# 4.12.70

Created: 2024-11-28 11:01:53 +0000 UTC

Image Digest: `sha256:40a0dce2a37e3278adc2fd64f63bca67df217b7dd8f68575241b66fdae1f04a3`


## Changes from 4.12.45

### Components

* Kubernetes upgraded from 1.25.14 to 1.25.16
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202311271639-0 to 412.86.202411270001-0


### Rebuilt images without code change

* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [4d3b1125](https://github.com/openshift/alibaba-cloud-csi-driver/commit/4d3b1125cfd3acfe3fbafa4c83543bbb89de97a2) `sha256:896a8e551e28569f3fe01f351cd175ca7dcd4fe9bf96c629d9b09f17fdd69b7a`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [99bcda8d](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/99bcda8da7c9c2e4415f30b82371f0b79d527d3d) `sha256:ba2c540d3230b9a3f9b79b36b507ad90c9a53bbdf5f2ea9c21baf0cdbc3be30c`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [b9287c05](https://github.com/openshift/cluster-api-provider-alibaba/commit/b9287c05091424c4d21fd95454020ccc225f5bcb) `sha256:511e73d6d0834d7f13d70985385d358c608bfe7fd79bb9bdcf46a864b8c06ffc`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [16156acc](https://github.com/openshift/cluster-api-provider-aws/commit/16156accbe3b9bcedbe39ef988170e1f644fcd75) `sha256:89ddccdd91372cca17d538fd69cf8a21b5910ebb2d1a99e5d72919c289bc7a52`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a930c89b](https://github.com/openshift/azure-disk-csi-driver/commit/a930c89beac514d4d98f6055bf6cfe78eeec25a5) `sha256:03c406c5b41dfa6b5c9ab00adcde6a62b7f79ff27996a21396526e1303feeb84`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [988b8cc8](https://github.com/openshift/azure-disk-csi-driver-operator/commit/988b8cc8ead51c2904c6cb75446529bfe3674ee3) `sha256:2070d62a32f3bcb293aca95bc2eb4d19e04b02bdd8efecb1604c97c7f74cdb6d`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [15aade4d](https://github.com/openshift/azure-file-csi-driver/commit/15aade4d58785b54ac732a660f1359132d27f9b9) `sha256:5630526404e6091c9c93562ac2d1d58ebcff052b337cab7ceb826f8fa116af50`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [060ba825](https://github.com/openshift/azure-file-csi-driver-operator/commit/060ba825fead5953bef544017ef4b3d0cbabe3e5) `sha256:4aa65e1a1e797731a494bedd769b611ec98d0a5d065ef104a8b3679751ec5e7a`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [24a47014](https://github.com/openshift/cluster-api-provider-baremetal/commit/24a47014aa42d649008687c5bd81771d6477c33c) `sha256:7ac5a21f2fc3b376402d0527422d01c3a6926a67224819440c622ab344d7d805`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [138a1cf2](https://github.com/openshift/cluster-bootstrap/commit/138a1cf2b98578acb4ccf098736bdf08614d2d6a) `sha256:2ad9f5852f8831c159f32abb00c6ed9e6a266ca2ffe0b0c93b5b534a518e36ea`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [03d89f21](https://github.com/openshift/cluster-api/commit/03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee) `sha256:9b2ab82e2071af559aecfcd1283e29260eff2707991ae958838fca52e8cec29f`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [60a36d83](https://github.com/openshift/cluster-capi-operator/commit/60a36d8320ddfd196840a1597e61c065603778ee) `sha256:79bd2a6fb8ed9b8639118b55874afd80b34b5304646208b437de12402a7951a7`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [e9555341](https://github.com/openshift/cluster-dns-operator/commit/e955534113ef9a65ad055198eab63ba7d60fbd21) `sha256:2fc222480539872b8bd5590ac2d0cb9c3c7fb40ede3f3037dfdedd2d313bee5c`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [d50f7322](https://github.com/openshift/cluster-api-operator/commit/d50f7322addd997cc73a0ba8294eadb977974c3f) `sha256:08de3ba3490d8a4e986fcdabbf7e9506c8333f7a7f9910b72e40f2a889d9e42a`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [1a251f4d](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/1a251f4d00c050404dc313c698279da435d08c07) `sha256:abff159dd996da20dc700c54a508dcb7dfbcee9d2db2a7b51e8f45dd63ca3bbb`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [ab963d8a](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/ab963d8ad0387788c947b884a96eb9b2fed470b6) `sha256:25b624c30c0c05d5dcd1e7ed15b7ae5f9d9a9e3d4d9408c9d6b336174edc606f`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [c930dc74](https://github.com/openshift/platform-operators/commit/c930dc745f23ee5bde8b48d13557976186c21c7c) `sha256:ed2602118132d2aa4221961c532e5e46024696aa72fbaba9d4a9f36e24b57a86`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cb8862b0](https://github.com/openshift/cluster-policy-controller/commit/cb8862b0042ac2e7130a7c018e3e083ebc46705e) `sha256:6d5cc5496d2ae173b0e65d9aac6c5e44a696b276acd1ec74d36afd7ec45834ee`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [f1b49e34](https://github.com/openshift/cluster-samples-operator/commit/f1b49e34512d38bf908183318edd1f9f9aeef883) `sha256:a4801f150896740bbb4eb6581ff55ad8c4a7c9a6e12102d74b03b0fe8f470a52`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [21ebf328](https://github.com/openshift/cluster-storage-operator/commit/21ebf328f53182111eb7dce344487ba633d09b1a) `sha256:75f439b9800f1fd9e5284efc43aa2d49183ecf5fac7002780717d80b73e25d92`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:6b0a1f13690bcf2eb26fd73c1dc5e259b5ee915ed308d3116675dca8c0241ca7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e4d9170e](https://github.com/openshift/configmap-reload/commit/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) `sha256:5b99795bc429094a0197c748361e285d7b4a6206dae3becd17b863aed6cc71ef`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [1b339719](https://github.com/openshift/containernetworking-plugins/commit/1b33971993ca1013be9f24690c44560d2c58c70a) `sha256:72c7fb671f59e0f0ed1e3101f1df56e32b1561de0ceb167c02482448a9e79bad`
* [coredns](https://github.com/openshift/coredns) git [cc1194ea](https://github.com/openshift/coredns/commit/cc1194ea004f6b4bcb132fd1c6cebee68666d38f) `sha256:1925b34f64c04108923b8ae77becb69516bc884528a18f01b4c3b4df41265932`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d9099257](https://github.com/openshift/csi-driver-nfs/commit/d90992573acb3df6c7fbb6dbe1b215125d26fc34) `sha256:58552ac1861a2bece7fdcf837dbb3a0beeda5da864895a358f9b51d20b4a25f5`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [fac7b8fd](https://github.com/openshift/csi-external-attacher/commit/fac7b8fd905b4c68beadc2c968e6f981385463e8) `sha256:16df4a7036586b0b8ba93765a83a4e4d3d91de1755bf6f78fada14b0f697c856`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3aa7c527](https://github.com/openshift/csi-external-provisioner/commit/3aa7c527732e288c71119ea3e78fac739dfbd438) `sha256:f4895a04be51bfeb9cb67edaf301f215ac5ad1d648d71c4e95c3a5780c47660b`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [5b066ba4](https://github.com/openshift/csi-external-resizer/commit/5b066ba420bd74ec5327978d2731da989d57d4f2) `sha256:0a1a9eb8e276f58b901902db3408d27f68a8767f122d4c148d9a6269bde9e6b2`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e6545e71](https://github.com/openshift/csi-livenessprobe/commit/e6545e71597df1da4635c266eb8f499fc376d970) `sha256:f56b5229b46c19c26773f17f29acd639d494a8cd8b60a2fddcad27bd5f0d8225`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c316b896](https://github.com/openshift/csi-node-driver-registrar/commit/c316b8963a0b0ff8d45f2b32c56de972d55bfd37) `sha256:49dd59ec24063416c6b4bb0a788c59cd81f514053e09e77b1446452e25c8c9d8`
* [docker-registry](https://github.com/openshift/image-registry) git [9e75355c](https://github.com/openshift/image-registry/commit/9e75355ca282cf5abac5595585a4b089e6a95e6f) `sha256:9610287d3fa98acd090a930a1bfc6ff9118c2ca05c31509783bf1d3fa2779aea`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [6e5c04c0](https://github.com/openshift/driver-toolkit/commit/6e5c04c066a428047d1755478cf88b290d32ad8f) `sha256:a44318703adefa08a44bb5cb1e800b1b9b3b73aed5945a3e55b7432968b33609`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a92e4157](https://github.com/openshift/egress-router-cni/commit/a92e415791b531ca15ec84953550b71bd3534566) `sha256:26b51cc84264eac60fd97e94598c757a19ca8069a3c0c9df4e9ba464de0d9e2e`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e00019fa](https://github.com/openshift/cluster-api-provider-gcp/commit/e00019faa4bd74f70826344a8cc085ba13768422) `sha256:c201c691695610dbb7a1424f03e7ccefd2b6eb2c922d7e2175552eaf741c0b41`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5dcfd675](https://github.com/openshift/gcp-pd-csi-driver/commit/5dcfd6755ea1eff7dcf1c0c831b048eda1b41736) `sha256:d82aa7bab6dea98e84f646d4fefbb560bdbbe0be78c0f16586c6a32037b95cfb`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [30e97ba5](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/30e97ba511547edb057071b63498e1ca4c68ec16) `sha256:ab528d17e8a09fffde91193be7846909c12409fee5a0613e54f18a193a8e708c`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [f9da23ac](https://github.com/openshift/ibm-vpc-node-label-updater/commit/f9da23ac8abe04dc1615763e120cd174bde6e617) `sha256:59a24e76b4d36ec9fd3d0c431df0d136e1ca9a18289899007fcc0cc4e568a472`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [31a67dac](https://github.com/openshift/machine-api-provider-ibmcloud/commit/31a67daca92c374cb4d9a87928ec8c28528a0c0e) `sha256:429e32f6bfef6ce223331fe0fae74610af65f261f36b2bf30c038b65a17f0d96`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [c65c1f1c](https://github.com/openshift/ironic-rhcos-downloader/commit/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29) `sha256:fa3ea1edd37b1ec9554ffbe73775fd83544680dc6eb652730819153a79ec2586`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a8ade8fe](https://github.com/openshift/ironic-static-ip-manager/commit/a8ade8fe60ad5fb1ab225a514ec331123b256cff) `sha256:23278bad2b78dfd93444750bac01bc0ce71245edf34719272f23deaeae2fe8b7`
* [keepalived-ipfailover](https://github.com/openshift/images) git [7e8a0105](https://github.com/openshift/images/commit/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) `sha256:cdcd2dad1098dfd416ab718703a6b39350470bdf46ce94c3df90da7d647495c0`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [748f7131](https://github.com/openshift/kube-state-metrics/commit/748f71317b9d3e3e5a96b14131294e2695f26434) `sha256:da1d6299f0560d35ca548369926381c4b224a9f45d7d63685b6a34d84bbdba13`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [596745ce](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/596745cec38b8401d1d906bfb9d3d78fdaeabcde) `sha256:430c8def557c8a69df8b20a72dd184198ebf01ec86f49bd395de1ba83d9e6f56`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a19615cd](https://github.com/openshift/cloud-provider-kubevirt/commit/a19615cda3daf69008253d75cc848ac0ad397179) `sha256:503b40f662de4f9e1bbee4bc29f002c8006d6772220aa9992476b02f0840b708`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f407c8a7](https://github.com/openshift/kubevirt-csi-driver/commit/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) `sha256:0a9092661c4975530f869d1ac08fd6d8d34b1110874eff85a1ca15767e3af6df`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:053a377fbc613de11de6780eaed5b0b94c4089609fdb6c66351a7b8958f89970`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8fd2f8b0](https://github.com/openshift/kuryr-kubernetes/commit/8fd2f8b0f7e2849b1a7db252beba0c8250552e36) `sha256:4824748937a43d6d349fb9650753dae2597f12d1159cf9247831f8f630ab404f`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a2882f7a](https://github.com/openshift/cluster-api-provider-libvirt/commit/a2882f7aa56d4059a20bdc02486da905b5764062) `sha256:2bd351362f128431698bb6d32b6f548bae66a6698a26bcf2971cf731b9668cf0`
* machine-os-content `sha256:43d07a52a910ab1b6f8a1aba2ab713b43658b4dff60df64aee388a0da9d5585a`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [566bf595](https://github.com/openshift/machine-os-images/commit/566bf59501f178bd80e410fda66cc424de6a4891) `sha256:46222ce6b137a25b5860883c1ff570d1dd4c84c13f430545e9c8f5d0830084e1`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [e27952fc](https://github.com/openshift/multus-admission-controller/commit/e27952fc813ac994e64f715a8690f3d36a9ec778) `sha256:6d83aaf524712f59d74e9a8393a8e3e19f3c5157f58d1d86550c49e29ce5b631`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [644461f2](https://github.com/openshift/multus-networkpolicy/commit/644461f25fb6b45054d1a8be7a996670959a5a9d) `sha256:c0d1e20f80c26a8f949cc3743baf5fe2f8847e58a9b1d4f9c888fe098db935a0`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [efd6ffbb](https://github.com/openshift/route-override-cni/commit/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0) `sha256:2bd659263d884ff626c8011552f552b9a2c70065b66f2c5b4d64fd1fcaa5b167`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [30386d6b](https://github.com/openshift/bond-cni/commit/30386d6b8d4f3b05931842b6a9b85f15c241b09a) `sha256:17e98af0a9b11ab37138725120a7e75ca8006ebccbadf989bf408ab547e06564`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:6509116b4ede7eb1e8a4a7eedff95819c000e04c6b0c45763265fc9da47e12de`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [03e5b13b](https://github.com/openshift/oauth-proxy/commit/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) `sha256:82324d0ef8da2fdc3ccef6b4d46fc80a35dec2ba791de439a0c8a16bea78cdd2`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3d5dc18d](https://github.com/openshift/openshift-state-metrics/commit/3d5dc18d2bee5ba7132560bf40790af997952d33) `sha256:a6fa680c66eb3df81f5b7c931d1360169a96b32d3ffb45a647e1dc4b9ea4bbdf`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [d09e51ae](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/d09e51ae44b3ac6d27236b515c1f7c6da847689d) `sha256:afd2c3fe2f2b9bea7381b8cfc21e777f43ad3f9410908e09ef79d019f287803e`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [05657663](https://github.com/openshift/machine-api-provider-openstack/commit/05657663c02be6d03d074d0f39a2b247cef9286a) `sha256:05b2ddbe37549b3d16a66917bb1a2525fcac2113b45c6606b082ef5e8a8cc607`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [f13e381e](https://github.com/openshift/cluster-api-provider-openstack/commit/f13e381e962777d48fadcaa3570a583e72aa80c7) `sha256:4f0a63c8b7458a55b6a46614a59cabfb7c1961a33c2e313a78434d7769d69e80`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [87ab3789](https://github.com/openshift/ovirt-csi-driver/commit/87ab37895e56ea3c80be0163571fa593ce96d86b) `sha256:408262df9552a4ce9fc11bdac870b99a662cb71b78227e7d81dcec7a06b778ce`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [e5e02335](https://github.com/openshift/ovirt-csi-driver-operator/commit/e5e02335951010745a42f472a0656b5948ffdade) `sha256:9bf198b249319b787bb17ae856c9ba58c1367acae8623254f23dda40df4ebfc7`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [03e8cb50](https://github.com/openshift/cluster-api-provider-ovirt/commit/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) `sha256:cd617615ea01bbc8c58df4c90b869d0e363908c7e9f22fb73541dc2898cb2388`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b1907888](https://github.com/openshift/prom-label-proxy/commit/b1907888004888b977918cf911b189de736642b2) `sha256:e7085bb59074d9e784bd44bd2b553d692b7440e10765d8863f96582d6cfc544b`
* [prometheus](https://github.com/openshift/prometheus) git [72ceaef4](https://github.com/openshift/prometheus/commit/72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0) `sha256:d39b5366d4e24d3773a16a64a17bf04556ffe5566c0fdbd793cbe523910d1027`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [914cad82](https://github.com/openshift/prometheus-alertmanager/commit/914cad827e9a177b29b23e02eb48b4065da8dca2) `sha256:33a24e8648bb33353bfc4e07f2293a8887001cd5a58507a3a1b1d4e46e7669fe`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:8bdbab3cbc26bb76e759bed3b3dc4644549d6a42615711d4d529b0505b439ba1`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [99077a3c](https://github.com/openshift/node_exporter/commit/99077a3c8c3b0fce152fe0affce1e31fc2c6efaa) `sha256:8324f630fc65036ecc947c7c3262ffde75a17fcc4b6ba76eff095c6a77a70f7b`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:96bd5506e45ddba4827b0388300503f90001d70da3a78f3d4ff227ece941911e`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [d1e399d5](https://github.com/openshift/prometheus-operator/commit/d1e399d5cead91c677cee4a80a032f5057cb43e3) `sha256:69f6c7e5c30a0d0a62d7bc32954c7e23cd45b2f282079a10ca8c06a148e84e7d`
* rhel-coreos-8 `sha256:4f5585c6f8b5397327aec653ec8847cc6061da22710493e4819d3ada0f1e77af`
* rhel-coreos-8-extensions `sha256:87b03401340f1290f4f1a32f3da87e06f000500c116fb69aa1d0cbd8f7451fbe`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [0f141ce9](https://github.com/openshift/route-controller-manager/commit/0f141ce9d349fb30755e3d0d7f9f196a91782957) `sha256:07b0620e47ff1ddc029713afe56e10689bbdae759d9df9089dbb7bc636f14451`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [e4c0e103](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e4c0e103ddbf264387d6efb26b612a4b915d362a) `sha256:bdfeb8d7f8c36e6a926c8a7f9440d85f98bfbb5266da7860133a7b7f46e27e68`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d7cca470](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d7cca470e82158e8240a09b3586f99e6a84f121f) `sha256:1b206bb70595525053445379dea7feb295f61589c8d30cc0cfaa8d973dcbc60f`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [e4c0e103](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e4c0e103ddbf264387d6efb26b612a4b915d362a) `sha256:b828bc8effa9bfc0b837a5133ccf5bae64eecbc71f68207b6342ec717457a415`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [f25ae2ad](https://github.com/openshift/vsphere-problem-detector/commit/f25ae2add899bbd4b63b476c2e6178cfbaf68ac4) `sha256:256400a3add3b34c518564d5a52211cb00719f090e072909305d6b4ec5c76510`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/844e6efd0d1c9d583afdefc6bc5ae744471ef9c1)

