# 4.13.67

Created: 2026-05-29 06:17:46 +0000 UTC

Image Digest: `sha256:596514a0fcc2e3110cbcdf2fc57295c2df375f2f0ff36452ff0d7d181ad6c603`


## Changes from 4.13.26

### Components

* Kubernetes upgraded from 1.26.11 to 1.26.15
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202312042340-0 to 413.92.202605271328-0


### Rebuilt images without code change

* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [6384f904](https://github.com/openshift/alibaba-cloud-csi-driver/commit/6384f904d041b761670532ac183271b8110707f2) `sha256:e3c6e35aab5401f48d8e6c867692b4aacbe05a33748fdcbf83840689a39521e6`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [7e415973](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/7e415973dda671d82ae58d0107af274ff053db5c) `sha256:a6ee3962bb6846e591065bddc2acf914d5048728534747e8dd8cc5c4f5918839`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [4c0f96a6](https://github.com/openshift/cluster-api-provider-alibaba/commit/4c0f96a692dee91100d7085c05a68f3efb7e281d) `sha256:69c529b75d7ab8c920eb22c86fc400c7b94678808744fdfb56fa31702f309b71`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:96da7667e39837305b8312e36eb2c2e7ac656f56412c37c53d7ac89ea87ea9cd`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:f88b9694e9747f12e2891b35c065f163e76a8c102ca4f9f49c3429ddd7c570aa`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b6d3fbcb](https://github.com/openshift/azure-disk-csi-driver/commit/b6d3fbcbf312f03247092323a88a43873b693f22) `sha256:9098ad9d6b5aa177e16a59b9f240b0f63f0a2ed990bde697ea0c31bb96a2d61a`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [8534d756](https://github.com/openshift/azure-disk-csi-driver-operator/commit/8534d7563e209e12eec38a2027cd1d9efd530071) `sha256:d736b2a8185b5883af8c2a22efae106fda1e78357287372c3395212a2723f69a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [ee908b6b](https://github.com/openshift/cluster-bootstrap/commit/ee908b6bb91dee3e61aface46d53a00b4e9288a2) `sha256:b2fc553d9db722fe9f5ec51442dd15959caa154d570b0de0ab9697def8921c11`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [18c076b1](https://github.com/openshift/cluster-api-operator/commit/18c076b1b56e06086fc3e4ea89d6922cca2d6b4a) `sha256:b941e64c39ba567a4697da3923eed33b2fa2af246afd9262adc1a8fe333c1b9d`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [25fe7b4b](https://github.com/openshift/cluster-machine-approver/commit/25fe7b4bd96baba2eef8c0c22521fdc8c08f981d) `sha256:1304f4176ee86758894b6ed7dd43d2afd04187b84839d604af0919db8469f0ce`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [312c5f24](https://github.com/openshift/platform-operators/commit/312c5f24b5711a764350de899b83443a87296983) `sha256:6a6bb13f64fb62fe0d8bf76d66942a9c4b6908d613ad74433b4fe972f068ac5e`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [3b0d0755](https://github.com/openshift/cluster-policy-controller/commit/3b0d075530fdbfdacdfe574151a3313f5231459c) `sha256:7b14e612289dbdcba85e806f2a759a5b0fb1f6321c65962723bcca0a715756db`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9adad592](https://github.com/openshift/configmap-reload/commit/9adad592e7d9bd5a723add16488e68365a64977f) `sha256:85b35899d4f3526ff97c7c282835d105a6d2c2eae4d20a372d38fec7fb4e9b6f`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [d9290843](https://github.com/openshift/csi-external-attacher/commit/d92908438817984fc47558fdaa03805d8c3b256c) `sha256:62822c6d990ebd5efde50e43586054470d7ec7e4a464093e7e0e711c551a4680`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [0bf126b7](https://github.com/openshift/csi-external-provisioner/commit/0bf126b77a721ddaa4706fcb41f8b7be8d292492) `sha256:3583e56f86497fda0cedc8100770c6cba3142a2c94d20f46f83ab775558c9644`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e8036caf](https://github.com/openshift/csi-external-resizer/commit/e8036caff2482648a18c1ac776cf9d2474569d10) `sha256:e1abf62208ec34ee147f3c694a93de05ae28eadb8264b309d3ace146383cea56`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3587db51](https://github.com/openshift/csi-livenessprobe/commit/3587db51b8a672a2d3be2ac48ea107e474f33402) `sha256:e28cc55817e48ddbc0fda50e2c8158c41a0a5c0e8ea2129c3cd124dcc4360a90`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9ea90f34](https://github.com/openshift/csi-node-driver-registrar/commit/9ea90f34485500a525fcaad3d79ee82a41402d47) `sha256:860a0f7ed30884333716d4d1b722db538af28a82420fc558e998b541323593ad`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:b35755c010da1f4e77a53f43485156e0d0bd9fff3093a719ba7cc04fb070edbd`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [507fea98](https://github.com/openshift/cloud-provider-gcp/commit/507fea9800dc63da95ce551d2fb03219d0b0597a) `sha256:0dcd0962c1652b24b2352c521b258d23a99fd0cf5f22bd5c4ddb7612057c3f87`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [81e60746](https://github.com/openshift/gcp-pd-csi-driver/commit/81e6074605854246cdab8425a7289ad83169571a) `sha256:f634ae3015d0eb57e9a444bf037dd8d091fcfccd5960a7d35f803eb76a92d635`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [08c561b8](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/08c561b8292b4a5de3d5bc553a3e463b1f93ec0c) `sha256:7ebfca680feabcfb685c45e078efdc676ac3e5cd6e383283841525a25fa5953d`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [ce291779](https://github.com/openshift/ironic-rhcos-downloader/commit/ce2917794de5723248fe3302c8833f89fb54265a) `sha256:044acd8a9131f782311f97ca00f84b01634de86794bcf62c14420ab8e1dcbd21`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [4536724a](https://github.com/openshift/ironic-static-ip-manager/commit/4536724a8644fda91a74b23901ba1789eaff7179) `sha256:3ed67066d49b06f15a5229712186e103fded0cf818e9d5d4012a26f905fe8081`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [0fce7c7c](https://github.com/openshift/k8s-prometheus-adapter/commit/0fce7c7c97d56ba0a0ae4c6a2ba32e559b8a03d7) `sha256:9c2b6d23a4a70716be5a1c5fa69e30f5ecdd860527a1587a7bff52ce4ab02e00`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [fd791df5](https://github.com/openshift/kube-state-metrics/commit/fd791df54d7271c1611090505509a03454168689) `sha256:0db42628ef42a5055dd9da995b2e76e9b95e63cfb956c32c8590f5da44abd864`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [ee2033ec](https://github.com/openshift/cloud-provider-kubevirt/commit/ee2033ecd471dc9fc08d101c421a04916f4f55c5) `sha256:ca08bd931714a8a3c79f6cf5eb0067ab88a97f745c46131fd7bb012dc4b6f6ac`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:231c2b36807d5d68de0454d95c956fee37e482bd15542f05c94cd2e84e31bcc9`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:a6e03d92e48a96dc15b0383033be842fc7452c8d691702c0c2ea62cc78cf5279`
* machine-os-content `sha256:8b4f07bc3160ae27cab6505faba1b43ba02173efe321fd4ec201fd1e91e390db`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7176ab75](https://github.com/openshift/multus-networkpolicy/commit/7176ab75edaf6328bb1da06ba55378815271d218) `sha256:5f1308b416df35fe35277a8f7754c8ec2e96759404589c1749ef12923e8dbbb2`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [ca3bbec5](https://github.com/openshift/route-override-cni/commit/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3) `sha256:13fc244c3d291f749a9962633eb6357e495c638ea3ed4402f545ec25563c7df1`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [84bda2af](https://github.com/openshift/bond-cni/commit/84bda2afb2ab260253b77d5d282df773cc6b3438) `sha256:5968b68bfadd486c0b66e42b4f34a41fa398e3b1a531673ca5746477578581e1`
* [network-tools](https://github.com/openshift/network-tools) git [073feda1](https://github.com/openshift/network-tools/commit/073feda14fbd894c4238d693afa38a06392f2360) `sha256:360e784b29fff56c23f83228efbbe63e69eec1649f0e9f53c53c8889aab664dd`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [44af5a3a](https://github.com/openshift/oauth-proxy/commit/44af5a3a021fd158c2e44d9951ad59a3d474cdf3) `sha256:b679952069c45bc53634ad09dcfa4e1080027a8d3b696e9f76d9a50855ed96a3`
* [oauth-server](https://github.com/openshift/oauth-server) git [eb54be28](https://github.com/openshift/oauth-server/commit/eb54be281d8f215a6eaa6e10ed1b303c7d064bac) `sha256:0bf610b47e6d50ff1dfd6b0f2a8e964d6d26f4c61119426e8c0289ac43baed72`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [9be421f0](https://github.com/openshift/openshift-state-metrics/commit/9be421f0c013c7f134c1d7cfe1c0ee2f2ae8eaf6) `sha256:86ce3cc1bc4a3f6480b533270f6bafb2908bfe62a9e0cc566a03db4a9b021e98`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [54958deb](https://github.com/openshift/ovirt-csi-driver/commit/54958deb4998e08696af0abe3585486a6b5b6800) `sha256:987909284b7d6cfc2eb5f5216c68b9d966b844ddd4c99ab24867e9f7ddcdb098`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [22d89b3f](https://github.com/openshift/cluster-api-provider-ovirt/commit/22d89b3fd9e2e395a62f71092487d26c8940052e) `sha256:d8cf611de61c9a5d1d9d263eee4e864bde6d867be2d70f4f8b84f7293bb535c4`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b501d5e2](https://github.com/openshift/prom-label-proxy/commit/b501d5e2aff82d46a141223636b522aeae95b915) `sha256:05901390865fb765f71cb8e090262bde0108ed23056917ca433d1ae5bdea35c3`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:0d022dbb8d039538b70135565b2b0e2d41261f2968a80d88f9135fe751e9bfb7`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [59d699ca](https://github.com/openshift/node_exporter/commit/59d699cac664bfbfe83ef6a1615e34e062fd283d) `sha256:5ccd062cb9ba493cab4f0cb308e80fd26385a0cd5a7961f74a68d51b21c45852`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:fea19035811e61e20d6db997a8f41bc3ae2b28a5d8371250bbd8b9263c03f111`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:d0a23eb16fb3ae471607616c6e5e39e913d99a065bcc7635b1407b73a7c12244`
* rhel-coreos `sha256:6a94b3129f7624ba2c351e7dba4ffdd5a5e008579a74c128ebf3db10cbe98aec`
* rhel-coreos-extensions `sha256:3fc79aea046c9a6b819f3608d328597843ba444231e26eec9600fe243785caaf`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [6667a6cb](https://github.com/openshift/route-controller-manager/commit/6667a6cbf9a87331fcc4407375118c0bb884c925) `sha256:0ffccf7d46e03493058c33451201744fc6f9cc6902fd33db34d2ae2acf5469ef`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c8c68cac0611ba7df7b34e900a666f64c2dec887)

* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Bump Go 1.18 to 1.20 and regenerate code [#10043](https://github.com/openshift/assisted-service/pull/10043)
* [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Use archived dnf repositories for CentOS Stream 8 [#10017](https://github.com/openshift/assisted-service/pull/10017)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/06189bcdb0bea068f8ac51a3550fcdcbde522a76...c8c68cac0611ba7df7b34e900a666f64c2dec887)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/46c4e76ac9a7af1002a06f8bc8302c956e6893e2)

* [OCPBUGS-59114](https://issues.redhat.com/browse/OCPBUGS-59114): CVE-2024-45339: Bump glog pkg to version 1.2.4 (#1195) [#1195](https://github.com/openshift/assisted-installer/pull/1195)
* [OCPBUGS-53717](https://issues.redhat.com/browse/OCPBUGS-53717): Bump jwt to 4.5.2 in release-4.13 (#1094) [#1094](https://github.com/openshift/assisted-installer/pull/1094)
* Bump golang.org/x/net to 0.33.0 (#1015) [#1015](https://github.com/openshift/assisted-installer/pull/1015)
* [OCPBUGS-13612](https://issues.redhat.com/browse/OCPBUGS-13612): Update version go-http-metrics/gin (#935) [#935](https://github.com/openshift/assisted-installer/pull/935)
* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) [#835](https://github.com/openshift/assisted-installer/pull/835)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) [#829](https://github.com/openshift/assisted-installer/pull/829)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#826) [#826](https://github.com/openshift/assisted-installer/pull/826)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/edf25423e34294b754ac16a67dbaf1aed7467ca4...46c4e76ac9a7af1002a06f8bc8302c956e6893e2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b2417a540ef11f4739395745f0d41d7630093aa4)

* [OCPBUGS-67568](https://issues.redhat.com/browse/OCPBUGS-67568): Bump logrus v1.9.0 to v1.9.3 [#1280](https://github.com/openshift/assisted-installer-agent/pull/1280)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c5611048e36de8c7c917451fa8e4fb3f1edb8b6a...b2417a540ef11f4739395745f0d41d7630093aa4)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/e41e11ccf25fa74e4cfb4ace124f35cffc0191a7)

* [OCPBUGS-21238](https://issues.redhat.com/browse/OCPBUGS-21238): Bump golang.org/x/net to v0.19.0 [#43](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/b5200baa784513b77437809c63fcc80cfd53c9df...e41e11ccf25fa74e4cfb4ace124f35cffc0191a7)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/3362d673b054807a4974b4d600486933f7e0bd42...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/95c03b7b838f7c78efe8957b50c50a22cd625be7)

* [OCPBUGS-32073](https://issues.redhat.com/browse/OCPBUGS-32073): update for CVE-2023-45288 [release-4.13] [#84](https://github.com/openshift/cloud-provider-aws/pull/84)
* [OCPBUGS-27964](https://issues.redhat.com/browse/OCPBUGS-27964): bump go.opentelemetry.io [#72](https://github.com/openshift/cloud-provider-aws/pull/72)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/dece8be1a691a1dd82f561da6a1c7aca1b50d410...95c03b7b838f7c78efe8957b50c50a22cd625be7)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/85a6abbea5b82b750fe12e6089588ed4c1243082)

* [OCPBUGS-78230](https://issues.redhat.com/browse/OCPBUGS-78230): [release-4.13] hermetic 4.13 [#594](https://github.com/openshift/cluster-api-provider-aws/pull/594)
* [OCPBUGS-32470](https://issues.redhat.com/browse/OCPBUGS-32470): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#509](https://github.com/openshift/cluster-api-provider-aws/pull/509)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/de23838384b0859542041395fd84100efee34833...85a6abbea5b82b750fe12e6089588ed4c1243082)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/8205d51c798f8fea91eb6c1702fb63e7d6c17005)

* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments [#266](https://github.com/openshift/aws-ebs-csi-driver/pull/266)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/325cb029f5dac51e4efabe89a62315af134cad8d...8205d51c798f8fea91eb6c1702fb63e7d6c17005)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/cc2d716073f4e9df06326c1a343b5ee189a56c4b)

