# 4.14.31

Created: 2024-06-20 08:24:05 +0000 UTC

Image Digest: `sha256:e4424eeec8a386241a5348d556bdd6dd82ea68f4f19f30f71d18963fb5924e9e`

Promoted from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-06-19-070718


## Changes from 4.14.13

### Components

* Kubernetes upgraded from 1.27.10 to 1.27.14
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202402140225-0 to 414.92.202406190006-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [ad853769](https://github.com/openshift/agent-installer-utils/commit/ad8537697818870b53b6262041f0dfa78a3b41c2) `sha256:19e547a77dae9039b8bbdc0b8e215d31b8c56fb09943aff6d8932c49a9cbcbe9`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [8ba0b37a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/8ba0b37a45510404a842d6dbd84d40a18008e81d) `sha256:5c9d79d2f25cba8f4b4c6c317d1522e2eba6490c356e5cd59b020a7eecf503a7`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:8c51b31fc8cb4b108ebcd0a95d1d97608ead8b6d5cc3e6d14dceb28b43973847`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:300a5f9684a9c2871b4cbb0e54d24f56f8f3f7d9cab43465581123d81f900f17`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:e79d0ccc304848ef4ba0e1b6a41bee385536afb8eea5d10e64127ed4db1274ce`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [e292817c](https://github.com/openshift/machine-api-provider-aws/commit/e292817c27d83d6cba27def4461a9795bd3a68a7) `sha256:6ee92a926a3c19cca17bc16da7c15ce57748422425e1ac45afd778ac1b1ba58b`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [f0e7cbbc](https://github.com/openshift/cloud-provider-azure/commit/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea) `sha256:149dca609e8c35e14ea43318e6f84fc935f2312244dda6006d4a9abdf4762f5d`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [f0e7cbbc](https://github.com/openshift/cloud-provider-azure/commit/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea) `sha256:d5dec10575d1243ab965ca312b84732229afd57dde3df1297a3e820ab597e0eb`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [7ad2773c](https://github.com/openshift/cluster-api-provider-azure/commit/7ad2773c64f0757ea92a18594f0aad59c6a55cde) `sha256:a2a432ea69e1e47fa09dd0481b16e18b84afe4de949d4d5664eb33fbb13f1aff`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [b19eec11](https://github.com/openshift/azure-disk-csi-driver/commit/b19eec11854e89a3e45f27455ce54d19c25f375b) `sha256:da4ca027cbf320b7a384b886042d033d31e3b54db05b1a20113f21670fc25892`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [270579c6](https://github.com/openshift/cluster-baremetal-operator/commit/270579c644f97dd9f2e8e771c939833ffee1dd3e) `sha256:9f0c08b3765ceb85eedea4ef4b77a0e7ccfcdb8ada9bcec80271101be4a0fa0b`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:cff535bdfe472423bc6a14641f7865701df8092719bfc2b7ef1499e4bdbb1f85`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [ae83c553](https://github.com/openshift/cluster-api/commit/ae83c5533706d539dc492229eebd67533468e48b) `sha256:ce638f33c562935fce027d947fc1329e2671b66b145aa642e26458bc2b0e3d5a`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [b4c4fb13](https://github.com/openshift/cluster-capi-operator/commit/b4c4fb13a40c2c71b8f21fe379befad95e341a77) `sha256:7c7d2e0a407630f5cff0eef6cf7c6b60073d43f20e878f367fb2113150becd06`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:96837243f8a8c1edb2a65d14d74b881aaf906fe1ea39be6a49dd52d128bf33ce`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:0af0bb500a39ffc6ce4ba70680a2fa27a9d0f93f8d169ecf5d76bc1b8c611a23`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [33f630dc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4) `sha256:ad988730bc396c412601e6a6c0c3bb90f194ce82c6a03f0bf55e2d2cbbb962d6`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9cd9922a](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9cd9922a42a64fe058718f10e3b4123b943bb55f) `sha256:7dba1ce53baa929a8584137b2eb6bf15e8083112748d02f8cb507ef4c5c1e39b`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [711b4f6e](https://github.com/openshift/cluster-machine-approver/commit/711b4f6eeb038f8c7bd88db3ea51ebad350a116d) `sha256:fa0db5587eaffd11aa59a7d62443abfff5a51711620735f984b3dec996ef4b2d`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [0dbbb613](https://github.com/openshift/cluster-olm-operator/commit/0dbbb6132ced379602040731ff889eebb4202e73) `sha256:538699f4fe56403fbbbf410c5ac9dc958c87945a1371ffaba7643ccf9bde62d6`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [3985c55f](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/3985c55f99e1ea013be2db096059c09b2ed98118) `sha256:ca085105bdfb779b8767eb68841047983ee98aa8bffcb6634ca6f00b1161bdd2`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:7b98d754df07852c53770dd420d29e7ad06ede6cf71c05043e6dbeeab2333acc`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:b5a3e43055194280d1c50d2878bc57fb4b7ca84fc2f2b127bbd2881056788e9e`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e0c26a08](https://github.com/openshift/cluster-update-keys/commit/e0c26a084139906e866d9eec89f05d2d3211b334) `sha256:176ea3caae4f0a0268239e6132924b5bc183f354cab3215dcac5c19204d44114`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:5090bd0fcf847f5b0d9d7c3fb50112b04714e5882cce21759e83ccd8c5ba9750`
* [coredns](https://github.com/openshift/coredns) git [7d3fa777](https://github.com/openshift/coredns/commit/7d3fa777871ed2e5a70715e7f3e71d3f01785330) `sha256:3ff2c3e79c9205a20033550232f9581fb59167bf243f196788186be9063dc5d8`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:742396529b1426d32d3c0b691a819fb0e23dbe915a72e2e9e64184a8f98cb214`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [d93a218f](https://github.com/openshift/csi-driver-manila-operator/commit/d93a218ff323960eb1dea529f0173f069ccfab42) `sha256:b64c2b8d9ae2d6cb75a07ea5c17cd6b53e5bf7965bcca003992d51dc9ddbbeab`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e1dd4537](https://github.com/openshift/csi-driver-nfs/commit/e1dd45373456cf8e47a58d6764212317fb2f8a97) `sha256:767b5fea12a72b61e325af2c5bab7d94df94e78e80a4bfb7250affad70e1aafc`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:c2875f2b4f0024412e7440364ad236439d2c5e1cb73f216c18247a01dccfdc06`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:8736df4932f2786cefecdf386ddf12015acef55d5984fd4807a47d44ba5926b6`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:26aa1aa9aba6c77cf0c1b2213b296d309c74bcf4244519495f87f41880bf1d2c`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [06e8ce0d](https://github.com/openshift/csi-external-attacher/commit/06e8ce0d36f7c23f0906327cd66ec6bd15165366) `sha256:a48b96def9db0ffd05b5cc8efef9f997021b8862e4c7ab31437f786c829399a2`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [78a710fd](https://github.com/openshift/csi-external-provisioner/commit/78a710fd2ccd6f87f7789c314349192d063f9f37) `sha256:4e24da8411417453ad4ca965e0fca6e488bcc8cd145bec459396bb07fc76031b`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:ccf1033145b2a9a73130a81a8b71c97d452f77f546563d6e66990b6eb3fed429`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:6ecc3107b05b629524837d83ef6c6fbf2b02eb348fcf1fd5d4c9ed954071d222`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:df209e1c3d3989f202afb889474a01bad47979e116414d5b27def8d4ee2bbbdc`
* [docker-builder](https://github.com/openshift/builder) git [9c104de0](https://github.com/openshift/builder/commit/9c104de024e5c52e224ffedfbab0e9053fb1efd6) `sha256:2c5379c3f3b94f8d9447d986361870a6b6b5f6f97df25f30e6e589633a71da5c`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:2bce6c40c85148c12c7212ddd26a2980bb7e4100b7c110750dd44f7a2b8933eb`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [afffdd45](https://github.com/openshift/egress-router-cni/commit/afffdd455b65a944751f9155852781f9ddce0f5d) `sha256:19aae96d146eb7566d16345ef833aaf1a05b58a734dfc272ba805609de58b057`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:167f14a6cf448a05248dbc06e98b3ffaac84c6e123f7dc6e39c1dde757abde35`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [d99fb31a](https://github.com/openshift/cluster-api-provider-gcp/commit/d99fb31aa7280f6b5da00880a64b4774600817a2) `sha256:ca4eb8919f1f4a12e48943bf78a1d116b4eeef85ebc0b0715b9771955592debf`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [a676e6b6](https://github.com/openshift/machine-api-provider-gcp/commit/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125) `sha256:2b10d627af28960b88133b2828330c68d29b008da314f676e33f337f8424f4ba`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [8a626fe5](https://github.com/openshift/gcp-pd-csi-driver/commit/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03) `sha256:7160c953b5e872590b0e35646c7224fe741b0a4af563a55faba11e73cba7c98f`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:906969ea13a9560d4600ae661fbcd09302933984dcf9206342d0a8f872cd4137`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [446871ff](https://github.com/openshift/cloud-provider-ibm/commit/446871ff7626c4199836929f5bc777aba2a5f001) `sha256:200177c0b815682528b1ab4f23cf470f79caefb996c7c6a30041b214965ff3f4`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [02471d96](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/02471d9625339b1cd6d638e358a10c88b223d30e) `sha256:51c974aa3080cd7034ee295f49ff8cc2a011e0a23e68cccdfbd80c35475ade5e`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [7fd94aa7](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/7fd94aa73f7e61cba93657cc2411e04e1b40e87b) `sha256:0e96954ba6adb0881265313f253762c38f2ac981e6de4d8d115bb9bc16fc0818`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [44a2b943](https://github.com/openshift/ibm-vpc-node-label-updater/commit/44a2b9430e38e4dc0fe6ef0c08cd759ed97fd43f) `sha256:eba663307694901626ae4f61bdd3834be7567c336b8eea047beec9abd77d3871`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [c28b2232](https://github.com/openshift/machine-api-provider-ibmcloud/commit/c28b2232ab1c0dcd951a23b324506eaab510389c) `sha256:2a7cdd828c551e4d4938fb50eb91838b02ac367231fdce7d47b7412330b28162`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [7b56c306](https://github.com/openshift/ironic-rhcos-downloader/commit/7b56c30661e39b212fc632e8e184c70b14dcf3a2) `sha256:cff4cd0a831c1de8ff3aba19ed2b8a6c010619b461cda69ddb1897b08d171c4d`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [c038d5a4](https://github.com/openshift/ironic-static-ip-manager/commit/c038d5a43e7355099d8f9845a8b14052437b787e) `sha256:2481df6daccb7e1a8cc9aabc1e48b78dee17cf6f3f77b521e7e7eb69afb5d519`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:94747d0080c0e06ffdefc62dea333193c1e18c42317d6a4f821c16abd9e938a5`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f08cee33](https://github.com/openshift/images/commit/f08cee3389569256aa288c33bad701a2704ce9db) `sha256:76326025869379bc8c4f921760a749db104c71e5abcfb95f8a84d73714ab8881`