* [MGMT-17596](https://issues.redhat.com/browse/MGMT-17596): Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) [#6214](https://github.com/openshift/assisted-service/pull/6214)
* [MGMT-17590](https://issues.redhat.com/browse/MGMT-17590): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) [#6207](https://github.com/openshift/assisted-service/pull/6207)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6195) [#6195](https://github.com/openshift/assisted-service/pull/6195)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6132) [#6132](https://github.com/openshift/assisted-service/pull/6132)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8149b9ca554ae6e1d716daa9f1c4f322ad710e07...844e6efd0d1c9d583afdefc6bc5ae744471ef9c1)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/bc8fd423f1f7b47c46a9d97ede546f989785015d)

* [MGMT-17596](https://issues.redhat.com/browse/MGMT-17596): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) [#836](https://github.com/openshift/assisted-installer/pull/836)
* [MGMT-17590](https://issues.redhat.com/browse/MGMT-17590): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) [#828](https://github.com/openshift/assisted-installer/pull/828)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#825) [#825](https://github.com/openshift/assisted-installer/pull/825)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/61115db06f970b8fab00f8e0beeb49d4db3ee041...bc8fd423f1f7b47c46a9d97ede546f989785015d)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/ce915b7d0a3d3b225b6a190d2babf20cc864d22e)

* [MGMT-17596](https://issues.redhat.com/browse/MGMT-17596): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) [#707](https://github.com/openshift/assisted-installer-agent/pull/707)
* [MGMT-17590](https://issues.redhat.com/browse/MGMT-17590): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) [#701](https://github.com/openshift/assisted-installer-agent/pull/701)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#696) [#696](https://github.com/openshift/assisted-installer-agent/pull/696)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/a61cd6e1819f60b151bdad2efaf9afbdf453ed0d...ce915b7d0a3d3b225b6a190d2babf20cc864d22e)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/191c9e34c1e70cf585d78f6293f95a2b89061a48)

* [OCPBUGS-21218](https://issues.redhat.com/browse/OCPBUGS-21218): Bump golang.org/x/net to v0.19.0 [#45](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/45)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/1959de0e3f2c3457c32fd2f545fe5ca65f12cd6c...191c9e34c1e70cf585d78f6293f95a2b89061a48)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52)
* [HOSTEDCP-1323](https://issues.redhat.com/browse/HOSTEDCP-1323): Merge latest code into 4.14 branch [#45](https://github.com/openshift/apiserver-network-proxy/pull/45)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/15cd4347b9384fac3d93029c6426dc15b964f557...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/f90fb443bc71b2319d8cce276b280c26d0f18fb7)