* [OCPBUGS-67575](https://issues.redhat.com/browse/OCPBUGS-67575): Updated logrus to v1.8.3 [#314](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/314)
* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): Explicitly reserve 1 attachment for the root disk [#307](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/307)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/3cb879a801f54ecc5d03c7404deba7ca25bb5af5...cc2d716073f4e9df06326c1a343b5ee189a56c4b)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#96](https://github.com/openshift/machine-api-provider-aws/pull/96)
* [OCPBUGS-21568](https://issues.redhat.com/browse/OCPBUGS-21568): Update golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/machine-api-provider-aws/pull/89)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/ba3b3a31ca9efcc984015280965a4b28ffd740e0...e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ae01a272aff73b1390ee4c3934cc2382370a1660)

* [OCPBUGS-32882](https://issues.redhat.com/browse/OCPBUGS-32882): Upgrade go-jose module to 2.6.3 [#190](https://github.com/openshift/aws-pod-identity-webhook/pull/190)
* [OCPBUGS-21331](https://issues.redhat.com/browse/OCPBUGS-21331): Upgrade golang/x/net for CVE-2023-39325 [#184](https://github.com/openshift/aws-pod-identity-webhook/pull/184)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ee0fcde48c1122eeb59b2dedaa5e603fbe33812f...ae01a272aff73b1390ee4c3934cc2382370a1660)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/913fbb0f9a5d8c09737f4deb2a8445629403e2d0)

* [OCPBUGS-78179](https://issues.redhat.com/browse/OCPBUGS-78179): [release-4.13] Hermetic 4.13 [#367](https://github.com/openshift/cluster-api-provider-azure/pull/367)
* [OCPBUGS-36022](https://issues.redhat.com/browse/OCPBUGS-36022): Update go-retryablehttp to v0.7.7 [#314](https://github.com/openshift/cluster-api-provider-azure/pull/314)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/aa3b650ee93e7cb92556cf2e917074011578c040...913fbb0f9a5d8c09737f4deb2a8445629403e2d0)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/15e6f80ec4be826cd5d03ef4126be0dd171b506e)

* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): bump mount-utils to treat ENODEV error as corrupted mount [#81](https://github.com/openshift/azure-file-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/33d52ecd52b09ba3ab431ce2e2850262a88c2282...15e6f80ec4be826cd5d03ef4126be0dd171b506e)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/247aeae8c7fc836d6b7173dc8d07859df5c2ba38)

* [OCPBUGS-67580](https://issues.redhat.com/browse/OCPBUGS-67580): Bump github.com/sirupsen/logrus to v1.8.3 [#115](https://github.com/openshift/azure-file-csi-driver-operator/pull/115)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/70e0530255150e513061730f7624c9c235ee7c38...247aeae8c7fc836d6b7173dc8d07859df5c2ba38)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/dcdd193c28b1ae9d124a639bf7e806b70275b416)

* [OCPBUGS-78265](https://issues.redhat.com/browse/OCPBUGS-78265): hermetic 4.13 [#187](https://github.com/openshift/machine-api-provider-azure/pull/187)
* [OCPBUGS-29906](https://issues.redhat.com/browse/OCPBUGS-29906): Don't create availability set when using spot instances [#104](https://github.com/openshift/machine-api-provider-azure/pull/104)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#89](https://github.com/openshift/machine-api-provider-azure/pull/89)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/ad252de98940d6eb2c3547d39391b9d00e8463d1...dcdd193c28b1ae9d124a639bf7e806b70275b416)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b3d2f7b8834666c220b88f7aee46ec9160274bcc)

* [OCPBUGS-81578](https://issues.redhat.com/browse/OCPBUGS-81578): Azure UPI ARM template: use storageAccountId [#10454](https://github.com/openshift/installer/pull/10454)
* [OCPBUGS-76931](https://issues.redhat.com/browse/OCPBUGS-76931): terraform/provider/google: Fixing inconsistencies with the service account creation [#10384](https://github.com/openshift/installer/pull/10384)
* [OCPBUGS-66232](https://issues.redhat.com/browse/OCPBUGS-66232): Replace terraform-provider-google with Openshift fork [#10141](https://github.com/openshift/installer/pull/10141)
* [OCPBUGS-62848](https://issues.redhat.com/browse/OCPBUGS-62848): Release 4.13 bump terraform provider azurerm [#10006](https://github.com/openshift/installer/pull/10006)
* [OCPBUGS-55034](https://issues.redhat.com/browse/OCPBUGS-55034): IBMCloud: Move to IBM TF openshift fork [#9668](https://github.com/openshift/installer/pull/9668)
* [OCPBUGS-39217](https://issues.redhat.com/browse/OCPBUGS-39217): Add yq v4 to ci image [#8922](https://github.com/openshift/installer/pull/8922)
* [OCPBUGS-36088](https://issues.redhat.com/browse/OCPBUGS-36088): [release-4.13]: bump go-retryablehttp for CVE fix [#8659](https://github.com/openshift/installer/pull/8659)
* [OCPBUGS-29124](https://issues.redhat.com/browse/OCPBUGS-29124): IBMCloud: Handle disk delete errors [#7989](https://github.com/openshift/installer/pull/7989)
* [OCPBUGS-37168](https://issues.redhat.com/browse/OCPBUGS-37168): Add yq-v4 to the upi-installer image for CI [#8743](https://github.com/openshift/installer/pull/8743)
* [OCPBUGS-35976](https://issues.redhat.com/browse/OCPBUGS-35976): [release-4.13] bump github.com/containers/image for CVE fix [#8651](https://github.com/openshift/installer/pull/8651)
* [OCPBUGS-33732](https://issues.redhat.com/browse/OCPBUGS-33732): preserve category name when trying to find tag category [#8419](https://github.com/openshift/installer/pull/8419)
* [OCPBUGS-33062](https://issues.redhat.com/browse/OCPBUGS-33062): openstack: Honour worker server group policy [#8323](https://github.com/openshift/installer/pull/8323)
* [OCPBUGS-32359](https://issues.redhat.com/browse/OCPBUGS-32359): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8284](https://github.com/openshift/installer/pull/8284)
* [OCPBUGS-22979](https://issues.redhat.com/browse/OCPBUGS-22979): IBMCloud: Add eu-es region [#7685](https://github.com/openshift/installer/pull/7685)
* [OCPBUGS-30629](https://issues.redhat.com/browse/OCPBUGS-30629): baremetal: populate customDeploy in advance [#8129](https://github.com/openshift/installer/pull/8129)
* [OCPBUGS-29627](https://issues.redhat.com/browse/OCPBUGS-29627): update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 [#8038](https://github.com/openshift/installer/pull/8038)
* [OCPBUGS-30000](https://issues.redhat.com/browse/OCPBUGS-30000): [release-4.13] Bump containerd for vulnerability fix [#8073](https://github.com/openshift/installer/pull/8073)
* [OCPBUGS-28654](https://issues.redhat.com/browse/OCPBUGS-28654): Fix depreciated typo [#7963](https://github.com/openshift/installer/pull/7963)
* [OCPBUGS-27453](https://issues.redhat.com/browse/OCPBUGS-27453): baremetal: correct external_http_url for v6-only BMCs [#7934](https://github.com/openshift/installer/pull/7934)
* [OCPBUGS-23499](https://issues.redhat.com/browse/OCPBUGS-23499): update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 [#7920](https://github.com/openshift/installer/pull/7920)
* [OCPBUGS-25420](https://issues.redhat.com/browse/OCPBUGS-25420): destroy: gcp: fix destroying regional disks [#7840](https://github.com/openshift/installer/pull/7840)
* [Full changelog](https://github.com/openshift/installer/compare/293f6a2fd4b7e8039f8163354409683ba7a072e2...b3d2f7b8834666c220b88f7aee46ec9160274bcc)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ec65cd2e98d30b9449d45eccdb2b17d030d83bdc)

* [OCPBUGS-78102](https://issues.redhat.com/browse/OCPBUGS-78102): [release-4.13] fix vendor/ for hermetic migration [#246](https://github.com/openshift/cluster-api-provider-baremetal/pull/246)
* [OCPBUGS-46640](https://issues.redhat.com/browse/OCPBUGS-46640): Bump x/net 0.33.0 [#229](https://github.com/openshift/cluster-api-provider-baremetal/pull/229)
* [OCPBUGS-29822](https://issues.redhat.com/browse/OCPBUGS-29822): Extend metal3remediation aggregation role [#212](https://github.com/openshift/cluster-api-provider-baremetal/pull/212)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/e9877cef729ea81e8f8e7ab233c2f3ec8d70db09...ec65cd2e98d30b9449d45eccdb2b17d030d83bdc)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3f56e498ce77b472070c804fca0522eb234ed99f)

* [OCPBUGS-53334](https://issues.redhat.com/browse/OCPBUGS-53334): BMO can expose any secret via BMCEventSubscription CRD 4.13 [#411](https://github.com/openshift/baremetal-operator/pull/411)
* [OCPBUGS-30629](https://issues.redhat.com/browse/OCPBUGS-30629): Do not update instance_info and deploy_interface for active nodes [#337](https://github.com/openshift/baremetal-operator/pull/337)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/ecd17336cec93d3e7046a5211a0d569a8899119d...3f56e498ce77b472070c804fca0522eb234ed99f)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1280cf541c220af73b9886379dad2dfa4921f73b)

* [OCPBUGS-26929](https://issues.redhat.com/browse/OCPBUGS-26929): Add .snyk file to ignore vendor and test files [#295](https://github.com/openshift/baremetal-runtimecfg/pull/295)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9ec12d4d61545bc27481f86aecfec99367996910...1280cf541c220af73b9886379dad2dfa4921f73b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d192e901ece237d9ae1580d73e78f423ec2ef322)

* [OCPBUGS-30288](https://issues.redhat.com/browse/OCPBUGS-30288): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1700](https://github.com/openshift/oc/pull/1700)
* [OCPBUGS-25418](https://issues.redhat.com/browse/OCPBUGS-25418): Add client version in must-gather summary [#1635](https://github.com/openshift/oc/pull/1635)
* [OCPBUGS-24461](https://issues.redhat.com/browse/OCPBUGS-24461): Overwrite template's namespace with the explicit one [#1617](https://github.com/openshift/oc/pull/1617)
* [Full changelog](https://github.com/openshift/oc/compare/c7c6eb21da5c5b9f813ea09a21aa3e7226206993...d192e901ece237d9ae1580d73e78f423ec2ef322)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/134ade41c3293d81d0966e4d4644d18f0e7368e6)

* [OCPBUGS-53419](https://issues.redhat.com/browse/OCPBUGS-53419): github.com/golang/glog v1.2.4 [#846](https://github.com/openshift/cloud-credential-operator/pull/846)
* [OCPBUGS-51546](https://issues.redhat.com/browse/OCPBUGS-51546): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#831](https://github.com/openshift/cloud-credential-operator/pull/831)
* [OCPBUGS-43340](https://issues.redhat.com/browse/OCPBUGS-43340): Update github.com/sirupsen/logrus v1.8.3 [#770](https://github.com/openshift/cloud-credential-operator/pull/770)
* [OCPBUGS-37834](https://issues.redhat.com/browse/OCPBUGS-37834): Resolve SNYK errors in security job. [#743](https://github.com/openshift/cloud-credential-operator/pull/743)
* [OCPBUGS-37421](https://issues.redhat.com/browse/OCPBUGS-37421): SNYK ignore go-client misreporting [#740](https://github.com/openshift/cloud-credential-operator/pull/740)
* [OCPBUGS-36028](https://issues.redhat.com/browse/OCPBUGS-36028): IBM/go-sdk-core update to v5.17.4 [#722](https://github.com/openshift/cloud-credential-operator/pull/722)
* [OCPBUGS-32898](https://issues.redhat.com/browse/OCPBUGS-32898): Upgrade go-jose module to 2.6.3 [#698](https://github.com/openshift/cloud-credential-operator/pull/698)
* [OCPBUGS-27912](https://issues.redhat.com/browse/OCPBUGS-27912): Resolve all outstanding snyk vulnerabilities [#651](https://github.com/openshift/cloud-credential-operator/pull/651)
* NO-JIRA: Removing andrew from OWNERS [#644](https://github.com/openshift/cloud-credential-operator/pull/644)
* [OCPBUGS-25369](https://issues.redhat.com/browse/OCPBUGS-25369): Discover AWS dns suffix from partition and region. [#640](https://github.com/openshift/cloud-credential-operator/pull/640)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ba9743ac48edfc24ddf247312987127643903687...134ade41c3293d81d0966e4d4644d18f0e7368e6)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d377281c10ab68ea3faf4775f015c1651004b0ff)

* [OCPBUGS-32180](https://issues.redhat.com/browse/OCPBUGS-32180): Avoid nil pointer panic while assigning private IP on Azure [#139](https://github.com/openshift/cloud-network-config-controller/pull/139)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/78d453a5ca0f5e009d3a16e62f2e0e35c3ac5a9c...d377281c10ab68ea3faf4775f015c1651004b0ff)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1801056c175da7d1e8d5507fa4558564740c7f4d)

* [OCPBUGS-28760](https://issues.redhat.com/browse/OCPBUGS-28760): Fix http2 [4.13] [#654](https://github.com/openshift/cluster-authentication-operator/pull/654)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/2b2f67cf68ad52b362d51e4fcfc2f8aa98e4b929...1801056c175da7d1e8d5507fa4558564740c7f4d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/3ce55c7137713427df9f9fe163b1cb9c775290b6)

* [OCPBUGS-45151](https://issues.redhat.com/browse/OCPBUGS-45151): [release-4.13] VPA: Update OWNERS file [#328](https://github.com/openshift/kubernetes-autoscaler/pull/328)
* [OCPBUGS-40929](https://issues.redhat.com/browse/OCPBUGS-40929): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#317](https://github.com/openshift/kubernetes-autoscaler/pull/317)
* [OCPBUGS-31702](https://issues.redhat.com/browse/OCPBUGS-31702): add check for taint.value == nil [#295](https://github.com/openshift/kubernetes-autoscaler/pull/295)
* [OCPBUGS-30874](https://issues.redhat.com/browse/OCPBUGS-30874): Fix unstructured taint parsing in Cluster API provider [#289](https://github.com/openshift/kubernetes-autoscaler/pull/289)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9462ec99846bc6d071ce32488c21fd90f383eceb...3ce55c7137713427df9f9fe163b1cb9c775290b6)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/0007e9081f1d7aecd652c0843815be4844f67453)

* [OCPBUGS-31992](https://issues.redhat.com/browse/OCPBUGS-31992): Update x/net to v0.25.0 [#324](https://github.com/openshift/cluster-autoscaler-operator/pull/324)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/ade6cfb16944db8e2151f921640041e0b2a403c3...0007e9081f1d7aecd652c0843815be4844f67453)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e62fbc906e9ebe245c220e912415d3dbbe2322cd)