* [kube-proxy](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:1edd3152721c808939a200134f8b7a97915cace958825c40435749ee518fabc7`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [1a646b98](https://github.com/openshift/kube-rbac-proxy/commit/1a646b98d8864e53accb726531d86f084ab13977) `sha256:d034bfb08a30dac2a20c55a4a91b6851823ba2696a70981d900607f6f248ff91`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [db0c5499](https://github.com/openshift/kube-state-metrics/commit/db0c54994a6aad9155a94513eaa3480c1812f45e) `sha256:affebd4f73807bf96005c40e29eecb5fce2894647b3b0652d10f6aa2a6c06e2d`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [8558e14a](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/8558e14a116804168506d06e96eac5a79913a6eb) `sha256:ceafad654344bd9c52380997b9d2604bbaf808d0261b48ea981ad203c1a10c91`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:06f14c3b44853b6d89abd6a9b516ba9766ec9d60a4bb886c00b8ff88bb9bf160`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:90e68051682903b4ea85c5e9bd3379b4e0e4924cf39b1c29e7b6f058f8addd39`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [34dfccba](https://github.com/openshift/cluster-api-provider-libvirt/commit/34dfccba84a23b871d4f29dcec55929c11696e91) `sha256:06afd02b99837ea65e46d23a3de9c6010dbe0639597eed21775d1562e67f94a2`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [2a6627ba](https://github.com/openshift/image-customization-controller/commit/2a6627bafcbb00437ab97308fe1d7df9039104ad) `sha256:2f7c6b0b83f9543352667635b6d00c75d190024d9f06ce1f769eeb7497c91336`
* machine-os-content `sha256:b6a52cb0874af05a2cf878c00297415b0a6e8dc96a7afe8782d9acfc3b2a961c`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [d3a4a6c3](https://github.com/openshift/machine-os-images/commit/d3a4a6c3b46e26fa260de80465b45879311e23c4) `sha256:b065cb1a6f2c98bf1bcbc29f68da037044b71d3987ec89a56ad328e9ce694fdd`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [6fb20810](https://github.com/openshift/monitoring-plugin/commit/6fb208108720b9a35782f7d4f6738010ec97ba85) `sha256:b23244ee5276049b5c6eb51ae48d95c0bae7fc88cb4f31182a214c4c28b40365`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [5e74b0fa](https://github.com/openshift/multus-admission-controller/commit/5e74b0fa273076f4a73db00dd0081032f0325405) `sha256:cb98ea35fc72abf77e8d189e9871bc8aaca4dbd0b181e64faf9cbd19ea374bc1`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [cd6eae10](https://github.com/openshift/multus-networkpolicy/commit/cd6eae10a368d23b94530cdc2a2c2f2356d8cc02) `sha256:64b8b553221e10dc7e4d51c24be13b70b750b301708d944f8f496465c1a24e9b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [078aee5c](https://github.com/openshift/route-override-cni/commit/078aee5c466ffc79126a34b85953534c6674f28c) `sha256:cf78ca7558f338471acea9b757343317e3c0ae2f9a54627a512660df56b749a4`
* [must-gather](https://github.com/openshift/must-gather) git [833e1de9](https://github.com/openshift/must-gather/commit/833e1de991e2319439fb48550c86d2d44d412501) `sha256:d9a95f145cb43c379dd304e35b5a3afa03e8f87cbaeda9c05ff668eca5d1af2a`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:a53ef8b53c3770a0a04079f3776d12022ad1493b32397896b36023c314fd5be0`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [69d0021a](https://github.com/openshift/network-metrics-daemon/commit/69d0021a4b60db315f47d83bde1c455362a03808) `sha256:1091fe10c001d8c8fc645b4e80d4e35952dc47dc4fd1e1dc79ca46a984295d07`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [bc568865](https://github.com/openshift/cloud-provider-nutanix/commit/bc568865fe7d5cd598c89e7f189de9e07150f29a) `sha256:6212c2bda34ed121517ffd95c8feb3b34ba6764026263f761dfe3e784f63d7a1`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [6f50b1ac](https://github.com/openshift/machine-api-provider-nutanix/commit/6f50b1ac83fa493cdaa38fb0a05804882333172b) `sha256:fa3f41d1336086e97b91bf9824ef6fece42a8ca54ec376dc1e0f5d578b50031a`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [8f5c90c7](https://github.com/openshift/oauth-apiserver/commit/8f5c90c74205a45787960a3bec1f12929a391471) `sha256:212b02673f82efffa49166811c7c77cb4eeb059c772ed7af22b261e290709649`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [a4a2f270](https://github.com/openshift/oauth-proxy/commit/a4a2f270a57af830508e8cef52d4c8d4f4dfba76) `sha256:5ca72cf071570ed01b0e2f2c90daf848f7edf19da3aa1f7c0a426fd72e8c1476`
* [oauth-server](https://github.com/openshift/oauth-server) git [35f4739f](https://github.com/openshift/oauth-server/commit/35f4739f342a5838fe6ceaf7a459c78f3777166d) `sha256:558265ee722d97ae089e1bbcdb5c719cc523d8a71a4808eed98c22309e48f4c3`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:bb8378b4c59da6d0dc0d0c4ce5271d82d76a3178f9c3a3e8e65ac263b5a129b0`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:8126f44166d868aff62bfb95054442f6648811f5c405f7f1f9b2d23f3df15e9f`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [27209ef1](https://github.com/openshift/openshift-controller-manager/commit/27209ef14fcfca236ddba24ac7289bb3d01be8e6) `sha256:24b090a41325274523f5e8a3912ac7942b26cb12ce4e16988ea72c8808f75806`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [dff4b0f4](https://github.com/openshift/openshift-state-metrics/commit/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf) `sha256:942e5a0311dedc7923ca05d38fb834fea148cf38f99be35f3a2eefe1c139f494`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:6add5c7c7b4e582cc8dc94b18c2d2671be6e2c9bb3653c4f2747a64ae0f51331`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:aa65cc5773b3cd9e5de60f4767f99a46cc59cbac4f9223eb0f0aae89e62ad3c7`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:5a39690b19d0b8d5b0205ac8d0e7e6065b204e307bcd1e4215b1968e68972970`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [2fa33aa7](https://github.com/openshift/ovirt-csi-driver-operator/commit/2fa33aa7f05da8640a8695372364f2367febd12a) `sha256:def7b1fce145c2649a3ce32ac7af2c79e5c93ca2faa3131f62e0d86983578304`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:7e519c8e07f1ee1de0e58c9a16690ab50b0973728b3d8b9818d4f050770cb5db`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [7436369a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/7436369afce33811e543b13fcbea8d1e1ff65502) `sha256:4b14d96e764ed16b951bf47857538df6535b993278e9a4be525caa243dbb1f82`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [32c1028e](https://github.com/openshift/cloud-provider-powervs/commit/32c1028ecf58851eb1270f47351a4423ba081c3b) `sha256:7258b7cb6f845a54cac2deb01ac95b7c8bcf0c164f3c86eab0e1b56fc7691e85`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [1a957dae](https://github.com/openshift/machine-api-provider-powervs/commit/1a957dae3a7c9c36752b4869854a90e6b88eaf7e) `sha256:844be5613f590ae43cb0deaf8b6008efd60dd152985165aea285c3aeb994020d`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [af40ed09](https://github.com/openshift/prom-label-proxy/commit/af40ed09f69fab6c4bf054436f537a3e569d5f02) `sha256:131dd91c64f44e95f9c3bd4ec39c5457392e26de926367f739b2d24bf65b9a4c`
* [prometheus](https://github.com/openshift/prometheus) git [b7c61bcb](https://github.com/openshift/prometheus/commit/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd) `sha256:a00973122e0e606a15a3562cf927109cc9432b75103baa683f94506f974a6feb`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e3725166](https://github.com/openshift/prometheus-alertmanager/commit/e3725166cf8ef228f1672b00d063c488b69687aa) `sha256:439f7ac7ac3207bc93a3014f19fd231c0404bf6f50fd9f8b47e3d39f70adb4f1`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [5ee0a9d9](https://github.com/openshift/node_exporter/commit/5ee0a9d957a04756ba76623a8bbc12be9949109f) `sha256:946edb4e377aa89fc818648686218bc2780e9aef71b5de08967a9b916bbd48b4`
* rhel-coreos `sha256:5e1dbd22e909ac072175936beac9c03531dec7ea2d99cfd5bd0b252d8a212bcc`
* rhel-coreos-extensions `sha256:07ffd7328de9eadb7d0be95275ad3ef5a36d3884a2a91e87fa987e317a7103a1`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [1a5e72f4](https://github.com/openshift/route-controller-manager/commit/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e) `sha256:de4e6f5e6bc27adc154614ec973f9c4f2c27fcec2a34a1a2b901f795216d6bea`
* [sdn](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:a0f7dbabf1bc567f4c47408bdac1b8a36ccdfb97cf9b98e977c20a9e0aee3de2`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:202b944f358f18143a94340a8148715ee4ef482a32385b111fb2deb6bc277335`
* [thanos](https://github.com/openshift/thanos) git [a2671250](https://github.com/openshift/thanos/commit/a26712509e3f9c511926ca9d8bba3e3ea8e95ada) `sha256:6e6a45cfe62e4b564e8211e51a7e351e4627762056b94ccdc4531098a8849865`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b04567f7](https://github.com/openshift/cloud-provider-vsphere/commit/b04567f77273f6c338ece9fda29c0a65297130d5) `sha256:f5728706d717f55106d5f50128e4ec8cc018e97be87686646b518e2aaabd5645`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [72e998c3](https://github.com/openshift/cluster-api-provider-vsphere/commit/72e998c300e17a7ba81d4a5a7624d69b0a104603) `sha256:18bfb3c074de74dd95979dbdc1167aadf8bc19b145e983dc3febcdc8a762154d`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5d5105f9](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5d5105f93e02ba0c4c07890b3db630b11d839abf) `sha256:aee8a75615c2fd17962222e6840d26fb79cdeff12ace65e7896c2ecccf45b1ab`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [ece171d2](https://github.com/openshift/vsphere-problem-detector/commit/ece171d2d5b5fa417d1aece9aa80714841c35cec) `sha256:63f163a11b645a577aab82810982f886aea7c15257ea99ca8bc76881abcb7fe1`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/60d5e86b6b7b9fbf8e7e4d1ca12e5b59a32d18c4)

* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6416) [#6416](https://github.com/openshift/assisted-service/pull/6416)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) [#6322](https://github.com/openshift/assisted-service/pull/6322)
* [MGMT-17594](https://issues.redhat.com/browse/MGMT-17594): Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6216) [#6216](https://github.com/openshift/assisted-service/pull/6216)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6203) [#6203](https://github.com/openshift/assisted-service/pull/6203)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6197) [#6197](https://github.com/openshift/assisted-service/pull/6197)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) [#6134](https://github.com/openshift/assisted-service/pull/6134)
* [MGMT-16950](https://issues.redhat.com/browse/MGMT-16950): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) [#5973](https://github.com/openshift/assisted-service/pull/5973)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5974) [#5974](https://github.com/openshift/assisted-service/pull/5974)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#5987) [#5987](https://github.com/openshift/assisted-service/pull/5987)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f3a6b8042dd2605087c270826aee84dfef94eb8d...60d5e86b6b7b9fbf8e7e4d1ca12e5b59a32d18c4)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/5d64ad00cc9a2f045895dfccc43fe8d81027e745)

* [MGMT-17594](https://issues.redhat.com/browse/MGMT-17594): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) [#834](https://github.com/openshift/assisted-installer/pull/834)
* [MGMT-17591](https://issues.redhat.com/browse/MGMT-17591): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) [#830](https://github.com/openshift/assisted-installer/pull/830)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#794) [#794](https://github.com/openshift/assisted-installer/pull/794)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/02dc1175d8d1278f94287d14899c66344cef9174...5d64ad00cc9a2f045895dfccc43fe8d81027e745)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/7020f88445f88bdddd4901f2ae33bd684127c3a5)

* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#725) [#725](https://github.com/openshift/assisted-installer-agent/pull/725)
* [MGMT-17594](https://issues.redhat.com/browse/MGMT-17594): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) [#705](https://github.com/openshift/assisted-installer-agent/pull/705)
* [MGMT-17591](https://issues.redhat.com/browse/MGMT-17591): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) [#703](https://github.com/openshift/assisted-installer-agent/pull/703)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#698) [#698](https://github.com/openshift/assisted-installer-agent/pull/698)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e438a5e93d2b08ba670acf742c0f1c6ad44ab92b...7020f88445f88bdddd4901f2ae33bd684127c3a5)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/a3c0e6b7016017e26603f9990bce2891374f3ca1)

* [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/3362d673b054807a4974b4d600486933f7e0bd42...a3c0e6b7016017e26603f9990bce2891374f3ca1)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/471f069c3efffc52a6f594ff09712225115a3f4f)

* [OCPBUGS-32066](https://issues.redhat.com/browse/OCPBUGS-32066): update for CVE-2023-45288 [release-4.14] [#83](https://github.com/openshift/cloud-provider-aws/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/607e2dde6cde137b5c14d5f7687847f6df4cae94...471f069c3efffc52a6f594ff09712225115a3f4f)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4efe12cbfebbb27fe78b07da4f7e7f264a9812fb)

* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#516](https://github.com/openshift/cluster-api-provider-aws/pull/516)
* [OCPBUGS-31332](https://issues.redhat.com/browse/OCPBUGS-31332): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#506](https://github.com/openshift/cluster-api-provider-aws/pull/506)
* [OCPBUGS-31251](https://issues.redhat.com/browse/OCPBUGS-31251): fix e2e tests on release branches [#505](https://github.com/openshift/cluster-api-provider-aws/pull/505)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/a7518d12ca93af58a50ff30b421b78bcb804d36b...4efe12cbfebbb27fe78b07da4f7e7f264a9812fb)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/918bb4e9106bbd7498d0d5b3b44ec6df392789b5)

* [OCPBUGS-33078](https://issues.redhat.com/browse/OCPBUGS-33078): UPSTREAM: 1919: Add reserved-volume-attachments [#264](https://github.com/openshift/aws-ebs-csi-driver/pull/264)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/2e2e2774b971d215c3ded5eef925980bac047253...918bb4e9106bbd7498d0d5b3b44ec6df392789b5)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/609879c3f1b9a65936e385f798398a2d1673aacd)

* [OCPBUGS-33078](https://issues.redhat.com/browse/OCPBUGS-33078): Explicitly reserve 1 attachment for the root disk [#306](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/306)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/95bcf9a61ef71f1a1cd57d39f42a11151432689c...609879c3f1b9a65936e385f798398a2d1673aacd)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63)

* [OCPBUGS-32884](https://issues.redhat.com/browse/OCPBUGS-32884): Upgrade go-jose module to 2.6.3 [#189](https://github.com/openshift/aws-pod-identity-webhook/pull/189)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ad7aa0ae2c85eca233fbe1afc35e64452a880a1c...2c864ca0f09e038c4b0c82215ef1a6f60fb54e63)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/918935767350f9f330b9d6a9c3ee03e9869e7828)

* [OCPBUGS-25657](https://issues.redhat.com/browse/OCPBUGS-25657): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#120](https://github.com/openshift/azure-disk-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/557c4f4617d45e50127363e34d4512b59e8c8bb6...918935767350f9f330b9d6a9c3ee03e9869e7828)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/f28a507244d4629404365c89b422f04b9d8d7943)

* [OCPBUGS-33039](https://issues.redhat.com/browse/OCPBUGS-33039): Rebase v1.29.5 for OCP 4.14 [#66](https://github.com/openshift/azure-file-csi-driver/pull/66)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f401f53684e5aa1e94036612770ca7ee10f55b24...f28a507244d4629404365c89b422f04b9d8d7943)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/4469d80589595dd5d05f0f0f296505800e3ad527)

* [OCPBUGS-33039](https://issues.redhat.com/browse/OCPBUGS-33039): add token audience for Azure File [#104](https://github.com/openshift/azure-file-csi-driver-operator/pull/104)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/354c55d8a8035218eff47c1b64b80c6352ac9537...4469d80589595dd5d05f0f0f296505800e3ad527)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/8666a367160c23175f97c5df9db7c1844405865e)

* [OCPBUGS-30898](https://issues.redhat.com/browse/OCPBUGS-30898): Remove startupScript vmextension lookup [#106](https://github.com/openshift/machine-api-provider-azure/pull/106)
* [OCPBUGS-29152](https://issues.redhat.com/browse/OCPBUGS-29152): Don't create availability set when using spot instances [#98](https://github.com/openshift/machine-api-provider-azure/pull/98)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/68dba8992cb166ef3310dd2470f346b27198710e...8666a367160c23175f97c5df9db7c1844405865e)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/bcb88d949151223362ecefc12f4e90566599e0e7)

* [OCPBUGS-32894](https://issues.redhat.com/browse/OCPBUGS-32894): Upgrade go-jose module to 2.6.3 [#19](https://github.com/openshift/azure-workload-identity/pull/19)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/43a15be6ce6a5154be812db3dd55e871b529eefb...bcb88d949151223362ecefc12f4e90566599e0e7)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/e3955191fd56cfcc0ef1d20d38d56a462a9f9138)

* [OCPBUGS-35485](https://issues.redhat.com/browse/OCPBUGS-35485): [release-4.14] aws: terraform: add spot instance support for masters [#8605](https://github.com/openshift/installer/pull/8605)
* [OCPBUGS-34024](https://issues.redhat.com/browse/OCPBUGS-34024): go.mod: bump aws-sdk-go for ca-west-1 support [#8440](https://github.com/openshift/installer/pull/8440)
* [OCPBUGS-33401](https://issues.redhat.com/browse/OCPBUGS-33401): PowerVS: Add composite_instance to listServiceInstances [#8479](https://github.com/openshift/installer/pull/8479)
* [CORS-2951](https://issues.redhat.com/browse/CORS-2951): Add deprecation notice for OpenShiftSDN for 4.14 users [#8518](https://github.com/openshift/installer/pull/8518)
* [OCPBUGS-28611](https://issues.redhat.com/browse/OCPBUGS-28611): remove retired serial NCv2 from azure tested instance type list on x86 [#7960](https://github.com/openshift/installer/pull/7960)
* [OCPBUGS-27394](https://issues.redhat.com/browse/OCPBUGS-27394): preserve category name when trying to find tag category [#7926](https://github.com/openshift/installer/pull/7926)
* [OCPBUGS-33010](https://issues.redhat.com/browse/OCPBUGS-33010): escape '%' in proxy settings [#8318](https://github.com/openshift/installer/pull/8318)
* [OCPBUGS-31756](https://issues.redhat.com/browse/OCPBUGS-31756): openstack: Honour worker server group policy [#8231](https://github.com/openshift/installer/pull/8231)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#8286](https://github.com/openshift/installer/pull/8286)
* [OCPBUGS-32358](https://issues.redhat.com/browse/OCPBUGS-32358): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8281](https://github.com/openshift/installer/pull/8281)
* [OCPBUGS-31885](https://issues.redhat.com/browse/OCPBUGS-31885): Validate control plane replicas [#8241](https://github.com/openshift/installer/pull/8241)
* [OCPBUGS-31677](https://issues.redhat.com/browse/OCPBUGS-31677): coreos-installer iso kargs show broken on Agent ISO [#8228](https://github.com/openshift/installer/pull/8228)
* [OCPBUGS-31338](https://issues.redhat.com/browse/OCPBUGS-31338): upi: aws: fix typo in worker templates [#8203](https://github.com/openshift/installer/pull/8203)
* Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation [#8095](https://github.com/openshift/installer/pull/8095)
* [OCPBUGS-30027](https://issues.redhat.com/browse/OCPBUGS-30027): gcp: better error msg when service accnt missing [#8078](https://github.com/openshift/installer/pull/8078)
* [OCPBUGS-30259](https://issues.redhat.com/browse/OCPBUGS-30259): PowerVS remove ibm cloud/bluemix go 4.14 [#8103](https://github.com/openshift/installer/pull/8103)
* [OCPBUGS-29123](https://issues.redhat.com/browse/OCPBUGS-29123): IBMCloud: Handle disk delete errors [#7988](https://github.com/openshift/installer/pull/7988)
* [OCPBUGS-29626](https://issues.redhat.com/browse/OCPBUGS-29626): update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 [#8037](https://github.com/openshift/installer/pull/8037)
* [Full changelog](https://github.com/openshift/installer/compare/6ad9135c45355a6f0bcc0899c538ba594b6f26f2...e3955191fd56cfcc0ef1d20d38d56a462a9f9138)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/fb20cdac93ab9647e9c9cabafb45c7811789b477)

* [OCPBUGS-31435](https://issues.redhat.com/browse/OCPBUGS-31435): Bump golang-protobuf version [#215](https://github.com/openshift/cluster-api-provider-baremetal/pull/215)
* [OCPBUGS-29177](https://issues.redhat.com/browse/OCPBUGS-29177): Extend metal3remediation aggregation role [#211](https://github.com/openshift/cluster-api-provider-baremetal/pull/211)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/412acb3ce356dc18fe79e95920a97c34950b4d42...fb20cdac93ab9647e9c9cabafb45c7811789b477)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/887153049f16c81c85735998b78d23b56fbe0222)