* [OCPBUGS-32079](https://issues.redhat.com/browse/OCPBUGS-32079): update for CVE-2023-45288 [release-4.12] [#85](https://github.com/openshift/cloud-provider-aws/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/fa3185192cdd5a707f11879de370d8ca85d2f8d8...f90fb443bc71b2319d8cce276b280c26d0f18fb7)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/bbab20f9559a1be6f39fed8e604712d41f507b49)

* [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): UPSTREAM: 1919: Add reserved-volume-attachments [#267](https://github.com/openshift/aws-ebs-csi-driver/pull/267)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/722a0bacdba3235f3f5d209d0b8006180c6f8446...bbab20f9559a1be6f39fed8e604712d41f507b49)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71bb7838f93bc88e679b0a967fbf1660cdf8aff1)

* [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): Explicitly reserve 1 attachment for the root disk [#308](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/308)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/0c97ef8f1171e0fc3a94b093131a89a2f225f73b...71bb7838f93bc88e679b0a967fbf1660cdf8aff1)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/440886d004a6ecbc45d5bc04c2f703fb0efaa632)

* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality [#97](https://github.com/openshift/machine-api-provider-aws/pull/97)
* [OCPBUGS-21562](https://issues.redhat.com/browse/OCPBUGS-21562): Update golang.org/x/net to v0.17.0 [#90](https://github.com/openshift/machine-api-provider-aws/pull/90)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/b82e889d6eb39f72b0246175315ec0a7e5ac4126...440886d004a6ecbc45d5bc04c2f703fb0efaa632)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/31917a5f3e7557916b8e92a0a9ae529ab176f738)

* [OCPBUGS-32880](https://issues.redhat.com/browse/OCPBUGS-32880): Upgrade go-jose module to 2.6.3 [#191](https://github.com/openshift/aws-pod-identity-webhook/pull/191)
* [OCPBUGS-21312](https://issues.redhat.com/browse/OCPBUGS-21312): Upgrade golang/x/net for CVE-2023-39325 (4.12) [#185](https://github.com/openshift/aws-pod-identity-webhook/pull/185)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/47e8de9abca2b9675b1cb2147d4cf44e7b3df8db...31917a5f3e7557916b8e92a0a9ae529ab176f738)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/2193ccfa8575aeb0520a25b77ec963097a66cd6e)

* [OCPBUGS-21401](https://issues.redhat.com/browse/OCPBUGS-21401): Bump golang.org/x/net to v0.18.0 [#95](https://github.com/openshift/cloud-provider-azure/pull/95)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2f884660644ef9d172c45c8ad3999438c7726af5...2193ccfa8575aeb0520a25b77ec963097a66cd6e)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/a1b2a37b7d31951708a8f6e1db201fe0c1ff687a)

* [OCPBUGS-36021](https://issues.redhat.com/browse/OCPBUGS-36021): Update go-retryablehttp to v0.7.7 [#315](https://github.com/openshift/cluster-api-provider-azure/pull/315)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/32491247e933ad705424d5bdac0ab7770ac63789...a1b2a37b7d31951708a8f6e1db201fe0c1ff687a)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/6b5bfffdcf6315871d6c296025db7d0812132868)

* [OCPBUGS-36148](https://issues.redhat.com/browse/OCPBUGS-36148): Fix mapi_instance_create_failed metric with accelerated networking [#115](https://github.com/openshift/machine-api-provider-azure/pull/115)
* [OCPBUGS-30809](https://issues.redhat.com/browse/OCPBUGS-30809): Don't create availability set when using spot instances [#105](https://github.com/openshift/machine-api-provider-azure/pull/105)
* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce cardinality [#97](https://github.com/openshift/machine-api-provider-azure/pull/97)
* [OCPBUGS-20741](https://issues.redhat.com/browse/OCPBUGS-20741): Bump x/net package to v0.18.0 [#84](https://github.com/openshift/machine-api-provider-azure/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4dc16ae8666a8680cf29f6c8bc9ffe6b4fe1c84f...6b5bfffdcf6315871d6c296025db7d0812132868)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/798aeaaf61fbc22669b6bad2edc058ea6949d733)

* [OCPBUGS-36087](https://issues.redhat.com/browse/OCPBUGS-36087): [release-4.12]: bump go-retryablehttp for CVE fix [#8660](https://github.com/openshift/installer/pull/8660)
* [OCPBUGS-39290](https://issues.redhat.com/browse/OCPBUGS-39290): Add yq v4 to ci image [#8929](https://github.com/openshift/installer/pull/8929)
* [OCPBUGS-36179](https://issues.redhat.com/browse/OCPBUGS-36179): [release-4.12]: bump github.com/container/images for CVE fix [#8663](https://github.com/openshift/installer/pull/8663)
* [OCPBUGS-22981](https://issues.redhat.com/browse/OCPBUGS-22981): IBMCloud: Add eu-es region [#7686](https://github.com/openshift/installer/pull/7686)
* [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): baremetal: populate customDeploy in advance [#8144](https://github.com/openshift/installer/pull/8144)
* [OCPBUGS-32449](https://issues.redhat.com/browse/OCPBUGS-32449): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8290](https://github.com/openshift/installer/pull/8290)
* [OCPBUGS-30768](https://issues.redhat.com/browse/OCPBUGS-30768): update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 [#8140](https://github.com/openshift/installer/pull/8140)
* [OCPBUGS-30134](https://issues.redhat.com/browse/OCPBUGS-30134): [release-4.12] bump containerd for vulnerability fix [#8091](https://github.com/openshift/installer/pull/8091)
* [OCPBUGS-27454](https://issues.redhat.com/browse/OCPBUGS-27454): baremetal: correct external_http_url for v6-only BMCs [#7900](https://github.com/openshift/installer/pull/7900)
* [OCPBUGS-25593](https://issues.redhat.com/browse/OCPBUGS-25593): [release-4.12] OCPBUGS-16640: Update azure cli version to 2.49.0 [#7849](https://github.com/openshift/installer/pull/7849)
* [OCPBUGS-23184](https://issues.redhat.com/browse/OCPBUGS-23184): azure: validation: validate defaultMachinePlatform [#7709](https://github.com/openshift/installer/pull/7709)
* [OCPBUGS-25476](https://issues.redhat.com/browse/OCPBUGS-25476): destroy: gcp: fix destroying regional disks [#7845](https://github.com/openshift/installer/pull/7845)
* [OCPBUGS-23302](https://issues.redhat.com/browse/OCPBUGS-23302): images: installer: add xz to the container [#7726](https://github.com/openshift/installer/pull/7726)
* [OCPBUGS-23379](https://issues.redhat.com/browse/OCPBUGS-23379): images: update govc image in upi-installer [#7739](https://github.com/openshift/installer/pull/7739)
* [OCPBUGS-22116](https://issues.redhat.com/browse/OCPBUGS-22116): Add KMS encryption keys if provided [#7769](https://github.com/openshift/installer/pull/7769)
* [Full changelog](https://github.com/openshift/installer/compare/e2e275d267a0d7fb7c9a66d1c9addee8709216a9...798aeaaf61fbc22669b6bad2edc058ea6949d733)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/9152e200990c26194a70c25033a71583e2775066)

* [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): Do not update instance_info and deploy_interface for active nodes [#338](https://github.com/openshift/baremetal-operator/pull/338)
* [OCPBUGS-24490](https://issues.redhat.com/browse/OCPBUGS-24490): backport: Delay delete of detached hosts [#326](https://github.com/openshift/baremetal-operator/pull/326)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/6451feb0e31859e1699180921c48f60901f69d86...9152e200990c26194a70c25033a71583e2775066)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/474ed48e840fdb7bf859d769cd673b29705a7b91)

* [OCPBUGS-26930](https://issues.redhat.com/browse/OCPBUGS-26930): Add .snyk file to ignore vendor and test files [#296](https://github.com/openshift/baremetal-runtimecfg/pull/296)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9ef9bd909ccd6855da0c4f927da820401b2b600f...474ed48e840fdb7bf859d769cd673b29705a7b91)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d691257345aeeec951c763e11658a944037f9b39)

* [OCPBUGS-30289](https://issues.redhat.com/browse/OCPBUGS-30289): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1701](https://github.com/openshift/oc/pull/1701)
* [OCPBUGS-25642](https://issues.redhat.com/browse/OCPBUGS-25642): Add client version in must-gather summary [#1639](https://github.com/openshift/oc/pull/1639)
* [OCPBUGS-24462](https://issues.redhat.com/browse/OCPBUGS-24462): Overwrite template's namespace with the explicit one [#1618](https://github.com/openshift/oc/pull/1618)
* [Full changelog](https://github.com/openshift/oc/compare/d2ac7e128f62d097bc10beba9b37dc6f9d1f4b67...d691257345aeeec951c763e11658a944037f9b39)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7a0370568a558c37e63cebc095c9e5b913dfedf6)

* [OCPBUGS-37322](https://issues.redhat.com/browse/OCPBUGS-37322): update modules: grpc, protobuf, logrus [#764](https://github.com/openshift/cloud-credential-operator/pull/764)
* [OCPBUGS-42166](https://issues.redhat.com/browse/OCPBUGS-42166): Resolve SNYK errors in security job. [#760](https://github.com/openshift/cloud-credential-operator/pull/760)
* [OCPBUGS-37422](https://issues.redhat.com/browse/OCPBUGS-37422): SNYK ignore go-client misreporting [#744](https://github.com/openshift/cloud-credential-operator/pull/744)
* NO-JIRA: Add jstuever to OWNERS [#733](https://github.com/openshift/cloud-credential-operator/pull/733)
* [OCPBUGS-36027](https://issues.redhat.com/browse/OCPBUGS-36027): IBM/go-sdk-core update to v5.17.4 [#723](https://github.com/openshift/cloud-credential-operator/pull/723)
* [OCPBUGS-32897](https://issues.redhat.com/browse/OCPBUGS-32897): Upgrade go-jose module to 2.6.3 [#699](https://github.com/openshift/cloud-credential-operator/pull/699)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c1c1417e8e9003a4289fb5a0fc9e92dc37bc2e3e...7a0370568a558c37e63cebc095c9e5b913dfedf6)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/c086bed76ee3d3b3fe9f516f873414e7b4348acd)

* [OCPBUGS-33198](https://issues.redhat.com/browse/OCPBUGS-33198): Avoid nil pointer panic while assigning private IP on Azure [#141](https://github.com/openshift/cloud-network-config-controller/pull/141)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/0b191405af9a0632a09d9f857bb550c7efbba20f...c086bed76ee3d3b3fe9f516f873414e7b4348acd)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4f7f6b1af4b674b24270e65c40728b19071ab3e3)