* [OCPBUGS-77450](https://issues.redhat.com/browse/OCPBUGS-77450): Bump github.com/go-errors/errors to v1.5.1 [#565](https://github.com/openshift/cluster-baremetal-operator/pull/565)
* [OCPBUGS-31993](https://issues.redhat.com/browse/OCPBUGS-31993): bump x/net to 0.23.0 [#439](https://github.com/openshift/cluster-baremetal-operator/pull/439)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b5eb7b6c7b85dd8ef51fe138ec7e6b5392391c11...e62fbc906e9ebe245c220e912415d3dbbe2322cd)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/15159b38390ee3911f2c01c1903dff2d10cdf9ba)

* [OCPBUGS-77975](https://issues.redhat.com/browse/OCPBUGS-77975): fix vendor for hermetic [#266](https://github.com/openshift/cluster-api/pull/266)
* [Full changelog](https://github.com/openshift/cluster-api/compare/12f767b2bd5de1a2641962f5d86d8564333afc65...15159b38390ee3911f2c01c1903dff2d10cdf9ba)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/35f47274e9ed0a2a7332c2b95aa50c33fb182300)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#563](https://github.com/openshift/cluster-capi-operator/pull/563)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b247793dd364f280ad097f5266b4164740e43a44...35f47274e9ed0a2a7332c2b95aa50c33fb182300)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/38f638f020ff1e34d33fd44c42b0351912a74486)

* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update azure and ash tolerations on node manager [#353](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/353)
* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update unit tests [release-4.13] [#354](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/354)
* [OCPBUGS-21169](https://issues.redhat.com/browse/OCPBUGS-21169): Bump golang.org/x/net to v0.18.0 [#296](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ef4594ef3f4ca535aa1d34878b79184323ecf481...38f638f020ff1e34d33fd44c42b0351912a74486)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a6d56530c7156bef726005d640c3ded3565104ec)

* [OCPBUGS-28802](https://issues.redhat.com/browse/OCPBUGS-28802): Add required PSa labels [#404](https://github.com/openshift/cluster-config-operator/pull/404)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/71636fa1d9fba6b06c7d30f83180f58b9c9ccf1e...a6d56530c7156bef726005d640c3ded3565104ec)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c5fb62818751e8372d1febd631d9671d83f62962)

* [OCPBUGS-48259](https://issues.redhat.com/browse/OCPBUGS-48259): Add unreadyNodeGracePeriod for allowing brief node hiccups [#342](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/342)
* [OCPBUGS-35380](https://issues.redhat.com/browse/OCPBUGS-35380): Improved debugging of API listing errors [#304](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/304)
* [OCPBUGS-30156](https://issues.redhat.com/browse/OCPBUGS-30156): Never delete a Machine when there's a single Machine in an index [#286](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/3110ed81e74c7ca7335bb3af4ba40d521a92dcb1...c5fb62818751e8372d1febd631d9671d83f62962)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/c068540d9976ba0fd272e2848de9b0d31a2b7a17)

* [OCPBUGS-32334](https://issues.redhat.com/browse/OCPBUGS-32334): create suitable role and roleBinding for csi-snapshot-webhook [#206](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/206)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/544bc12e412d94153ef711cc0bb55eb40ab6d43e...c068540d9976ba0fd272e2848de9b0d31a2b7a17)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/65a8fdac5800978f535260997def3e58245f814b)

* [OCPBUGS-52501](https://issues.redhat.com/browse/OCPBUGS-52501): [release-4.13] Add runbook_url for CoreDNSErrorsHigh [#434](https://github.com/openshift/cluster-dns-operator/pull/434)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints iff nodes in >=2 zones [#418](https://github.com/openshift/cluster-dns-operator/pull/418)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Ignore max unavailable for status [#417](https://github.com/openshift/cluster-dns-operator/pull/417)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Set DNS DaemonSet's maxSurge value to 10% [#366](https://github.com/openshift/cluster-dns-operator/pull/366)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/807ae60ff7447adf83c8a12dc9491ab5f8a62764...65a8fdac5800978f535260997def3e58245f814b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/19e43e8d9e904076f69dc2cd71220fee69f502ac)

* [OCPBUGS-67597](https://issues.redhat.com/browse/OCPBUGS-67597): Update logrus to 1.9.3 to address CVE-2025-65637 [#1549](https://github.com/openshift/cluster-etcd-operator/pull/1549)
* [OCPBUGS-53509](https://issues.redhat.com/browse/OCPBUGS-53509): fix CVE-2025-30204 [#1415](https://github.com/openshift/cluster-etcd-operator/pull/1415)
* [OCPBUGS-35077](https://issues.redhat.com/browse/OCPBUGS-35077): return errors in wait-for-ceo [#1273](https://github.com/openshift/cluster-etcd-operator/pull/1273)
* [OCPBUGS-31988](https://issues.redhat.com/browse/OCPBUGS-31988): update golang x net [#1255](https://github.com/openshift/cluster-etcd-operator/pull/1255)
* [OCPBUGS-30248](https://issues.redhat.com/browse/OCPBUGS-30248): fix panic in health check timeouts [#1217](https://github.com/openshift/cluster-etcd-operator/pull/1217)
* [OCPBUGS-30245](https://issues.redhat.com/browse/OCPBUGS-30245): [4.13] Replace nodelister with master nodelister everywhere [#1216](https://github.com/openshift/cluster-etcd-operator/pull/1216)
* [OCPBUGS-23572](https://issues.redhat.com/browse/OCPBUGS-23572): Add annotation in the etcd-guard static pod for worklo… [#1163](https://github.com/openshift/cluster-etcd-operator/pull/1163)
* [OCPBUGS-23106](https://issues.redhat.com/browse/OCPBUGS-23106): [4.13] Remove z-upgrades from UpgradeBackupController [#1154](https://github.com/openshift/cluster-etcd-operator/pull/1154)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ce04767c3c445d8a144e4dcde5310e8cf67e4c82...19e43e8d9e904076f69dc2cd71220fee69f502ac)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c3ad421ea822cb625321ea3a2a8e589f0d053fe2)

* [OCPBUGS-67598](https://issues.redhat.com/browse/OCPBUGS-67598): Bump logrus to 1.8.3 [#1291](https://github.com/openshift/cluster-image-registry-operator/pull/1291)
* [OCPBUGS-53869](https://issues.redhat.com/browse/OCPBUGS-53869): Bump github.com/golang-jwt/jwt [#1235](https://github.com/openshift/cluster-image-registry-operator/pull/1235)
* [OCPBUGS-51602](https://issues.redhat.com/browse/OCPBUGS-51602): bump golang.org/x/oauth2 [#1222](https://github.com/openshift/cluster-image-registry-operator/pull/1222)
* [OCPBUGS-36034](https://issues.redhat.com/browse/OCPBUGS-36034): go.*,vendor: bump go-retryablehttp [#1070](https://github.com/openshift/cluster-image-registry-operator/pull/1070)
* [OCPBUGS-29935](https://issues.redhat.com/browse/OCPBUGS-29935): pkg/storage/s3: enable bucket key on encryption settings [#1007](https://github.com/openshift/cluster-image-registry-operator/pull/1007)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e71b854303e698a0ec88afb91222d106208dbfef...c3ad421ea822cb625321ea3a2a8e589f0d053fe2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a45f7a3a44ead85d2e36a57723fc05fc0919c63e)

* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1161](https://github.com/openshift/cluster-ingress-operator/pull/1161)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add e2e test for duplicate Transfer-Encoding headers [#1150](https://github.com/openshift/cluster-ingress-operator/pull/1150)
* [OCPBUGS-36551](https://issues.redhat.com/browse/OCPBUGS-36551): Add Regexp Anchor to TestAll [#1104](https://github.com/openshift/cluster-ingress-operator/pull/1104)
* [OCPBUGS-35453](https://issues.redhat.com/browse/OCPBUGS-35453): [release-4.13] internal service changed fix target port logic [#1089](https://github.com/openshift/cluster-ingress-operator/pull/1089)
* [OCPBUGS-35094](https://issues.redhat.com/browse/OCPBUGS-35094): TestHostNetworkPortBinding: Delete t.Parallel() [#1082](https://github.com/openshift/cluster-ingress-operator/pull/1082)
* [OCPBUGS-34765](https://issues.redhat.com/browse/OCPBUGS-34765): Don't add clientca-configmap finalizer if deleting [#1073](https://github.com/openshift/cluster-ingress-operator/pull/1073)
* [OCPBUGS-34409](https://issues.redhat.com/browse/OCPBUGS-34409): desiredRouterDeployment: Set HostPort if needed [#1062](https://github.com/openshift/cluster-ingress-operator/pull/1062)
* [OCPBUGS-33990](https://issues.redhat.com/browse/OCPBUGS-33990): Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] [#1055](https://github.com/openshift/cluster-ingress-operator/pull/1055)
* [OCPBUGS-34476](https://issues.redhat.com/browse/OCPBUGS-34476): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1065](https://github.com/openshift/cluster-ingress-operator/pull/1065)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5379ce1cb9305d89e0349a3e80fac8801c72eb42...a45f7a3a44ead85d2e36a57723fc05fc0919c63e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/c0d6807816ddb7adcda71e8b1fbe72ee12e7a97a)

* [OCPBUGS-67602](https://issues.redhat.com/browse/OCPBUGS-67602): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.13.z] [#2047](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2047)
* [OCPBUGS-50850](https://issues.redhat.com/browse/OCPBUGS-50850): Increase waitForFallbackDegradedConditionTimeout [#1809](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1809)
* [OCPBUGS-34062](https://issues.redhat.com/browse/OCPBUGS-34062): [4.13] add a controller that reconciles SCCs' volumes [#1677](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1677)
* [OCPBUGS-25922](https://issues.redhat.com/browse/OCPBUGS-25922): [release-4.13] dashboard: use recording rules for most metrics [#1611](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1611)
* : OCPBUGS-24023: Add workload partitioning annotation [#1591](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1591)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2b2d2d899781939ee57b1d26e59fef606d8603ed...c0d6807816ddb7adcda71e8b1fbe72ee12e7a97a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/dac7113696160d1170d9b3773afa4a4b7cb2099b)

* [OCPBUGS-27066](https://issues.redhat.com/browse/OCPBUGS-27066): bump(library-go)=release-4.13 [#788](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/788)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/a3bdb9e9f51fb91895b70fd7c77830ba4d75822b...dac7113696160d1170d9b3773afa4a4b7cb2099b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/74c941a79efaf8a9401adde2174f3bdd9260ca94)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#627](https://github.com/openshift/cluster-kube-scheduler-operator/pull/627)
* [OCPBUGS-27065](https://issues.redhat.com/browse/OCPBUGS-27065): bump(library-go)=release-4.13 [#528](https://github.com/openshift/cluster-kube-scheduler-operator/pull/528)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/60e35d65863edfecd97ba0d57fc4fc21c4a20cfa...74c941a79efaf8a9401adde2174f3bdd9260ca94)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a580054caf85de76e8d764d1c989f4ca9464e919)

* [OCPBUGS-67607](https://issues.redhat.com/browse/OCPBUGS-67607): Bump github.com/sirupsen/logrus to v1.8.3 [#142](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/142)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/721de5d64083b17c22f6b784bb2c78af39d7b3b0...a580054caf85de76e8d764d1c989f4ca9464e919)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/314cde5b6949090062c318894b22ed2eb96acd65)

* [OCPBUGS-76488](https://issues.redhat.com/browse/OCPBUGS-76488): test: remove image registry e2e tests [#2813](https://github.com/openshift/cluster-monitoring-operator/pull/2813)
* [OCPBUGS-33581](https://issues.redhat.com/browse/OCPBUGS-33581): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2344](https://github.com/openshift/cluster-monitoring-operator/pull/2344)
* [OCPBUGS-28767](https://issues.redhat.com/browse/OCPBUGS-28767): fix generation of telemeter token hash [#2305](https://github.com/openshift/cluster-monitoring-operator/pull/2305)
* [OCPBUGS-25388](https://issues.redhat.com/browse/OCPBUGS-25388): Add RHACM telemetry metric for 4.13 [#2203](https://github.com/openshift/cluster-monitoring-operator/pull/2203)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/53be0ba56cf3b4a1aaea437a57219e107da180c7...314cde5b6949090062c318894b22ed2eb96acd65)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bc45a4d1dad2656dbf44f5143679f8795ebf3986)

* [OCPBUGS-78106](https://issues.redhat.com/browse/OCPBUGS-78106): fix vendor for hermetic 4.13 [#2914](https://github.com/openshift/cluster-network-operator/pull/2914)
* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2547](https://github.com/openshift/cluster-network-operator/pull/2547)
* [OCPBUGS-38403](https://issues.redhat.com/browse/OCPBUGS-38403): Add missing runbook for OVNKubernetesNorthdInactive [#2471](https://github.com/openshift/cluster-network-operator/pull/2471)
* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941): update whereabouts crd [#2458](https://github.com/openshift/cluster-network-operator/pull/2458)
* [OCPBUGS-30150](https://issues.redhat.com/browse/OCPBUGS-30150): ipsec: fix openssl typo [#2290](https://github.com/openshift/cluster-network-operator/pull/2290)
* [OCPBUGS-29674](https://issues.redhat.com/browse/OCPBUGS-29674): add env var in whereabouts-reconciler daemonset [#2279](https://github.com/openshift/cluster-network-operator/pull/2279)
* [OCPBUGS-29301](https://issues.redhat.com/browse/OCPBUGS-29301): Update ingressconfig_controller to use field Manager [#2267](https://github.com/openshift/cluster-network-operator/pull/2267)
* [OCPBUGS-28208](https://issues.redhat.com/browse/OCPBUGS-28208): ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) [#2222](https://github.com/openshift/cluster-network-operator/pull/2222)
* [OCPBUGS-28777](https://issues.redhat.com/browse/OCPBUGS-28777): fix whereabouts conformance test failures [#2241](https://github.com/openshift/cluster-network-operator/pull/2241)
* [OCPBUGS-27958](https://issues.redhat.com/browse/OCPBUGS-27958): Add ConfigMap mount to the whereabouts-reconciler DaemonSet [#2220](https://github.com/openshift/cluster-network-operator/pull/2220)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 [#2229](https://github.com/openshift/cluster-network-operator/pull/2229)
* [OCPBUGS-22293](https://issues.redhat.com/browse/OCPBUGS-22293): remove all managed fields used by old manager [#2094](https://github.com/openshift/cluster-network-operator/pull/2094)
* [OCPBUGS-24570](https://issues.redhat.com/browse/OCPBUGS-24570): Disable weak SSH cipher suitesRm weak ciphers 4.13 [#2163](https://github.com/openshift/cluster-network-operator/pull/2163)
* [OCPBUGS-21716](https://issues.redhat.com/browse/OCPBUGS-21716): Bump golang.org/x/net and github.com/openshift/library-go [#2123](https://github.com/openshift/cluster-network-operator/pull/2123)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): run update-codegen after adding maxLogFiles cfg [#2162](https://github.com/openshift/cluster-network-operator/pull/2162)
* [OCPBUGS-22971](https://issues.redhat.com/browse/OCPBUGS-22971): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#2098](https://github.com/openshift/cluster-network-operator/pull/2098)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): Remove oldest ovn acl log files when file limit exceeded [#2097](https://github.com/openshift/cluster-network-operator/pull/2097)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/edd0db7b72dc95b9c6df786eb9f0f6682195bee6...bc45a4d1dad2656dbf44f5143679f8795ebf3986)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/978a6c56e163f119f757d7116fa99d6b05f7d7f5)