* [OCPBUGS-34814](https://issues.redhat.com/browse/OCPBUGS-34814): PreprovisioningImage should not be created on poweroff [#359](https://github.com/openshift/baremetal-operator/pull/359)
* [OCPBUGS-23324](https://issues.redhat.com/browse/OCPBUGS-23324): Backport node poweroff fixes [#318](https://github.com/openshift/baremetal-operator/pull/318)
* [OCPBUGS-24409](https://issues.redhat.com/browse/OCPBUGS-24409): Don't munge timestamp in structured logs, again [#324](https://github.com/openshift/baremetal-operator/pull/324)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/9cd5c076afbccee3f4297cb2c9eb1435f572abf8...887153049f16c81c85735998b78d23b56fbe0222)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/393a268d0ae6e8cacc75d0b60b91bf6105fb9360)

* [OCPBUGS-32524](https://issues.redhat.com/browse/OCPBUGS-32524): Decrease log level when detecting node IP [#306](https://github.com/openshift/baremetal-runtimecfg/pull/306)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/13046b3bc0fc92b92582e50de0b1df6a359450a7...393a268d0ae6e8cacc75d0b60b91bf6105fb9360)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/aa6e2f22f0c7e46757d976b6eb003786196ff907)

* [OCPBUGS-35447](https://issues.redhat.com/browse/OCPBUGS-35447): bump go-git to 5.11.0 [#1799](https://github.com/openshift/oc/pull/1799)
* [OCPBUGS-30287](https://issues.redhat.com/browse/OCPBUGS-30287): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1699](https://github.com/openshift/oc/pull/1699)
* [Full changelog](https://github.com/openshift/oc/compare/286cfa5f978c4a89c776347c82fa09a232eef144...aa6e2f22f0c7e46757d976b6eb003786196ff907)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/67fe51ea7cc53e73aba861d75696fc051b404d4d)

* [OCPBUGS-32899](https://issues.redhat.com/browse/OCPBUGS-32899): Upgrade go-jose module to 2.6.3 [#697](https://github.com/openshift/cloud-credential-operator/pull/697)
* [OCPBUGS-29156](https://issues.redhat.com/browse/OCPBUGS-29156): Fix the ClusterOperator watch of the status controller [#676](https://github.com/openshift/cloud-credential-operator/pull/676)
* [OCPBUGS-28231](https://issues.redhat.com/browse/OCPBUGS-28231): Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions [#670](https://github.com/openshift/cloud-credential-operator/pull/670)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a2cfca57a380e8b81ea821a5a6791c1c674e5a7c...67fe51ea7cc53e73aba861d75696fc051b404d4d)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1bd04641f210d19370f782086949f827bfb7a264)

* [OCPBUGS-34197](https://issues.redhat.com/browse/OCPBUGS-34197): Avoid panic when looking up attachedOutboundRule.ID in azure [#147](https://github.com/openshift/cloud-network-config-controller/pull/147)
* [OCPBUGS-32112](https://issues.redhat.com/browse/OCPBUGS-32112): Avoid nil pointer panic while assigning private IP on Azure [#138](https://github.com/openshift/cloud-network-config-controller/pull/138)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/9cb1bbd8d14a1e6ea9ef15745dfafb733486e07c...1bd04641f210d19370f782086949f827bfb7a264)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e)

* [OCPBUGS-28247](https://issues.redhat.com/browse/OCPBUGS-28247): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#649](https://github.com/openshift/cluster-authentication-operator/pull/649)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9ad3782e5e7c17c15f824572c7049a44e8f85700...9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/9d87281f73fc26a5fac17c50dcf63c2de17f619a)

* [OCPBUGS-31621](https://issues.redhat.com/browse/OCPBUGS-31621): add check for taint.value == nil [#294](https://github.com/openshift/kubernetes-autoscaler/pull/294)
* [OCPBUGS-30628](https://issues.redhat.com/browse/OCPBUGS-30628): Fix unstructured taint parsing in Cluster API provider [#288](https://github.com/openshift/kubernetes-autoscaler/pull/288)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/0822c7b7429a6fbea65e9d472594689429501491...9d87281f73fc26a5fac17c50dcf63c2de17f619a)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/32854baae386c4d6854d7fd8658fdff75588e919)

* [OCPBUGS-31976](https://issues.redhat.com/browse/OCPBUGS-31976): Update x/net to v0.25.0 [#322](https://github.com/openshift/cluster-autoscaler-operator/pull/322)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/5d436c6bb9fc269651256efabca9f7df9fb8f325...32854baae386c4d6854d7fd8658fdff75588e919)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/a0b9c0d70748ff24de5a40874207de3ea5bfa91e)

* [OCPBUGS-34556](https://issues.redhat.com/browse/OCPBUGS-34556): update azure and ash tolerations on node manager [#347](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33a706e8a2430fa67f4472dbd0f61cea8de6bd6f...a0b9c0d70748ff24de5a40874207de3ea5bfa91e)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/91fa980a5be1d3c91786ff41a0a9394adb75671f)

* [OCPBUGS-28649](https://issues.redhat.com/browse/OCPBUGS-28649): Add required PSa labels [#403](https://github.com/openshift/cluster-config-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/7c6fa3ee88c4370e4ea4ba07351a7331e938cb25...91fa980a5be1d3c91786ff41a0a9394adb75671f)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/ffbc62890d9ce8488f7c8501a108e6c6f47e740e)

* [OCPBUGS-35520](https://issues.redhat.com/browse/OCPBUGS-35520): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#309](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/309)
* [OCPBUGS-35338](https://issues.redhat.com/browse/OCPBUGS-35338): Improved debugging of API listing errors [#303](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/303)
* [OCPBUGS-30014](https://issues.redhat.com/browse/OCPBUGS-30014): Never delete a Machine when there's a single Machine in an index [#283](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/283)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/0455a742f260ad7d39f63890559efd4f63429165...ffbc62890d9ce8488f7c8501a108e6c6f47e740e)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/d4a1162514ecbf248b04e6e8625d17bc2b775ccd)

* [OCPBUGS-31886](https://issues.redhat.com/browse/OCPBUGS-31886): create suitable role and roleBinding for csi-snapshot-webhook [#205](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/205)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/73dc400fbbbd7dc131c98199e3b5c5cac957ee83...d4a1162514ecbf248b04e6e8625d17bc2b775ccd)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/9964f0b6fce1ba7a26995762602685cd07416928)

* [OCPBUGS-5943](https://issues.redhat.com/browse/OCPBUGS-5943): Ignore max unavailable for status [#400](https://github.com/openshift/cluster-dns-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5553a22698ac7fce2cc401ed5884eb1bdb36a02d...9964f0b6fce1ba7a26995762602685cd07416928)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a85f3135b23924ceb5bb5c05ab72af99b23ba061)

* [OCPBUGS-34495](https://issues.redhat.com/browse/OCPBUGS-34495): return errors in wait-for-ceo [#1266](https://github.com/openshift/cluster-etcd-operator/pull/1266)
* [OCPBUGS-31392](https://issues.redhat.com/browse/OCPBUGS-31392): remove etcd-health-probe log [#1258](https://github.com/openshift/cluster-etcd-operator/pull/1258)
* [OCPBUGS-31972](https://issues.redhat.com/browse/OCPBUGS-31972): update golang x net [#1254](https://github.com/openshift/cluster-etcd-operator/pull/1254)
* [OCPBUGS-31428](https://issues.redhat.com/browse/OCPBUGS-31428): CEO aliveness check should only detect deadlocks [#1231](https://github.com/openshift/cluster-etcd-operator/pull/1231)
* [OCPBUGS-30067](https://issues.redhat.com/browse/OCPBUGS-30067): fix panic in health check timeouts [#1213](https://github.com/openshift/cluster-etcd-operator/pull/1213)
* [OCPBUGS-30012](https://issues.redhat.com/browse/OCPBUGS-30012): Replace nodelister with master nodelister everywhere [#1211](https://github.com/openshift/cluster-etcd-operator/pull/1211)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/14563fc0c24afe7304f1385b8fadd5aad050836b...a85f3135b23924ceb5bb5c05ab72af99b23ba061)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/36b3ccaf8de00ef242e2c328dc4a054d7c9be106)