* [OCPBUGS-20683](https://issues.redhat.com/browse/OCPBUGS-20683): CVE 2023 39325 [4.12] [#653](https://github.com/openshift/cluster-authentication-operator/pull/653)
* [OCPBUGS-22689](https://issues.redhat.com/browse/OCPBUGS-22689): increase timeout for probes [#639](https://github.com/openshift/cluster-authentication-operator/pull/639)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/fe4212ab101ff47fc72bde475d39f30158969974...4f7f6b1af4b674b24270e65c40728b19071ab3e3)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f4975eeb107b16df2d7138c85348388daba97a74)

* [OCPBUGS-40928](https://issues.redhat.com/browse/OCPBUGS-40928): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#318](https://github.com/openshift/kubernetes-autoscaler/pull/318)
* [OCPBUGS-30911](https://issues.redhat.com/browse/OCPBUGS-30911): Fix unstructured taint parsing in Cluster API provider [#291](https://github.com/openshift/kubernetes-autoscaler/pull/291)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/dd2b39d6fa6f1d139e1f34f8335215411660b9c8...f4975eeb107b16df2d7138c85348388daba97a74)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a6e57c10cf027f5f04e9bcb2e8842497f63bf6)

* [OCPBUGS-32005](https://issues.redhat.com/browse/OCPBUGS-32005): Update x/net to v0.25.0 [#325](https://github.com/openshift/cluster-autoscaler-operator/pull/325)
* [OCPBUGS-20754](https://issues.redhat.com/browse/OCPBUGS-20754): Bump x/net package to v0.18.0 [#300](https://github.com/openshift/cluster-autoscaler-operator/pull/300)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/8b2322559f794ffcb4580a9c11c3b5e16fc8e306...29a6e57c10cf027f5f04e9bcb2e8842497f63bf6)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/537a74cd0b0cc48189684a273013c32d1269ddd9)

* [OCPBUGS-32006](https://issues.redhat.com/browse/OCPBUGS-32006): bump x/net to 0.23.0 [#440](https://github.com/openshift/cluster-baremetal-operator/pull/440)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/18c92d2feec0eb2e0665fcf6e914b5f512e634f6...537a74cd0b0cc48189684a273013c32d1269ddd9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/3b1f0843e2bd25fb4e39659ef47424f67ccaa727)

* [OCPBUGS-21148](https://issues.redhat.com/browse/OCPBUGS-21148): Bump golang.org/x/net to v0.18.0 [#297](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/297)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/103cb2ecf326e92f9d1d8d99324d2896d28afc58...3b1f0843e2bd25fb4e39659ef47424f67ccaa727)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/92c3b10237c1ebf7ab7a0c744db3949377614e52)

* [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): retire LatencySensitive featureset [#336](https://github.com/openshift/cluster-config-operator/pull/336)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/4699df19b2c6e8b4ba9fe101f25cd5d1c434c380...92c3b10237c1ebf7ab7a0c744db3949377614e52)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/8df44eaee8f4a31754d77f3f3a18ff59878efc72)

* [OCPBUGS-35421](https://issues.redhat.com/browse/OCPBUGS-35421): Improved debugging of API listing errors [#306](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/306)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b7ca2f16de7ae23b3793abee945d0453223f7aaf...8df44eaee8f4a31754d77f3f3a18ff59878efc72)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/f573eded61847fc153874615b29704d93ddcad8d)

* [OCPBUGS-32429](https://issues.redhat.com/browse/OCPBUGS-32429): create suitable role and roleBinding for csi-snapshot-webhook [#207](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/207)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/afc1c5d34086fc7522bf98af7b2d9c58bc9bd03a...f573eded61847fc153874615b29704d93ddcad8d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4bf4f66a77b9149d92496b439f14bb9306d1f19c)

* [OCPBUGS-35501](https://issues.redhat.com/browse/OCPBUGS-35501): return errors in wait-for-ceo [#1277](https://github.com/openshift/cluster-etcd-operator/pull/1277)
* [OCPBUGS-32001](https://issues.redhat.com/browse/OCPBUGS-32001): update golang x net [#1256](https://github.com/openshift/cluster-etcd-operator/pull/1256)
* [OCPBUGS-30914](https://issues.redhat.com/browse/OCPBUGS-30914): Replace nodelister with master nodelister everywhere [#1224](https://github.com/openshift/cluster-etcd-operator/pull/1224)
* [OCPBUGS-30938](https://issues.redhat.com/browse/OCPBUGS-30938): fix panic in health check timeouts [#1228](https://github.com/openshift/cluster-etcd-operator/pull/1228)
* [OCPBUGS-27776](https://issues.redhat.com/browse/OCPBUGS-27776): [4.13] Remove z-upgrades from UpgradeBackupController [#1185](https://github.com/openshift/cluster-etcd-operator/pull/1185)
* [OCPBUGS-23151](https://issues.redhat.com/browse/OCPBUGS-23151): relax readiness to local serializable requests [#1156](https://github.com/openshift/cluster-etcd-operator/pull/1156)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/40e59cfbb4cfa709895e35631420da21c5a1c225...4bf4f66a77b9149d92496b439f14bb9306d1f19c)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/77fd1a927087cd73330897a63016c23614ac3201)

* [OCPBUGS-36033](https://issues.redhat.com/browse/OCPBUGS-36033): go.*,vendor: bump go-retryablehttp [#1071](https://github.com/openshift/cluster-image-registry-operator/pull/1071)
* [OCPBUGS-22125](https://issues.redhat.com/browse/OCPBUGS-22125): increase storage account key cache expiration [#939](https://github.com/openshift/cluster-image-registry-operator/pull/939)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/30625226cf0bf1e7f52a9a977c59af432c3df5e5...77fd1a927087cd73330897a63016c23614ac3201)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/85e2d05159b7b4b2f16c8a95815c7d9927b68597)

* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): Add e2e test for duplicate Transfer-Encoding headers [#1158](https://github.com/openshift/cluster-ingress-operator/pull/1158)
* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1162](https://github.com/openshift/cluster-ingress-operator/pull/1162)
* [OCPBUGS-35454](https://issues.redhat.com/browse/OCPBUGS-35454): internal service changed fix target port logic [#1092](https://github.com/openshift/cluster-ingress-operator/pull/1092)
* [OCPBUGS-35304](https://issues.redhat.com/browse/OCPBUGS-35304): TestHostNetworkPortBinding: Delete t.Parallel() [#1083](https://github.com/openshift/cluster-ingress-operator/pull/1083)
* [OCPBUGS-35027](https://issues.redhat.com/browse/OCPBUGS-35027): Don't add clientca-configmap finalizer if deleting [#1080](https://github.com/openshift/cluster-ingress-operator/pull/1080)
* [OCPBUGS-34888](https://issues.redhat.com/browse/OCPBUGS-34888): desiredRouterDeployment: Set HostPort if needed [#1076](https://github.com/openshift/cluster-ingress-operator/pull/1076)
* [OCPBUGS-34757](https://issues.redhat.com/browse/OCPBUGS-34757): Avoid spurious updates for internalTrafficPolicy [#1070](https://github.com/openshift/cluster-ingress-operator/pull/1070)
* [OCPBUGS-34110](https://issues.redhat.com/browse/OCPBUGS-34110): Avoid spurious updates for scope in IngressClass [#1056](https://github.com/openshift/cluster-ingress-operator/pull/1056)
* [OCPBUGS-34548](https://issues.redhat.com/browse/OCPBUGS-34548): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1068](https://github.com/openshift/cluster-ingress-operator/pull/1068)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5e62d563730970b50de6463a035e0e033210484d...85e2d05159b7b4b2f16c8a95815c7d9927b68597)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/09d7ddbaba9eb5715313e716476e6a33848d045c)

* [OCPBUGS-22736](https://issues.redhat.com/browse/OCPBUGS-22736): pkg/operator/configobserver: check that the serving certificate refer… [#1571](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1571)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/579f4332018cdbd827c607185fa0b69e61fcfcd1...09d7ddbaba9eb5715313e716476e6a33848d045c)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/c3c07bebb7a644fe75bccd590fa088bcccd3749a)

* [OCPBUGS-27068](https://issues.redhat.com/browse/OCPBUGS-27068): bump(library-go)=release-4.12 [#789](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/789)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/8138f98d9a482ca95975abcf440acb20e36b67f5...c3c07bebb7a644fe75bccd590fa088bcccd3749a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/48cd96c9dc27c801beff17fa5ea8c3dac374f10d)

* [OCPBUGS-27067](https://issues.redhat.com/browse/OCPBUGS-27067): bump(library-go)=release-4.12 [#529](https://github.com/openshift/cluster-kube-scheduler-operator/pull/529)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/375f1d0f0fe2ae184c7356e35d27a7b9bbb91b5c...48cd96c9dc27c801beff17fa5ea8c3dac374f10d)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7b08a4de4a08da8cdb341948e0902395eb0da961)

* [OCPBUGS-23486](https://issues.redhat.com/browse/OCPBUGS-23486): Filter non node CSRs in metrics [#220](https://github.com/openshift/cluster-machine-approver/pull/220)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/8c2f8d22182719e106d4faa9e30f186c2efbe543...7b08a4de4a08da8cdb341948e0902395eb0da961)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ee4a20d4d0214c9c8fdacaede3482683436d36e0)

* [OCPBUGS-35558](https://issues.redhat.com/browse/OCPBUGS-35558): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2383](https://github.com/openshift/cluster-monitoring-operator/pull/2383)
* [OCPBUGS-28766](https://issues.redhat.com/browse/OCPBUGS-28766): fix generation of telemeter token hash [#2306](https://github.com/openshift/cluster-monitoring-operator/pull/2306)
* [OCPBUGS-25389](https://issues.redhat.com/browse/OCPBUGS-25389): Add RHACM telemetry metric for 4.12 [#2204](https://github.com/openshift/cluster-monitoring-operator/pull/2204)
* [OCPBUGS-21441](https://issues.redhat.com/browse/OCPBUGS-21441): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2148](https://github.com/openshift/cluster-monitoring-operator/pull/2148)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/143075aaeb062764f031f196b84acbbafeda5141...ee4a20d4d0214c9c8fdacaede3482683436d36e0)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/28db40f169f64f881b0628c19bf7c64a7a9a2467)

