPBUGS-7769](https://issues.redhat.com/browse/OCPBUGS-7769): [release-4.12] update cluster policy operator dependency [#454](https://github.com/openshift/operator-framework-olm/pull/454)
* [OCPBUGS-7556](https://issues.redhat.com/browse/OCPBUGS-7556): Defuse E2e timebomb [#449](https://github.com/openshift/operator-framework-olm/pull/449)
* [OCPBUGS-7086](https://issues.redhat.com/browse/OCPBUGS-7086): cherry-pick pull request refactor FBC caching (#1051) f… [#441](https://github.com/openshift/operator-framework-olm/pull/441)
* [OCPBUGS-6260](https://issues.redhat.com/browse/OCPBUGS-6260): Catalog, fatal error: concurrent map read and map write [#440](https://github.com/openshift/operator-framework-olm/pull/440)
* [OCPBUGS-7025](https://issues.redhat.com/browse/OCPBUGS-7025): Set ImagePullPolicy of bundle unpacker to "IfNotPresent" for image digests [#439](https://github.com/openshift/operator-framework-olm/pull/439)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d6d213925d54c360f4d2f93ef729ff983322375a...dea707139641e96ca2d3fa472c25f0ff966ca5b4)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a5465e26d6ce2a471496418f2c5cdd627da9cdb6)

* [OCPBUGS-18503](https://issues.redhat.com/browse/OCPBUGS-18503): remove a race condition [#533](https://github.com/operator-framework/operator-marketplace/pull/533)
* [OCPBUGS-14109](https://issues.redhat.com/browse/OCPBUGS-14109): Revert default catsrc diff changes [#519](https://github.com/operator-framework/operator-marketplace/pull/519)
* [OCPBUGS-7108](https://issues.redhat.com/browse/OCPBUGS-7108): Default CatalogSource aren't always reverted to default settings [#506](https://github.com/operator-framework/operator-marketplace/pull/506)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/87790da6e17fccb6fd53b23f7eb060611fe73c2b...a5465e26d6ce2a471496418f2c5cdd627da9cdb6)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/35c7cb909a646a522605196779622bd3fcbb1d11)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#121](https://github.com/openshift/ovirt-csi-driver-operator/pull/121)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/feb14fbb7c7e91fd721a23b5c7307469da5c1aec...35c7cb909a646a522605196779622bd3fcbb1d11)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/97c5073099ffb30f8be6cc9494ee725f31dd4df4)

