# 4.13.58

Created: 2025-05-08 09:42:16 +0000 UTC

Image Digest: `sha256:2f46021d7977a7211e043834bda0a0fd728e04cdc7c7b657aa1f51ee7a1fbf34`


## Changes from 4.13.38

### Components

* Kubernetes upgraded from 1.26.14 to 1.26.15
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202403200554-0 to 413.92.202505061702-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [e41e11cc](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/e41e11ccf25fa74e4cfb4ace124f35cffc0191a7) `sha256:6b35661834a938fe9accb877934fc523a4782d00e08926577abd4687aa029efb`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [6384f904](https://github.com/openshift/alibaba-cloud-csi-driver/commit/6384f904d041b761670532ac183271b8110707f2) `sha256:16b3ecc755a547774f58334978ed72c6700c898ca06bcd0184d39e830709e707`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [7e415973](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/7e415973dda671d82ae58d0107af274ff053db5c) `sha256:47ad1365190ac5eafe893d49d8cf55e057ada01198661d27163f08841e4de5e3`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [4c0f96a6](https://github.com/openshift/cluster-api-provider-alibaba/commit/4c0f96a692dee91100d7085c05a68f3efb7e281d) `sha256:24e838680502b2efd46c17b2210f053860c91ba396786b8d5350a553bb6aae54`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [e1a57b5e](https://github.com/openshift/machine-api-provider-aws/commit/e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37) `sha256:bbd58b9e4834f076a5779e103ba4817262517a57abfc942d8184123700906d3c`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:7d795f9d529424252eabcac30a80bb9d8a02aaae37c0563abf35af0f464f0807`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [bf9bd022](https://github.com/openshift/cloud-provider-azure/commit/bf9bd02236e13c426d58c9828685dd6c598ff15f) `sha256:fbd74802479830111e35763fea31b88da573084ad4abb427d59d766612c023b9`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b6d3fbcb](https://github.com/openshift/azure-disk-csi-driver/commit/b6d3fbcbf312f03247092323a88a43873b693f22) `sha256:27cce691de1d1381b562bdb6b766869ad75edacfc05f361646e66796cea06313`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [8534d756](https://github.com/openshift/azure-disk-csi-driver-operator/commit/8534d7563e209e12eec38a2027cd1d9efd530071) `sha256:f6e4075c3c79257c2bfc92505478ef6950f2050dce21315024e95a6519065d97`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [70e05302](https://github.com/openshift/azure-file-csi-driver-operator/commit/70e0530255150e513061730f7624c9c235ee7c38) `sha256:6e35ce11cabf52a803c7cfd6d2f330a8ee2ba6d9459322cc3c3abf6b4811a57c`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [62f6e0f3](https://github.com/openshift/machine-api-provider-azure/commit/62f6e0f3091262a84e1d6240e2086f35635b5b5b) `sha256:994d3f869f103d294e5eb947700c60da5f9d21bdfb7f2092bcf2ad1bf8617239`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [1280cf54](https://github.com/openshift/baremetal-runtimecfg/commit/1280cf541c220af73b9886379dad2dfa4921f73b) `sha256:a443f3127d8b96a22fa7900300129a6c0fa64546347f27028fa253868b417ff6`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [1801056c](https://github.com/openshift/cluster-authentication-operator/commit/1801056c175da7d1e8d5507fa4558564740c7f4d) `sha256:2660d9c9efbdbe443f028c6da32f8a8e40b7b8f89bb87b0a4c40d76cecd5575f`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [ee908b6b](https://github.com/openshift/cluster-bootstrap/commit/ee908b6bb91dee3e61aface46d53a00b4e9288a2) `sha256:72975b5b89a5593059cc8fa7cb28f97e8162cee53714240c11394b985fcfb696`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [12f767b2](https://github.com/openshift/cluster-api/commit/12f767b2bd5de1a2641962f5d86d8564333afc65) `sha256:65702387c6fab6f1b61f98225b933d1f6747880ccb0dc00859ca46da10c76e0a`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [b247793d](https://github.com/openshift/cluster-capi-operator/commit/b247793dd364f280ad097f5266b4164740e43a44) `sha256:3a94048764fad9a13196ebe74e609226c419fccb14363b95091ce5ed21be40a2`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [a6d56530](https://github.com/openshift/cluster-config-operator/commit/a6d56530c7156bef726005d640c3ded3565104ec) `sha256:0a5f50af966f4e19fdef5e5491796813201f8aea49ebd778531bdbaacab94525`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [18c076b1](https://github.com/openshift/cluster-api-operator/commit/18c076b1b56e06086fc3e4ea89d6922cca2d6b4a) `sha256:9c351a7613a2a8218034d576f23e586f7bf47d280e8ef138c6bf0c2eef4b1748`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [dac71136](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/dac7113696160d1170d9b3773afa4a4b7cb2099b) `sha256:be5dbe5f253ff397f62e33538cba44ebaf65a3ad96fb652c281714ce932e8949`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [2e7c269b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/2e7c269b358223b89632b35840e6a91cdc7bb9aa) `sha256:4e7c9c7ec5d9968b01b1087fbead7a1fd0b51d9d86ed4d0c6421bcfa0b33c9cc`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [721de5d6](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/721de5d64083b17c22f6b784bb2c78af39d7b3b0) `sha256:001a007b7abf6e42ecf097da21c0c27322773255617a6c40335758b1f3e576cd`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [25fe7b4b](https://github.com/openshift/cluster-machine-approver/commit/25fe7b4bd96baba2eef8c0c22521fdc8c08f981d) `sha256:495ceadf5a23cc85337a72d816250baffe6426709f00a66761cf05a9336cc6db`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9abb220a](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9abb220ac11f370f323f2c248d3ee377394c88b8) `sha256:3adaf4ced0fd01304f880dc13ad46d1855c9cda4ae6a32ebe6c1bc260ed232ab`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [312c5f24](https://github.com/openshift/platform-operators/commit/312c5f24b5711a764350de899b83443a87296983) `sha256:1a9f4b9cd573737365e13982f28725f8b9fade5f4d1d4d08f77d87d3891fbef9`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [3b0d0755](https://github.com/openshift/cluster-policy-controller/commit/3b0d075530fdbfdacdfe574151a3313f5231459c) `sha256:653e624f9859753e1f264bdd685359b7c619204c86b4085d063a6f12f5a44f7b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9adad592](https://github.com/openshift/configmap-reload/commit/9adad592e7d9bd5a723add16488e68365a64977f) `sha256:218c5884c34ca73fcfda585b4997cc0fa427b13608d34b14920336c23ae5ba13`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [614ca3c3](https://github.com/openshift/containernetworking-plugins/commit/614ca3c35e1847f38f0f427c04a064cd31ac5002) `sha256:7b8d30540a71df4fe3c017ad768ab3a7b05e8db8f68916162f36e2044cfddce3`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [c3b7d2f5](https://github.com/openshift/cloud-provider-openstack/commit/c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32) `sha256:1e38f0daecc74a115a854300f36bf3af6cfe0c6a36f431a183449a49e2a0d07e`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [596a53c8](https://github.com/openshift/csi-driver-manila-operator/commit/596a53c8fb79eddf85bad8deb504536adf228128) `sha256:73c37ef100613a46a99b1860a295f86e23b96d8a7e44cde52583a8fd7605585e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [2b914c21](https://github.com/openshift/csi-driver-nfs/commit/2b914c2161722ebf11f9275fa29e00a0b1306da1) `sha256:47292803c6ec0f9b2ef5ec62d35f479b842ad39b752b63f515f230db69c3b691`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [01bbb23b](https://github.com/openshift/csi-driver-shared-resource/commit/01bbb23b627835354f6177b4b44cfc50bd6d9a2e) `sha256:a30891e1058b5fc9d08f93012f631748b9d2292d8d739203e22365d497afbc65`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [bc169d2d](https://github.com/openshift/csi-driver-shared-resource-operator/commit/bc169d2d8d1cd128770d2202c6cc00e5328e4e73) `sha256:9a051f979c35d69d59b5e96bf2d4a31e509345ee4a64b1301324a116bc981a72`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [01bbb23b](https://github.com/openshift/csi-driver-shared-resource/commit/01bbb23b627835354f6177b4b44cfc50bd6d9a2e) `sha256:0059cc67dd9f302cbab916dea5b0246c4ae6288c22316e135a0b899b7e49d7bd`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [d9290843](https://github.com/openshift/csi-external-attacher/commit/d92908438817984fc47558fdaa03805d8c3b256c) `sha256:7c5e3a5b97fbbdd7984a81e8fca0ffd85f8408a7206ff79db9dbbb4e94a32034`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [0bf126b7](https://github.com/openshift/csi-external-provisioner/commit/0bf126b77a721ddaa4706fcb41f8b7be8d292492) `sha256:b130bbfc93fca14bbdaa484be203fd3dd15e78d63042e02c6aba9e9ba8817573`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e8036caf](https://github.com/openshift/csi-external-resizer/commit/e8036caff2482648a18c1ac776cf9d2474569d10) `sha256:b3d93ecc3d6e26f25e4ef56af644f9d0b60a75a524cd8e0e3455a8ff2024a4f2`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:14047f83616570d9584879c0444bab2f328c438a857132ec38fd4d5aa2fc522a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3587db51](https://github.com/openshift/csi-livenessprobe/commit/3587db51b8a672a2d3be2ac48ea107e474f33402) `sha256:504db9220e1bf46791e0b7a995543d5e587ed60c486cd708dfaef2d4260a71a7`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9ea90f34](https://github.com/openshift/csi-node-driver-registrar/commit/9ea90f34485500a525fcaad3d79ee82a41402d47) `sha256:cb2129b719e6997ee147459edce6ba20c00e2308ab81f9b18f842f540b07cf37`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:5ca220ee6f72706d394e8d9cb1c1dc25a8d18fe284c9306a3f703b7b28671824`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [c8a7a097](https://github.com/openshift/csi-external-snapshotter/commit/c8a7a097f68b37ad06a87a4b5c480daeab45be85) `sha256:36eefef18accd753b869788b4891d50f87ee33f4dff87a1b7ef9ce4db35e86a8`