* [OCPBUGS-43872](https://issues.redhat.com/browse/OCPBUGS-43872): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2548](https://github.com/openshift/cluster-network-operator/pull/2548)
* [OCPBUGS-38905](https://issues.redhat.com/browse/OCPBUGS-38905): Add missing runbook for OVNKubernetesNorthdInactive [#2479](https://github.com/openshift/cluster-network-operator/pull/2479)
* [OCPBUGS-37942](https://issues.redhat.com/browse/OCPBUGS-37942): [release-4.12] update whereabouts crd [#2461](https://github.com/openshift/cluster-network-operator/pull/2461)
* [OCPBUGS-29167](https://issues.redhat.com/browse/OCPBUGS-29167): fix whereabouts conformance test failures [#2256](https://github.com/openshift/cluster-network-operator/pull/2256)
* [OCPBUGS-29884](https://issues.redhat.com/browse/OCPBUGS-29884): add env var in whereabouts-reconciler daemonset [#2284](https://github.com/openshift/cluster-network-operator/pull/2284)
* [OCPBUGS-29302](https://issues.redhat.com/browse/OCPBUGS-29302): Update ingressconfig_controller to use field Manager [#2268](https://github.com/openshift/cluster-network-operator/pull/2268)
* [OCPBUGS-28801](https://issues.redhat.com/browse/OCPBUGS-28801): [release-4.12] Add ConfigMap mount to the whereabouts-reconciler DaemonSet [#2244](https://github.com/openshift/cluster-network-operator/pull/2244)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.12 [#2230](https://github.com/openshift/cluster-network-operator/pull/2230)
* [release 4.12] OCPBUGS-23025: Add maxLogFiles config for OVN-K Audit Logging [#2188](https://github.com/openshift/cluster-network-operator/pull/2188)
* [OCPBUGS-24039](https://issues.redhat.com/browse/OCPBUGS-24039): remove all managed fields used by old manager [#2099](https://github.com/openshift/cluster-network-operator/pull/2099)
* [OCPBUGS-21715](https://issues.redhat.com/browse/OCPBUGS-21715): Bump golang.org/x/net and github.com/openshift/library-go [#2124](https://github.com/openshift/cluster-network-operator/pull/2124)
* [OCPBUGS-24571](https://issues.redhat.com/browse/OCPBUGS-24571): Disable weak SSH cipher suites [#2164](https://github.com/openshift/cluster-network-operator/pull/2164)
* [OCPBUGS-25128](https://issues.redhat.com/browse/OCPBUGS-25128): Update to go 1.19 and x/net 0.8.0 [#2157](https://github.com/openshift/cluster-network-operator/pull/2157)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8924dff9c9f2180c0b77c570ccae21855f7d5675...28db40f169f64f881b0628c19bf7c64a7a9a2467)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/20966da941ab8773261b5b4c133f3a1716699243)

* irqbalance: set banned cpus list to 0 (#1006) [#1006](https://github.com/openshift/cluster-node-tuning-operator/pull/1006)
* Refactor IRQ load balancing enable/disable test (#1038) [#1038](https://github.com/openshift/cluster-node-tuning-operator/pull/1038)
* Scheduler plugin: ignore IRQs (#1034) [#1034](https://github.com/openshift/cluster-node-tuning-operator/pull/1034)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/dd95a4d7dbf6e5188a9c260e3d331f627c124747...20966da941ab8773261b5b4c133f3a1716699243)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6)

* [OCPBUGS-22689](https://issues.redhat.com/browse/OCPBUGS-22689): increase timeout for probes [#558](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/f94f220a328fbcd97e51262ce31575ec7699c858...b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8e2c472a67964065c8aa271f85ef7f7e57726ac4)

* [OCPBUGS-27443](https://issues.redhat.com/browse/OCPBUGS-27443): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1024](https://github.com/openshift/cluster-version-operator/pull/1024)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e5ddedc83bd82bf289f0ce9bd97c80c0439678a9...8e2c472a67964065c8aa271f85ef7f7e57726ac4)


### [console](https://github.com/openshift/console/tree/685ad725a95f67d16899d8124b1c5a0c0b257e3d)

* [OCPBUGS-36561](https://issues.redhat.com/browse/OCPBUGS-36561): Increase login flow state paramater length/entropy [#14539](https://github.com/openshift/console/pull/14539)
* [OCPBUGS-43639](https://issues.redhat.com/browse/OCPBUGS-43639): Copy response code from proxied plugin requests [#14423](https://github.com/openshift/console/pull/14423)
* [OCPBUGS-33519](https://issues.redhat.com/browse/OCPBUGS-33519): Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). [#14334](https://github.com/openshift/console/pull/14334)
* [OCPBUGS-41600](https://issues.redhat.com/browse/OCPBUGS-41600): Fix plugin proxy handler [#14266](https://github.com/openshift/console/pull/14266)
* [OCPBUGS-41854](https://issues.redhat.com/browse/OCPBUGS-41854): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14283](https://github.com/openshift/console/pull/14283)
* [OCPBUGS-34564](https://issues.redhat.com/browse/OCPBUGS-34564): Routes created by devfiles do not always use HTTPS [#13907](https://github.com/openshift/console/pull/13907)
* [OCPBUGS-34933](https://issues.redhat.com/browse/OCPBUGS-34933): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13930](https://github.com/openshift/console/pull/13930)
* [OCPBUGS-32146](https://issues.redhat.com/browse/OCPBUGS-32146): Bump graphql-go to v1.3.0 [#13923](https://github.com/openshift/console/pull/13923)
* [OCPBUGS-34845](https://issues.redhat.com/browse/OCPBUGS-34845): Fix PipelineRun Logs tab navigation [#13920](https://github.com/openshift/console/pull/13920)
* [OCPBUGS-33778](https://issues.redhat.com/browse/OCPBUGS-33778): fix issues with Edit Route form [#13859](https://github.com/openshift/console/pull/13859)
* [OCPBUGS-27479](https://issues.redhat.com/browse/OCPBUGS-27479): Bump helm pkg [#13528](https://github.com/openshift/console/pull/13528)
* [OCPBUGS-29746](https://issues.redhat.com/browse/OCPBUGS-29746): Add Pipeline metrics tab using plugin [#13621](https://github.com/openshift/console/pull/13621)
* [OCPBUGS-29348](https://issues.redhat.com/browse/OCPBUGS-29348): Added Proxy to non k8s endpoints [#13600](https://github.com/openshift/console/pull/13600)
* [OCPBUGS-22431](https://issues.redhat.com/browse/OCPBUGS-22431): Check if filtered object contains name property [#13285](https://github.com/openshift/console/pull/13285)
* [OCPBUGS-25213](https://issues.redhat.com/browse/OCPBUGS-25213): add access review for impersonate [#13440](https://github.com/openshift/console/pull/13440)
* [OCPBUGS-18116](https://issues.redhat.com/browse/OCPBUGS-18116): Bump helm version [#13104](https://github.com/openshift/console/pull/13104)
* [OCPBUGS-24236](https://issues.redhat.com/browse/OCPBUGS-24236): Remove tech preview badge from Pipeline repository pages [#13384](https://github.com/openshift/console/pull/13384)
* [OCPBUGS-23413](https://issues.redhat.com/browse/OCPBUGS-23413): Correct logout process [#13342](https://github.com/openshift/console/pull/13342)
* [OCPBUGS-24364](https://issues.redhat.com/browse/OCPBUGS-24364): Subsequent PipelineRuns take initial PipelineRun name into account [#13401](https://github.com/openshift/console/pull/13401)
* [OCPBUGS-13357](https://issues.redhat.com/browse/OCPBUGS-13357): add multipath device type to LocalVolumeSet [#12805](https://github.com/openshift/console/pull/12805)
* [Full changelog](https://github.com/openshift/console/compare/4ac5551467708429854cde61a6c67d7b72ccb0c1...685ad725a95f67d16899d8124b1c5a0c0b257e3d)


### [console-operator](https://github.com/openshift/console-operator/tree/32e6d25c4ac9fe71bb64fa7b30073a72547f4974)

* [OCPBUGS-33386](https://issues.redhat.com/browse/OCPBUGS-33386): Reset console operator's conditions [#898](https://github.com/openshift/console-operator/pull/898)
* [OCPBUGS-20988](https://issues.redhat.com/browse/OCPBUGS-20988): Disable HTTP/2 for webhook [#876](https://github.com/openshift/console-operator/pull/876)
* [OCPBUGS-30990](https://issues.redhat.com/browse/OCPBUGS-30990): [release-4.12] Bump library-go and golang.org/x/net [#867](https://github.com/openshift/console-operator/pull/867)
* [Full changelog](https://github.com/openshift/console-operator/compare/7ea10a2488ec62b73cd4a9b462ff675ef0c9af3d...32e6d25c4ac9fe71bb64fa7b30073a72547f4974)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65)

* Make sure LB status is updated immediately (#2067) [#2067](https://github.com/openshift/cloud-provider-openstack/pull/2067)
* Allow deleting LBs in ERROR status (#2037) [#2037](https://github.com/openshift/cloud-provider-openstack/pull/2037)
* Protect from `AllocateLoadBalancerNodePorts=false` (#1988) [#1988](https://github.com/openshift/cloud-provider-openstack/pull/1988)
* Do not create HTTP monitors for UDP on old Octavia (#2000) [#2000](https://github.com/openshift/cloud-provider-openstack/pull/2000)
* fix CSI CI issue (#2020) [#2020](https://github.com/openshift/cloud-provider-openstack/pull/2020)
* tests: Replace use of deprecated ginkgo flag (#2007) [#2007](https://github.com/openshift/cloud-provider-openstack/pull/2007)
* Add docs on running tests (#2006) [#2006](https://github.com/openshift/cloud-provider-openstack/pull/2006)
* Remove duplicate errors (#2009) [#2009](https://github.com/openshift/cloud-provider-openstack/pull/2009)
* Manage Security Groups for Octavia (#1984) [#1984](https://github.com/openshift/cloud-provider-openstack/pull/1984)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1c201fdb4f188358a167803251ecce2411f6e278...2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/8dab53208f3a161af85eedd6835c2701d337d5f9)

* [OCPBUGS-30295](https://issues.redhat.com/browse/OCPBUGS-30295): Fix selector for manila-csi-driver-controller-metrics service [#228](https://github.com/openshift/csi-driver-manila-operator/pull/228)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/a0d079a079603589b9e272465f99befb001c23db...8dab53208f3a161af85eedd6835c2701d337d5f9)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585)

* [OCPBUGS-28953](https://issues.redhat.com/browse/OCPBUGS-28953): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#169](https://github.com/openshift/csi-driver-shared-resource/pull/169)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/89db151e22562997fddfe129dcecce64a6658187...d054948fbc78ef04c7a55ac2a4b3ac0ed5648585)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c)