* [OCPBUGS-33147](https://issues.redhat.com/browse/OCPBUGS-33147): azure-path-fix: get client secret from k8s secret [#1058](https://github.com/openshift/cluster-image-registry-operator/pull/1058)
* [OCPBUGS-34668](https://issues.redhat.com/browse/OCPBUGS-34668): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1051](https://github.com/openshift/cluster-image-registry-operator/pull/1051)
* [OCPBUGS-33409](https://issues.redhat.com/browse/OCPBUGS-33409): azurepathfix: check if platform status is nil before accessing it [#1033](https://github.com/openshift/cluster-image-registry-operator/pull/1033)
* [OCPBUGS-32450](https://issues.redhat.com/browse/OCPBUGS-32450): azure-path-fix: support auth via account key (without clientID) [#1023](https://github.com/openshift/cluster-image-registry-operator/pull/1023)
* [OCPBUGS-31857](https://issues.redhat.com/browse/OCPBUGS-31857): bump aws-sdk-go from v1.44 to v1.50 [#1018](https://github.com/openshift/cluster-image-registry-operator/pull/1018)
* [OCPBUGS-28989](https://issues.redhat.com/browse/OCPBUGS-28989): pkg/storage/s3: enable bucket key on encryption settings [#995](https://github.com/openshift/cluster-image-registry-operator/pull/995)
* [OCPBUGS-29755](https://issues.redhat.com/browse/OCPBUGS-29755): azurepathfix: fix stack hub, government and workload identity setup [#1005](https://github.com/openshift/cluster-image-registry-operator/pull/1005)
* [OCPBUGS-29604](https://issues.redhat.com/browse/OCPBUGS-29604): move azure storage blobs from `docker` back into `/docker` [#1001](https://github.com/openshift/cluster-image-registry-operator/pull/1001)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d27b918c32a5bcd04a2aba77c35b73b3f005b3e9...36b3ccaf8de00ef242e2c328dc4a054d7c9be106)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/fe438b86e3241ffdb13e7a4cbac43060949733cc)

* [OCPBUGS-35399](https://issues.redhat.com/browse/OCPBUGS-35399): Internal service changed: fix target port logic [#1086](https://github.com/openshift/cluster-ingress-operator/pull/1086)
* [OCPBUGS-34973](https://issues.redhat.com/browse/OCPBUGS-34973): TestHostNetworkPortBinding: Delete t.Parallel() [#1077](https://github.com/openshift/cluster-ingress-operator/pull/1077)
* [OCPBUGS-34410](https://issues.redhat.com/browse/OCPBUGS-34410): Don't add clientca-configmap finalizer if deleting [#1063](https://github.com/openshift/cluster-ingress-operator/pull/1063)
* [OCPBUGS-34407](https://issues.redhat.com/browse/OCPBUGS-34407): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1061](https://github.com/openshift/cluster-ingress-operator/pull/1061)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d876f5ab48e3748057ec196d90b6f7aae633b081...fe438b86e3241ffdb13e7a4cbac43060949733cc)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/4302637f4d521bd9880de93df6bc41d44a4b0756)

* [OCPBUGS-33930](https://issues.redhat.com/browse/OCPBUGS-33930): add a controller that reconciles SCCs' volumes [#1681](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1681)
* [OCPBUGS-31506](https://issues.redhat.com/browse/OCPBUGS-31506): Add sno section to alert description [#1658](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1658)
* [OCPBUGS-31316](https://issues.redhat.com/browse/OCPBUGS-31316): add provider name to cluster_infrastructure_provider when external platform [#1657](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1657)
* [OCPBUGS-29722](https://issues.redhat.com/browse/OCPBUGS-29722): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1650](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1650)
* [OCPBUGS-29722](https://issues.redhat.com/browse/OCPBUGS-29722): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1646](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1646)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2a07e2dc098b9bea4e3e27279c692da10a6a519e...4302637f4d521bd9880de93df6bc41d44a4b0756)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/618dee4f3101ce9468e55c51ad3c436e8367ae41)

* [OCPBUGS-34023](https://issues.redhat.com/browse/OCPBUGS-34023): fix KRP permissions for Thanos Querier [#2374](https://github.com/openshift/cluster-monitoring-operator/pull/2374)
* [OCPBUGS-33585](https://issues.redhat.com/browse/OCPBUGS-33585): fix Thanos ruler alert generator url [#2345](https://github.com/openshift/cluster-monitoring-operator/pull/2345)
* [OCPBUGS-28768](https://issues.redhat.com/browse/OCPBUGS-28768): fix generation of telemeter token hash [#2304](https://github.com/openshift/cluster-monitoring-operator/pull/2304)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/cef0da4428259ea6046d278b496ca33bdbe634cd...618dee4f3101ce9468e55c51ad3c436e8367ae41)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/796bf8f5d5268e1123f033a644b7c7abf3bec823)

* [OCPBUGS-27925](https://issues.redhat.com/browse/OCPBUGS-27925), [OCPBUGS-30579](https://issues.redhat.com/browse/OCPBUGS-30579): [release-4.14] tighten conditions for the state transitions in IC upgrade [#2207](https://github.com/openshift/cluster-network-operator/pull/2207)
* [OCPBUGS-30021](https://issues.redhat.com/browse/OCPBUGS-30021): Fully disable network-node-identity on ROKS [#2315](https://github.com/openshift/cluster-network-operator/pull/2315)
* [OCPBUGS-31669](https://issues.redhat.com/browse/OCPBUGS-31669): [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2311](https://github.com/openshift/cluster-network-operator/pull/2311)
* [OCPBUGS-31360](https://issues.redhat.com/browse/OCPBUGS-31360): Remove egressip write permissions from ovn-kubernetes-node [#2320](https://github.com/openshift/cluster-network-operator/pull/2320)
* [OCPBUGS-30021](https://issues.redhat.com/browse/OCPBUGS-30021): [release-4.14] Disable network-node-identity on ROKS [#2286](https://github.com/openshift/cluster-network-operator/pull/2286)
* [OCPBUGS-30100](https://issues.redhat.com/browse/OCPBUGS-30100): ipsec: fix openssl typo [#2287](https://github.com/openshift/cluster-network-operator/pull/2287)
* [OCPBUGS-29168](https://issues.redhat.com/browse/OCPBUGS-29168): add env var in whereabouts-reconciler daemonset [#2257](https://github.com/openshift/cluster-network-operator/pull/2257)
* [OCPBUGS-26573](https://issues.redhat.com/browse/OCPBUGS-26573): Improve troubleshooting IC upgrades [#2076](https://github.com/openshift/cluster-network-operator/pull/2076)
* [OCPBUGS-29033](https://issues.redhat.com/browse/OCPBUGS-29033): network node identity: tolarate all taints [#2248](https://github.com/openshift/cluster-network-operator/pull/2248)
* [OCPBUGS-18281](https://issues.redhat.com/browse/OCPBUGS-18281): only 2 master nodes are required for ovn-kubernetes [#2154](https://github.com/openshift/cluster-network-operator/pull/2154)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b7ebd9409da7772b202e721948baf435a374e4a6...796bf8f5d5268e1123f033a644b7c7abf3bec823)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d1894c1dc96cfab024fb0a80903eac060bce39b3)