* [docker-registry](https://github.com/openshift/image-registry) git [47a15ac8](https://github.com/openshift/image-registry/commit/47a15ac8b7233bb1de44c1364bbd787de2edaaf0) `sha256:b15cc982fc79f1afc7346d578821c6c80ae6e1e0b6ee1c2e77340cfff0a2be57`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:bf3ce5247b64b65685f59cb0c33b1c933cf3a215d44f019ee79bb83be4be64fd`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [dfe03737](https://github.com/openshift/egress-router-cni/commit/dfe03737f1562e81aa09101e4a48f039245bd339) `sha256:4a1882927aa0730aa113759930b4f529ee268c264f17ff912774f7a1d98ca18d`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [507fea98](https://github.com/openshift/cloud-provider-gcp/commit/507fea9800dc63da95ce551d2fb03219d0b0597a) `sha256:6c8e361878de34517ebd3f23e84577d683ef1c0d61ecbb257de9291ff4c56691`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [b8a27725](https://github.com/openshift/cluster-api-provider-gcp/commit/b8a2772574aacf16a998ff7c7ba24000eff60d07) `sha256:cf4035279328a71212fc25a49ade7f2f224d4f46a3241b4b4d48ca0527f11aff`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [e53a397d](https://github.com/openshift/machine-api-provider-gcp/commit/e53a397d838137a37895fe668cba4857a82e7da2) `sha256:472872bf3463e1805eaa55d2b4a72cc18566243cc8f86c536ac7f22dd0519cfc`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [81e60746](https://github.com/openshift/gcp-pd-csi-driver/commit/81e6074605854246cdab8425a7289ad83169571a) `sha256:0d4983cbb596643ce8140dfb06e738e925786aff000ab33f0b863c93603f9d51`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [08c561b8](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/08c561b8292b4a5de3d5bc553a3e463b1f93ec0c) `sha256:3a5a5080bf1f1198f4f49a3a474cea519ac5332db52ebd91bc795369254ccf7b`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [b5bcaf9c](https://github.com/openshift/cloud-provider-ibm/commit/b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25) `sha256:cdddb704698b35cf7ce3e91ef6b9d2ed2b5f1ac2941f966d79a97225a2579c2d`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [ce291779](https://github.com/openshift/ironic-rhcos-downloader/commit/ce2917794de5723248fe3302c8833f89fb54265a) `sha256:095164d2f1c01a6eb6d84bca0dff1f6f7fb8594cff43c2a7552e2cfa5810a4d4`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [4536724a](https://github.com/openshift/ironic-static-ip-manager/commit/4536724a8644fda91a74b23901ba1789eaff7179) `sha256:f989cebce6c372b3b5b1760437005c6c65a790d81cd5a5b1037b03aee73884b3`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [0fce7c7c](https://github.com/openshift/k8s-prometheus-adapter/commit/0fce7c7c97d56ba0a0ae4c6a2ba32e559b8a03d7) `sha256:6b92e5ba76d93a9521a78770eba00751255a944259c03e0ecf27d4f365cf7f08`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1a14e5c9](https://github.com/openshift/images/commit/1a14e5c9896976b43767ab325a6fe35527a514a5) `sha256:0113877f25903b83281dd2c1912e0175af7e3b194ccd655604c66db312583338`
* [kube-proxy](https://github.com/openshift/sdn) git [569ea111](https://github.com/openshift/sdn/commit/569ea1116cb348a31ea757b0a76d21de6bc8bcba) `sha256:9ebfddb9b8fcef8231c880f5490281ab1af8ac19ef575b70289f0ec70cbbecdb`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [fd791df5](https://github.com/openshift/kube-state-metrics/commit/fd791df54d7271c1611090505509a03454168689) `sha256:ed06f12419f8284861ad401be0405263ee2448b287b8c350312684d09eb73741`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [bad104d1](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/bad104d13ba95bc850f5aaf96436f793d7985864) `sha256:3456eaec2b1691a940a9daeb60d9f58e46b34c95551df276696a816e5d8f61e0`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [ee2033ec](https://github.com/openshift/cloud-provider-kubevirt/commit/ee2033ecd471dc9fc08d101c421a04916f4f55c5) `sha256:ceeb74be0133aa5263654f36c89e82b74fa32629b9448350c69c4ffd3be8ef11`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:d10aeeef401ea96b2d239cd7c23bdbd29d5f95bb339e79a36346594f97f1a272`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:a85096156df15207d9ea7a30d277f0148393e1cb1f5fd0f5c01b7e407845c0c4`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [d4b7a8ab](https://github.com/openshift/cluster-api-provider-libvirt/commit/d4b7a8ab790a970ce2f0374146248b2307df0185) `sha256:dcc12f84b87b1c8d195f0a9115ec08919c722ab3f1b7f3e3d1d1786a3058636b`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [34a4abe6](https://github.com/openshift/image-customization-controller/commit/34a4abe6ec47fff69476695eccffdb27fe23780c) `sha256:f7860bce172a8ed856f08a931a0285530ce760ab1fd2653a5c2647c9c2688989`
* machine-os-content `sha256:24435df4531fafa548b865dccac1ecbdf2bef473941f88a8268297b53c4c1ab1`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [9b0656af](https://github.com/openshift/multus-admission-controller/commit/9b0656af8316420bf05a7d3a0969feded615ed64) `sha256:498d9e4ce2f46c2344aca5f23912a901d7365d6d9fe99b21b78fcb2078c201d6`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7176ab75](https://github.com/openshift/multus-networkpolicy/commit/7176ab75edaf6328bb1da06ba55378815271d218) `sha256:7dab5e3d3c90a1c21489dd373362c32e776e3f7b6b9be8078dc6048ec616e99a`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [ca3bbec5](https://github.com/openshift/route-override-cni/commit/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3) `sha256:878aabcf6296fc58098ef215a91fb6c6b59fac92baf6df40f4db6e27bd12cbd3`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [84bda2af](https://github.com/openshift/bond-cni/commit/84bda2afb2ab260253b77d5d282df773cc6b3438) `sha256:3e24375d51a95405a332271b56a30269c441ee148b12d02ba559f6c71594a760`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [3ef81a5c](https://github.com/openshift/network-metrics-daemon/commit/3ef81a5c468171f22d626c544fd7f02adc156ceb) `sha256:ccaff34c562bafb33a8dea281c1bac0cf95538df011ed80e46da34d5255c5d9b`
* [network-tools](https://github.com/openshift/network-tools) git [073feda1](https://github.com/openshift/network-tools/commit/073feda14fbd894c4238d693afa38a06392f2360) `sha256:c02e74a36878bc56a7b415654bfff711c1794ac0a3c3648c5fd2170675ae87da`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [44af5a3a](https://github.com/openshift/oauth-proxy/commit/44af5a3a021fd158c2e44d9951ad59a3d474cdf3) `sha256:57a453ca5454c330f36063eaccf5e56d0587b165ec2b5daa84f5e3fb36d57dcf`
* [oauth-server](https://github.com/openshift/oauth-server) git [eb54be28](https://github.com/openshift/oauth-server/commit/eb54be281d8f215a6eaa6e10ed1b303c7d064bac) `sha256:6a10569c2c9a64c149053d93708dad01e9d0c23e1c5e64042addac8edc18baa4`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [9be421f0](https://github.com/openshift/openshift-state-metrics/commit/9be421f0c013c7f134c1d7cfe1c0ee2f2ae8eaf6) `sha256:aeefaab0fdaa986a77bbeef108cef1d29156ebc98a4fa927d84918f2e3c4819b`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [c3b7d2f5](https://github.com/openshift/cloud-provider-openstack/commit/c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32) `sha256:c7f937087f3a7ca3a70cf71e3208846c728b7abadb53672d07a96119acb8725b`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [b50a649b](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/b50a649be8b691a6081487330da17e55d242a2e5) `sha256:03a0dd7562d5afe26f6a506074ef78149ebd7f64fff51115f3a774cf140311c4`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [c3b7d2f5](https://github.com/openshift/cloud-provider-openstack/commit/c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32) `sha256:4833367e7a3a94b76b350799227dcebb0f118250ad417b6f5e339dd0385186e2`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [54958deb](https://github.com/openshift/ovirt-csi-driver/commit/54958deb4998e08696af0abe3585486a6b5b6800) `sha256:ac5bc58b8e1940583005cfa6ab04a30872514b5a1a2c8b21cb9070c708d6ab44`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [b293972f](https://github.com/openshift/ovirt-csi-driver-operator/commit/b293972fe2c5eef4262130de621e75e5d0c37d8e) `sha256:bfe2e48476b2573f00ac656298fa712dcb2393d2871fb0abad1a16f10e72a468`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [22d89b3f](https://github.com/openshift/cluster-api-provider-ovirt/commit/22d89b3fd9e2e395a62f71092487d26c8940052e) `sha256:a793e754e58d2cfb56eafd41c20d469afaccfd1410950bd183b59ddc7acb0d17`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [e70c980e](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/e70c980e2561788b710d710efc3e09974ad7374c) `sha256:b0d3ac017b538f8eab7a7346b7ac5eb5b53a963e0ff48570e9c2692ef2c19d30`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b501d5e2](https://github.com/openshift/prom-label-proxy/commit/b501d5e2aff82d46a141223636b522aeae95b915) `sha256:84424961239f48399cee6090dc34c961c7362d7ecd51dbbda6eeaed77af69b28`
* [prometheus](https://github.com/openshift/prometheus) git [72886096](https://github.com/openshift/prometheus/commit/72886096272245e064297c480b24ac4895230c89) `sha256:901f3803636371dea5dcc990ce5c4fa4ac8a700b96a2aa31ccbc4b527e377493`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [df2f11e2](https://github.com/openshift/prometheus-alertmanager/commit/df2f11e2ddc206ad1924ed766b4a394d84c9236f) `sha256:dbaf313c82ac182eb2524d61e481aaca79ee9aa23408c0430fbe507b4b2ecc96`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:0471b66596dff273beb47a7ae9ef29c2d319cfd2f568fba91917b9594e7ff6b4`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [59d699ca](https://github.com/openshift/node_exporter/commit/59d699cac664bfbfe83ef6a1615e34e062fd283d) `sha256:12a05f3c86f9349e25f4341257caee5ce93018cc4e56f881ec083768723a7d46`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:680dca24a86e43ba38e7b84ac1f4d186499e6c0b25d1b60167c8159df184f5ab`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [30fdccd1](https://github.com/openshift/prometheus-operator/commit/30fdccd139b2c63a9207bd30509aec8ddec7ff5d) `sha256:24a0a72d8393301dc1222edab256e7a3ec16bc70f6623152c3c04f6a9c59e045`
* rhel-coreos `sha256:9f1fa3b4bd4adf89f961bf5317fec000b8952ab2f214933ad283041d8268583e`
* rhel-coreos-extensions `sha256:a83a1cc58ec694fe7efb07f6aaa13d462d0013c36f5c0c04208c06c2845a07e9`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [6667a6cb](https://github.com/openshift/route-controller-manager/commit/6667a6cbf9a87331fcc4407375118c0bb884c925) `sha256:cd8cad7979a93f0a3d782643f478ba0b37a36b2c2d1de1ed552718d1bb270985`
* [sdn](https://github.com/openshift/sdn) git [569ea111](https://github.com/openshift/sdn/commit/569ea1116cb348a31ea757b0a76d21de6bc8bcba) `sha256:5bf4e142c4efb9c3d3811490c2af07717409f31b8536c8378f8c956799ee29ed`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dba00dc5](https://github.com/openshift/service-ca-operator/commit/dba00dc5b1874904542bed87f49974bf64be168a) `sha256:0788ddcf0a9df3bfa702d9728176cac1236c875527f955380c9dc81a3d9026e9`
* [thanos](https://github.com/openshift/thanos) git [70fb57fb](https://github.com/openshift/thanos/commit/70fb57fb209e5aa491417fc421a97d417a5530bc) `sha256:c12c79616e9b9d53ba1241a8cb413af4b9b666d687e2eb03612e24820650d05a`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f56d57ba](https://github.com/openshift/cloud-provider-vsphere/commit/f56d57ba990f7f4ce1a6b1f9842331e9259c94f1) `sha256:5cf8c60541ee633619c206ff29e9a31eb72a5972e0fa4676821477ac63c11145`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [da63f2b9](https://github.com/openshift/cluster-api-provider-vsphere/commit/da63f2b930cdd6090904ee607319b40615b245f6) `sha256:b1f999470b563da16441760553ecf03df3afe07a6bfc670e2585960ff1572aa8`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [4d3036a6](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4d3036a6c7fe0c850bbadd942267426afe2ec16a) `sha256:81a0f01cfd35384bc16e1bd06994bb9724246094cc3aa5adc128ba8321e16577`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [a9e5036e](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/a9e5036e12facff0193d563b752847191fc9dc91) `sha256:37f72e8f384fe2f438435a40c25158f5d0aec4b2c33de7505e4f368c109c8ff5`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [4d3036a6](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4d3036a6c7fe0c850bbadd942267426afe2ec16a) `sha256:dd83ff4f5a128daa3da369b7d55e5c85962ad139c2e90f38ae1379f45e25d3b8`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3ad7408f](https://github.com/openshift/vsphere-problem-detector/commit/3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59) `sha256:996f41eca94f896224a148d4cf22124284fdd4dc913d03185265162767102aa7`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/643d4b738c2af8c300150fa9bbd26de3d0fa69a3)