* [OCPBUGS-28959](https://issues.redhat.com/browse/OCPBUGS-28959): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#105](https://github.com/openshift/csi-driver-shared-resource-operator/pull/105)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/d59af21c477d52b680bf8627fb22b145582f1610...cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf)

* [OCPBUGS-29244](https://issues.redhat.com/browse/OCPBUGS-29244): cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#140](https://github.com/openshift/csi-external-snapshotter/pull/140)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/7f04d8aa1bf09e22bf750aa8757345ca2098609b...6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf)


### [docker-builder](https://github.com/openshift/builder/tree/3f240815de70301cbce65bf6b2f85e67eaa3573c)

* Replace 'coreydaley' with 'sayan-biswas' [#408](https://github.com/openshift/builder/pull/408)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#406](https://github.com/openshift/builder/pull/406)
* [Full changelog](https://github.com/openshift/builder/compare/a1cce53440f2f491c16c1b2c5a5b9986ba28c3fc...3f240815de70301cbce65bf6b2f85e67eaa3573c)


### [etcd](https://github.com/openshift/etcd/tree/bb82e891abeaddd57e1a07775874d71f2ddd9e85)

* [OCPBUGS-28736](https://issues.redhat.com/browse/OCPBUGS-28736): Rebase etcd 3.5.12 openshift 4.12 [#246](https://github.com/openshift/etcd/pull/246)
* [OCPBUGS-27102](https://issues.redhat.com/browse/OCPBUGS-27102): Rebase etcd 3.5.11 openshift 4.12 [#240](https://github.com/openshift/etcd/pull/240)
* [Full changelog](https://github.com/openshift/etcd/compare/6c571f407797d82205ab55f0e5ce43848e423b14...bb82e891abeaddd57e1a07775874d71f2ddd9e85)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/8a84952ec7ff1aa001f885b10ec583540f298c73)

* [OCPBUGS-21282](https://issues.redhat.com/browse/OCPBUGS-21282): Bump golang.org/x/net to v0.18.0 [#44](https://github.com/openshift/cloud-provider-gcp/pull/44)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/8d208a7f549b0c039420f67ca7aeff43fc1dcdfc...8a84952ec7ff1aa001f885b10ec583540f298c73)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/d6d8c1cc5b58ff7cf311bcb72dbeb00eb704511a)

* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality. [#76](https://github.com/openshift/machine-api-provider-gcp/pull/76)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a9e4e6b0418d7f6bf05d9b2cea211823c9a01323...d6d8c1cc5b58ff7cf311bcb72dbeb00eb704511a)


### [haproxy-router](https://github.com/openshift/router/tree/6a092687d2ed1b709403e3bdebc2f069c0ce4a01)

* [OCPBUGS-43703](https://issues.redhat.com/browse/OCPBUGS-43703): add duplicate_te_header_total metric [#632](https://github.com/openshift/router/pull/632)
* [OCPBUGS-35875](https://issues.redhat.com/browse/OCPBUGS-35875): Properly handle rewrite-target annotation [#610](https://github.com/openshift/router/pull/610)
* [OCPBUGS-33432](https://issues.redhat.com/browse/OCPBUGS-33432): Route 'haproxy.router.openshift.io/timeout' value is not validated [#593](https://github.com/openshift/router/pull/593)
* [OCPBUGS-34212](https://issues.redhat.com/browse/OCPBUGS-34212): Reject routes with MD5 certs [#601](https://github.com/openshift/router/pull/601)
* [OCPBUGS-33517](https://issues.redhat.com/browse/OCPBUGS-33517): Count active services before setting weight to 1 [#581](https://github.com/openshift/router/pull/581)
* [Full changelog](https://github.com/openshift/router/compare/bfb66253ac1ed27efea087d6cf0f9ba9d9cb73df...6a092687d2ed1b709403e3bdebc2f069c0ce4a01)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/1eb868227a9b8ed70f88be1681321405094d7adf)

* [OCPBUGS-37282](https://issues.redhat.com/browse/OCPBUGS-37282): UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … [#2046](https://github.com/openshift/kubernetes/pull/2046)
* [OCPBUGS-30454](https://issues.redhat.com/browse/OCPBUGS-30454): CVE 2024-24786 [#1974](https://github.com/openshift/kubernetes/pull/1974)
* UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1940](https://github.com/openshift/kubernetes/pull/1940)
* Address CVE [#13](https://github.com/openshift/kubernetes/pull/13)
* [OCPBUGS-15527](https://issues.redhat.com/browse/OCPBUGS-15527): Prevent partially filled HPA behaviors from crashing kube-controller-manager [#1887](https://github.com/openshift/kubernetes/pull/1887)
* [OCPBUGS-25815](https://issues.redhat.com/browse/OCPBUGS-25815): Fix device uncertain errors on reboot 4.12 [#1833](https://github.com/openshift/kubernetes/pull/1833)
* [OCPBUGS-25214](https://issues.redhat.com/browse/OCPBUGS-25214): legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber [#1835](https://github.com/openshift/kubernetes/pull/1835)
* [OCPBUGS-23568](https://issues.redhat.com/browse/OCPBUGS-23568): Update to kubernetes 1.25.16 [#1807](https://github.com/openshift/kubernetes/pull/1807)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a52e8df8469a20f72e73e5eeb123d93cf1f4d188...1eb868227a9b8ed70f88be1681321405094d7adf)


### [hypershift](https://github.com/openshift/hypershift/tree/da93f69c5c56fe938e65115dd08428604ed42bed)

* [OCPBUGS-41516](https://issues.redhat.com/browse/OCPBUGS-41516): set Konnectivity cipher suites [#4283](https://github.com/openshift/hypershift/pull/4283)
* [Full changelog](https://github.com/openshift/hypershift/compare/6f1e70162329ed38cb7e58622fc79955e4338f02...da93f69c5c56fe938e65115dd08428604ed42bed)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/8bd0ea8fadbbb09ed912984d3dc6903a0aad0562)

* [OCPBUGS-24644](https://issues.redhat.com/browse/OCPBUGS-24644): Add Snyk file to exclude vendor directory on scan [#67](https://github.com/openshift/cloud-provider-ibm/pull/67)
* [OCPBUGS-21113](https://issues.redhat.com/browse/OCPBUGS-21113): Bump golang.org/x/net to v0.18.0 [#57](https://github.com/openshift/cloud-provider-ibm/pull/57)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/e5f25fc64911215a3a78cab186cba49cbd51dec6...8bd0ea8fadbbb09ed912984d3dc6903a0aad0562)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/921509f3833b7b69a08d63fddd13890125e974fa)

* [OCPBUGS-36063](https://issues.redhat.com/browse/OCPBUGS-36063): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#75](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/75)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3ddaa8298f63cf342aa344003dcef6ecd4a721f2...921509f3833b7b69a08d63fddd13890125e974fa)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/f2b726d578e020d369902c14173307a6e13853b4)

* [OCPBUGS-36069](https://issues.redhat.com/browse/OCPBUGS-36069): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#124](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/124)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/946ac1326c83727a7791218f1cdf3290dd55ed17...f2b726d578e020d369902c14173307a6e13853b4)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/0fe74f674bf5a1e464a5e2f872def13e1a9bb2a9)

* [OCPBUGS-21397](https://issues.redhat.com/browse/OCPBUGS-21397): UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 [#67](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/67)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/c1304c80d736559ced3049c076535d53020d5d9d...0fe74f674bf5a1e464a5e2f872def13e1a9bb2a9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/6b543885144d6eb40c7c8342dac15f80e77bb4fa)

* [OCPBUGS-32004](https://issues.redhat.com/browse/OCPBUGS-32004): bump golang.org/x/net version (#932) [#932](https://github.com/openshift/insights-operator/pull/932)
* [OCPBUGS-28519](https://issues.redhat.com/browse/OCPBUGS-28519): Add extra check in ids to bypass validations (#906) [#906](https://github.com/openshift/insights-operator/pull/906)
* adds helm information gather (#890) [#890](https://github.com/openshift/insights-operator/pull/890)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ef30d15001f6e4ef684b8aea69f4a3711ca23aa0...6b543885144d6eb40c7c8342dac15f80e77bb4fa)


### [ironic](https://github.com/openshift/ironic-image/tree/741b0c35cb8d26a62cd573b75685e5c56b212730)

* [OCPBUGS-43949](https://issues.redhat.com/browse/OCPBUGS-43949), [OCPBUGS-43957](https://issues.redhat.com/browse/OCPBUGS-43957): Bump python-waitress [4.12] [#609](https://github.com/openshift/ironic-image/pull/609)
* [OCPBUGS-37766](https://issues.redhat.com/browse/OCPBUGS-37766), [OCPBUGS-39385](https://issues.redhat.com/browse/OCPBUGS-39385): Include fixes for CVE-2024-44082 [#586](https://github.com/openshift/ironic-image/pull/586)
* [OCPBUGS-38513](https://issues.redhat.com/browse/OCPBUGS-38513): set min version for python3-webob [#558](https://github.com/openshift/ironic-image/pull/558)
* [OCPBUGS-33373](https://issues.redhat.com/browse/OCPBUGS-33373): bump werkzeug [#547](https://github.com/openshift/ironic-image/pull/547)
* [OCPBUGS-34897](https://issues.redhat.com/browse/OCPBUGS-34897): bump jinja2 [#541](https://github.com/openshift/ironic-image/pull/541)
* [OCPBUGS-32362](https://issues.redhat.com/browse/OCPBUGS-32362): [4.12] remove unused prometheus-exporter [#489](https://github.com/openshift/ironic-image/pull/489)
* [OCPBUGS-32386](https://issues.redhat.com/browse/OCPBUGS-32386): Use unix sockets by default for reverse proxy communication [#477](https://github.com/openshift/ironic-image/pull/477)
* [OCPBUGS-29229](https://issues.redhat.com/browse/OCPBUGS-29229): Fix Inspector iPXE config for IPv6 addresses [#454](https://github.com/openshift/ironic-image/pull/454)
* [OCPBUGS-23979](https://issues.redhat.com/browse/OCPBUGS-23979): Ironic side of external_http_url (METAL-163) is not wired in correctly [#431](https://github.com/openshift/ironic-image/pull/431)
* [Full changelog](https://github.com/openshift/ironic-image/compare/ec72c00555846db34d3356c9e712ac7d4c02308a...741b0c35cb8d26a62cd573b75685e5c56b212730)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/fc37dec83ae7cbd6878a5ddcc25126f424586095)