* E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) [#1069](https://github.com/openshift/cluster-node-tuning-operator/pull/1069)
* [OCPBUGS-33030](https://issues.redhat.com/browse/OCPBUGS-33030): [release-4.13][manual]Reduce number of reboots in offline tests (#1048) [#1048](https://github.com/openshift/cluster-node-tuning-operator/pull/1048)
* Scheduler plugin: ignore IRQs (#1027) [#1027](https://github.com/openshift/cluster-node-tuning-operator/pull/1027)
* irqbalance: set banned cpus list to 0 (#1003) [#1003](https://github.com/openshift/cluster-node-tuning-operator/pull/1003)
* [OCPBUGS-24353](https://issues.redhat.com/browse/OCPBUGS-24353): rps: cherry-picks of rps fixes (#865) [#865](https://github.com/openshift/cluster-node-tuning-operator/pull/865)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/05a417a71fb3ecccabe58ab98e139d245f619be1...978a6c56e163f119f757d7116fa99d6b05f7d7f5)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/f43d414da365c1bbe99f7bf2d4e7532d4c3bf5b2)

* [OCPBUGS-76595](https://issues.redhat.com/browse/OCPBUGS-76595): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] [#659](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/659)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9abb220ac11f370f323f2c248d3ee377394c88b8...f43d414da365c1bbe99f7bf2d4e7532d4c3bf5b2)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/6e7e7835519d30ea22e4c4954039bab21de19c80)

* [OCPBUGS-38455](https://issues.redhat.com/browse/OCPBUGS-38455): Update opentelemetry to mitigate CVE [#365](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d2818fb5a41defcf3af577fa4cb0a247700ce44a...6e7e7835519d30ea22e4c4954039bab21de19c80)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b3496c0c8eb3b44086413fea2d6d0f28080db637)

* [OCPBUGS-63520](https://issues.redhat.com/browse/OCPBUGS-63520): references to github.com/sclorg/django-ex.git now also refer to the branch [#662](https://github.com/openshift/cluster-samples-operator/pull/662)
* [OCPBUGS-54812](https://issues.redhat.com/browse/OCPBUGS-54812): add rhdmalone to owners [#628](https://github.com/openshift/cluster-samples-operator/pull/628)
* [OCPBUGS-49663](https://issues.redhat.com/browse/OCPBUGS-49663): add shannon and aroyoredhat as owners [#599](https://github.com/openshift/cluster-samples-operator/pull/599)
* [OCPBUGS-21198](https://issues.redhat.com/browse/OCPBUGS-21198): update k8s.io/apiserver version [#589](https://github.com/openshift/cluster-samples-operator/pull/589)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bcc08e9609e9c39d212857efd27d67753c64d91e...b3496c0c8eb3b44086413fea2d6d0f28080db637)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98cde3b2e47b0982c9e4ab9ec34930b0021beed3)

* [OCPBUGS-67622](https://issues.redhat.com/browse/OCPBUGS-67622): Bump logrus to v1.8.3 [#656](https://github.com/openshift/cluster-storage-operator/pull/656)
* [OCPBUGS-33468](https://issues.redhat.com/browse/OCPBUGS-33468): Fix problem-detector proxy setting [#473](https://github.com/openshift/cluster-storage-operator/pull/473)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/5cd56c344f5aae7ce53f1301115e247a1fd6fed5...98cde3b2e47b0982c9e4ab9ec34930b0021beed3)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/7033b4836e4c79a2237c66f31986396d98ac270b)

* NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.13 [#78](https://github.com/openshift/cluster-update-keys/pull/78)
* [OCPBUGS-43886](https://issues.redhat.com/browse/OCPBUGS-43886): keys: Update Red Hat keys to use SHA256 signatures [#67](https://github.com/openshift/cluster-update-keys/pull/67)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd...7033b4836e4c79a2237c66f31986396d98ac270b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)

* [OCPBUGS-45332](https://issues.redhat.com/browse/OCPBUGS-45332): deps: bump golang.org/x/net to 0.31.0 [#1121](https://github.com/openshift/cluster-version-operator/pull/1121)
* [OCPBUGS-27049](https://issues.redhat.com/browse/OCPBUGS-27049): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1019](https://github.com/openshift/cluster-version-operator/pull/1019)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7afedabe54dca68ac7189d493554f44f4c4f7ed1...8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)


### [console](https://github.com/openshift/console/tree/cd4672c65478b4ed5cde6307bbec718195594a87)

* [ART-18919](https://issues.redhat.com/browse/ART-18919): pin fsevents to latest [#16481](https://github.com/openshift/console/pull/16481)
* NO-JIRA: enable multi-architecture yarn builds [#16423](https://github.com/openshift/console/pull/16423)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16083](https://github.com/openshift/console/pull/16083)
* NO-JIRA: Bump builder image to v29 [#15989](https://github.com/openshift/console/pull/15989)
* [OCPBUGS-74437](https://issues.redhat.com/browse/OCPBUGS-74437): Bump lodash to latest [#15972](https://github.com/openshift/console/pull/15972)
* [OCPBUGS-44160](https://issues.redhat.com/browse/OCPBUGS-44160): bump dompurify to latest [#15594](https://github.com/openshift/console/pull/15594)
* [OCPBUGS-57100](https://issues.redhat.com/browse/OCPBUGS-57100): Add all files to `vendor` regardless of gitignore [#15136](https://github.com/openshift/console/pull/15136)
* [OCPBUGS-54892](https://issues.redhat.com/browse/OCPBUGS-54892): Show Observe section without PROMETHEUS and MONITORING flags [#14960](https://github.com/openshift/console/pull/14960)
* [OCPBUGS-45292](https://issues.redhat.com/browse/OCPBUGS-45292): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14573](https://github.com/openshift/console/pull/14573)
* [OCPBUGS-44356](https://issues.redhat.com/browse/OCPBUGS-44356): Application creation fail when manually entering input scaling value in local setup [#14509](https://github.com/openshift/console/pull/14509)
* [OCPBUGS-45197](https://issues.redhat.com/browse/OCPBUGS-45197): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#14552](https://github.com/openshift/console/pull/14552)
* [OCPBUGS-44585](https://issues.redhat.com/browse/OCPBUGS-44585): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14497](https://github.com/openshift/console/pull/14497)
* [OCPBUGS-36557](https://issues.redhat.com/browse/OCPBUGS-36557): Increase login flow state paramater length/entropy [#14483](https://github.com/openshift/console/pull/14483)
* [OCPBUGS-42951](https://issues.redhat.com/browse/OCPBUGS-42951): The filepath including leading slash makes error during parsing devfile using Gitlab [#14383](https://github.com/openshift/console/pull/14383)
* [OCPBUGS-41594](https://issues.redhat.com/browse/OCPBUGS-41594): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14263](https://github.com/openshift/console/pull/14263)
* [OCPBUGS-35259](https://issues.redhat.com/browse/OCPBUGS-35259): fix vCenter cluster being empty [#13952](https://github.com/openshift/console/pull/13952)
* [OCPBUGS-32147](https://issues.redhat.com/browse/OCPBUGS-32147): Bump graphql-go to v1.3.0 [#13922](https://github.com/openshift/console/pull/13922)
* [OCPBUGS-33978](https://issues.redhat.com/browse/OCPBUGS-33978): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13872](https://github.com/openshift/console/pull/13872)
* [OCPBUGS-34342](https://issues.redhat.com/browse/OCPBUGS-34342): Fix PipelineRun Logs tab navigation [#13890](https://github.com/openshift/console/pull/13890)
* [OCPBUGS-24395](https://issues.redhat.com/browse/OCPBUGS-24395): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13405](https://github.com/openshift/console/pull/13405)
* [OCPBUGS-33777](https://issues.redhat.com/browse/OCPBUGS-33777): restrict Masthead logo to max-height to 60px [#13860](https://github.com/openshift/console/pull/13860)
* [OCPBUGS-33749](https://issues.redhat.com/browse/OCPBUGS-33749): Add visual connector between VMs and non VMs workloads [#13857](https://github.com/openshift/console/pull/13857)
* [OCPBUGS-33382](https://issues.redhat.com/browse/OCPBUGS-33382): Routes created by devfiles do not always use HTTPS [#13827](https://github.com/openshift/console/pull/13827)
* [OCPBUGS-33650](https://issues.redhat.com/browse/OCPBUGS-33650): fix issues with Edit Route form [#13851](https://github.com/openshift/console/pull/13851)
* [OCPBUGS-32500](https://issues.redhat.com/browse/OCPBUGS-32500): PipelineRuns in Console show wrong status or load indefinitely [#13780](https://github.com/openshift/console/pull/13780)
* [OCPBUGS-31077](https://issues.redhat.com/browse/OCPBUGS-31077): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13683](https://github.com/openshift/console/pull/13683)
* [OCPBUGS-31595](https://issues.redhat.com/browse/OCPBUGS-31595): Fix operands list endpoint. [#13714](https://github.com/openshift/console/pull/13714)
* [OCPBUGS-29063](https://issues.redhat.com/browse/OCPBUGS-29063): add additional check to determine if file is binary [#13579](https://github.com/openshift/console/pull/13579)
* [OCPBUGS-28788](https://issues.redhat.com/browse/OCPBUGS-28788): Copy response code from proxied plugin requests [#13561](https://github.com/openshift/console/pull/13561)
* [OCPBUGS-29243](https://issues.redhat.com/browse/OCPBUGS-29243): Add a new allowInsecure option to the internet proxy [#13593](https://github.com/openshift/console/pull/13593)
* [OCPBUGS-27406](https://issues.redhat.com/browse/OCPBUGS-27406): Add Pipeline metrics tab using plugin [#13525](https://github.com/openshift/console/pull/13525)
* [OCPBUGS-23483](https://issues.redhat.com/browse/OCPBUGS-23483): add access to create, edit and delete silences for developer user from developer perspective [#13349](https://github.com/openshift/console/pull/13349)
* [OCPBUGS-25427](https://issues.redhat.com/browse/OCPBUGS-25427): Fix plugin proxy handler [#13449](https://github.com/openshift/console/pull/13449)
* [OCPBUGS-25465](https://issues.redhat.com/browse/OCPBUGS-25465): fix runtime error on Node details Overview when Machin… [#13452](https://github.com/openshift/console/pull/13452)
* [OCPBUGS-25146](https://issues.redhat.com/browse/OCPBUGS-25146): add access review for impersonate [#13437](https://github.com/openshift/console/pull/13437)
* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#13424](https://github.com/openshift/console/pull/13424)
* [OCPBUGS-22241](https://issues.redhat.com/browse/OCPBUGS-22241): Save also the location.search and .hash values in localStorage to restore them after login [#13271](https://github.com/openshift/console/pull/13271)
* [Full changelog](https://github.com/openshift/console/compare/c1c701088a46a767bae7a26ca5f0adc729f53863...cd4672c65478b4ed5cde6307bbec718195594a87)


### [console-operator](https://github.com/openshift/console-operator/tree/4056ea6e34adfac540eaef4ca04fbd18518dc0ca)

* [OCPBUGS-77995](https://issues.redhat.com/browse/OCPBUGS-77995): [release-4.13] NO-JIRA: update go mod dependency for konflux [#1118](https://github.com/openshift/console-operator/pull/1118)
* [OCPBUGS-18674](https://issues.redhat.com/browse/OCPBUGS-18674): Reset console operator's conditions [#894](https://github.com/openshift/console-operator/pull/894)
* [OCPBUGS-30599](https://issues.redhat.com/browse/OCPBUGS-30599): Disable HTTP/2 for webhook [#875](https://github.com/openshift/console-operator/pull/875)
* [OCPBUGS-21008](https://issues.redhat.com/browse/OCPBUGS-21008): [release-4.13] Bump library-go and golang.org/x/net [#866](https://github.com/openshift/console-operator/pull/866)
* [OCPBUGS-6208](https://issues.redhat.com/browse/OCPBUGS-6208): Updating openshift-enterprise-console-operator images to be consistent with ART [#872](https://github.com/openshift/console-operator/pull/872)
* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#821](https://github.com/openshift/console-operator/pull/821)
* [Full changelog](https://github.com/openshift/console-operator/compare/769384609d8b44b395f33262720ff7496430d2e5...4056ea6e34adfac540eaef4ca04fbd18518dc0ca)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/3086cf651514b87cc891b3dfbb65a645bd0b100e)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Fix Hermeto build issues [#197](https://github.com/openshift/containernetworking-plugins/pull/197)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/614ca3c35e1847f38f0f427c04a064cd31ac5002...3086cf651514b87cc891b3dfbb65a645bd0b100e)


### [coredns](https://github.com/openshift/coredns/tree/d3037cb9c6c13078d0ea2a7c6e7a4b6c21b29362)

* [OCPBUGS-60804](https://issues.redhat.com/browse/OCPBUGS-60804): Bump github.com/golang/glog to v1.2.4 [#150](https://github.com/openshift/coredns/pull/150)
* [OCPBUGS-38431](https://issues.redhat.com/browse/OCPBUGS-38431): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#129](https://github.com/openshift/coredns/pull/129)
* [OCPBUGS-28205](https://issues.redhat.com/browse/OCPBUGS-28205): UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 [#113](https://github.com/openshift/coredns/pull/113)
* [Full changelog](https://github.com/openshift/coredns/compare/ad0cf541c700ca53e9d638072354d22df68e60c8...d3037cb9c6c13078d0ea2a7c6e7a4b6c21b29362)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/4c6a3cde5cf2bfed360f9eaf629547e16f5ab47a)

* [OCPBUGS-67628](https://issues.redhat.com/browse/OCPBUGS-67628): fix CVE-2025-65637 [#364](https://github.com/openshift/cloud-provider-openstack/pull/364)
* [OCPBUGS-58888](https://issues.redhat.com/browse/OCPBUGS-58888): CARRY: don't ignore json files [#344](https://github.com/openshift/cloud-provider-openstack/pull/344)
* [OCPBUGS-52414](https://issues.redhat.com/browse/OCPBUGS-52414): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 [#313](https://github.com/openshift/cloud-provider-openstack/pull/313)
* And 9 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/ba9bdea95488a290eba993fe15d654d133e86f50...4c6a3cde5cf2bfed360f9eaf629547e16f5ab47a)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/67883f057e0db4d591e350734c06cd9421adcd47)

* [OCPBUGS-67629](https://issues.redhat.com/browse/OCPBUGS-67629): Bump logrus [#254](https://github.com/openshift/csi-driver-manila-operator/pull/254)
* [OCPBUGS-26224](https://issues.redhat.com/browse/OCPBUGS-26224): Fix selector for manila-csi-driver-controller-metrics service [#224](https://github.com/openshift/csi-driver-manila-operator/pull/224)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/b1295cd1a5978faa503c199d59d129e3ecfe2aeb...67883f057e0db4d591e350734c06cd9421adcd47)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/61772d79c8c6b41c4bd0c8f972a20357cf427850)