* [OCPBUGS-18353](https://issues.redhat.com/browse/OCPBUGS-18353): Update bridge flow cache when the host address changes [#1872](https://github.com/openshift/ovn-kubernetes/pull/1872)
* [OCPBUGS-14708](https://issues.redhat.com/browse/OCPBUGS-14708), [OCPBUGS-19089](https://issues.redhat.com/browse/OCPBUGS-19089), [OCPBUGS-19904](https://issues.redhat.com/browse/OCPBUGS-19904), [OCPBUGS-19906](https://issues.redhat.com/browse/OCPBUGS-19906): Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp [#1881](https://github.com/openshift/ovn-kubernetes/pull/1881)
* [OCPBUGS-18054](https://issues.redhat.com/browse/OCPBUGS-18054): Emit node events only when retry failure [#1837](https://github.com/openshift/ovn-kubernetes/pull/1837)
* [OCPBUGS-18652](https://issues.redhat.com/browse/OCPBUGS-18652): Do not return error if pod IP cannot be retrieved for `deletePeerPod` and perf improvements [#1903](https://github.com/openshift/ovn-kubernetes/pull/1903)
* [OCPBUGS-19432](https://issues.redhat.com/browse/OCPBUGS-19432): Remove stale egressip status entry [#1892](https://github.com/openshift/ovn-kubernetes/pull/1892)
* [OCPBUGS-18586](https://issues.redhat.com/browse/OCPBUGS-18586): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1856](https://github.com/openshift/ovn-kubernetes/pull/1856)
* [OCPBUGS-18058](https://issues.redhat.com/browse/OCPBUGS-18058): [release-4.12] Create egress firewall with one db transaction [#1835](https://github.com/openshift/ovn-kubernetes/pull/1835)
* [OCPBUGS-17675](https://issues.redhat.com/browse/OCPBUGS-17675): Don't return error on delete event that doesn't ave a chance to succeed. [#1814](https://github.com/openshift/ovn-kubernetes/pull/1814)
* [OCPBUGS-17522](https://issues.redhat.com/browse/OCPBUGS-17522): [release-4.12] libovsdb: give monitor setup time to process than normal transactions [#1808](https://github.com/openshift/ovn-kubernetes/pull/1808)
* [OCPBUGS-16336](https://issues.redhat.com/browse/OCPBUGS-16336): Backport support AllocateLoadBalancerNodePortsFalse [#1766](https://github.com/openshift/ovn-kubernetes/pull/1766)
* [OCPBUGS-15593](https://issues.redhat.com/browse/OCPBUGS-15593): ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1730](https://github.com/openshift/ovn-kubernetes/pull/1730)
* [OCPBUGS-15719](https://issues.redhat.com/browse/OCPBUGS-15719): [relase-4.12] Fix egressFirewall create error handling [#1746](https://github.com/openshift/ovn-kubernetes/pull/1746)
* [OCPBUGS-13744](https://issues.redhat.com/browse/OCPBUGS-13744): Improve syncNodes to remove stale data [#1732](https://github.com/openshift/ovn-kubernetes/pull/1732)
* [OCPBUGS-13885](https://issues.redhat.com/browse/OCPBUGS-13885): [release-4.12] Drop packets that were not properly SNATed [#1679](https://github.com/openshift/ovn-kubernetes/pull/1679)
* [OCPBUGS-15388](https://issues.redhat.com/browse/OCPBUGS-15388): Fix stale SNAT entries for completed pods [#1723](https://github.com/openshift/ovn-kubernetes/pull/1723)
* [OCPBUGS-15709](https://issues.redhat.com/browse/OCPBUGS-15709): [release-4.12] Remove non-existing functions test. [#1739](https://github.com/openshift/ovn-kubernetes/pull/1739)
* [OCPBUGS-15424](https://issues.redhat.com/browse/OCPBUGS-15424): [release-4.12] Fix network policy to work with long namespace names [#1725](https://github.com/openshift/ovn-kubernetes/pull/1725)
* [OCPBUGS-14982](https://issues.redhat.com/browse/OCPBUGS-14982): Validate port before deleting conntrack flow [#1713](https://github.com/openshift/ovn-kubernetes/pull/1713)
* [OCPBUGS-14041](https://issues.redhat.com/browse/OCPBUGS-14041): Fix bug that resulted in routes not be restored to a new vnic [#1681](https://github.com/openshift/ovn-kubernetes/pull/1681)
* [OCPBUGS-13953](https://issues.redhat.com/browse/OCPBUGS-13953): [release-4.12] Use loadbalancer.Name as client index [#1680](https://github.com/openshift/ovn-kubernetes/pull/1680)
* [OCPBUGS-13599](https://issues.redhat.com/browse/OCPBUGS-13599): Call SyncEndpoints from AddService [#1673](https://github.com/openshift/ovn-kubernetes/pull/1673)
* [OCPBUGS-7439](https://issues.redhat.com/browse/OCPBUGS-7439): [release-4.12]: Egress Service: Fix nodeSelector parsing [#1529](https://github.com/openshift/ovn-kubernetes/pull/1529)
* [OCPBUGS-12768](https://issues.redhat.com/browse/OCPBUGS-12768): : [release-4.12] Delete equivalent ACLs when searching by predicate. [#1661](https://github.com/openshift/ovn-kubernetes/pull/1661)
* [OCPBUGS-12265](https://issues.redhat.com/browse/OCPBUGS-12265): [release-4.12] Network scale metrics [#1653](https://github.com/openshift/ovn-kubernetes/pull/1653)
* [OCPBUGS-8226](https://issues.redhat.com/browse/OCPBUGS-8226): fix hybridOverlay DRIP in ICNIv1 pods [#1633](https://github.com/openshift/ovn-kubernetes/pull/1633)