* [OCPBUGS-39385](https://issues.redhat.com/browse/OCPBUGS-39385): Include fixes for CVE-2024-44082 [#165](https://github.com/openshift/ironic-agent-image/pull/165)
* [OCPBUGS-38513](https://issues.redhat.com/browse/OCPBUGS-38513): set webob and bump werkzeug [#153](https://github.com/openshift/ironic-agent-image/pull/153)
* [OCPBUGS-29769](https://issues.redhat.com/browse/OCPBUGS-29769): Always add ignition to set hostname on /etc/hostname [#112](https://github.com/openshift/ironic-agent-image/pull/112)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/726ddd3666be569f6bf443cbc7fa2ac67f6d5d26...fc37dec83ae7cbd6878a5ddcc25126f424586095)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/36c06694097a1a09a8c4e1f70a9025187814cb1a)

* [OCPBUGS-21441](https://issues.redhat.com/browse/OCPBUGS-21441): upgrade golang.org/x/net to 0.17.0 to address CVE [#91](https://github.com/openshift/k8s-prometheus-adapter/pull/91)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/5fc351d2b57da06005e6d31c2e31a60963123a67...36c06694097a1a09a8c4e1f70a9025187814cb1a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9706f967ca7bb1ade1a789123c71fe6cb55a025e)

* [OCPBUGS-20753](https://issues.redhat.com/browse/OCPBUGS-20753): update x/net to v0.17.0 [#615](https://github.com/openshift/sdn/pull/615)
* [Full changelog](https://github.com/openshift/sdn/compare/5594cdf86683052fefc31a2a71bce4347c96c316...9706f967ca7bb1ade1a789123c71fe6cb55a025e)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/c69fae7877557d64dce64f36e0a78751952571c4)

* [OCPBUGS-32000](https://issues.redhat.com/browse/OCPBUGS-32000): CVE-2023-45288 [4.12] [#106](https://github.com/openshift/kube-rbac-proxy/pull/106)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b17014fefeb55512dd015d3024184c8c4692588b...c69fae7877557d64dce64f36e0a78751952571c4)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b6c243d139f4345a88d5678eb6ba6041a2abb405)

* [OCPBUGS-43872](https://issues.redhat.com/browse/OCPBUGS-43872): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1305](https://github.com/openshift/machine-api-operator/pull/1305)
* [OCPBUGS-32007](https://issues.redhat.com/browse/OCPBUGS-32007): Update x/net to v0.25.0 [#1257](https://github.com/openshift/machine-api-operator/pull/1257)
* [OCPBUGS-25303](https://issues.redhat.com/browse/OCPBUGS-25303): Update reference URL [#1189](https://github.com/openshift/machine-api-operator/pull/1189)
* [OCPBUGS-21501](https://issues.redhat.com/browse/OCPBUGS-21501): Bump golang.org/x/net to v0.18.0 [#1176](https://github.com/openshift/machine-api-operator/pull/1176)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a6c42a425610c1f634475f5e1014ee8b2dbd9437...b6c243d139f4345a88d5678eb6ba6041a2abb405)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f319faad0f2a538159dac610068952488d800ebf)

* [OCPBUGS-44325](https://issues.redhat.com/browse/OCPBUGS-44325): Panic seen in CI job for MCC pod [#4689](https://github.com/openshift/machine-config-operator/pull/4689)
* [OCPBUGS-38382](https://issues.redhat.com/browse/OCPBUGS-38382): [release-4.12] daemon/update: disable systemd unit before overwriting [#4530](https://github.com/openshift/machine-config-operator/pull/4530)
* [OCPBUGS-33665](https://issues.redhat.com/browse/OCPBUGS-33665): Run resolv-prepender entirely async [#4364](https://github.com/openshift/machine-config-operator/pull/4364)
* [OCPBUGS-30829](https://issues.redhat.com/browse/OCPBUGS-30829): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4257](https://github.com/openshift/machine-config-operator/pull/4257)
* [OCPBUGS-30823](https://issues.redhat.com/browse/OCPBUGS-30823): Introduce kubelet-dependencies.target and firstboot-osupdate.target [#4268](https://github.com/openshift/machine-config-operator/pull/4268)
* [OCPBUGS-30329](https://issues.redhat.com/browse/OCPBUGS-30329): set nodeStatusReportFrequency [#4246](https://github.com/openshift/machine-config-operator/pull/4246)
* [OCPBUGS-19659](https://issues.redhat.com/browse/OCPBUGS-19659): After dual-stack conversion reconcile IPFamilies [#3936](https://github.com/openshift/machine-config-operator/pull/3936)
* [OCPBUGS-29366](https://issues.redhat.com/browse/OCPBUGS-29366): release-4.12: fix nodeStatusUpdateFrequency [#4180](https://github.com/openshift/machine-config-operator/pull/4180)
* [OCPBUGS-29278](https://issues.redhat.com/browse/OCPBUGS-29278): crio: drop automatic image cleanup on upgrades [#4178](https://github.com/openshift/machine-config-operator/pull/4178)
* [OCPBUGS-14071](https://issues.redhat.com/browse/OCPBUGS-14071): Imageinspect takes type of error into account, drop podman inspect fallback [#3717](https://github.com/openshift/machine-config-operator/pull/3717)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ef25c81205a65d5361cfc464e16fd5d47c0c6f17...f319faad0f2a538159dac610068952488d800ebf)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/e456249dbf0c5456bd0671d41a4445bd266b3660)

* [OCPBUGS-27090](https://issues.redhat.com/browse/OCPBUGS-27090): configurable ironic agent vlan creation [#119](https://github.com/openshift/image-customization-controller/pull/119)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/c3f78200e83b7adf4f3886aa79cadd1b2a12bcc8...e456249dbf0c5456bd0671d41a4445bd266b3660)


### [multus-cni](https://github.com/openshift/multus-cni/tree/07d8af54f06652b283dc0aa8db68d438c4bfe741)

* [OCPBUGS-28520](https://issues.redhat.com/browse/OCPBUGS-28520): Fix SAST scan issues for multus-cni-container [4.12] [#225](https://github.com/openshift/multus-cni/pull/225)
* [Full changelog](https://github.com/openshift/multus-cni/compare/f677359951fac9e8d292974d30d2693078f9093d...07d8af54f06652b283dc0aa8db68d438c4bfe741)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/5993d022e7fad3a1bede89235502f1a90f618bf2)

* [OCPBUGS-37942](https://issues.redhat.com/browse/OCPBUGS-37942), [OCPBUGS-38019](https://issues.redhat.com/browse/OCPBUGS-38019): [release-4.12] Stateful fixes [#310](https://github.com/openshift/whereabouts-cni/pull/310)
* [OCPBUGS-28801](https://issues.redhat.com/browse/OCPBUGS-28801): [release-4.12] Enable whereabouts config [#244](https://github.com/openshift/whereabouts-cni/pull/244)
* [OCPBUGS-16008](https://issues.redhat.com/browse/OCPBUGS-16008): Cherry pick fix assignment 4.12 [#238](https://github.com/openshift/whereabouts-cni/pull/238)
* [OCPBUGS-21499](https://issues.redhat.com/browse/OCPBUGS-21499): update golang.org/x/net to v0.17.0 [#209](https://github.com/openshift/whereabouts-cni/pull/209)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/e56594f9a848625d2997b0f159959114e8ff5970...5993d022e7fad3a1bede89235502f1a90f618bf2)


### [must-gather](https://github.com/openshift/must-gather/tree/dc23fd8103fdf54262f101c16b11102242d9d002)

* [OCPBUGS-24523](https://issues.redhat.com/browse/OCPBUGS-24523): [release-4.12] Add csi-proxy logs collection in must-gather for Windows nodes [#394](https://github.com/openshift/must-gather/pull/394)
* [Full changelog](https://github.com/openshift/must-gather/compare/5fd2176182e7aec687da553fe185b9f6f739bbb2...dc23fd8103fdf54262f101c16b11102242d9d002)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/fad45782360032bdde3a10b9a28ba30ecc14684f)

* Added METRIC_TEST_IMAGE var (#92) [#92](https://github.com/openshift/network-metrics-daemon/pull/92)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b49cc4311d90f2c4cc64c8d23375b01fe51e6eba...fad45782360032bdde3a10b9a28ba30ecc14684f)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/708c6daea2aba7d0de0b8c55590e1c777639829f)

* [OCPBUGS-25675](https://issues.redhat.com/browse/OCPBUGS-25675): Fix CI by running tests natively by default [#62](https://github.com/openshift/machine-api-provider-nutanix/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/25aea2d4b370e42e67edab85c15c9ed56b98e134...708c6daea2aba7d0de0b8c55590e1c777639829f)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/1053f14213faf18c67162760598a8fc47a5ad4b5)

* [OCPBUGS-32010](https://issues.redhat.com/browse/OCPBUGS-32010): bump x/net to 0.24.0 [#113](https://github.com/openshift/oauth-apiserver/pull/113)
* [OCPBUGS-21049](https://issues.redhat.com/browse/OCPBUGS-21049): Bump K8s to v1.25 [#104](https://github.com/openshift/oauth-apiserver/pull/104)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/cfafdccf09150ab55b8b853df16e4395ff3bda4b...1053f14213faf18c67162760598a8fc47a5ad4b5)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0c434f420b178093a2e940dfb2c445ff638d1914)

* [OCPBUGS-27478](https://issues.redhat.com/browse/OCPBUGS-27478): bump osin deps [#144](https://github.com/openshift/oauth-server/pull/144)
* [Full changelog](https://github.com/openshift/oauth-server/compare/0f83669be9b7caa6f82799b4bd2fd659d3b31aee...0c434f420b178093a2e940dfb2c445ff638d1914)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3f39dc6e5a01bae1c66fa8bc7c24553d032e2e4d)

* Bump version to include v5.11.0 of go-git (#825) [#825](https://github.com/openshift/oc-mirror/pull/825)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) (#796) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#779) [#779](https://github.com/openshift/oc-mirror/pull/779)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/cb502f92989b252033c5e1f6259ac8b5082ae77a...3f39dc6e5a01bae1c66fa8bc7c24553d032e2e4d)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/bb06dd0133acc2d10fa5425d90557edc068f48a7)

* : OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 [#76](https://github.com/openshift/operator-framework-rukpak/pull/76)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/7a78cacecdce2d4184be257457185be51c81d1db...bb06dd0133acc2d10fa5425d90557edc068f48a7)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e9ad64992e81a10230e1759db6577db078f18b38)

* : OCPBUGS-21429: Enable HTTP/2 CVE mitigation [#399](https://github.com/openshift/openshift-apiserver/pull/399)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/635ed5cc49f0d9668969a8a78bec91d426b4d26b...e9ad64992e81a10230e1759db6577db078f18b38)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/bde7e3af208ac9079de5646a3b47120dc762606f)