* [OCPBUGS-53693](https://issues.redhat.com/browse/OCPBUGS-53693): Bump jwt to 4.5.2 in release-4.13 (#7512) [#7512](https://github.com/openshift/assisted-service/pull/7512)
* [OCPBUGS-13611](https://issues.redhat.com/browse/OCPBUGS-13611): Update version go-http-metrics/gin (#6919) [#6919](https://github.com/openshift/assisted-service/pull/6919)
* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) [#6215](https://github.com/openshift/assisted-service/pull/6215)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) [#6202](https://github.com/openshift/assisted-service/pull/6202)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6196) [#6196](https://github.com/openshift/assisted-service/pull/6196)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) [#6133](https://github.com/openshift/assisted-service/pull/6133)
* [Full changelog](https://github.com/openshift/assisted-service/compare/06189bcdb0bea068f8ac51a3550fcdcbde522a76...643d4b738c2af8c300150fa9bbd26de3d0fa69a3)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/531711ec816817a6e1f2efc786b28f314414a8f2)

* [OCPBUGS-53717](https://issues.redhat.com/browse/OCPBUGS-53717): Bump jwt to 4.5.2 in release-4.13 (#1094) [#1094](https://github.com/openshift/assisted-installer/pull/1094)
* Bump golang.org/x/net to 0.33.0 (#1015) [#1015](https://github.com/openshift/assisted-installer/pull/1015)
* [OCPBUGS-13612](https://issues.redhat.com/browse/OCPBUGS-13612): Update version go-http-metrics/gin (#935) [#935](https://github.com/openshift/assisted-installer/pull/935)
* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) [#835](https://github.com/openshift/assisted-installer/pull/835)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) [#829](https://github.com/openshift/assisted-installer/pull/829)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#826) [#826](https://github.com/openshift/assisted-installer/pull/826)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/edf25423e34294b754ac16a67dbaf1aed7467ca4...531711ec816817a6e1f2efc786b28f314414a8f2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/88ef20ae4371ae61f9631b7e085fc929bcbccd2f)

* [OCPBUGS-53709](https://issues.redhat.com/browse/OCPBUGS-53709): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.13 (#974) [#974](https://github.com/openshift/assisted-installer-agent/pull/974)
* [OCPBUGS-46952](https://issues.redhat.com/browse/OCPBUGS-46952): Bump golang.org/x/net to 0.33.0 (#886) [#886](https://github.com/openshift/assisted-installer-agent/pull/886)
* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) [#706](https://github.com/openshift/assisted-installer-agent/pull/706)
* NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) [#700](https://github.com/openshift/assisted-installer-agent/pull/700)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) [#702](https://github.com/openshift/assisted-installer-agent/pull/702)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#697) [#697](https://github.com/openshift/assisted-installer-agent/pull/697)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c5611048e36de8c7c917451fa8e4fb3f1edb8b6a...88ef20ae4371ae61f9631b7e085fc929bcbccd2f)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/3362d673b054807a4974b4d600486933f7e0bd42...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/95c03b7b838f7c78efe8957b50c50a22cd625be7)

* [OCPBUGS-32073](https://issues.redhat.com/browse/OCPBUGS-32073): update for CVE-2023-45288 [release-4.13] [#84](https://github.com/openshift/cloud-provider-aws/pull/84)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/f116a0dda271dfde3c14269047967b3ead1ee94e...95c03b7b838f7c78efe8957b50c50a22cd625be7)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/27360a3967ed742a9eb1b0c2ed539d99ec6b9424)

* [OCPBUGS-32470](https://issues.redhat.com/browse/OCPBUGS-32470): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#509](https://github.com/openshift/cluster-api-provider-aws/pull/509)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/de23838384b0859542041395fd84100efee34833...27360a3967ed742a9eb1b0c2ed539d99ec6b9424)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/8205d51c798f8fea91eb6c1702fb63e7d6c17005)

* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments [#266](https://github.com/openshift/aws-ebs-csi-driver/pull/266)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/325cb029f5dac51e4efabe89a62315af134cad8d...8205d51c798f8fea91eb6c1702fb63e7d6c17005)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/8f05d9cd9f35c40ab0929577a9650a02c88a2be0)

* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): Explicitly reserve 1 attachment for the root disk [#307](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/307)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/3cb879a801f54ecc5d03c7404deba7ca25bb5af5...8f05d9cd9f35c40ab0929577a9650a02c88a2be0)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ae01a272aff73b1390ee4c3934cc2382370a1660)

* [OCPBUGS-32882](https://issues.redhat.com/browse/OCPBUGS-32882): Upgrade go-jose module to 2.6.3 [#190](https://github.com/openshift/aws-pod-identity-webhook/pull/190)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/06140aba64cbaca89af882d1a658e318063fb928...ae01a272aff73b1390ee4c3934cc2382370a1660)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/3f757a8f2ada44c7124f5d0205feb29b0fff1977)

* [OCPBUGS-36022](https://issues.redhat.com/browse/OCPBUGS-36022): Update go-retryablehttp to v0.7.7 [#314](https://github.com/openshift/cluster-api-provider-azure/pull/314)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/aa3b650ee93e7cb92556cf2e917074011578c040...3f757a8f2ada44c7124f5d0205feb29b0fff1977)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/15e6f80ec4be826cd5d03ef4126be0dd171b506e)

* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): bump mount-utils to treat ENODEV error as corrupted mount [#81](https://github.com/openshift/azure-file-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/33d52ecd52b09ba3ab431ce2e2850262a88c2282...15e6f80ec4be826cd5d03ef4126be0dd171b506e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/ded53d3be270eaafef3f5bb26130704f229ff415)