* [OCPBUGS-11701](https://issues.redhat.com/browse/OCPBUGS-11701): [release-4.12] CARRY: use "prefer local" for annotated services [#1638](https://github.com/openshift/ovn-kubernetes/pull/1638)
* [OCPBUGS-11109](https://issues.redhat.com/browse/OCPBUGS-11109): [release-4.12] Batch potentially big transaction on egress firewall ACLs migration [#1617](https://github.com/openshift/ovn-kubernetes/pull/1617)
* [OCPBUGS-10947](https://issues.redhat.com/browse/OCPBUGS-10947): [release-4.12] Egress firewall fix retry [#1610](https://github.com/openshift/ovn-kubernetes/pull/1610)
* [OCPBUGS-10314](https://issues.redhat.com/browse/OCPBUGS-10314): [release-4.12] Handle Completed pods deletion [#1581](https://github.com/openshift/ovn-kubernetes/pull/1581)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1288](https://github.com/openshift/ovn-kubernetes/pull/1288)
* [OCPBUGS-10632](https://issues.redhat.com/browse/OCPBUGS-10632): Check the "Serving" field for endpoints [#1569](https://github.com/openshift/ovn-kubernetes/pull/1569)
* [OCPBUGS-6034](https://issues.redhat.com/browse/OCPBUGS-6034): Update egress node assignability on every egress node update [#1483](https://github.com/openshift/ovn-kubernetes/pull/1483)
* [OCPBUGS-7732](https://issues.redhat.com/browse/OCPBUGS-7732): Fix leak in service controller cache [#1545](https://github.com/openshift/ovn-kubernetes/pull/1545)
* [OCPBUGS-10490](https://issues.redhat.com/browse/OCPBUGS-10490): [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go [#1595](https://github.com/openshift/ovn-kubernetes/pull/1595)
* [OCPBUGS-10318](https://issues.redhat.com/browse/OCPBUGS-10318): [release-4.12] node: add node healthz server for cloud load balancers [#1570](https://github.com/openshift/ovn-kubernetes/pull/1570)
* [OCPBUGS-7346](https://issues.redhat.com/browse/OCPBUGS-7346): [release-4.12] Fully remove dependency on default gateway for services [#1577](https://github.com/openshift/ovn-kubernetes/pull/1577)
* [OCPBUGS-6957](https://issues.redhat.com/browse/OCPBUGS-6957): [release-4.12] Ensure routes are not duplicated [#1503](https://github.com/openshift/ovn-kubernetes/pull/1503)
* [OCPBUGS-8501](https://issues.redhat.com/browse/OCPBUGS-8501), [OCPBUGS-8506](https://issues.redhat.com/browse/OCPBUGS-8506), [OCPBUGS-8508](https://issues.redhat.com/browse/OCPBUGS-8508): [release-4.12] Fix EFW's name truncation logic & make EFW ACLs unique using extIDs [#1559](https://github.com/openshift/ovn-kubernetes/pull/1559)
* [OCPBUGS-7223](https://issues.redhat.com/browse/OCPBUGS-7223): node: don't consider internal masquerade addresses as node IP addresses [#1528](https://github.com/openshift/ovn-kubernetes/pull/1528)
* [OCPBUGS-7317](https://issues.redhat.com/browse/OCPBUGS-7317): [release-4.12] Delete stale egress ip snat entries by node [#1520](https://github.com/openshift/ovn-kubernetes/pull/1520)
* [OCPBUGS-7026](https://issues.redhat.com/browse/OCPBUGS-7026): Bump OVN to 22.12 and turn off neighbour response in router options. [#1521](https://github.com/openshift/ovn-kubernetes/pull/1521)
* [OCPBUGS-6040](https://issues.redhat.com/browse/OCPBUGS-6040): addMasqueradeRoute: fallback to gateway interface IPs [#1484](https://github.com/openshift/ovn-kubernetes/pull/1484)
* [OCPBUGS-7230](https://issues.redhat.com/browse/OCPBUGS-7230): Delete IGMP Groups when deleting stale chassis [#1516](https://github.com/openshift/ovn-kubernetes/pull/1516)
* [OCPBUGS-3399](https://issues.redhat.com/browse/OCPBUGS-3399): Drop in-cluster traffic towards svcCIDR at wrong port [#1490](https://github.com/openshift/ovn-kubernetes/pull/1490)
* [OCPBUGS-6961](https://issues.redhat.com/browse/OCPBUGS-6961): update base image of Dockerfile [#1504](https://github.com/openshift/ovn-kubernetes/pull/1504)
* [OCPBUGS-6823](https://issues.redhat.com/browse/OCPBUGS-6823): [release-4.12] Fix Egress FW ACL rules in dualstack mode [#1500](https://github.com/openshift/ovn-kubernetes/pull/1500)
* [OCPBUGS-4862](https://issues.redhat.com/browse/OCPBUGS-4862): Correct the deletion of noHostSubnet nodes [#1470](https://github.com/openshift/ovn-kubernetes/pull/1470)
* [OCPBUGS-298](https://issues.redhat.com/browse/OCPBUGS-298): ovnkube-trace: run ovn-sbctl and ovn-trace with --no-leader-only [#1489](https://github.com/openshift/ovn-kubernetes/pull/1489)
* [OCPBUGS-5841](https://issues.redhat.com/browse/OCPBUGS-5841): ovnkube-node: Existing management port check [#1475](https://github.com/openshift/ovn-kubernetes/pull/1475)
* [OCPBUGS-6812](https://issues.redhat.com/browse/OCPBUGS-6812): [release-4.12] Ensure loadbalancer cleanup doesn't fail [#1497](https://github.com/openshift/ovn-kubernetes/pull/1497)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/84904bf654afd1288eed1573ccb448654a0f81a4...97c5073099ffb30f8be6cc9494ee725f31dd4df4)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/30d7b89bef99ffacadb68dd513695ca68dcee441)