* [OCPBUGS-84928](https://issues.redhat.com/browse/OCPBUGS-84928): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#185](https://github.com/openshift/csi-driver-nfs/pull/185)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/2b914c2161722ebf11f9275fa29e00a0b1306da1...61772d79c8c6b41c4bd0c8f972a20357cf427850)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/01bbb23b627835354f6177b4b44cfc50bd6d9a2e)

* [OCPBUGS-28953](https://issues.redhat.com/browse/OCPBUGS-28953): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#168](https://github.com/openshift/csi-driver-shared-resource/pull/168)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d1900f9fd234753f73cd9c720e1f98825edb6d51...01bbb23b627835354f6177b4b44cfc50bd6d9a2e)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/bc169d2d8d1cd128770d2202c6cc00e5328e4e73)

* [OCPBUGS-28958](https://issues.redhat.com/browse/OCPBUGS-28958): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#104](https://github.com/openshift/csi-driver-shared-resource-operator/pull/104)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/1dc475bba65ceda2c317543cca13d60c59db93c1...bc169d2d8d1cd128770d2202c6cc00e5328e4e73)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/c8a7a097f68b37ad06a87a4b5c480daeab45be85)

* [OCPBUGS-29728](https://issues.redhat.com/browse/OCPBUGS-29728): cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#141](https://github.com/openshift/csi-external-snapshotter/pull/141)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/5ce4b5cac86efa3a45d5056c0a95004373cabb7b...c8a7a097f68b37ad06a87a4b5c480daeab45be85)


### [docker-builder](https://github.com/openshift/builder/tree/b379980d6f626dc45a91f0a715bc94e75fb4b309)

* [OCPBUGS-43295](https://issues.redhat.com/browse/OCPBUGS-43295): Buildah dependency bump to 1.29.5 [#460](https://github.com/openshift/builder/pull/460)
* [OCPBUGS-43191](https://issues.redhat.com/browse/OCPBUGS-43191): runc library bump to 1.1.12 [#439](https://github.com/openshift/builder/pull/439)
* [OCPBUGS-48836](https://issues.redhat.com/browse/OCPBUGS-48836): skipping some unit tests to avoid failures as they are duplicate [#434](https://github.com/openshift/builder/pull/434)
* [OCPBUGS-48655](https://issues.redhat.com/browse/OCPBUGS-48655): Add new team members to the OWNERS file [#431](https://github.com/openshift/builder/pull/431)
* Replace 'coreydaley' with 'sayan-biswas' [#407](https://github.com/openshift/builder/pull/407)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#405](https://github.com/openshift/builder/pull/405)
* [Full changelog](https://github.com/openshift/builder/compare/0155fb1876cd809c97b46dff0660931046ab6076...b379980d6f626dc45a91f0a715bc94e75fb4b309)


### [docker-registry](https://github.com/openshift/image-registry/tree/d00c2694d7ccfe28536fad6ac9b9dd3967d01107)

* [OCPBUGS-53653](https://issues.redhat.com/browse/OCPBUGS-53653): bump jwt and oauth dependencies [#436](https://github.com/openshift/image-registry/pull/436)
* [Full changelog](https://github.com/openshift/image-registry/compare/47a15ac8b7233bb1de44c1364bbd787de2edaaf0...d00c2694d7ccfe28536fad6ac9b9dd3967d01107)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/dfe03737f1562e81aa09101e4a48f039245bd339)

* [OCPBUGS-11648](https://issues.redhat.com/browse/OCPBUGS-11648): update go-yaml to v2.4.0 [#68](https://github.com/openshift/egress-router-cni/pull/68)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/756e38455b8e08a34510e188673c77503dca3ff1...dfe03737f1562e81aa09101e4a48f039245bd339)


### [etcd](https://github.com/openshift/etcd/tree/a6b7ad436ea8139436c6e9a456fdacd09ec7f054)

* [OCPBUGS-32920](https://issues.redhat.com/browse/OCPBUGS-32920): Revert "Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… [#266](https://github.com/openshift/etcd/pull/266)
* [OCPBUGS-31653](https://issues.redhat.com/browse/OCPBUGS-31653): Rebase etcd 3.5.13 openshift 4.13 [#262](https://github.com/openshift/etcd/pull/262)
* [ETCD-537](https://issues.redhat.com/browse/ETCD-537): Revert "bump build root go1.20" [#263](https://github.com/openshift/etcd/pull/263)
* [OCPBUGS-28734](https://issues.redhat.com/browse/OCPBUGS-28734): Rebase etcd 3.5.12 openshift 4.13 [#245](https://github.com/openshift/etcd/pull/245)
* [ETCD-537](https://issues.redhat.com/browse/ETCD-537): bump build root go1.20 [#252](https://github.com/openshift/etcd/pull/252)
* [OCPBUGS-26925](https://issues.redhat.com/browse/OCPBUGS-26925): Rebase etcd 3.5.11 openshift 4.13 [#239](https://github.com/openshift/etcd/pull/239)
* [Full changelog](https://github.com/openshift/etcd/compare/2cb8285c65c7d0bec6ad2fdf0ec420661deea463...a6b7ad436ea8139436c6e9a456fdacd09ec7f054)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/47ec07a8b42dd7b40f354b395affeb3e16133b5e)

* [OCPBUGS-78283](https://issues.redhat.com/browse/OCPBUGS-78283): [release-4.13] hermetic migration 4.13 [#279](https://github.com/openshift/cluster-api-provider-gcp/pull/279)
* [OCPBUGS-78283](https://issues.redhat.com/browse/OCPBUGS-78283): [release-4.13] hermetic migration 4.13 [#270](https://github.com/openshift/cluster-api-provider-gcp/pull/270)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/b8a2772574aacf16a998ff7c7ba24000eff60d07...47ec07a8b42dd7b40f354b395affeb3e16133b5e)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/3f55a6852f8d792688d4954891d3b4d05dd7ad0b)

* [OCPBUGS-78182](https://issues.redhat.com/browse/OCPBUGS-78182): hermetic 4.13 [#142](https://github.com/openshift/machine-api-provider-gcp/pull/142)
* [OCPBUGS-56916](https://issues.redhat.com/browse/OCPBUGS-56916): Disable shielded VMs for non-UEFI disks [#120](https://github.com/openshift/machine-api-provider-gcp/pull/120)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality. [#74](https://github.com/openshift/machine-api-provider-gcp/pull/74)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0eb63402e7e902250081c5befd6a1e045457bbc7...3f55a6852f8d792688d4954891d3b4d05dd7ad0b)


### [haproxy-router](https://github.com/openshift/router/tree/fdc493d11c2ae5382a504823c6faa48f3703f749)

* [OCPBUGS-78109](https://issues.redhat.com/browse/OCPBUGS-78109): [release-4.13] hermetic 4.13 [#743](https://github.com/openshift/router/pull/743)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): add duplicate_te_header_total metric [#626](https://github.com/openshift/router/pull/626)
* [OCPBUGS-34673](https://issues.redhat.com/browse/OCPBUGS-34673): Properly handle rewrite-target annotation [#608](https://github.com/openshift/router/pull/608)
* [OCPBUGS-33911](https://issues.redhat.com/browse/OCPBUGS-33911): Reject routes with MD5 certs [#600](https://github.com/openshift/router/pull/600)
* [OCPBUGS-33448](https://issues.redhat.com/browse/OCPBUGS-33448): Count active services before setting weight to 1 [#594](https://github.com/openshift/router/pull/594)
* [OCPBUGS-33280](https://issues.redhat.com/browse/OCPBUGS-33280): Route 'haproxy.router.openshift.io/timeout' value is not validated [#591](https://github.com/openshift/router/pull/591)
* [Full changelog](https://github.com/openshift/router/compare/431a6e667025931c68b4f747a224af29edf356f6...fdc493d11c2ae5382a504823c6faa48f3703f749)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/bbc7c0c199f92a78a858a36e78998abea5f36bef)

* [OCPBUGS-77660](https://issues.redhat.com/browse/OCPBUGS-77660): Skip E2e: attach on previously attached volumes should work [#2606](https://github.com/openshift/kubernetes/pull/2606)
* [OCPBUGS-67556](https://issues.redhat.com/browse/OCPBUGS-67556), [OCPBUGS-67652](https://issues.redhat.com/browse/OCPBUGS-67652): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.13] [#2626](https://github.com/openshift/kubernetes/pull/2626)
* [OCPBUGS-77800](https://issues.redhat.com/browse/OCPBUGS-77800): UPSTREAM: 133262: Remove permafailing tests using an expired GCP project [#2611](https://github.com/openshift/kubernetes/pull/2611)
* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): mount-utils: treat syscall.ENODEV as corrupted mount [#2083](https://github.com/openshift/kubernetes/pull/2083)
* [OCPBUGS-37280](https://issues.redhat.com/browse/OCPBUGS-37280): UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … [#2045](https://github.com/openshift/kubernetes/pull/2045)
* [OCPBUGS-28660](https://issues.redhat.com/browse/OCPBUGS-28660): UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1875](https://github.com/openshift/kubernetes/pull/1875)
* UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1938](https://github.com/openshift/kubernetes/pull/1938)
* [OCPBUGS-31505](https://issues.redhat.com/browse/OCPBUGS-31505): Update to kubernetes 1.26.15 [#1930](https://github.com/openshift/kubernetes/pull/1930)
* Address CVE [#14](https://github.com/openshift/kubernetes/pull/14)
* [OCPBUGS-29663](https://issues.redhat.com/browse/OCPBUGS-29663): Update to kubernetes 1.26.14 [#1889](https://github.com/openshift/kubernetes/pull/1889)
* [OCPBUGS-12210](https://issues.redhat.com/browse/OCPBUGS-12210): Prevent partially filled HPA behaviors from crashing kube-controller-manager [#1876](https://github.com/openshift/kubernetes/pull/1876)
* [OCPBUGS-27370](https://issues.redhat.com/browse/OCPBUGS-27370): Update to kubernetes 1.26.13 [#1859](https://github.com/openshift/kubernetes/pull/1859)
* [OCPBUGS-25814](https://issues.redhat.com/browse/OCPBUGS-25814): Fix device uncertain errors on reboot - 4.13 [#1831](https://github.com/openshift/kubernetes/pull/1831)
* [OCPBUGS-25988](https://issues.redhat.com/browse/OCPBUGS-25988): Update to kubernetes 1.26.12 [#1839](https://github.com/openshift/kubernetes/pull/1839)
* [OCPBUGS-25767](https://issues.redhat.com/browse/OCPBUGS-25767): legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber [#1834](https://github.com/openshift/kubernetes/pull/1834)
* [OCPBUGS-23521](https://issues.redhat.com/browse/OCPBUGS-23521): UPSTREAM: <carry>: support for both icsp and idms objects [#1798](https://github.com/openshift/kubernetes/pull/1798)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7dfc52ebbfbc0e2c063badfcf2df414880d058a7...bbc7c0c199f92a78a858a36e78998abea5f36bef)


### [hypershift](https://github.com/openshift/hypershift/tree/bc2d7cdad75b7c36aa5c19fa979ec965483185a0)

* [OCPBUGS-77756](https://issues.redhat.com/browse/OCPBUGS-77756): fix vendor for hermetic 4.13 [#7822](https://github.com/openshift/hypershift/pull/7822)
* [OCPBUGS-53901](https://issues.redhat.com/browse/OCPBUGS-53901): bump golang-jwt v4 [#5948](https://github.com/openshift/hypershift/pull/5948)
* [OCPBUGS-39184](https://issues.redhat.com/browse/OCPBUGS-39184): fix: bump github.com/IBM/go-sdk-core/v5 [#4627](https://github.com/openshift/hypershift/pull/4627)
* [OCPBUGS-41515](https://issues.redhat.com/browse/OCPBUGS-41515): set Konnectivity cipher suites [#4284](https://github.com/openshift/hypershift/pull/4284)
* NO-JIRA: hack: make the e2e script generic [#4202](https://github.com/openshift/hypershift/pull/4202)
* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#3296](https://github.com/openshift/hypershift/pull/3296)
* [Full changelog](https://github.com/openshift/hypershift/compare/24cdafdc5cdb5ea1ae0af219d5418ccb38b5ff54...bc2d7cdad75b7c36aa5c19fa979ec965483185a0)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25)

* [OCPBUGS-24999](https://issues.redhat.com/browse/OCPBUGS-24999): Add Snyk file to exclude vendor directory on scan [#66](https://github.com/openshift/cloud-provider-ibm/pull/66)
* [OCPBUGS-21137](https://issues.redhat.com/browse/OCPBUGS-21137): Bump golang.org/x/net to v0.18.0 [#56](https://github.com/openshift/cloud-provider-ibm/pull/56)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/59edd923386b36f2cad99150b7fd11fb7bbb1688...b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/648d0cc72a42d3ab7f9e05a522ab11ba88e1203b)

* [OCPBUGS-77213](https://issues.redhat.com/browse/OCPBUGS-77213): [release-4.13] standardize build paths [#127](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/127)
* [OCPBUGS-59124](https://issues.redhat.com/browse/OCPBUGS-59124): bump github.com/golang/glog to v1.2.4 [#110](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/110)
* [OCPBUGS-56066](https://issues.redhat.com/browse/OCPBUGS-56066): tech debt: rework vendor patches [#94](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/94)
* [OCPBUGS-53909](https://issues.redhat.com/browse/OCPBUGS-53909): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#87](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/87)
* [OCPBUGS-36064](https://issues.redhat.com/browse/OCPBUGS-36064): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#74](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3e0eb20f7521c895c2d11ae683fd53adadaeffba...648d0cc72a42d3ab7f9e05a522ab11ba88e1203b)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/30262c098a2124f8fb8ed334df7b4e48c75dbeaa)

* [OCPBUGS-67656](https://issues.redhat.com/browse/OCPBUGS-67656), [OCPBUGS-67657](https://issues.redhat.com/browse/OCPBUGS-67657): bump github.com/sirupsen/logrus to v1.8.3 [#164](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/164)
* [OCPBUGS-59874](https://issues.redhat.com/browse/OCPBUGS-59874): [IBM VPC] set offlineExpansion to false in e2e test manifest [#152](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/152)
* [OCPBUGS-36070](https://issues.redhat.com/browse/OCPBUGS-36070): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#123](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/123)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/38c439da0b0ff924ad6b3d0af6461605a8b498ac...30262c098a2124f8fb8ed334df7b4e48c75dbeaa)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/6d619f62a27ba0ac0cab05e035f07aef9095d9c9)