* Add a '.snyk' to silence static code analysis warnings (#1002) [#1002](https://github.com/openshift/cluster-node-tuning-operator/pull/1002)
* [OCPBUGS-30153](https://issues.redhat.com/browse/OCPBUGS-30153): fix rendering extra ctrcfgs (#978) [#978](https://github.com/openshift/cluster-node-tuning-operator/pull/978)
* fix extra-reboot on upgrade with paused mcp worker (#1053) [#1053](https://github.com/openshift/cluster-node-tuning-operator/pull/1053)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) (#1052) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* Systemd processes not being moved to cpuset/systemd.slice fix (#1040) [#1040](https://github.com/openshift/cluster-node-tuning-operator/pull/1040)
* Reduce number of reboots in offline tests (#1035) [#1035](https://github.com/openshift/cluster-node-tuning-operator/pull/1035)
* [OCPBUGS-30507](https://issues.redhat.com/browse/OCPBUGS-30507): Add performance real time tuned template (#984) (#1025) [#984](https://github.com/openshift/cluster-node-tuning-operator/pull/984)
* Report duplicate priority only for multiple matching profiles (#1018) [#1018](https://github.com/openshift/cluster-node-tuning-operator/pull/1018)
* Scheduler plugin: ignore IRQs (#1023) [#1023](https://github.com/openshift/cluster-node-tuning-operator/pull/1023)
* irqbalance: set banned cpus list to 0 (#994) [#994](https://github.com/openshift/cluster-node-tuning-operator/pull/994)
* [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): [release-4.14][manual] backport performance profile owner reference ehnancements (#989) [#989](https://github.com/openshift/cluster-node-tuning-operator/pull/989)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ffdfe67e4777f82688252181e6c92f07123fde82...d1894c1dc96cfab024fb0a80903eac060bce39b3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/700dc111fd98c315648a78371b11be34fa4dbba3)

* [OCPBUGS-28247](https://issues.redhat.com/browse/OCPBUGS-28247): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#570](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/570)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/8bd86026e9eaab600dafa3c89c102f1cf86677fe...700dc111fd98c315648a78371b11be34fa4dbba3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/61a34659e4499188ab6f790e3a07aba8be9e9bdd)

* [OCPBUGS-21217](https://issues.redhat.com/browse/OCPBUGS-21217): CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) [#539](https://github.com/openshift/cluster-samples-operator/pull/539)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/b5396eb170fc9e8d6ef1f1e656bf61a8d36cdd04...61a34659e4499188ab6f790e3a07aba8be9e9bdd)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192)

* [OCPBUGS-33467](https://issues.redhat.com/browse/OCPBUGS-33467): Fix problem-detector proxy setting [#472](https://github.com/openshift/cluster-storage-operator/pull/472)
* [OCPBUGS-30054](https://issues.redhat.com/browse/OCPBUGS-30054): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#462](https://github.com/openshift/cluster-storage-operator/pull/462)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/34e34480c0955bf707cca12b97110e553b05f7d1...6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/af210dc66d38bce5793155aac8bfb6220a7085d9)

* [OCPBUGS-30878](https://issues.redhat.com/browse/OCPBUGS-30878): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#1040](https://github.com/openshift/cluster-version-operator/pull/1040)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7f3f152e04ab8d7b19f84c20c9a25ce51f1078a5...af210dc66d38bce5793155aac8bfb6220a7085d9)


### [console](https://github.com/openshift/console/tree/c802a329ebd8bc5d153ad39c24ff04f63a0cdc09)

* [OCPBUGS-33558](https://issues.redhat.com/browse/OCPBUGS-33558): Display "With Data upload form" in Create PVC drop down once [#13840](https://github.com/openshift/console/pull/13840)
* [OCPBUGS-33064](https://issues.redhat.com/browse/OCPBUGS-33064): Fix PipelineRun Logs tab navigation [#13673](https://github.com/openshift/console/pull/13673)
* [OCPBUGS-33321](https://issues.redhat.com/browse/OCPBUGS-33321): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13824](https://github.com/openshift/console/pull/13824)
* [OCPBUGS-33635](https://issues.redhat.com/browse/OCPBUGS-33635): restrict Masthead logo to max-height to 60px [#13847](https://github.com/openshift/console/pull/13847)
* [OCPBUGS-33640](https://issues.redhat.com/browse/OCPBUGS-33640): Add visual connector between VMs and non VMs workloads [#13848](https://github.com/openshift/console/pull/13848)
* [OCPBUGS-33462](https://issues.redhat.com/browse/OCPBUGS-33462): fix issues with Edit Route form [#13831](https://github.com/openshift/console/pull/13831)
* [OCPBUGS-33110](https://issues.redhat.com/browse/OCPBUGS-33110): change OperatorHub filter FIPS Mode to Designed for FIPS [#13804](https://github.com/openshift/console/pull/13804)
* [OCPBUGS-32697](https://issues.redhat.com/browse/OCPBUGS-32697): Routes created by devfiles do not always use HTTPS [#13787](https://github.com/openshift/console/pull/13787)
* [OCPBUGS-21799](https://issues.redhat.com/browse/OCPBUGS-21799): Fix empty editor error [#13256](https://github.com/openshift/console/pull/13256)
* [OCPBUGS-32168](https://issues.redhat.com/browse/OCPBUGS-32168): fix bug where paused MCPs were incorrectly unpausing w… [#13753](https://github.com/openshift/console/pull/13753)
* [OCPBUGS-20173](https://issues.redhat.com/browse/OCPBUGS-20173): Console should not panic when no response is retrieved for plugin assets [#13217](https://github.com/openshift/console/pull/13217)
* [OCPBUGS-31388](https://issues.redhat.com/browse/OCPBUGS-31388): Application creation fail when manually entering input scaling value in local setup [#13697](https://github.com/openshift/console/pull/13697)
* [OCPBUGS-31394](https://issues.redhat.com/browse/OCPBUGS-31394): PipelineRuns in Console show wrong status or load indefinitely [#13698](https://github.com/openshift/console/pull/13698)
* [OCPBUGS-31864](https://issues.redhat.com/browse/OCPBUGS-31864): Fix config ini format [#13738](https://github.com/openshift/console/pull/13738)
* [OCPBUGS-25145](https://issues.redhat.com/browse/OCPBUGS-25145): fix vCenter cluster being empty [#13436](https://github.com/openshift/console/pull/13436)
* [OCPBUGS-28746](https://issues.redhat.com/browse/OCPBUGS-28746): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13558](https://github.com/openshift/console/pull/13558)
* [OCPBUGS-29783](https://issues.redhat.com/browse/OCPBUGS-29783): Fix operands list endpoint [#13625](https://github.com/openshift/console/pull/13625)
* [OCPBUGS-29813](https://issues.redhat.com/browse/OCPBUGS-29813): Release 4.14 backports [#13646](https://github.com/openshift/console/pull/13646)
* [OCPBUGS-29813](https://issues.redhat.com/browse/OCPBUGS-29813): Addition of optional chaining to prevent yaml crash [#13541](https://github.com/openshift/console/pull/13541)
* [OCPBUGS-25274](https://issues.redhat.com/browse/OCPBUGS-25274): Add support for Azure Workload Identity / Federated Identity based in… [#13642](https://github.com/openshift/console/pull/13642)
* [OCPBUGS-28972](https://issues.redhat.com/browse/OCPBUGS-28972): Add flags checks to hide Pipeline static plugin List and details pages [#13572](https://github.com/openshift/console/pull/13572)
* [OCPBUGS-27898](https://issues.redhat.com/browse/OCPBUGS-27898): Add support for custom segment domains (to load JS and make API calls) [#13540](https://github.com/openshift/console/pull/13540)
* [OCPBUGS-29349](https://issues.redhat.com/browse/OCPBUGS-29349): Error in displaying BuildRun logs in Console [#13601](https://github.com/openshift/console/pull/13601)
* [Full changelog](https://github.com/openshift/console/compare/f6393af8887bba01239205972c5bfd0393615dcb...c802a329ebd8bc5d153ad39c24ff04f63a0cdc09)


### [console-operator](https://github.com/openshift/console-operator/tree/e5d3f29136a89a273ed48023ce3a89c27980cf4f)

* [OCPBUGS-31916](https://issues.redhat.com/browse/OCPBUGS-31916): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#885](https://github.com/openshift/console-operator/pull/885)
* [OCPBUGS-21029](https://issues.redhat.com/browse/OCPBUGS-21029): Bump library-go and golang.org/x/net [#850](https://github.com/openshift/console-operator/pull/850)
* [Full changelog](https://github.com/openshift/console-operator/compare/a5176b4e8454e5d1d28023d77ddbad880db99168...e5d3f29136a89a273ed48023ce3a89c27980cf4f)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407)