* [OCPBUGS-41953](https://issues.redhat.com/browse/OCPBUGS-41953): Add adambkaplan as approver [#336](https://github.com/openshift/openshift-controller-manager/pull/336)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/b6528f9ea28164af9f1ceea0e50f18116fe3c90e...bde7e3af208ac9079de5646a3b47120dc762606f)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b7e63d634cc7b2813d331d4a7e3e65209c669526)

* NO-ISSUE: [release-4.12] Backport e2e fixes [#880](https://github.com/openshift/operator-framework-olm/pull/880)
* [OCPBUGS-38610](https://issues.redhat.com/browse/OCPBUGS-38610): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#875](https://github.com/openshift/operator-framework-olm/pull/875)
* [OCPBUGS-42161](https://issues.redhat.com/browse/OCPBUGS-42161): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs [#873](https://github.com/openshift/operator-framework-olm/pull/873)
* [OCPBUGS-41881](https://issues.redhat.com/browse/OCPBUGS-41881): [CARRY] perform operator apiService certificate validity checks directly [#866](https://github.com/openshift/operator-framework-olm/pull/866)
* [OCPBUGS-32854](https://issues.redhat.com/browse/OCPBUGS-32854): bump go-jose to v2.6.3 [#782](https://github.com/openshift/operator-framework-olm/pull/782)
* [OCPBUGS-35242](https://issues.redhat.com/browse/OCPBUGS-35242): Unblock CI [#773](https://github.com/openshift/operator-framework-olm/pull/773)
* [OCPBUGS-27563](https://issues.redhat.com/browse/OCPBUGS-27563), [OCPBUGS-27568](https://issues.redhat.com/browse/OCPBUGS-27568), [OCPBUGS-27648](https://issues.redhat.com/browse/OCPBUGS-27648), [OCPBUGS-27653](https://issues.redhat.com/browse/OCPBUGS-27653): bump go-git/v5 to 5.11.0 [#688](https://github.com/openshift/operator-framework-olm/pull/688)
* [OCPBUGS-27962](https://issues.redhat.com/browse/OCPBUGS-27962): [CARRY] SSC RBAC [#671](https://github.com/openshift/operator-framework-olm/pull/671)
* [OCPBUGS-28229](https://issues.redhat.com/browse/OCPBUGS-28229): Registry Pod Controller Flag [#673](https://github.com/openshift/operator-framework-olm/pull/673)
* [OCPBUGS-24619](https://issues.redhat.com/browse/OCPBUGS-24619): Update to latest k8s v0.25.15 API server and enable HTTP/2 DoS mitigations [#660](https://github.com/openshift/operator-framework-olm/pull/660)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/95f63f30d44cb1bce84d419611c5833a57875b3b...b7e63d634cc7b2813d331d4a7e3e65209c669526)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/38b9ed80140123508ab5012e8fa0b067e7aafc12)

* NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] [#510](https://github.com/operator-framework/operator-marketplace/pull/510)
* [OCPBUGS-32081](https://issues.redhat.com/browse/OCPBUGS-32081): update golang.org/x/net for CVE-2023-45288 [#567](https://github.com/operator-framework/operator-marketplace/pull/567)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/06a56643da746dee338cf1625f82a7ff07c9cdac...38b9ed80140123508ab5012e8fa0b067e7aafc12)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2996be215b6dc887d9c439ad4256e47568eb7a0e)

* [OCPBUGS-35876](https://issues.redhat.com/browse/OCPBUGS-35876): [release-4.12] ipv6+all protocols conntrack flush [#2214](https://github.com/openshift/ovn-kubernetes/pull/2214)
* [OCPBUGS-29864](https://issues.redhat.com/browse/OCPBUGS-29864): CVE-2022-41723: avoid quadratic complexity in HPACK decoding [#2204](https://github.com/openshift/ovn-kubernetes/pull/2204)
* [OCPBUGS-34273](https://issues.redhat.com/browse/OCPBUGS-34273), [OCPBUGS-34414](https://issues.redhat.com/browse/OCPBUGS-34414): Improves service iptables efficiency on start up + ICMP error messages to pass through [#2184](https://github.com/openshift/ovn-kubernetes/pull/2184)
* [OCPBUGS-32990](https://issues.redhat.com/browse/OCPBUGS-32990): Bump OVS [#2144](https://github.com/openshift/ovn-kubernetes/pull/2144)
* [OCPBUGS-33422](https://issues.redhat.com/browse/OCPBUGS-33422): [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2135](https://github.com/openshift/ovn-kubernetes/pull/2135)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889): [release-4.12] OVN bump to 23.06.1-112 [#2154](https://github.com/openshift/ovn-kubernetes/pull/2154)
* [OCPBUGS-23259](https://issues.redhat.com/browse/OCPBUGS-23259): [release-4.12] Update leaderelection config to allow retries [#2017](https://github.com/openshift/ovn-kubernetes/pull/2017)
* [OCPBUGS-28598](https://issues.redhat.com/browse/OCPBUGS-28598): CARRY: Updates owners and adds Surya [#2034](https://github.com/openshift/ovn-kubernetes/pull/2034)
* [OCPBUGS-26700](https://issues.redhat.com/browse/OCPBUGS-26700): [release-4.12] fixes MTU configuration on gateway router [#2015](https://github.com/openshift/ovn-kubernetes/pull/2015)
* [OCPBUGS-24420](https://issues.redhat.com/browse/OCPBUGS-24420): OVNK/GW: Ignore headless services in syncServices [#1972](https://github.com/openshift/ovn-kubernetes/pull/1972)
* [OCPBUGS-23981](https://issues.redhat.com/browse/OCPBUGS-23981): Netpol retryFramework cleanup [#1977](https://github.com/openshift/ovn-kubernetes/pull/1977)
* [OCPBUGS-26243](https://issues.redhat.com/browse/OCPBUGS-26243): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2006](https://github.com/openshift/ovn-kubernetes/pull/2006)
* [OCPBUGS-25096](https://issues.redhat.com/browse/OCPBUGS-25096): Fragment oversized reply packets in LGW mode [#1984](https://github.com/openshift/ovn-kubernetes/pull/1984)
* [OCPBUGS-22091](https://issues.redhat.com/browse/OCPBUGS-22091): Bump OVN to 23.06.1-39.el8fdp [#1943](https://github.com/openshift/ovn-kubernetes/pull/1943)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/dd3c7ed8c1f41873168d3df26084ecbfd3d9a36b...2996be215b6dc887d9c439ad4256e47568eb7a0e)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/b78e8e7871bd50ff77a68fdae320775a17856373)

* [OCPBUGS-24733](https://issues.redhat.com/browse/OCPBUGS-24733): synk: ignore vendor dir [#62](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/62)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/dda4b0d0c09596aa3c0094ad3b4c2915bb335ee3...b78e8e7871bd50ff77a68fdae320775a17856373)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/7dadc08acb9f515735c6c3fdb417424d0c668d44)

* [OCPBUGS-25717](https://issues.redhat.com/browse/OCPBUGS-25717): snyk: ignore vendor dir [#62](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/62)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a9b934de70200034587af224fbe675a33a12ace4...7dadc08acb9f515735c6c3fdb417424d0c668d44)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/4fb4334ca8aa9eb8290488359dd8d1cc5261da49)

* [OCPBUGS-24740](https://issues.redhat.com/browse/OCPBUGS-24740): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#52](https://github.com/openshift/cloud-provider-powervs/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/36c1b647f46f44e4cca85649186a3ecb406a20db...4fb4334ca8aa9eb8290488359dd8d1cc5261da49)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/8a37e70af86197341dfe33077565cc1f7c919333)

* [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality [#75](https://github.com/openshift/machine-api-provider-powervs/pull/75)
* [OCPBUGS-24738](https://issues.redhat.com/browse/OCPBUGS-24738): snyk code scan exclude vendor directory [#63](https://github.com/openshift/machine-api-provider-powervs/pull/63)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/86ae68278ce7c48e79420fa08265e6eaa58b5a27...8a37e70af86197341dfe33077565cc1f7c919333)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/ef1d057db0bf8d0846d96e09cdd1f55998a1f80b)

* [OCPBUGS-21026](https://issues.redhat.com/browse/OCPBUGS-21026): CVE 2023 39325 (4.12) [#231](https://github.com/openshift/service-ca-operator/pull/231)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/299b7097a49385fdd4f86eccedc07f3a192e2504...ef1d057db0bf8d0846d96e09cdd1f55998a1f80b)


### [telemeter](https://github.com/openshift/telemeter/tree/c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c)

* [OCPBUGS-34827](https://issues.redhat.com/browse/OCPBUGS-34827): fix issuer check during JWT authentication 4.12 [#541](https://github.com/openshift/telemeter/pull/541)
* [Full changelog](https://github.com/openshift/telemeter/compare/9c8092bb329c90d4ae12daf16906adb9b9620e20...c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c)


### [tests](https://github.com/openshift/origin/tree/daedb2e584a91e7384b765d0599ad096aa2e78df)

* [OCPBUGS-41585](https://issues.redhat.com/browse/OCPBUGS-41585): Removes dependency on samples operator images [#29080](https://github.com/openshift/origin/pull/29080)
* [Full changelog](https://github.com/openshift/origin/compare/7b7d4ef2acfb10117f21af59d5b99da177b19d3d...daedb2e584a91e7384b765d0599ad096aa2e78df)


### [thanos](https://github.com/openshift/thanos/tree/2867a6b552eaddefd73aa979f13e95f6df338070)

* [OCPBUGS-27100](https://issues.redhat.com/browse/OCPBUGS-27100): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#137](https://github.com/openshift/thanos/pull/137)
* [Full changelog](https://github.com/openshift/thanos/compare/d7ceb6277e36ea6ea92ee90e7f010e28cbecdaf7...2867a6b552eaddefd73aa979f13e95f6df338070)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/e170dce5c1fe5d3a025ccd8264e78c4c987b1d7a)

* [OCPBUGS-21493](https://issues.redhat.com/browse/OCPBUGS-21493): Bump golang.org/x/net to v0.18.0 [#56](https://github.com/openshift/cloud-provider-vsphere/pull/56)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/e993e31f6a3b02938b11fb2f18d67681d60d8922...e170dce5c1fe5d3a025ccd8264e78c4c987b1d7a)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/a61d43b751249c1a74376a48498571da1d665685)

* [OCPBUGS-21548](https://issues.redhat.com/browse/OCPBUGS-21548): bump golang.org/x/net to v0.17.0 [#24](https://github.com/openshift/cluster-api-provider-vsphere/pull/24)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/5c261b3bc8acb84fdf8263a67a80dd384fba698e...a61d43b751249c1a74376a48498571da1d665685)