* [OCPBUGS-55034](https://issues.redhat.com/browse/OCPBUGS-55034): IBMCloud: Move to IBM TF openshift fork [#9668](https://github.com/openshift/installer/pull/9668)
* [OCPBUGS-39217](https://issues.redhat.com/browse/OCPBUGS-39217): Add yq v4 to ci image [#8922](https://github.com/openshift/installer/pull/8922)
* [OCPBUGS-36088](https://issues.redhat.com/browse/OCPBUGS-36088): [release-4.13]: bump go-retryablehttp for CVE fix [#8659](https://github.com/openshift/installer/pull/8659)
* [OCPBUGS-29124](https://issues.redhat.com/browse/OCPBUGS-29124): IBMCloud: Handle disk delete errors [#7989](https://github.com/openshift/installer/pull/7989)
* [OCPBUGS-37168](https://issues.redhat.com/browse/OCPBUGS-37168): Add yq-v4 to the upi-installer image for CI [#8743](https://github.com/openshift/installer/pull/8743)
* [OCPBUGS-35976](https://issues.redhat.com/browse/OCPBUGS-35976): [release-4.13] bump github.com/containers/image for CVE fix [#8651](https://github.com/openshift/installer/pull/8651)
* [OCPBUGS-33732](https://issues.redhat.com/browse/OCPBUGS-33732): preserve category name when trying to find tag category [#8419](https://github.com/openshift/installer/pull/8419)
* [OCPBUGS-33062](https://issues.redhat.com/browse/OCPBUGS-33062): openstack: Honour worker server group policy [#8323](https://github.com/openshift/installer/pull/8323)
* [OCPBUGS-32359](https://issues.redhat.com/browse/OCPBUGS-32359): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8284](https://github.com/openshift/installer/pull/8284)
* [OCPBUGS-22979](https://issues.redhat.com/browse/OCPBUGS-22979): IBMCloud: Add eu-es region [#7685](https://github.com/openshift/installer/pull/7685)
* [Full changelog](https://github.com/openshift/installer/compare/d334d540ab3d5f4ec3344b5ded7c454509c3639d...ded53d3be270eaafef3f5bb26130704f229ff415)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/a2c6ca64501e5a4b251ab7873adb2bbe31b1320d)

* [OCPBUGS-46640](https://issues.redhat.com/browse/OCPBUGS-46640): Bump x/net 0.33.0 [#229](https://github.com/openshift/cluster-api-provider-baremetal/pull/229)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/336497557b48d67635a7be2bf26ae6a885a67560...a2c6ca64501e5a4b251ab7873adb2bbe31b1320d)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3f56e498ce77b472070c804fca0522eb234ed99f)

* [OCPBUGS-53334](https://issues.redhat.com/browse/OCPBUGS-53334): BMO can expose any secret via BMCEventSubscription CRD 4.13 [#411](https://github.com/openshift/baremetal-operator/pull/411)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/f6db335c7a6fe564a6ef56a98b71e230e685fc6f...3f56e498ce77b472070c804fca0522eb234ed99f)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d192e901ece237d9ae1580d73e78f423ec2ef322)

* [OCPBUGS-30288](https://issues.redhat.com/browse/OCPBUGS-30288): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1700](https://github.com/openshift/oc/pull/1700)
* [Full changelog](https://github.com/openshift/oc/compare/7780c379ac62ddfc982b81eb0c4470b9597f505e...d192e901ece237d9ae1580d73e78f423ec2ef322)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/134ade41c3293d81d0966e4d4644d18f0e7368e6)

* [OCPBUGS-53419](https://issues.redhat.com/browse/OCPBUGS-53419): github.com/golang/glog v1.2.4 [#846](https://github.com/openshift/cloud-credential-operator/pull/846)
* [OCPBUGS-51546](https://issues.redhat.com/browse/OCPBUGS-51546): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#831](https://github.com/openshift/cloud-credential-operator/pull/831)
* [OCPBUGS-43340](https://issues.redhat.com/browse/OCPBUGS-43340): Update github.com/sirupsen/logrus v1.8.3 [#770](https://github.com/openshift/cloud-credential-operator/pull/770)
* [OCPBUGS-37834](https://issues.redhat.com/browse/OCPBUGS-37834): Resolve SNYK errors in security job. [#743](https://github.com/openshift/cloud-credential-operator/pull/743)
* [OCPBUGS-37421](https://issues.redhat.com/browse/OCPBUGS-37421): SNYK ignore go-client misreporting [#740](https://github.com/openshift/cloud-credential-operator/pull/740)
* [OCPBUGS-36028](https://issues.redhat.com/browse/OCPBUGS-36028): IBM/go-sdk-core update to v5.17.4 [#722](https://github.com/openshift/cloud-credential-operator/pull/722)
* [OCPBUGS-32898](https://issues.redhat.com/browse/OCPBUGS-32898): Upgrade go-jose module to 2.6.3 [#698](https://github.com/openshift/cloud-credential-operator/pull/698)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e1c403be7e7e054ae167c061878805b2d2276b9e...134ade41c3293d81d0966e4d4644d18f0e7368e6)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d377281c10ab68ea3faf4775f015c1651004b0ff)

* [OCPBUGS-32180](https://issues.redhat.com/browse/OCPBUGS-32180): Avoid nil pointer panic while assigning private IP on Azure [#139](https://github.com/openshift/cloud-network-config-controller/pull/139)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/78d453a5ca0f5e009d3a16e62f2e0e35c3ac5a9c...d377281c10ab68ea3faf4775f015c1651004b0ff)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/3ce55c7137713427df9f9fe163b1cb9c775290b6)

* [OCPBUGS-45151](https://issues.redhat.com/browse/OCPBUGS-45151): [release-4.13] VPA: Update OWNERS file [#328](https://github.com/openshift/kubernetes-autoscaler/pull/328)
* [OCPBUGS-40929](https://issues.redhat.com/browse/OCPBUGS-40929): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#317](https://github.com/openshift/kubernetes-autoscaler/pull/317)
* [OCPBUGS-31702](https://issues.redhat.com/browse/OCPBUGS-31702): add check for taint.value == nil [#295](https://github.com/openshift/kubernetes-autoscaler/pull/295)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/80cb6c58a87dbe842eb33cf9ec23ff96911e01c9...3ce55c7137713427df9f9fe163b1cb9c775290b6)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/0007e9081f1d7aecd652c0843815be4844f67453)

* [OCPBUGS-31992](https://issues.redhat.com/browse/OCPBUGS-31992): Update x/net to v0.25.0 [#324](https://github.com/openshift/cluster-autoscaler-operator/pull/324)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/ade6cfb16944db8e2151f921640041e0b2a403c3...0007e9081f1d7aecd652c0843815be4844f67453)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/cc237f106bbe804c1e16c2781c8a2a73fb5a1099)

* [OCPBUGS-31993](https://issues.redhat.com/browse/OCPBUGS-31993): bump x/net to 0.23.0 [#439](https://github.com/openshift/cluster-baremetal-operator/pull/439)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b5eb7b6c7b85dd8ef51fe138ec7e6b5392391c11...cc237f106bbe804c1e16c2781c8a2a73fb5a1099)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/38f638f020ff1e34d33fd44c42b0351912a74486)

* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update azure and ash tolerations on node manager [#353](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/353)
* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update unit tests [release-4.13] [#354](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/354)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/288b3fe3f2637e3ac80464cc5513011fd3a3c583...38f638f020ff1e34d33fd44c42b0351912a74486)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c5fb62818751e8372d1febd631d9671d83f62962)

* [OCPBUGS-48259](https://issues.redhat.com/browse/OCPBUGS-48259): Add unreadyNodeGracePeriod for allowing brief node hiccups [#342](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/342)
* [OCPBUGS-35380](https://issues.redhat.com/browse/OCPBUGS-35380): Improved debugging of API listing errors [#304](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/304)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/492cc21b66edf7bb0032e7e5bcdf3b94cc38cfd7...c5fb62818751e8372d1febd631d9671d83f62962)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/c068540d9976ba0fd272e2848de9b0d31a2b7a17)

* [OCPBUGS-32334](https://issues.redhat.com/browse/OCPBUGS-32334): create suitable role and roleBinding for csi-snapshot-webhook [#206](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/206)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/544bc12e412d94153ef711cc0bb55eb40ab6d43e...c068540d9976ba0fd272e2848de9b0d31a2b7a17)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/65a8fdac5800978f535260997def3e58245f814b)

* [OCPBUGS-52501](https://issues.redhat.com/browse/OCPBUGS-52501): [release-4.13] Add runbook_url for CoreDNSErrorsHigh [#434](https://github.com/openshift/cluster-dns-operator/pull/434)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints iff nodes in >=2 zones [#418](https://github.com/openshift/cluster-dns-operator/pull/418)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Ignore max unavailable for status [#417](https://github.com/openshift/cluster-dns-operator/pull/417)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/759791edae6fcd129e9f04adf6406328892f0f53...65a8fdac5800978f535260997def3e58245f814b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c46a23ef3c5724b51a8bbae4174eb34f4437882b)

* [OCPBUGS-53509](https://issues.redhat.com/browse/OCPBUGS-53509): fix CVE-2025-30204 [#1415](https://github.com/openshift/cluster-etcd-operator/pull/1415)
* [OCPBUGS-35077](https://issues.redhat.com/browse/OCPBUGS-35077): return errors in wait-for-ceo [#1273](https://github.com/openshift/cluster-etcd-operator/pull/1273)
* [OCPBUGS-31988](https://issues.redhat.com/browse/OCPBUGS-31988): update golang x net [#1255](https://github.com/openshift/cluster-etcd-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c9b9bec902f93acc8469e0f6b502d0bab1734f67...c46a23ef3c5724b51a8bbae4174eb34f4437882b)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/19ee668b5c3f9037e1353ca9e5e3e0ca924ae31e)

* [OCPBUGS-36034](https://issues.redhat.com/browse/OCPBUGS-36034): go.*,vendor: bump go-retryablehttp [#1070](https://github.com/openshift/cluster-image-registry-operator/pull/1070)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/26ddef6b6f7036de02713bb678c6c8e6a7ea8a04...19ee668b5c3f9037e1353ca9e5e3e0ca924ae31e)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a45f7a3a44ead85d2e36a57723fc05fc0919c63e)

* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1161](https://github.com/openshift/cluster-ingress-operator/pull/1161)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add e2e test for duplicate Transfer-Encoding headers [#1150](https://github.com/openshift/cluster-ingress-operator/pull/1150)
* [OCPBUGS-36551](https://issues.redhat.com/browse/OCPBUGS-36551): Add Regexp Anchor to TestAll [#1104](https://github.com/openshift/cluster-ingress-operator/pull/1104)
* [OCPBUGS-35453](https://issues.redhat.com/browse/OCPBUGS-35453): [release-4.13] internal service changed fix target port logic [#1089](https://github.com/openshift/cluster-ingress-operator/pull/1089)
* [OCPBUGS-35094](https://issues.redhat.com/browse/OCPBUGS-35094): TestHostNetworkPortBinding: Delete t.Parallel() [#1082](https://github.com/openshift/cluster-ingress-operator/pull/1082)
* [OCPBUGS-34765](https://issues.redhat.com/browse/OCPBUGS-34765): Don't add clientca-configmap finalizer if deleting [#1073](https://github.com/openshift/cluster-ingress-operator/pull/1073)
* [OCPBUGS-34409](https://issues.redhat.com/browse/OCPBUGS-34409): desiredRouterDeployment: Set HostPort if needed [#1062](https://github.com/openshift/cluster-ingress-operator/pull/1062)
* [OCPBUGS-33990](https://issues.redhat.com/browse/OCPBUGS-33990): Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] [#1055](https://github.com/openshift/cluster-ingress-operator/pull/1055)
* [OCPBUGS-34476](https://issues.redhat.com/browse/OCPBUGS-34476): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1065](https://github.com/openshift/cluster-ingress-operator/pull/1065)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5379ce1cb9305d89e0349a3e80fac8801c72eb42...a45f7a3a44ead85d2e36a57723fc05fc0919c63e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e9e717254ca8e479db297144d316363467f2f5fe)

* [OCPBUGS-50850](https://issues.redhat.com/browse/OCPBUGS-50850): Increase waitForFallbackDegradedConditionTimeout [#1809](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1809)
* [OCPBUGS-34062](https://issues.redhat.com/browse/OCPBUGS-34062): [4.13] add a controller that reconciles SCCs' volumes [#1677](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1677)
* [OCPBUGS-25922](https://issues.redhat.com/browse/OCPBUGS-25922): [release-4.13] dashboard: use recording rules for most metrics [#1611](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1611)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a5ca01222476bb9f05916217be6f94f08e91a4ec...e9e717254ca8e479db297144d316363467f2f5fe)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3aa76870066af1d0266ab39201856ba711fd08d7)

* [OCPBUGS-33581](https://issues.redhat.com/browse/OCPBUGS-33581): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2344](https://github.com/openshift/cluster-monitoring-operator/pull/2344)
* [OCPBUGS-28767](https://issues.redhat.com/browse/OCPBUGS-28767): fix generation of telemeter token hash [#2305](https://github.com/openshift/cluster-monitoring-operator/pull/2305)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/940be901f1ce6c462dd1b437e51a28761362c292...3aa76870066af1d0266ab39201856ba711fd08d7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/df5cf2735b29eb5ca630ec89579ab2bb7a7425b2)

* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2547](https://github.com/openshift/cluster-network-operator/pull/2547)
* [OCPBUGS-38403](https://issues.redhat.com/browse/OCPBUGS-38403): Add missing runbook for OVNKubernetesNorthdInactive [#2471](https://github.com/openshift/cluster-network-operator/pull/2471)
* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941): update whereabouts crd [#2458](https://github.com/openshift/cluster-network-operator/pull/2458)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/257435702312e418be694f4b98b8fe89557030c6...df5cf2735b29eb5ca630ec89579ab2bb7a7425b2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/978a6c56e163f119f757d7116fa99d6b05f7d7f5)

* E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) [#1069](https://github.com/openshift/cluster-node-tuning-operator/pull/1069)
* [OCPBUGS-33030](https://issues.redhat.com/browse/OCPBUGS-33030): [release-4.13][manual]Reduce number of reboots in offline tests (#1048) [#1048](https://github.com/openshift/cluster-node-tuning-operator/pull/1048)
* Scheduler plugin: ignore IRQs (#1027) [#1027](https://github.com/openshift/cluster-node-tuning-operator/pull/1027)
* irqbalance: set banned cpus list to 0 (#1003) [#1003](https://github.com/openshift/cluster-node-tuning-operator/pull/1003)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4ce5b7501c27c6ced4f4b433c0e983766608e853...978a6c56e163f119f757d7116fa99d6b05f7d7f5)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/6e7e7835519d30ea22e4c4954039bab21de19c80)

* [OCPBUGS-38455](https://issues.redhat.com/browse/OCPBUGS-38455): Update opentelemetry to mitigate CVE [#365](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d2818fb5a41defcf3af577fa4cb0a247700ce44a...6e7e7835519d30ea22e4c4954039bab21de19c80)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/7e7affad59551611aeb3fb2e5a21f1ec8d99181b)

* [OCPBUGS-54812](https://issues.redhat.com/browse/OCPBUGS-54812): add rhdmalone to owners [#628](https://github.com/openshift/cluster-samples-operator/pull/628)
* [OCPBUGS-49663](https://issues.redhat.com/browse/OCPBUGS-49663): add shannon and aroyoredhat as owners [#599](https://github.com/openshift/cluster-samples-operator/pull/599)
* [OCPBUGS-21198](https://issues.redhat.com/browse/OCPBUGS-21198): update k8s.io/apiserver version [#589](https://github.com/openshift/cluster-samples-operator/pull/589)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bcc08e9609e9c39d212857efd27d67753c64d91e...7e7affad59551611aeb3fb2e5a21f1ec8d99181b)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/b38c26ae676c9e775f901a04c072848fd8726b90)

* [OCPBUGS-33468](https://issues.redhat.com/browse/OCPBUGS-33468): Fix problem-detector proxy setting [#473](https://github.com/openshift/cluster-storage-operator/pull/473)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/5cd56c344f5aae7ce53f1301115e247a1fd6fed5...b38c26ae676c9e775f901a04c072848fd8726b90)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/6314bbbe6267585ca299f782569a623f13dd3664)

* [OCPBUGS-43886](https://issues.redhat.com/browse/OCPBUGS-43886): keys: Update Red Hat keys to use SHA256 signatures [#67](https://github.com/openshift/cluster-update-keys/pull/67)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd...6314bbbe6267585ca299f782569a623f13dd3664)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)

* [OCPBUGS-45332](https://issues.redhat.com/browse/OCPBUGS-45332): deps: bump golang.org/x/net to 0.31.0 [#1121](https://github.com/openshift/cluster-version-operator/pull/1121)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/24517b23286b636f50390f9167b41b84da8514cf...8b3acaebb7de946e86d20bfdf637e7caaaeb1fb3)


### [console](https://github.com/openshift/console/tree/0f90f855173f230da6c177757ce08bd8af640e8d)

* [OCPBUGS-54892](https://issues.redhat.com/browse/OCPBUGS-54892): Show Observe section without PROMETHEUS and MONITORING flags [#14960](https://github.com/openshift/console/pull/14960)
* [OCPBUGS-45292](https://issues.redhat.com/browse/OCPBUGS-45292): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14573](https://github.com/openshift/console/pull/14573)
* [OCPBUGS-44356](https://issues.redhat.com/browse/OCPBUGS-44356): Application creation fail when manually entering input scaling value in local setup [#14509](https://github.com/openshift/console/pull/14509)
* [OCPBUGS-45197](https://issues.redhat.com/browse/OCPBUGS-45197): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#14552](https://github.com/openshift/console/pull/14552)
* [OCPBUGS-44585](https://issues.redhat.com/browse/OCPBUGS-44585): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14497](https://github.com/openshift/console/pull/14497)
* [OCPBUGS-36557](https://issues.redhat.com/browse/OCPBUGS-36557): Increase login flow state paramater length/entropy [#14483](https://github.com/openshift/console/pull/14483)
* [OCPBUGS-42951](https://issues.redhat.com/browse/OCPBUGS-42951): The filepath including leading slash makes error during parsing devfile using Gitlab [#14383](https://github.com/openshift/console/pull/14383)
* [OCPBUGS-41594](https://issues.redhat.com/browse/OCPBUGS-41594): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14263](https://github.com/openshift/console/pull/14263)
* [OCPBUGS-35259](https://issues.redhat.com/browse/OCPBUGS-35259): fix vCenter cluster being empty [#13952](https://github.com/openshift/console/pull/13952)
* [OCPBUGS-32147](https://issues.redhat.com/browse/OCPBUGS-32147): Bump graphql-go to v1.3.0 [#13922](https://github.com/openshift/console/pull/13922)
* [OCPBUGS-33978](https://issues.redhat.com/browse/OCPBUGS-33978): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13872](https://github.com/openshift/console/pull/13872)
* [OCPBUGS-34342](https://issues.redhat.com/browse/OCPBUGS-34342): Fix PipelineRun Logs tab navigation [#13890](https://github.com/openshift/console/pull/13890)
* [OCPBUGS-24395](https://issues.redhat.com/browse/OCPBUGS-24395): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13405](https://github.com/openshift/console/pull/13405)
* [OCPBUGS-33777](https://issues.redhat.com/browse/OCPBUGS-33777): restrict Masthead logo to max-height to 60px [#13860](https://github.com/openshift/console/pull/13860)
* [OCPBUGS-33749](https://issues.redhat.com/browse/OCPBUGS-33749): Add visual connector between VMs and non VMs workloads [#13857](https://github.com/openshift/console/pull/13857)
* [OCPBUGS-33382](https://issues.redhat.com/browse/OCPBUGS-33382): Routes created by devfiles do not always use HTTPS [#13827](https://github.com/openshift/console/pull/13827)
* [OCPBUGS-33650](https://issues.redhat.com/browse/OCPBUGS-33650): fix issues with Edit Route form [#13851](https://github.com/openshift/console/pull/13851)
* [OCPBUGS-32500](https://issues.redhat.com/browse/OCPBUGS-32500): PipelineRuns in Console show wrong status or load indefinitely [#13780](https://github.com/openshift/console/pull/13780)
* [OCPBUGS-31077](https://issues.redhat.com/browse/OCPBUGS-31077): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13683](https://github.com/openshift/console/pull/13683)
* [OCPBUGS-31595](https://issues.redhat.com/browse/OCPBUGS-31595): Fix operands list endpoint. [#13714](https://github.com/openshift/console/pull/13714)
* [Full changelog](https://github.com/openshift/console/compare/80468e2e8b043d131d312f8bde5a1420e736ef1f...0f90f855173f230da6c177757ce08bd8af640e8d)