* [OCPBUGS-56066](https://issues.redhat.com/browse/OCPBUGS-56066): tech debt: rework vendor patches [#51](https://github.com/openshift/ibm-vpc-node-label-updater/pull/51)
* [OCPBUGS-53541](https://issues.redhat.com/browse/OCPBUGS-53541): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#47](https://github.com/openshift/ibm-vpc-node-label-updater/pull/47)
* [OCPBUGS-36010](https://issues.redhat.com/browse/OCPBUGS-36010): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#43](https://github.com/openshift/ibm-vpc-node-label-updater/pull/43)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/7721a9e75b92bdd12ff9a05acc9274c0d0580aba...6d619f62a27ba0ac0cab05e035f07aef9095d9c9)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/4faedb550f51dcbce19dc6bf2cdb0e89fdb691d6)

* [OCPBUGS-67291](https://issues.redhat.com/browse/OCPBUGS-67291): [release-4.13] Fix incomplete vendor/ [#135](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/135)
* [OCPBUGS-36076](https://issues.redhat.com/browse/OCPBUGS-36076): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 [#90](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/90)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/c4441f101083a8ffe01d4d6bb372a8b32a30a9a6...4faedb550f51dcbce19dc6bf2cdb0e89fdb691d6)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/a6c7dcd9ed993e2ebf7272ff52cfa71cc7be856b)

* [OCPBUGS-78275](https://issues.redhat.com/browse/OCPBUGS-78275): hermetic 4.13 [#78](https://github.com/openshift/machine-api-provider-ibmcloud/pull/78)
* [OCPBUGS-36082](https://issues.redhat.com/browse/OCPBUGS-36082): Bump dependency for CVE [#56](https://github.com/openshift/machine-api-provider-ibmcloud/pull/56)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/bb253a0c607f7d1f8139ffd401bd6c9c432090d1...a6c7dcd9ed993e2ebf7272ff52cfa71cc7be856b)


### [insights-operator](https://github.com/openshift/insights-operator/tree/162554e15ece3653649c9a61567d332a462f079a)

* [OCPBUGS-36475](https://issues.redhat.com/browse/OCPBUGS-36475): properly encode the URL for the advisor links (#962) (#965) [#962](https://github.com/openshift/insights-operator/pull/962)
* [OCPBUGS-33449](https://issues.redhat.com/browse/OCPBUGS-33449): anonymization - externalIP can be nil (#931) (#933) (#935) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31991](https://issues.redhat.com/browse/OCPBUGS-31991): bump golang.org/x/net version (#927) [#927](https://github.com/openshift/insights-operator/pull/927)
* [OCPBUGS-28157](https://issues.redhat.com/browse/OCPBUGS-28157): Add extra check in ids to bypass validations (#905) [#905](https://github.com/openshift/insights-operator/pull/905)
* gather etcd_server_slow metrics (#902) (#909) [#902](https://github.com/openshift/insights-operator/pull/902)
* [OCPBUGS-23962](https://issues.redhat.com/browse/OCPBUGS-23962): adds helm information gather (#868) (#883) [#868](https://github.com/openshift/insights-operator/pull/868)
* [Full changelog](https://github.com/openshift/insights-operator/compare/dff6a1cca63790538913cd1658ed3dc2384f04c2...162554e15ece3653649c9a61567d332a462f079a)


### [ironic](https://github.com/openshift/ironic-image/tree/7edd609de1fd2d1e9c8c5a46018b4f97b7474d15)

* [OCPBUGS-69791](https://issues.redhat.com/browse/OCPBUGS-69791): Bump eventlet version to 0.33.1-7 [#766](https://github.com/openshift/ironic-image/pull/766)
* [OCPBUGS-48146](https://issues.redhat.com/browse/OCPBUGS-48146), [OCPBUGS-48595](https://issues.redhat.com/browse/OCPBUGS-48595): Bump jinja2 to 3.0.1-6.el9.2 [#626](https://github.com/openshift/ironic-image/pull/626)
* [OCPBUGS-43952](https://issues.redhat.com/browse/OCPBUGS-43952), [OCPBUGS-43960](https://issues.redhat.com/browse/OCPBUGS-43960): Bump python-waitress [4.13] [#608](https://github.com/openshift/ironic-image/pull/608)
* [OCPBUGS-37764](https://issues.redhat.com/browse/OCPBUGS-37764), [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#585](https://github.com/openshift/ironic-image/pull/585)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set min version for python3-webob [#557](https://github.com/openshift/ironic-image/pull/557)
* [OCPBUGS-33374](https://issues.redhat.com/browse/OCPBUGS-33374): bump werkzeug [#543](https://github.com/openshift/ironic-image/pull/543)
* [OCPBUGS-34898](https://issues.redhat.com/browse/OCPBUGS-34898): bump jinja2 [#538](https://github.com/openshift/ironic-image/pull/538)
* [OCPBUGS-37116](https://issues.redhat.com/browse/OCPBUGS-37116): Update eventlet version [#525](https://github.com/openshift/ironic-image/pull/525)
* [OCPBUGS-32363](https://issues.redhat.com/browse/OCPBUGS-32363): [4.13] remove unused prometheus-exporter [#488](https://github.com/openshift/ironic-image/pull/488)
* [OCPBUGS-32387](https://issues.redhat.com/browse/OCPBUGS-32387): Use unix sockets by default for reverse proxy communication [#476](https://github.com/openshift/ironic-image/pull/476)
* [OCPBUGS-29190](https://issues.redhat.com/browse/OCPBUGS-29190): Fix Inspector iPXE config for IPv6 addresses [#453](https://github.com/openshift/ironic-image/pull/453)
* [Full changelog](https://github.com/openshift/ironic-image/compare/1585b098ba30475c9fb2ecfa48ceca4623218a11...7edd609de1fd2d1e9c8c5a46018b4f97b7474d15)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/e9cf769fa33a9cc6e0d76c7eb1cb444f9a681e42)

* [OCPBUGS-69776](https://issues.redhat.com/browse/OCPBUGS-69776): adding eventlet-0.33.1-7 [#235](https://github.com/openshift/ironic-agent-image/pull/235)
* [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#164](https://github.com/openshift/ironic-agent-image/pull/164)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set webob and bump werkzeug [#152](https://github.com/openshift/ironic-agent-image/pull/152)
* [OCPBUGS-29725](https://issues.redhat.com/browse/OCPBUGS-29725): Always add ignition to set hostname on /etc/hostname [#111](https://github.com/openshift/ironic-agent-image/pull/111)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/508e61245eb34d1f83771b1522021ffcde59fecc...e9cf769fa33a9cc6e0d76c7eb1cb444f9a681e42)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/1a14e5c9896976b43767ab325a6fe35527a514a5)

* [OCPBUGS-6236](https://issues.redhat.com/browse/OCPBUGS-6236): Updating openshift-enterprise-egress-router images to be consistent with ART [#121](https://github.com/openshift/images/pull/121)
* [Full changelog](https://github.com/openshift/images/compare/04659348dbad0cd9b56596d5977d2934fa01d509...1a14e5c9896976b43767ab325a6fe35527a514a5)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9c882377e3a4cfc447b490e0a760697f3c9fa9ba)

* [OCPBUGS-55758](https://issues.redhat.com/browse/OCPBUGS-55758): Handle `openshift-host-network` namespace as special when it modifies [#656](https://github.com/openshift/sdn/pull/656)
* [OCPBUGS-20771](https://issues.redhat.com/browse/OCPBUGS-20771): update x/net to v0.17.0 [#590](https://github.com/openshift/sdn/pull/590)
* [Full changelog](https://github.com/openshift/sdn/compare/f86266b225c316e8c676894e5499fc6d8294d967...9c882377e3a4cfc447b490e0a760697f3c9fa9ba)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f35f954ae0550e6ebeb94e244401fc069dc346b8)

* [OCPBUGS-31987](https://issues.redhat.com/browse/OCPBUGS-31987): CVE-2023-45288 [4.13] [#107](https://github.com/openshift/kube-rbac-proxy/pull/107)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/ae32bfa0f11ae2854339ab9af83c44ee1c04fe31...f35f954ae0550e6ebeb94e244401fc069dc346b8)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/ac20da35bc6d9cded6dbf7fa0c27e867c7a69cb7)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-13). [#230](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/230)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/bad104d13ba95bc850f5aaf96436f793d7985864...ac20da35bc6d9cded6dbf7fa0c27e867c7a69cb7)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9d909f7f3a3efd27d7efb71bf0324796aa6e8788)

* "OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs" [#35](https://github.com/openshift/kubevirt-csi-driver/pull/35)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/efa0b9432bf0f44a965dc978ada75ea9b0f3e511...9d909f7f3a3efd27d7efb71bf0324796aa6e8788)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/8f825e59b9e80bc0123d360365b306ae2f464699)

* [OCPBUGS-77199](https://issues.redhat.com/browse/OCPBUGS-77199): Fix incomplete vendor [#305](https://github.com/openshift/cluster-api-provider-libvirt/pull/305)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/d4b7a8ab790a970ce2f0374146248b2307df0185...8f825e59b9e80bc0123d360365b306ae2f464699)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b3b92854d3f8b19ba72c3800e3f0d485c4ebd0b7)

* [OCPBUGS-78270](https://issues.redhat.com/browse/OCPBUGS-78270): hermetic 4.13 [#1469](https://github.com/openshift/machine-api-operator/pull/1469)
* [OCPBUGS-67672](https://issues.redhat.com/browse/OCPBUGS-67672): bumped logrus to v1.9.3 [#1461](https://github.com/openshift/machine-api-operator/pull/1461)
* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1304](https://github.com/openshift/machine-api-operator/pull/1304)
* [OCPBUGS-32015](https://issues.redhat.com/browse/OCPBUGS-32015): Fix zone tag value reconciliation for vSphere machines [#1225](https://github.com/openshift/machine-api-operator/pull/1225)
* [OCPBUGS-31994](https://issues.redhat.com/browse/OCPBUGS-31994): Update x/net to v0.25.0 [#1245](https://github.com/openshift/machine-api-operator/pull/1245)
* NO-JIRA: [release-4.13] Fix data race conditions in unit tests [#1254](https://github.com/openshift/machine-api-operator/pull/1254)
* [OCPBUGS-25165](https://issues.redhat.com/browse/OCPBUGS-25165): Add Snyk file to exclude vendor directory on scan [#1194](https://github.com/openshift/machine-api-operator/pull/1194)
* [OCPBUGS-24277](https://issues.redhat.com/browse/OCPBUGS-24277): Update reference URL [#1188](https://github.com/openshift/machine-api-operator/pull/1188)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/403f727652089b543954d35e862e8ae872bc8694...b3b92854d3f8b19ba72c3800e3f0d485c4ebd0b7)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a57ca291235422f8466ac53496e9d192eecfe1e4)

* [OCPBUGS-61234](https://issues.redhat.com/browse/OCPBUGS-61234): Trigger a new build [#5278](https://github.com/openshift/machine-config-operator/pull/5278)
* [OCPBUGS-59125](https://issues.redhat.com/browse/OCPBUGS-59125): [release-4.13] Bump golang/glog to fix  CVE-2024-45339 [#5175](https://github.com/openshift/machine-config-operator/pull/5175)
* [OCPBUGS-44206](https://issues.redhat.com/browse/OCPBUGS-44206): Panic seen in CI job for MCC pod [#4680](https://github.com/openshift/machine-config-operator/pull/4680)
* [OCPBUGS-38372](https://issues.redhat.com/browse/OCPBUGS-38372): Revert "MCD-pull: run after network-online.target in Azure" [#4527](https://github.com/openshift/machine-config-operator/pull/4527)
* [OCPBUGS-38295](https://issues.redhat.com/browse/OCPBUGS-38295): daemon/update: disable systemd unit before overwriting [#4522](https://github.com/openshift/machine-config-operator/pull/4522)
* [OCPBUGS-37783](https://issues.redhat.com/browse/OCPBUGS-37783): Openshift uncordoned compute-node that was intentionally cordoned [#4507](https://github.com/openshift/machine-config-operator/pull/4507)
* [OCPBUGS-37160](https://issues.redhat.com/browse/OCPBUGS-37160): MCD-pull: run after network-online.target in Azure [#4474](https://github.com/openshift/machine-config-operator/pull/4474)
* [OCPBUGS-36782](https://issues.redhat.com/browse/OCPBUGS-36782): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4464](https://github.com/openshift/machine-config-operator/pull/4464)
* [OCPBUGS-32208](https://issues.redhat.com/browse/OCPBUGS-32208): Run resolv-prepender entirely async [#4314](https://github.com/openshift/machine-config-operator/pull/4314)
* [OCPBUGS-33327](https://issues.redhat.com/browse/OCPBUGS-33327): make verify should use MCO's kube version [#4352](https://github.com/openshift/machine-config-operator/pull/4352)
* [OCPBUGS-29721](https://issues.redhat.com/browse/OCPBUGS-29721): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4206](https://github.com/openshift/machine-config-operator/pull/4206)
* [OCPBUGS-30285](https://issues.redhat.com/browse/OCPBUGS-30285): set nodeStatusReportFrequency [#4243](https://github.com/openshift/machine-config-operator/pull/4243)
* [OCPBUGS-28740](https://issues.redhat.com/browse/OCPBUGS-28740): crio: drop automatic image cleanup on upgrades [#4154](https://github.com/openshift/machine-config-operator/pull/4154)
* [OCPBUGS-29151](https://issues.redhat.com/browse/OCPBUGS-29151): fix nodeStatusUpdateFrequency [#4170](https://github.com/openshift/machine-config-operator/pull/4170)
* [OCPBUGS-24661](https://issues.redhat.com/browse/OCPBUGS-24661): daemon: Add support for new nmstate logic [#4036](https://github.com/openshift/machine-config-operator/pull/4036)
* [OCPBUGS-27816](https://issues.redhat.com/browse/OCPBUGS-27816): use *resource.Quantity to not automatically set 0 [#4141](https://github.com/openshift/machine-config-operator/pull/4141)
* [OCPBUGS-22272](https://issues.redhat.com/browse/OCPBUGS-22272), [OCPBUGS-27172](https://issues.redhat.com/browse/OCPBUGS-27172): kubelet: fix kubelet labels [#4120](https://github.com/openshift/machine-config-operator/pull/4120)
* [OCPBUGS-27096](https://issues.redhat.com/browse/OCPBUGS-27096): Azure Run ovs-configuration.service before dnsmasq.service [#4115](https://github.com/openshift/machine-config-operator/pull/4115)
* [OCPBUGS-19658](https://issues.redhat.com/browse/OCPBUGS-19658): After dual-stack conversion reconcile IPFamilies [#3935](https://github.com/openshift/machine-config-operator/pull/3935)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/bf629e3885c9becd8f7a99c4de14960b2806c666...a57ca291235422f8466ac53496e9d192eecfe1e4)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d722cc362b450bd97794fd5ea4c35a2924a6f13a)

* [OCPBUGS-67658](https://issues.redhat.com/browse/OCPBUGS-67658): bumped logrus to v1.9.3 [#160](https://github.com/openshift/image-customization-controller/pull/160)
* [OCPBUGS-27089](https://issues.redhat.com/browse/OCPBUGS-27089): configurable ironic agent vlan creation [#117](https://github.com/openshift/image-customization-controller/pull/117)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/48318552407d37ec7dfefff0a7253f63b8957db9...d722cc362b450bd97794fd5ea4c35a2924a6f13a)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/7e2e6cac68ac86ae3cc3578354169658b5620e12)