* Update OWNERS add yussufsh [#55](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/55)
* Update OWNERS component to Multi-Arch [#24](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/24)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/47cdccb57b862ace2d0036fbedbe3821d0e7af6f...30d7b89bef99ffacadb68dd513695ca68dcee441)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/b4da8bcc0ba35a656283c9781e0343a22fdcdfe7)

* Update OWNERS component to Multi-Arch [#16](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/16)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/06ea8d061b0145555a41ae6e2501a3844e83aa86...b4da8bcc0ba35a656283c9781e0343a22fdcdfe7)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/d8ddc10c99451542b42a725c5346ee7c174dae1f)

* Updated OWNERS component to Multi-Arch [#29](https://github.com/openshift/cloud-provider-powervs/pull/29)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/6125f1d95855433e3ee55151557da9ca6f36a194...d8ddc10c99451542b42a725c5346ee7c174dae1f)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/3f498f79cf7af3e4013cfcbfdcfb006ae64e19e9)

* Update OWNERS [#39](https://github.com/openshift/machine-api-provider-powervs/pull/39)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/727fe0f3bf1b4638d31b8e336b77edf421519804...3f498f79cf7af3e4013cfcbfdcfb006ae64e19e9)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/57e7c5741af878b97e473827c5bd82462e996856)

* [OCPBUGS-7458](https://issues.redhat.com/browse/OCPBUGS-7458): Fixes ThanoRuler StatefulSet re-creation bug [#217](https://github.com/openshift/prometheus-operator/pull/217)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9b41d30910b7f36da0dad500fdb0870e86759366...57e7c5741af878b97e473827c5bd82462e996856)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/0f141ce9d349fb30755e3d0d7f9f196a91782957)

* [OCPBUGS-14275](https://issues.redhat.com/browse/OCPBUGS-14275): Bump k8s to 1.25.10 [#27](https://github.com/openshift/route-controller-manager/pull/27)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/9e74d175e81ef6a2beb3718398e3fc99dded037c...0f141ce9d349fb30755e3d0d7f9f196a91782957)


### [telemeter](https://github.com/openshift/telemeter/tree/fc631fcbec5c87612ab52476818b4f264b7ab849)

* [OCPBUGS-7702](https://issues.redhat.com/browse/OCPBUGS-7702): Add 'agent-installer' value to 'install_type' label [#451](https://github.com/openshift/telemeter/pull/451)
* [Full changelog](https://github.com/openshift/telemeter/compare/4d304019274307c21afefa108493c8af89a2429d...fc631fcbec5c87612ab52476818b4f264b7ab849)