### [console-operator](https://github.com/openshift/console-operator/tree/cb4657d2d8cc94b611bc9b1f4260f2776c30c0f0)

* [OCPBUGS-18674](https://issues.redhat.com/browse/OCPBUGS-18674): Reset console operator's conditions [#894](https://github.com/openshift/console-operator/pull/894)
* [Full changelog](https://github.com/openshift/console-operator/compare/b3dea8462dbb7e7d5ca6a67c932640e7710c99d4...cb4657d2d8cc94b611bc9b1f4260f2776c30c0f0)


### [coredns](https://github.com/openshift/coredns/tree/e70f09779b20b28f85884c7b665f72f28694db00)

* [OCPBUGS-38431](https://issues.redhat.com/browse/OCPBUGS-38431): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#129](https://github.com/openshift/coredns/pull/129)
* [Full changelog](https://github.com/openshift/coredns/compare/298d919368ea0e5cca548354aa78c6e98044b09d...e70f09779b20b28f85884c7b665f72f28694db00)


### [docker-builder](https://github.com/openshift/builder/tree/b379980d6f626dc45a91f0a715bc94e75fb4b309)

* [OCPBUGS-43295](https://issues.redhat.com/browse/OCPBUGS-43295): Buildah dependency bump to 1.29.5 [#460](https://github.com/openshift/builder/pull/460)
* [OCPBUGS-43191](https://issues.redhat.com/browse/OCPBUGS-43191): runc library bump to 1.1.12 [#439](https://github.com/openshift/builder/pull/439)
* [OCPBUGS-48836](https://issues.redhat.com/browse/OCPBUGS-48836): skipping some unit tests to avoid failures as they are duplicate [#434](https://github.com/openshift/builder/pull/434)
* [OCPBUGS-48655](https://issues.redhat.com/browse/OCPBUGS-48655): Add new team members to the OWNERS file [#431](https://github.com/openshift/builder/pull/431)
* Replace 'coreydaley' with 'sayan-biswas' [#407](https://github.com/openshift/builder/pull/407)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#405](https://github.com/openshift/builder/pull/405)
* [Full changelog](https://github.com/openshift/builder/compare/0155fb1876cd809c97b46dff0660931046ab6076...b379980d6f626dc45a91f0a715bc94e75fb4b309)


### [etcd](https://github.com/openshift/etcd/tree/a6b7ad436ea8139436c6e9a456fdacd09ec7f054)

* [OCPBUGS-32920](https://issues.redhat.com/browse/OCPBUGS-32920): Revert "Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… [#266](https://github.com/openshift/etcd/pull/266)
* [OCPBUGS-31653](https://issues.redhat.com/browse/OCPBUGS-31653): Rebase etcd 3.5.13 openshift 4.13 [#262](https://github.com/openshift/etcd/pull/262)
* [ETCD-537](https://issues.redhat.com/browse/ETCD-537): Revert "bump build root go1.20" [#263](https://github.com/openshift/etcd/pull/263)
* [Full changelog](https://github.com/openshift/etcd/compare/8e02ad96b267b98912366e4784a16973f98c719f...a6b7ad436ea8139436c6e9a456fdacd09ec7f054)


### [haproxy-router](https://github.com/openshift/router/tree/8b39926371f49a623ad814851533ab4d87f3af1a)

* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): add duplicate_te_header_total metric [#626](https://github.com/openshift/router/pull/626)
* [OCPBUGS-34673](https://issues.redhat.com/browse/OCPBUGS-34673): Properly handle rewrite-target annotation [#608](https://github.com/openshift/router/pull/608)
* [OCPBUGS-33911](https://issues.redhat.com/browse/OCPBUGS-33911): Reject routes with MD5 certs [#600](https://github.com/openshift/router/pull/600)
* [OCPBUGS-33448](https://issues.redhat.com/browse/OCPBUGS-33448): Count active services before setting weight to 1 [#594](https://github.com/openshift/router/pull/594)
* [OCPBUGS-33280](https://issues.redhat.com/browse/OCPBUGS-33280): Route 'haproxy.router.openshift.io/timeout' value is not validated [#591](https://github.com/openshift/router/pull/591)
* [Full changelog](https://github.com/openshift/router/compare/431a6e667025931c68b4f747a224af29edf356f6...8b39926371f49a623ad814851533ab4d87f3af1a)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/53fd427d5826f19785655e0f8c33642009e0a12b)

* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): mount-utils: treat syscall.ENODEV as corrupted mount [#2083](https://github.com/openshift/kubernetes/pull/2083)
* [OCPBUGS-37280](https://issues.redhat.com/browse/OCPBUGS-37280): UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … [#2045](https://github.com/openshift/kubernetes/pull/2045)
* [OCPBUGS-28660](https://issues.redhat.com/browse/OCPBUGS-28660): UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1875](https://github.com/openshift/kubernetes/pull/1875)
* UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1938](https://github.com/openshift/kubernetes/pull/1938)
* [OCPBUGS-31505](https://issues.redhat.com/browse/OCPBUGS-31505): Update to kubernetes 1.26.15 [#1930](https://github.com/openshift/kubernetes/pull/1930)
* Address CVE [#14](https://github.com/openshift/kubernetes/pull/14)
* [Full changelog](https://github.com/openshift/kubernetes/compare/03ee8988f028929587523bfa1914e4d36916217e...53fd427d5826f19785655e0f8c33642009e0a12b)


### [hypershift](https://github.com/openshift/hypershift/tree/e548ac784e78cbcada7558444908a177d5e7abdb)

* [OCPBUGS-53901](https://issues.redhat.com/browse/OCPBUGS-53901): bump golang-jwt v4 [#5948](https://github.com/openshift/hypershift/pull/5948)
* [OCPBUGS-39184](https://issues.redhat.com/browse/OCPBUGS-39184): fix: bump github.com/IBM/go-sdk-core/v5 [#4627](https://github.com/openshift/hypershift/pull/4627)
* [OCPBUGS-41515](https://issues.redhat.com/browse/OCPBUGS-41515): set Konnectivity cipher suites [#4284](https://github.com/openshift/hypershift/pull/4284)
* NO-JIRA: hack: make the e2e script generic [#4202](https://github.com/openshift/hypershift/pull/4202)
* [Full changelog](https://github.com/openshift/hypershift/compare/1ef713f57c05135df9b141d29d9d0f8412eb7e58...e548ac784e78cbcada7558444908a177d5e7abdb)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fe1eef18f1d79df64f35847303a123435b811993)

* [OCPBUGS-53909](https://issues.redhat.com/browse/OCPBUGS-53909): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#87](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/87)
* [OCPBUGS-36064](https://issues.redhat.com/browse/OCPBUGS-36064): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#74](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3e0eb20f7521c895c2d11ae683fd53adadaeffba...fe1eef18f1d79df64f35847303a123435b811993)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/4c23f8185288d1030913f8d9097d75132ed7d158)

* [OCPBUGS-36070](https://issues.redhat.com/browse/OCPBUGS-36070): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#123](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/123)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/38c439da0b0ff924ad6b3d0af6461605a8b498ac...4c23f8185288d1030913f8d9097d75132ed7d158)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/2a268e14c43739cbab3c3489c1e33906ffbe82e1)

* [OCPBUGS-53541](https://issues.redhat.com/browse/OCPBUGS-53541): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#47](https://github.com/openshift/ibm-vpc-node-label-updater/pull/47)
* [OCPBUGS-36010](https://issues.redhat.com/browse/OCPBUGS-36010): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#43](https://github.com/openshift/ibm-vpc-node-label-updater/pull/43)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/7721a9e75b92bdd12ff9a05acc9274c0d0580aba...2a268e14c43739cbab3c3489c1e33906ffbe82e1)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/f2694417d53b759212fdb3e0c905f26aae09b838)

* [OCPBUGS-36076](https://issues.redhat.com/browse/OCPBUGS-36076): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 [#90](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/90)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/c4441f101083a8ffe01d4d6bb372a8b32a30a9a6...f2694417d53b759212fdb3e0c905f26aae09b838)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/4698265e2146188ede16036bf1193b33d7668930)

* [OCPBUGS-36082](https://issues.redhat.com/browse/OCPBUGS-36082): Bump dependency for CVE [#56](https://github.com/openshift/machine-api-provider-ibmcloud/pull/56)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/bb253a0c607f7d1f8139ffd401bd6c9c432090d1...4698265e2146188ede16036bf1193b33d7668930)


### [insights-operator](https://github.com/openshift/insights-operator/tree/162554e15ece3653649c9a61567d332a462f079a)

* [OCPBUGS-36475](https://issues.redhat.com/browse/OCPBUGS-36475): properly encode the URL for the advisor links (#962) (#965) [#962](https://github.com/openshift/insights-operator/pull/962)
* [OCPBUGS-33449](https://issues.redhat.com/browse/OCPBUGS-33449): anonymization - externalIP can be nil (#931) (#933) (#935) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31991](https://issues.redhat.com/browse/OCPBUGS-31991): bump golang.org/x/net version (#927) [#927](https://github.com/openshift/insights-operator/pull/927)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c2c598d6e76fd71cee71d8ed1015f06090c4ce1a...162554e15ece3653649c9a61567d332a462f079a)