* [OCPBUGS-54172](https://issues.redhat.com/browse/OCPBUGS-54172): Change rhcos release browser url [#60](https://github.com/openshift/machine-os-images/pull/60)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e...7e2e6cac68ac86ae3cc3578354169658b5620e12)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/39a2173ffa2fb9b0cdc812121a67d0b46ecd19bd)

* [OCPBUGS-60293](https://issues.redhat.com/browse/OCPBUGS-60293): Bump github.com/golang/glog to v1.2.4 [#106](https://github.com/openshift/multus-admission-controller/pull/106)
* [OCPBUGS-60841](https://issues.redhat.com/browse/OCPBUGS-60841): Update owners [#108](https://github.com/openshift/multus-admission-controller/pull/108)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9b0656af8316420bf05a7d3a0969feded615ed64...39a2173ffa2fb9b0cdc812121a67d0b46ecd19bd)


### [multus-cni](https://github.com/openshift/multus-cni/tree/12897bd18a928b8d0ea22fca0c05cee480285752)

* [OCPBUGS-28020](https://issues.redhat.com/browse/OCPBUGS-28020): Fix SAST scan issues for multus-cni-container [4.13] [#224](https://github.com/openshift/multus-cni/pull/224)
* [Full changelog](https://github.com/openshift/multus-cni/compare/906067fdbf94800efb89895b38ae037947a12b46...12897bd18a928b8d0ea22fca0c05cee480285752)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)

* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941), [OCPBUGS-37944](https://issues.redhat.com/browse/OCPBUGS-37944): [release-4.13] Stateful fixes [#306](https://github.com/openshift/whereabouts-cni/pull/306)
* [OCPBUGS-27958](https://issues.redhat.com/browse/OCPBUGS-27958): Enable reconciler configuration [#241](https://github.com/openshift/whereabouts-cni/pull/241)
* [OCPBUGS-27367](https://issues.redhat.com/browse/OCPBUGS-27367): [release-4.13] Backport fix assignment [#236](https://github.com/openshift/whereabouts-cni/pull/236)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/32b801b94bbbc790e48cfb63c2fd4d0839adfe12...9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)


### [must-gather](https://github.com/openshift/must-gather/tree/339046b6478094030fa5ebf1ebceed2bb03a55f4)

* [OCPBUGS-48085](https://issues.redhat.com/browse/OCPBUGS-48085): Update owners [#476](https://github.com/openshift/must-gather/pull/476)
* [Full changelog](https://github.com/openshift/must-gather/compare/288ef2fcfe63cbfab0af69a41b508c044ee890aa...339046b6478094030fa5ebf1ebceed2bb03a55f4)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/aa24d460383cf426963226783e3db981f0d3b714)

* [OCPBUGS-59699](https://issues.redhat.com/browse/OCPBUGS-59699): Bump github.com/golang/glog to v1.2.4 (#117) [#117](https://github.com/openshift/network-metrics-daemon/pull/117)
* [release 4.13] OCPBUGS-60541: Replace e2e test image (#132) [#132](https://github.com/openshift/network-metrics-daemon/pull/132)
* swtich golint install method (#129) [#129](https://github.com/openshift/network-metrics-daemon/pull/129)
* Correct 4.16 owners file (#130) [#130](https://github.com/openshift/network-metrics-daemon/pull/130)
* Added METRIC_TEST_IMAGE var (#90) [#90](https://github.com/openshift/network-metrics-daemon/pull/90)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/ff460fbae0d9537b05e38b6402fd390136235482...aa24d460383cf426963226783e3db981f0d3b714)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/4fe0c590767f41ca443bdd2688e1decd4f66d60a)

* [OCPBUGS-12645](https://issues.redhat.com/browse/OCPBUGS-12645), [OCPBUGS-20879](https://issues.redhat.com/browse/OCPBUGS-20879): bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/cloud-provider-nutanix/pull/36)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/4d1c58e2b97f00e64ab4332d18dfdd531fb9cc4e...4fe0c590767f41ca443bdd2688e1decd4f66d60a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/5f8dfaa95227ce121563ca21a9f1a250bb253aeb)

* [OCPBUGS-78157](https://issues.redhat.com/browse/OCPBUGS-78157): hermetic 4.13 [#131](https://github.com/openshift/machine-api-provider-nutanix/pull/131)
* [OCPBUGS-51856](https://issues.redhat.com/browse/OCPBUGS-51856): Fixing CVE-2025-22868 [#119](https://github.com/openshift/machine-api-provider-nutanix/pull/119)
* [OCPBUGS-47262](https://issues.redhat.com/browse/OCPBUGS-47262): fixing CVE-2024-45338 [#115](https://github.com/openshift/machine-api-provider-nutanix/pull/115)
* [OCPBUGS-20976](https://issues.redhat.com/browse/OCPBUGS-20976): bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/machine-api-provider-nutanix/pull/86)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#59](https://github.com/openshift/machine-api-provider-nutanix/pull/59)
* [OCPBUGS-25459](https://issues.redhat.com/browse/OCPBUGS-25459): Fix CI by running tests natively by default [#60](https://github.com/openshift/machine-api-provider-nutanix/pull/60)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/be43191e5b20c7d6a5755a39a22d31e7734b241a...5f8dfaa95227ce121563ca21a9f1a250bb253aeb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/6a5971643b971170d28b96f676225b344c4cff3c)

* [OCPBUGS-31996](https://issues.redhat.com/browse/OCPBUGS-31996): bump x/net to 0.24.0 [#112](https://github.com/openshift/oauth-apiserver/pull/112)
* [OCPBUGS-28674](https://issues.redhat.com/browse/OCPBUGS-28674): Fix HTTP/2 deps for release-4.13 [#102](https://github.com/openshift/oauth-apiserver/pull/102)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/41c2dfea104b3c686a00b068654843b48b4db53f...6a5971643b971170d28b96f676225b344c4cff3c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/96338efcec8152baebfd57036b728697b2fda89a)

* changes the owners file (#1012) [#1012](https://github.com/openshift/oc-mirror/pull/1012)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1025) [#1025](https://github.com/openshift/oc-mirror/pull/1025)
* Bump version to include v5.11.0 of go-git (#823) [#823](https://github.com/openshift/oc-mirror/pull/823)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) (#791) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#775) [#775](https://github.com/openshift/oc-mirror/pull/775)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/669968e3f32ce73c1993d8840556043d38da6331...96338efcec8152baebfd57036b728697b2fda89a)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/7dde3cd3e7a7dbbc9b5d134cc4f69f1503ed0a68)

* : OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 [#75](https://github.com/openshift/operator-framework-rukpak/pull/75)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/1261b81eb2b96d8b30741fcd1c82c5ae253ae1f9...7dde3cd3e7a7dbbc9b5d134cc4f69f1503ed0a68)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/ffc43fd1dc73339f8aacbb1ccac0bfeecea43305)

* [OCPBUGS-78596](https://issues.redhat.com/browse/OCPBUGS-78596): Fix image reference in TestImageStreamImportQuayIO [release-4.13] [#622](https://github.com/openshift/openshift-apiserver/pull/622)
* [OCPBUGS-76482](https://issues.redhat.com/browse/OCPBUGS-76482): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] [#613](https://github.com/openshift/openshift-apiserver/pull/613)
* [OCPBUGS-32446](https://issues.redhat.com/browse/OCPBUGS-32446): bump(x/net) to v0.23.0 [#430](https://github.com/openshift/openshift-apiserver/pull/430)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6c0733082d6ff258dc8787ef2e84c1ceb51a0655...ffc43fd1dc73339f8aacbb1ccac0bfeecea43305)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/00cef287411eb1f8b69a73bcac0e8e0b2b7e129b)

* [OCPBUGS-58035](https://issues.redhat.com/browse/OCPBUGS-58035): Set node-pullsecrets volume to read-only to protect image pull credentials [#402](https://github.com/openshift/openshift-controller-manager/pull/402)
* [OCPBUGS-57051](https://issues.redhat.com/browse/OCPBUGS-57051): Empty proxy variables are causing issues during the build [#388](https://github.com/openshift/openshift-controller-manager/pull/388)
* [OCPBUGS-48656](https://issues.redhat.com/browse/OCPBUGS-48656): Add new team members to the OWNERS file [#362](https://github.com/openshift/openshift-controller-manager/pull/362)
* [release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency [#326](https://github.com/openshift/openshift-controller-manager/pull/326)
* [OCPBUGS-41952](https://issues.redhat.com/browse/OCPBUGS-41952): Add adambkaplan as approver [#335](https://github.com/openshift/openshift-controller-manager/pull/335)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/385057e57752b7b4f21ef32d7a7993d266a591eb...00cef287411eb1f8b69a73bcac0e8e0b2b7e129b)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/0e50c414d5480c738e7aa685e490c04822a99940)

* [OCPBUGS-67685](https://issues.redhat.com/browse/OCPBUGS-67685): Bump logrus [#190](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/190)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/b50a649be8b691a6081487330da17e55d242a2e5...0e50c414d5480c738e7aa685e490c04822a99940)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/d9ef72dfdf6a5226515f53027a969f49cd82925e)

* [OCPBUGS-78174](https://issues.redhat.com/browse/OCPBUGS-78174): hermetic 4.13 [#166](https://github.com/openshift/machine-api-provider-openstack/pull/166)
* [OCPBUGS-34422](https://issues.redhat.com/browse/OCPBUGS-34422): Ensure portSecurity is correctly set in the Instance Ports [#119](https://github.com/openshift/machine-api-provider-openstack/pull/119)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/7bce9d67fba63a0ed6a39b78488da8e85bf07dbd...d9ef72dfdf6a5226515f53027a969f49cd82925e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5f66f1ac4075c0926cb1b162d3153972d5b29a01)

* [OCPBUGS-61470](https://issues.redhat.com/browse/OCPBUGS-61470): [release-4.13] Add NetworkPolicy as a supported kind [#1053](https://github.com/openshift/operator-framework-olm/pull/1053)
* [OCPBUGS-61391](https://issues.redhat.com/browse/OCPBUGS-61391): [4.13] e2e stability fixes [#1086](https://github.com/openshift/operator-framework-olm/pull/1086)
* [OCPBUGS-46924](https://issues.redhat.com/browse/OCPBUGS-46924), [OCPBUGS-46931](https://issues.redhat.com/browse/OCPBUGS-46931), [OCPBUGS-47311](https://issues.redhat.com/browse/OCPBUGS-47311): x/net bump to v0.34.0 [release-4.13] [#942](https://github.com/openshift/operator-framework-olm/pull/942)
* [OCPBUGS-47507](https://issues.redhat.com/browse/OCPBUGS-47507): CRD upgrade existing CR validation fix (#3442) [#924](https://github.com/openshift/operator-framework-olm/pull/924)
* NO-ISSUE: [release-4.13] Backport e2e fixes [#876](https://github.com/openshift/operator-framework-olm/pull/876)
* [OCPBUGS-42146](https://issues.redhat.com/browse/OCPBUGS-42146): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#871](https://github.com/openshift/operator-framework-olm/pull/871)
* [OCPBUGS-38254](https://issues.redhat.com/browse/OCPBUGS-38254): [CARRY] perform operator apiService certificate validity checks directly [#836](https://github.com/openshift/operator-framework-olm/pull/836)
* [OCPBUGS-38608](https://issues.redhat.com/browse/OCPBUGS-38608): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#843](https://github.com/openshift/operator-framework-olm/pull/843)
* [OCPBUGS-32856](https://issues.redhat.com/browse/OCPBUGS-32856): bump go-jose to v2.6.3 [#780](https://github.com/openshift/operator-framework-olm/pull/780)
* [OCPBUGS-35241](https://issues.redhat.com/browse/OCPBUGS-35241): Unblock CI [#772](https://github.com/openshift/operator-framework-olm/pull/772)
* [OCPBUGS-27564](https://issues.redhat.com/browse/OCPBUGS-27564), [OCPBUGS-27569](https://issues.redhat.com/browse/OCPBUGS-27569), [OCPBUGS-27649](https://issues.redhat.com/browse/OCPBUGS-27649), [OCPBUGS-27654](https://issues.redhat.com/browse/OCPBUGS-27654): bump go-git/v5 to 5.11.0 [#682](https://github.com/openshift/operator-framework-olm/pull/682)
* [OCPBUGS-28228](https://issues.redhat.com/browse/OCPBUGS-28228): Registry Pod Controller Flag [#672](https://github.com/openshift/operator-framework-olm/pull/672)
* [OCPBUGS-27891](https://issues.redhat.com/browse/OCPBUGS-27891): [CARRY] SSC RBAC [#669](https://github.com/openshift/operator-framework-olm/pull/669)
* [OCPBUGS-8653](https://issues.redhat.com/browse/OCPBUGS-8653): bump golang-migrate to v4.16.1 (#1107) [#649](https://github.com/openshift/operator-framework-olm/pull/649)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4a69934c45f3d566ad598831fc82535793415a93...5f66f1ac4075c0926cb1b162d3153972d5b29a01)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)

* [OCPBUGS-49430](https://issues.redhat.com/browse/OCPBUGS-49430): Upgrade golang.org/x/net [release-4.13] [#590](https://github.com/operator-framework/operator-marketplace/pull/590)
* [OCPBUGS-32074](https://issues.redhat.com/browse/OCPBUGS-32074): update golang.org/x/net for CVE-2023-45288 [#566](https://github.com/operator-framework/operator-marketplace/pull/566)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/867e7ed80fdbc6f5bb88f1589da740d9bd1d5721...2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6011d6557a4e689124da6776a0cbd716edbc238a)