### [tests](https://github.com/openshift/origin/tree/dc737e66e0595e5569c7b2add6efdf56e8fea57b)

* [OCPBUGS-18490](https://issues.redhat.com/browse/OCPBUGS-18490): bump monitoring SNO bounds [#28239](https://github.com/openshift/origin/pull/28239)
* [OCPBUGS-18527](https://issues.redhat.com/browse/OCPBUGS-18527): Ignore timeout and connection refused errors during upgrade tests for 4.12 [#28270](https://github.com/openshift/origin/pull/28270)
* [OCPBUGS-18309](https://issues.redhat.com/browse/OCPBUGS-18309): Add missing watch permission for console users [#28234](https://github.com/openshift/origin/pull/28234)
* [OCPBUGS-16696](https://issues.redhat.com/browse/OCPBUGS-16696): Wait for DNS DS pods to be ready [#28083](https://github.com/openshift/origin/pull/28083)
* [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): allow cluster-config-operator to manage featuregate upgrade block [#28055](https://github.com/openshift/origin/pull/28055)
* [OCPBUGS-15933](https://issues.redhat.com/browse/OCPBUGS-15933): remove references to registry.centos.org [#28033](https://github.com/openshift/origin/pull/28033)
* [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27941](https://github.com/openshift/origin/pull/27941)
* [OCPBUGS-14152](https://issues.redhat.com/browse/OCPBUGS-14152): Move from registry.centos.org to quay.io [#27949](https://github.com/openshift/origin/pull/27949)
* [OCPBUGS-12914](https://issues.redhat.com/browse/OCPBUGS-12914): Add (optional) dual-stack tests to the CNI certification test suite [#27903](https://github.com/openshift/origin/pull/27903)
* Updating openshift-enterprise-tests images to be consistent with ART [#27293](https://github.com/openshift/origin/pull/27293)
* add specific test for failing cgroups path [#27856](https://github.com/openshift/origin/pull/27856)
* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Bump(openshift/kubernetes): to get fix for resizing flake [#27794](https://github.com/openshift/origin/pull/27794)
* [OCPBUGS-8024](https://issues.redhat.com/browse/OCPBUGS-8024): Backport fixes to resume gathering CI disruption data for SLB and image registry [#27759](https://github.com/openshift/origin/pull/27759)
* [OCPBUGS-7633](https://issues.redhat.com/browse/OCPBUGS-7633): remove reference to old guard pods [#27732](https://github.com/openshift/origin/pull/27732)
* [OCPBUGS-7285](https://issues.redhat.com/browse/OCPBUGS-7285): extended: security: do not explicitly set api audience on token request [#27716](https://github.com/openshift/origin/pull/27716)
* [OCPBUGS-6850](https://issues.redhat.com/browse/OCPBUGS-6850): [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade [#27684](https://github.com/openshift/origin/pull/27684)
* [Full changelog](https://github.com/openshift/origin/compare/bcbf338ea7ca23ed7b6014455d17b09b66417355...dc737e66e0595e5569c7b2add6efdf56e8fea57b)


### [thanos](https://github.com/openshift/thanos/tree/9f2b5ff512b8c396f7b4d006d7eafb5c7ca97fba)

* [OCPBUGS-4276](https://issues.redhat.com/browse/OCPBUGS-4276): Update exporter-toolkit to 0.7.3 [#111](https://github.com/openshift/thanos/pull/111)
* [Full changelog](https://github.com/openshift/thanos/compare/306214e86722493edd8d940fd41553acae1dd600...9f2b5ff512b8c396f7b4d006d7eafb5c7ca97fba)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/942e50171c92cfdc15d333c9ad913fe979d22b80)

* [OCPBUGS-14312](https://issues.redhat.com/browse/OCPBUGS-14312): Update 4.12 against v2.7.1 [#81](https://github.com/openshift/vmware-vsphere-csi-driver/pull/81)
* [OCPBUGS-7426](https://issues.redhat.com/browse/OCPBUGS-7426): Add migrationDataStore field [#59](https://github.com/openshift/vmware-vsphere-csi-driver/pull/59)
* [OCPBUGS-6936](https://issues.redhat.com/browse/OCPBUGS-6936): fix for nil user session (#1859) [#57](https://github.com/openshift/vmware-vsphere-csi-driver/pull/57)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/df89e303405042aa0c8f8704962910a4ef486ab8...942e50171c92cfdc15d333c9ad913fe979d22b80)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/1271ebf60c32e2141276a80740ce710304b415aa)

* [OCPBUGS-18131](https://issues.redhat.com/browse/OCPBUGS-18131): Block upgrade to 4.13 via  admin ack [#171](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/171)
* [OCPBUGS-18333](https://issues.redhat.com/browse/OCPBUGS-18333): disable controller hostNetwork [#167](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/167)
* [OCPBUGS-12712](https://issues.redhat.com/browse/OCPBUGS-12712): Add backoff for successful storage policy creations [#152](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/152)
* [OCPBUGS-7901](https://issues.redhat.com/browse/OCPBUGS-7901): Bump sidecar timeouts for vsphere [#142](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/142)
* [OCPBUGS-7426](https://issues.redhat.com/browse/OCPBUGS-7426): Fix datastore migration bug in 4.12 [#139](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/139)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/03999e46b954151b52c7dc799b7341ca7d3e1744...1271ebf60c32e2141276a80740ce710304b415aa)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/2fa9a1ec0f5b502c18fb997837605c88be3ba793)

* [OCPBUGS-10812](https://issues.redhat.com/browse/OCPBUGS-10812): Add build number to metrics [#104](https://github.com/openshift/vsphere-problem-detector/pull/104)
* [OCPBUGS-6788](https://issues.redhat.com/browse/OCPBUGS-6788): Derive the fully qualified vSphere username when checking permissions [#98](https://github.com/openshift/vsphere-problem-detector/pull/98)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/7328d215995baa4bdf623021741c669251ea4296...2fa9a1ec0f5b502c18fb997837605c88be3ba793)