### [ironic](https://github.com/openshift/ironic-image/tree/fe91b38ace1a3a6bdf4c6f42346344bdffe2bb21)

* [OCPBUGS-48146](https://issues.redhat.com/browse/OCPBUGS-48146), [OCPBUGS-48595](https://issues.redhat.com/browse/OCPBUGS-48595): Bump jinja2 to 3.0.1-6.el9.2 [#626](https://github.com/openshift/ironic-image/pull/626)
* [OCPBUGS-43952](https://issues.redhat.com/browse/OCPBUGS-43952), [OCPBUGS-43960](https://issues.redhat.com/browse/OCPBUGS-43960): Bump python-waitress [4.13] [#608](https://github.com/openshift/ironic-image/pull/608)
* [OCPBUGS-37764](https://issues.redhat.com/browse/OCPBUGS-37764), [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#585](https://github.com/openshift/ironic-image/pull/585)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set min version for python3-webob [#557](https://github.com/openshift/ironic-image/pull/557)
* [OCPBUGS-33374](https://issues.redhat.com/browse/OCPBUGS-33374): bump werkzeug [#543](https://github.com/openshift/ironic-image/pull/543)
* [OCPBUGS-34898](https://issues.redhat.com/browse/OCPBUGS-34898): bump jinja2 [#538](https://github.com/openshift/ironic-image/pull/538)
* [OCPBUGS-37116](https://issues.redhat.com/browse/OCPBUGS-37116): Update eventlet version [#525](https://github.com/openshift/ironic-image/pull/525)
* [OCPBUGS-32363](https://issues.redhat.com/browse/OCPBUGS-32363): [4.13] remove unused prometheus-exporter [#488](https://github.com/openshift/ironic-image/pull/488)
* [OCPBUGS-32387](https://issues.redhat.com/browse/OCPBUGS-32387): Use unix sockets by default for reverse proxy communication [#476](https://github.com/openshift/ironic-image/pull/476)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8d8034fa0d8bfa4b76f21695a1fbe91fc5947077...fe91b38ace1a3a6bdf4c6f42346344bdffe2bb21)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/92e3efb4c38dba903316d7cb88afa4bbaa04d259)

* [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#164](https://github.com/openshift/ironic-agent-image/pull/164)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set webob and bump werkzeug [#152](https://github.com/openshift/ironic-agent-image/pull/152)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/833caa2c4b712381c3f847ba928dcb34d0f875a1...92e3efb4c38dba903316d7cb88afa4bbaa04d259)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f35f954ae0550e6ebeb94e244401fc069dc346b8)

* [OCPBUGS-31987](https://issues.redhat.com/browse/OCPBUGS-31987): CVE-2023-45288 [4.13] [#107](https://github.com/openshift/kube-rbac-proxy/pull/107)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/ae32bfa0f11ae2854339ab9af83c44ee1c04fe31...f35f954ae0550e6ebeb94e244401fc069dc346b8)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9d909f7f3a3efd27d7efb71bf0324796aa6e8788)

* "OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs" [#35](https://github.com/openshift/kubevirt-csi-driver/pull/35)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/efa0b9432bf0f44a965dc978ada75ea9b0f3e511...9d909f7f3a3efd27d7efb71bf0324796aa6e8788)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a950acc5d06dda8089dbbe4b9d4ad95e7fe78b62)

* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1304](https://github.com/openshift/machine-api-operator/pull/1304)
* [OCPBUGS-32015](https://issues.redhat.com/browse/OCPBUGS-32015): Fix zone tag value reconciliation for vSphere machines [#1225](https://github.com/openshift/machine-api-operator/pull/1225)
* [OCPBUGS-31994](https://issues.redhat.com/browse/OCPBUGS-31994): Update x/net to v0.25.0 [#1245](https://github.com/openshift/machine-api-operator/pull/1245)
* NO-JIRA: [release-4.13] Fix data race conditions in unit tests [#1254](https://github.com/openshift/machine-api-operator/pull/1254)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/c2a173259a7f9621de82b6a40c80129667a49093...a950acc5d06dda8089dbbe4b9d4ad95e7fe78b62)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/39e3612071458fb2d876b9b8fb0d3517bcb1c7cc)

* [OCPBUGS-44206](https://issues.redhat.com/browse/OCPBUGS-44206): Panic seen in CI job for MCC pod [#4680](https://github.com/openshift/machine-config-operator/pull/4680)
* [OCPBUGS-38372](https://issues.redhat.com/browse/OCPBUGS-38372): Revert "MCD-pull: run after network-online.target in Azure" [#4527](https://github.com/openshift/machine-config-operator/pull/4527)
* [OCPBUGS-38295](https://issues.redhat.com/browse/OCPBUGS-38295): daemon/update: disable systemd unit before overwriting [#4522](https://github.com/openshift/machine-config-operator/pull/4522)
* [OCPBUGS-37783](https://issues.redhat.com/browse/OCPBUGS-37783): Openshift uncordoned compute-node that was intentionally cordoned [#4507](https://github.com/openshift/machine-config-operator/pull/4507)
* [OCPBUGS-37160](https://issues.redhat.com/browse/OCPBUGS-37160): MCD-pull: run after network-online.target in Azure [#4474](https://github.com/openshift/machine-config-operator/pull/4474)
* [OCPBUGS-36782](https://issues.redhat.com/browse/OCPBUGS-36782): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4464](https://github.com/openshift/machine-config-operator/pull/4464)
* [OCPBUGS-32208](https://issues.redhat.com/browse/OCPBUGS-32208): Run resolv-prepender entirely async [#4314](https://github.com/openshift/machine-config-operator/pull/4314)
* [OCPBUGS-33327](https://issues.redhat.com/browse/OCPBUGS-33327): make verify should use MCO's kube version [#4352](https://github.com/openshift/machine-config-operator/pull/4352)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/88140227ee7d79c77092efd92b5a4363971333e2...39e3612071458fb2d876b9b8fb0d3517bcb1c7cc)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/7e2e6cac68ac86ae3cc3578354169658b5620e12)

* [OCPBUGS-54172](https://issues.redhat.com/browse/OCPBUGS-54172): Change rhcos release browser url [#60](https://github.com/openshift/machine-os-images/pull/60)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e...7e2e6cac68ac86ae3cc3578354169658b5620e12)


### [multus-cni](https://github.com/openshift/multus-cni/tree/12897bd18a928b8d0ea22fca0c05cee480285752)

* [OCPBUGS-28020](https://issues.redhat.com/browse/OCPBUGS-28020): Fix SAST scan issues for multus-cni-container [4.13] [#224](https://github.com/openshift/multus-cni/pull/224)
* [Full changelog](https://github.com/openshift/multus-cni/compare/906067fdbf94800efb89895b38ae037947a12b46...12897bd18a928b8d0ea22fca0c05cee480285752)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)

* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941), [OCPBUGS-37944](https://issues.redhat.com/browse/OCPBUGS-37944): [release-4.13] Stateful fixes [#306](https://github.com/openshift/whereabouts-cni/pull/306)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/3f39bc89d13222d2209665323b6c47fc58fcdc22...9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)


### [must-gather](https://github.com/openshift/must-gather/tree/339046b6478094030fa5ebf1ebceed2bb03a55f4)

* [OCPBUGS-48085](https://issues.redhat.com/browse/OCPBUGS-48085): Update owners [#476](https://github.com/openshift/must-gather/pull/476)
* [Full changelog](https://github.com/openshift/must-gather/compare/288ef2fcfe63cbfab0af69a41b508c044ee890aa...339046b6478094030fa5ebf1ebceed2bb03a55f4)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/4fe0c590767f41ca443bdd2688e1decd4f66d60a)

* [OCPBUGS-12645](https://issues.redhat.com/browse/OCPBUGS-12645), [OCPBUGS-20879](https://issues.redhat.com/browse/OCPBUGS-20879): bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/cloud-provider-nutanix/pull/36)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/4d1c58e2b97f00e64ab4332d18dfdd531fb9cc4e...4fe0c590767f41ca443bdd2688e1decd4f66d60a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/f68035f08dcd4c686d5e4d9e52a3c4cfab551e52)

* [OCPBUGS-20976](https://issues.redhat.com/browse/OCPBUGS-20976): bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/machine-api-provider-nutanix/pull/86)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/105c515996ed0856eca89e75b166e70331d95856...f68035f08dcd4c686d5e4d9e52a3c4cfab551e52)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/6a5971643b971170d28b96f676225b344c4cff3c)

* [OCPBUGS-31996](https://issues.redhat.com/browse/OCPBUGS-31996): bump x/net to 0.24.0 [#112](https://github.com/openshift/oauth-apiserver/pull/112)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/89d9537c1d247f08990eb085a80fd5f27f84efee...6a5971643b971170d28b96f676225b344c4cff3c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/96338efcec8152baebfd57036b728697b2fda89a)

* changes the owners file (#1012) [#1012](https://github.com/openshift/oc-mirror/pull/1012)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1025) [#1025](https://github.com/openshift/oc-mirror/pull/1025)
* Bump version to include v5.11.0 of go-git (#823) [#823](https://github.com/openshift/oc-mirror/pull/823)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/02f5c90659ba54c0adcb2d175e89864e323263de...96338efcec8152baebfd57036b728697b2fda89a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/3a7ac1b91f496b0d4bf179debcd697daa75bc11b)