* [OCPBUGS-67725](https://issues.redhat.com/browse/OCPBUGS-67725): Bump github.com/sirupsen/logrus to v1.8.3 [#147](https://github.com/openshift/ovirt-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/b293972fe2c5eef4262130de621e75e5d0c37d8e...6011d6557a4e689124da6776a0cbd716edbc238a)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/ad6607895c2b51c7bd8f7ddd1cb5e3fc50bd7c54)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-84635](https://issues.redhat.com/browse/OCPBUGS-84635): [release-4.13] Dockerfile: Unpin OVN and consume the latest from FDP [#3074](https://github.com/openshift/ovn-kubernetes/pull/3074)
* [OCPBUGS-59934](https://issues.redhat.com/browse/OCPBUGS-59934): Dockerfile: Remove ovs version pinning [#2697](https://github.com/openshift/ovn-kubernetes/pull/2697)
* [OCPBUGS-55950](https://issues.redhat.com/browse/OCPBUGS-55950): Bump ovs and ovn to latest patch releases [#2553](https://github.com/openshift/ovn-kubernetes/pull/2553)
* [OCPBUGS-38264](https://issues.redhat.com/browse/OCPBUGS-38264): [release-4.13] Bump OVSDBTimeout and make it configurable [#2289](https://github.com/openshift/ovn-kubernetes/pull/2289)
* [OCPBUGS-37119](https://issues.redhat.com/browse/OCPBUGS-37119): EgressIP: Reload certificates for the grpc heatlhcheck server [#2226](https://github.com/openshift/ovn-kubernetes/pull/2226)
* [OCPBUGS-35100](https://issues.redhat.com/browse/OCPBUGS-35100): [release-4.13] ipv6+all protocols conntrack flush [#2200](https://github.com/openshift/ovn-kubernetes/pull/2200)
* [OCPBUGS-34669](https://issues.redhat.com/browse/OCPBUGS-34669), [SDN-4186](https://issues.redhat.com/browse/SDN-4186): Introduce a validating webhook for ovnkube-node [#2053](https://github.com/openshift/ovn-kubernetes/pull/2053)
* [OCPBUGS-29865](https://issues.redhat.com/browse/OCPBUGS-29865): CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [#2095](https://github.com/openshift/ovn-kubernetes/pull/2095)
* [OCPBUGS-33730](https://issues.redhat.com/browse/OCPBUGS-33730): Improves service iptables efficiency on start up [#2172](https://github.com/openshift/ovn-kubernetes/pull/2172)
* [OCPBUGS-32988](https://issues.redhat.com/browse/OCPBUGS-32988): Bumping OVS [#2143](https://github.com/openshift/ovn-kubernetes/pull/2143)
* [OCPBUGS-33421](https://issues.redhat.com/browse/OCPBUGS-33421): [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2130](https://github.com/openshift/ovn-kubernetes/pull/2130)
* [OCPBUGS-33218](https://issues.redhat.com/browse/OCPBUGS-33218): [release-4.13] OVN bump to 23.06.1-112 [#2153](https://github.com/openshift/ovn-kubernetes/pull/2153)
* [OCPBUGS-28983](https://issues.redhat.com/browse/OCPBUGS-28983), [OCPBUGS-30920](https://issues.redhat.com/browse/OCPBUGS-30920): Update netpol namespace address sets usage to the old ways [#2097](https://github.com/openshift/ovn-kubernetes/pull/2097)
* [OCPBUGS-29851](https://issues.redhat.com/browse/OCPBUGS-29851): Egress IP, Services: use all node IP addresses [#2090](https://github.com/openshift/ovn-kubernetes/pull/2090)
* [OCPBUGS-28630](https://issues.redhat.com/browse/OCPBUGS-28630): Synchronize node primary address update [#2036](https://github.com/openshift/ovn-kubernetes/pull/2036)
* [OCPBUGS-25611](https://issues.redhat.com/browse/OCPBUGS-25611): Avoid panic due to stale ACLs with 1013 priority [#1987](https://github.com/openshift/ovn-kubernetes/pull/1987)
* [OCPBUGS-27257](https://issues.redhat.com/browse/OCPBUGS-27257): Ensure session affinity cleanup on backend removal [#2022](https://github.com/openshift/ovn-kubernetes/pull/2022)
* [OCPBUGS-27736](https://issues.redhat.com/browse/OCPBUGS-27736): CARRY: Updates owners and adds Surya [#2024](https://github.com/openshift/ovn-kubernetes/pull/2024)
* [OCPBUGS-24419](https://issues.redhat.com/browse/OCPBUGS-24419): OVNK/GW: Ignore headless services in syncServices [#1971](https://github.com/openshift/ovn-kubernetes/pull/1971)
* [OCPBUGS-23258](https://issues.redhat.com/browse/OCPBUGS-23258): Update leaderelection config to allow retries [#1992](https://github.com/openshift/ovn-kubernetes/pull/1992)
* [OCPBUGS-26242](https://issues.redhat.com/browse/OCPBUGS-26242): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2011](https://github.com/openshift/ovn-kubernetes/pull/2011)
* [OCPBUGS-25923](https://issues.redhat.com/browse/OCPBUGS-25923): Forward ICMP packets to OVN loadbalancer [#2004](https://github.com/openshift/ovn-kubernetes/pull/2004)
* [OCPBUGS-25224](https://issues.redhat.com/browse/OCPBUGS-25224): [release-4.13] fixes MTU configuration on gateway router [#1988](https://github.com/openshift/ovn-kubernetes/pull/1988)
* [OCPBUGS-14799](https://issues.redhat.com/browse/OCPBUGS-14799): Updating endpoints when using allocateLBNP=0, lgw mode fails [#1940](https://github.com/openshift/ovn-kubernetes/pull/1940)
* [OCPBUGS-25095](https://issues.redhat.com/browse/OCPBUGS-25095): Fragment oversized reply packets in LGW mode [#1983](https://github.com/openshift/ovn-kubernetes/pull/1983)
* [OCPBUGS-24391](https://issues.redhat.com/browse/OCPBUGS-24391): Limit OVN-Kubernetes RBAC permissions [#1950](https://github.com/openshift/ovn-kubernetes/pull/1950)
* [OCPBUGS-23014](https://issues.redhat.com/browse/OCPBUGS-23014): Netpol retryFramework cleanup [#1957](https://github.com/openshift/ovn-kubernetes/pull/1957)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bc1c4dc97bfe836a7a4bfed7e2166ed4be5a3014...ad6607895c2b51c7bd8f7ddd1cb5e3fc50bd7c54)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/16fa55557367097b075093d2549e0205558c7527)

* [OCPBUGS-36094](https://issues.redhat.com/browse/OCPBUGS-36094): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#91](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/91)
* [OCPBUGS-33638](https://issues.redhat.com/browse/OCPBUGS-33638): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 [#82](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/82)
* [OCPBUGS-24728](https://issues.redhat.com/browse/OCPBUGS-24728): synk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/61)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/62f7b1e12357e5f7c99d8b05c1a01ad1e75f770e...16fa55557367097b075093d2549e0205558c7527)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/f5209f48188fdee114946e56f7baff78a0ab87b4)

* [OCPBUGS-67694](https://issues.redhat.com/browse/OCPBUGS-67694): Fix CVE-2025-65637 by bumping logrus to v1.8.3 [#101](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/101)
* [OCPBUGS-25716](https://issues.redhat.com/browse/OCPBUGS-25716): snyk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/61)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/c0adbc0d8f7b6c91a81eec51f427947022ac9c8b...f5209f48188fdee114946e56f7baff78a0ab87b4)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c040f3774af48d6d0bd8c31188626cb445be5b83)

* [OCPBUGS-36104](https://issues.redhat.com/browse/OCPBUGS-36104): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 [#76](https://github.com/openshift/cloud-provider-powervs/pull/76)
* [OCPBUGS-24731](https://issues.redhat.com/browse/OCPBUGS-24731): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#53](https://github.com/openshift/cloud-provider-powervs/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/6f7d5cecc8403b9d6a5d133b3b242616aaf235a4...c040f3774af48d6d0bd8c31188626cb445be5b83)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/c35d169e1b9f0b27bf9b5dff346dc49d2ad500bd)

* [OCPBUGS-78041](https://issues.redhat.com/browse/OCPBUGS-78041): hermetic 4.13 [#137](https://github.com/openshift/machine-api-provider-powervs/pull/137)
* [OCPBUGS-54013](https://issues.redhat.com/browse/OCPBUGS-54013): Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.13 [#122](https://github.com/openshift/machine-api-provider-powervs/pull/122)
* [OCPBUGS-41980](https://issues.redhat.com/browse/OCPBUGS-41980): Update go.mod to fix CVE - 4.13 [#87](https://github.com/openshift/machine-api-provider-powervs/pull/87)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#69](https://github.com/openshift/machine-api-provider-powervs/pull/69)
* [OCPBUGS-24741](https://issues.redhat.com/browse/OCPBUGS-24741): snyk code scan exclude vendor directory [#64](https://github.com/openshift/machine-api-provider-powervs/pull/64)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/6d9678bf4f29da8e569f24bfdc7db106c3c887ea...c35d169e1b9f0b27bf9b5dff346dc49d2ad500bd)


### [prometheus](https://github.com/openshift/prometheus/tree/3008d98b7be9ec70f7b88ecbb38636edce0b10b0)

* [OCPBUGS-67695](https://issues.redhat.com/browse/OCPBUGS-67695): chore: CVE-2025-65637: bump sirupsen/logrus to 1.9.3 [#290](https://github.com/openshift/prometheus/pull/290)
* [OCPBUGS-26423](https://issues.redhat.com/browse/OCPBUGS-26423): Add Exemplars support for all time series [#191](https://github.com/openshift/prometheus/pull/191)
* [Full changelog](https://github.com/openshift/prometheus/compare/c1fb92f494366cddc3d4cd445f84e428a76bf1ff...3008d98b7be9ec70f7b88ecbb38636edce0b10b0)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a99f9b69568e59152de12f29990d721345c3d5b9)

* [OCPBUGS-77849](https://issues.redhat.com/browse/OCPBUGS-77849): Include go-verify-deps expected files in gitignore [#122](https://github.com/openshift/prometheus-alertmanager/pull/122)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/df2f11e2ddc206ad1924ed766b4a394d84c9236f...a99f9b69568e59152de12f29990d721345c3d5b9)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/dba00dc5b1874904542bed87f49974bf64be168a)

* [OCPBUGS-28759](https://issues.redhat.com/browse/OCPBUGS-28759): Fix HTTP/2 (4.13) [#232](https://github.com/openshift/service-ca-operator/pull/232)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/5984aac13df6c2f4440c67a1a14d32958bce9ec3...dba00dc5b1874904542bed87f49974bf64be168a)


### [telemeter](https://github.com/openshift/telemeter/tree/0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)

* [OCPBUGS-34829](https://issues.redhat.com/browse/OCPBUGS-34829): fix issuer check during JWT authentication 4.13 [#540](https://github.com/openshift/telemeter/pull/540)
* [Full changelog](https://github.com/openshift/telemeter/compare/8c9a8a75108afb1ba7fe6398b004cbc8229cc645...0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)


### [tests](https://github.com/openshift/origin/tree/d14f9b8ec0093014491f498a1efaaa1d1fd57a81)

* [OCPBUGS-55954](https://issues.redhat.com/browse/OCPBUGS-55954): [build] Ensure Git Clone Does Not Run Privileged [#29769](https://github.com/openshift/origin/pull/29769)
* [OCPBUGS-54771](https://issues.redhat.com/browse/OCPBUGS-54771): Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed [#29661](https://github.com/openshift/origin/pull/29661)
* [OCPBUGS-53285](https://issues.redhat.com/browse/OCPBUGS-53285): Add/remove team members to the OWNERS file for Builds [#29608](https://github.com/openshift/origin/pull/29608)
* [OCPBUGS-53297](https://issues.redhat.com/browse/OCPBUGS-53297): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29610](https://github.com/openshift/origin/pull/29610)
* [OCPBUGS-52584](https://issues.redhat.com/browse/OCPBUGS-52584): Use payload pullspec for image info test [#29592](https://github.com/openshift/origin/pull/29592)
* [OCPBUGS-37921](https://issues.redhat.com/browse/OCPBUGS-37921): Removes dependency on samples operator images [#29007](https://github.com/openshift/origin/pull/29007)
* [OCPBUGS-35053](https://issues.redhat.com/browse/OCPBUGS-35053): updated timeout to 3 seconds to account for network timing issues [#28862](https://github.com/openshift/origin/pull/28862)
* [OCPBUGS-36501](https://issues.redhat.com/browse/OCPBUGS-36501): test/extended: skip etcd leader change check on hypershift [#28922](https://github.com/openshift/origin/pull/28922)
* [OCPBUGS-35857](https://issues.redhat.com/browse/OCPBUGS-35857): Use centos7 tag instead of latest for cmd images tests [#28895](https://github.com/openshift/origin/pull/28895)
* [OCPBUGS-33985](https://issues.redhat.com/browse/OCPBUGS-33985): Provide SCC access via RBAC [#28835](https://github.com/openshift/origin/pull/28835)
* [Full changelog](https://github.com/openshift/origin/compare/99b9d537a935e6446ba1fcd55e9a5b5ba090820a...d14f9b8ec0093014491f498a1efaaa1d1fd57a81)


### [thanos](https://github.com/openshift/thanos/tree/c48cc849a61be5d66103ef1319d287b186d9fb7d)

* [OCPBUGS-76959](https://issues.redhat.com/browse/OCPBUGS-76959): CVE-2025-65637 Update sirupsen/logrus to 1.9.3 [#168](https://github.com/openshift/thanos/pull/168)
* [OCPBUGS-27206](https://issues.redhat.com/browse/OCPBUGS-27206): Bump otel/http to 0.44.0 [openshift-4.13.z] [#138](https://github.com/openshift/thanos/pull/138)
* [Full changelog](https://github.com/openshift/thanos/compare/9d44429f5179099aa42dcc2920020d9e401cd8f7...c48cc849a61be5d66103ef1319d287b186d9fb7d)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/117e8a1a3374361c18c57297dabb35a8195be7e8)

* [OCPBUGS-78032](https://issues.redhat.com/browse/OCPBUGS-78032): hermetic migration 4.13 [#110](https://github.com/openshift/cloud-provider-vsphere/pull/110)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/f56d57ba990f7f4ce1a6b1f9842331e9259c94f1...117e8a1a3374361c18c57297dabb35a8195be7e8)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/fc5cc4b0f7987b9ae6b2141ad2bf7ef0382551bf)

* [OCPBUGS-78024](https://issues.redhat.com/browse/OCPBUGS-78024): hermetic migration 4.13 [#89](https://github.com/openshift/cluster-api-provider-vsphere/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/da63f2b930cdd6090904ee607319b40615b245f6...fc5cc4b0f7987b9ae6b2141ad2bf7ef0382551bf)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/99c8edb4437acd104fd0d1f4389a6ab7e2d4ea1a)

* [OCPBUGS-67712](https://issues.redhat.com/browse/OCPBUGS-67712): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#161](https://github.com/openshift/vmware-vsphere-csi-driver/pull/161)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4d3036a6c7fe0c850bbadd942267426afe2ec16a...99c8edb4437acd104fd0d1f4389a6ab7e2d4ea1a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2762d9ab8d76bb2dce542bc0e76e0662d1f66810)

* [OCPBUGS-67711](https://issues.redhat.com/browse/OCPBUGS-67711), [OCPBUGS-67717](https://issues.redhat.com/browse/OCPBUGS-67717): CVE-2025-65637:  Bump github.com/sirupsen/logrus to v1.8.3 [#326](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/326)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/a9e5036e12facff0193d563b752847191fc9dc91...2762d9ab8d76bb2dce542bc0e76e0662d1f66810)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/692784527ba64bc6e446b2b5d5f623f019914311)

* [OCPBUGS-67723](https://issues.redhat.com/browse/OCPBUGS-67723): bump github.com/sirupsen/logrus to v1.9.3 [#203](https://github.com/openshift/vsphere-problem-detector/pull/203)
* [OCPBUGS-57511](https://issues.redhat.com/browse/OCPBUGS-57511): Ported VPD changes for permission check [#184](https://github.com/openshift/vsphere-problem-detector/pull/184)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59...692784527ba64bc6e446b2b5d5f623f019914311)