* [OCPBUGS-32446](https://issues.redhat.com/browse/OCPBUGS-32446): bump(x/net) to v0.23.0 [#430](https://github.com/openshift/openshift-apiserver/pull/430)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6c0733082d6ff258dc8787ef2e84c1ceb51a0655...3a7ac1b91f496b0d4bf179debcd697daa75bc11b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/04ab0fdab1b9b8c06b1bfbf8376917c8701e1904)

* [OCPBUGS-48656](https://issues.redhat.com/browse/OCPBUGS-48656): Add new team members to the OWNERS file [#362](https://github.com/openshift/openshift-controller-manager/pull/362)
* [release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency [#326](https://github.com/openshift/openshift-controller-manager/pull/326)
* [OCPBUGS-41952](https://issues.redhat.com/browse/OCPBUGS-41952): Add adambkaplan as approver [#335](https://github.com/openshift/openshift-controller-manager/pull/335)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/385057e57752b7b4f21ef32d7a7993d266a591eb...04ab0fdab1b9b8c06b1bfbf8376917c8701e1904)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/27f786052c3d35154aa2d16413d20ec3447b502b)

* [OCPBUGS-34422](https://issues.redhat.com/browse/OCPBUGS-34422): Ensure portSecurity is correctly set in the Instance Ports [#119](https://github.com/openshift/machine-api-provider-openstack/pull/119)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/7bce9d67fba63a0ed6a39b78488da8e85bf07dbd...27f786052c3d35154aa2d16413d20ec3447b502b)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d821d7c350f56f311e66ca8e1d88baeb908d4506)

* [OCPBUGS-46924](https://issues.redhat.com/browse/OCPBUGS-46924), [OCPBUGS-46931](https://issues.redhat.com/browse/OCPBUGS-46931), [OCPBUGS-47311](https://issues.redhat.com/browse/OCPBUGS-47311): x/net bump to v0.34.0 [release-4.13] [#942](https://github.com/openshift/operator-framework-olm/pull/942)
* [OCPBUGS-47507](https://issues.redhat.com/browse/OCPBUGS-47507): CRD upgrade existing CR validation fix (#3442) [#924](https://github.com/openshift/operator-framework-olm/pull/924)
* NO-ISSUE: [release-4.13] Backport e2e fixes [#876](https://github.com/openshift/operator-framework-olm/pull/876)
* [OCPBUGS-42146](https://issues.redhat.com/browse/OCPBUGS-42146): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#871](https://github.com/openshift/operator-framework-olm/pull/871)
* [OCPBUGS-38254](https://issues.redhat.com/browse/OCPBUGS-38254): [CARRY] perform operator apiService certificate validity checks directly [#836](https://github.com/openshift/operator-framework-olm/pull/836)
* [OCPBUGS-38608](https://issues.redhat.com/browse/OCPBUGS-38608): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#843](https://github.com/openshift/operator-framework-olm/pull/843)
* [OCPBUGS-32856](https://issues.redhat.com/browse/OCPBUGS-32856): bump go-jose to v2.6.3 [#780](https://github.com/openshift/operator-framework-olm/pull/780)
* [OCPBUGS-35241](https://issues.redhat.com/browse/OCPBUGS-35241): Unblock CI [#772](https://github.com/openshift/operator-framework-olm/pull/772)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4cc5232d665151b2ee1c75df3061dfa11645fbbc...d821d7c350f56f311e66ca8e1d88baeb908d4506)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)

* [OCPBUGS-49430](https://issues.redhat.com/browse/OCPBUGS-49430): Upgrade golang.org/x/net [release-4.13] [#590](https://github.com/operator-framework/operator-marketplace/pull/590)
* [OCPBUGS-32074](https://issues.redhat.com/browse/OCPBUGS-32074): update golang.org/x/net for CVE-2023-45288 [#566](https://github.com/operator-framework/operator-marketplace/pull/566)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/867e7ed80fdbc6f5bb88f1589da740d9bd1d5721...2a1df4ec9d0216a716ae239921cdbe8ecb3776fd)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/72f151a69b6c549828382f87c42b914b938a8dc9)

* [OCPBUGS-38264](https://issues.redhat.com/browse/OCPBUGS-38264): [release-4.13] Bump OVSDBTimeout and make it configurable [#2289](https://github.com/openshift/ovn-kubernetes/pull/2289)
* [OCPBUGS-37119](https://issues.redhat.com/browse/OCPBUGS-37119): EgressIP: Reload certificates for the grpc heatlhcheck server [#2226](https://github.com/openshift/ovn-kubernetes/pull/2226)
* [OCPBUGS-35100](https://issues.redhat.com/browse/OCPBUGS-35100): [release-4.13] ipv6+all protocols conntrack flush [#2200](https://github.com/openshift/ovn-kubernetes/pull/2200)
* [OCPBUGS-34669](https://issues.redhat.com/browse/OCPBUGS-34669), [SDN-4186](https://issues.redhat.com/browse/SDN-4186): Introduce a validating webhook for ovnkube-node [#2053](https://github.com/openshift/ovn-kubernetes/pull/2053)
* [OCPBUGS-29865](https://issues.redhat.com/browse/OCPBUGS-29865): CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [#2095](https://github.com/openshift/ovn-kubernetes/pull/2095)
* [OCPBUGS-33730](https://issues.redhat.com/browse/OCPBUGS-33730): Improves service iptables efficiency on start up [#2172](https://github.com/openshift/ovn-kubernetes/pull/2172)
* [OCPBUGS-32988](https://issues.redhat.com/browse/OCPBUGS-32988): Bumping OVS [#2143](https://github.com/openshift/ovn-kubernetes/pull/2143)
* [OCPBUGS-33421](https://issues.redhat.com/browse/OCPBUGS-33421): [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2130](https://github.com/openshift/ovn-kubernetes/pull/2130)
* [OCPBUGS-33218](https://issues.redhat.com/browse/OCPBUGS-33218): [release-4.13] OVN bump to 23.06.1-112 [#2153](https://github.com/openshift/ovn-kubernetes/pull/2153)
* [OCPBUGS-28983](https://issues.redhat.com/browse/OCPBUGS-28983), [OCPBUGS-30920](https://issues.redhat.com/browse/OCPBUGS-30920): Update netpol namespace address sets usage to the old ways [#2097](https://github.com/openshift/ovn-kubernetes/pull/2097)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9f1ac2c23d6bb19518dc440ad1dae74b65e98abe...72f151a69b6c549828382f87c42b914b938a8dc9)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/16fa55557367097b075093d2549e0205558c7527)

* [OCPBUGS-36094](https://issues.redhat.com/browse/OCPBUGS-36094): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#91](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/91)
* [OCPBUGS-33638](https://issues.redhat.com/browse/OCPBUGS-33638): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 [#82](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/530f646b86f1ba898f534900eb463ae957a1b89e...16fa55557367097b075093d2549e0205558c7527)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c040f3774af48d6d0bd8c31188626cb445be5b83)

* [OCPBUGS-36104](https://issues.redhat.com/browse/OCPBUGS-36104): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 [#76](https://github.com/openshift/cloud-provider-powervs/pull/76)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/de68def0c918a05ad4bf32cc0470a7931d661c27...c040f3774af48d6d0bd8c31188626cb445be5b83)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/95154dd1870e26cb6ebb1b8cb6e68947c478f059)

* [OCPBUGS-41980](https://issues.redhat.com/browse/OCPBUGS-41980): Update go.mod to fix CVE - 4.13 [#87](https://github.com/openshift/machine-api-provider-powervs/pull/87)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8df68995ce00d69460baac9901f81015d9f1b55f...95154dd1870e26cb6ebb1b8cb6e68947c478f059)


### [telemeter](https://github.com/openshift/telemeter/tree/0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)

* [OCPBUGS-34829](https://issues.redhat.com/browse/OCPBUGS-34829): fix issuer check during JWT authentication 4.13 [#540](https://github.com/openshift/telemeter/pull/540)
* [Full changelog](https://github.com/openshift/telemeter/compare/8c9a8a75108afb1ba7fe6398b004cbc8229cc645...0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)


### [tests](https://github.com/openshift/origin/tree/7f472feedd5e6461a7127759d7b88e6e80cf2e72)

* [OCPBUGS-54771](https://issues.redhat.com/browse/OCPBUGS-54771): Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed [#29661](https://github.com/openshift/origin/pull/29661)
* [OCPBUGS-53285](https://issues.redhat.com/browse/OCPBUGS-53285): Add/remove team members to the OWNERS file for Builds [#29608](https://github.com/openshift/origin/pull/29608)
* [OCPBUGS-53297](https://issues.redhat.com/browse/OCPBUGS-53297): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29610](https://github.com/openshift/origin/pull/29610)
* [OCPBUGS-52584](https://issues.redhat.com/browse/OCPBUGS-52584): Use payload pullspec for image info test [#29592](https://github.com/openshift/origin/pull/29592)
* [OCPBUGS-37921](https://issues.redhat.com/browse/OCPBUGS-37921): Removes dependency on samples operator images [#29007](https://github.com/openshift/origin/pull/29007)
* [OCPBUGS-35053](https://issues.redhat.com/browse/OCPBUGS-35053): updated timeout to 3 seconds to account for network timing issues [#28862](https://github.com/openshift/origin/pull/28862)
* [OCPBUGS-36501](https://issues.redhat.com/browse/OCPBUGS-36501): test/extended: skip etcd leader change check on hypershift [#28922](https://github.com/openshift/origin/pull/28922)
* [OCPBUGS-35857](https://issues.redhat.com/browse/OCPBUGS-35857): Use centos7 tag instead of latest for cmd images tests [#28895](https://github.com/openshift/origin/pull/28895)
* [OCPBUGS-33985](https://issues.redhat.com/browse/OCPBUGS-33985): Provide SCC access via RBAC [#28835](https://github.com/openshift/origin/pull/28835)
* [Full changelog](https://github.com/openshift/origin/compare/99b9d537a935e6446ba1fcd55e9a5b5ba090820a...7f472feedd5e6461a7127759d7b88e6e80cf2e72)