* [OCPBUGS-33066](https://issues.redhat.com/browse/OCPBUGS-33066): macvlan enable ipv6 ndisc_notify [#160](https://github.com/openshift/containernetworking-plugins/pull/160)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/7295a5e0d5b273bd02a9cab8237928bf2957b383...bab8a4f7a868f47f87171c2ef5c1e0b9ae388407)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/a6834536936b16dcd9ee81a8753a2ef6dc208541)

* [OCPBUGS-29433](https://issues.redhat.com/browse/OCPBUGS-29433): cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#142](https://github.com/openshift/csi-external-snapshotter/pull/142)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/0bf9276611e57cb87a05576c974fea1c38e3eb96...a6834536936b16dcd9ee81a8753a2ef6dc208541)


### [docker-registry](https://github.com/openshift/image-registry/tree/f03c24040cea924f846aca8b4e02bf802159a238)

* [OCPBUGS-31857](https://issues.redhat.com/browse/OCPBUGS-31857): vendor: bump aws-sdk-go to support ca-west-1 [#397](https://github.com/openshift/image-registry/pull/397)
* [OCPBUGS-29604](https://issues.redhat.com/browse/OCPBUGS-29604): vendor: bump distribution to fix azure storage path bug [#394](https://github.com/openshift/image-registry/pull/394)
* [Full changelog](https://github.com/openshift/image-registry/compare/690b5a215111ec83d1368ce14d63152d917e0392...f03c24040cea924f846aca8b4e02bf802159a238)


### [etcd](https://github.com/openshift/etcd/tree/5ed5044c5661c55d297ab0348056b50969af9627)

* [OCPBUGS-32813](https://issues.redhat.com/browse/OCPBUGS-32813): Revert "Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… [#265](https://github.com/openshift/etcd/pull/265)
* [OCPBUGS-31650](https://issues.redhat.com/browse/OCPBUGS-31650): Rebase etcd 3.5.13 openshift 4.14 [#261](https://github.com/openshift/etcd/pull/261)
* [OCPBUGS-28733](https://issues.redhat.com/browse/OCPBUGS-28733): Rebase etcd 3.5.12 openshift 4.14 [#244](https://github.com/openshift/etcd/pull/244)
* [Full changelog](https://github.com/openshift/etcd/compare/77303c479ae9cb45b5a1b481f54ec5b62d89246f...5ed5044c5661c55d297ab0348056b50969af9627)


### [haproxy-router](https://github.com/openshift/router/tree/c3a2430c09ccea623bb8a599ce56a6e267009620)

* [OCPBUGS-32634](https://issues.redhat.com/browse/OCPBUGS-32634): Properly handle rewrite-target annotation [#583](https://github.com/openshift/router/pull/583)
* [OCPBUGS-33797](https://issues.redhat.com/browse/OCPBUGS-33797): Reject routes with MD5 certs [#598](https://github.com/openshift/router/pull/598)
* [OCPBUGS-33389](https://issues.redhat.com/browse/OCPBUGS-33389): Count active services before setting weight to 1 [#592](https://github.com/openshift/router/pull/592)
* [OCPBUGS-30773](https://issues.redhat.com/browse/OCPBUGS-30773): OCPBUGS 6958 backport to 4.14 [#568](https://github.com/openshift/router/pull/568)
* [OCPBUGS-32437](https://issues.redhat.com/browse/OCPBUGS-32437): Introduce 'idle-close-on-response' option for frontends [#580](https://github.com/openshift/router/pull/580)
* [Full changelog](https://github.com/openshift/router/compare/b3af193f191b8d20c0b7bac328cb2c397d5c2c27...c3a2430c09ccea623bb8a599ce56a6e267009620)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/78524260502e5d93191acb29397a01db5df6136b)

* UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check [#1951](https://github.com/openshift/kubernetes/pull/1951)
* [OCPBUGS-33712](https://issues.redhat.com/browse/OCPBUGS-33712): Bump to Kubernetes v1.27.14 [#1970](https://github.com/openshift/kubernetes/pull/1970)
* [OCPBUGS-33417](https://issues.redhat.com/browse/OCPBUGS-33417): Provide SCC access via RBAC [#1965](https://github.com/openshift/kubernetes/pull/1965)
* [OCPBUGS-14373](https://issues.redhat.com/browse/OCPBUGS-14373): Fix flaky HPA e2e tests by not failing on context cancelled (#117669) [#1958](https://github.com/openshift/kubernetes/pull/1958)
* [OCPBUGS-32580](https://issues.redhat.com/browse/OCPBUGS-32580): allow override of NewVolumeManagerReconstruction [#1956](https://github.com/openshift/kubernetes/pull/1956)
* [OCPBUGS-32309](https://issues.redhat.com/browse/OCPBUGS-32309): Bump K8s api to 1.27.13 [#1950](https://github.com/openshift/kubernetes/pull/1950)
* [OCPBUGS-29924](https://issues.redhat.com/browse/OCPBUGS-29924): UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches [#1898](https://github.com/openshift/kubernetes/pull/1898)
* [OCPBUGS-31504](https://issues.redhat.com/browse/OCPBUGS-31504): Bump to 1.27.12 [#1927](https://github.com/openshift/kubernetes/pull/1927)
* [OCPBUGS-31741](https://issues.redhat.com/browse/OCPBUGS-31741): 4.14: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes [#1936](https://github.com/openshift/kubernetes/pull/1936)
* Address CVE [#12](https://github.com/openshift/kubernetes/pull/12)
* [OCPBUGS-30964](https://issues.redhat.com/browse/OCPBUGS-30964): Set up CEL IP/CIDR library from 4.14 onwards [#1913](https://github.com/openshift/kubernetes/pull/1913)
* [OCPBUGS-29662](https://issues.redhat.com/browse/OCPBUGS-29662): Update to kubernetes 1.27.11 [#1890](https://github.com/openshift/kubernetes/pull/1890)
* [OCPBUGS-27347](https://issues.redhat.com/browse/OCPBUGS-27347): UPSTREAM: <carry>: Update management webhook pod admission logic [#1855](https://github.com/openshift/kubernetes/pull/1855)
* [Full changelog](https://github.com/openshift/kubernetes/compare/28ed2d70d51caa9146362e3d268e24198731f6b7...78524260502e5d93191acb29397a01db5df6136b)


### [hypershift](https://github.com/openshift/hypershift/tree/895102472ff30070a1cbf02a2610353c2481b6a0)

* [OCPBUGS-35183](https://issues.redhat.com/browse/OCPBUGS-35183): add AWS STS URL to OIDC provider audiences [#4179](https://github.com/openshift/hypershift/pull/4179)
* NO-JIRA: hack: make the e2e script generic [#4201](https://github.com/openshift/hypershift/pull/4201)
* chore(deps): update konflux references to 2be7c9c (release-4.14) [#4225](https://github.com/openshift/hypershift/pull/4225)
* NO-JIRA: Update Konflux references to 1025001 (release-4.14) [#4181](https://github.com/openshift/hypershift/pull/4181)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4168](https://github.com/openshift/hypershift/pull/4168)
* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): [release-4.14] OCPBUGS-34855: Add new permission required in CAPA [#4149](https://github.com/openshift/hypershift/pull/4149)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4159](https://github.com/openshift/hypershift/pull/4159)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#4112](https://github.com/openshift/hypershift/pull/4112)
* NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) [#4073](https://github.com/openshift/hypershift/pull/4073)
* NO-JIRA: Remove CLI inspection of release image [#4061](https://github.com/openshift/hypershift/pull/4061)
* [OCPBUGS-33713](https://issues.redhat.com/browse/OCPBUGS-33713): Reconcile over ICSP/IDMS [#4059](https://github.com/openshift/hypershift/pull/4059)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) [#4065](https://github.com/openshift/hypershift/pull/4065)
* [OCPBUGS-33844](https://issues.redhat.com/browse/OCPBUGS-33844): Fix disconnected metadata inspection [#4049](https://github.com/openshift/hypershift/pull/4049)
* [OCPBUGS-33843](https://issues.redhat.com/browse/OCPBUGS-33843): Recycler-pod image now points to the OCP Payload reference [#4048](https://github.com/openshift/hypershift/pull/4048)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#4040](https://github.com/openshift/hypershift/pull/4040)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4025](https://github.com/openshift/hypershift/pull/4025)
* NO-JIRA:  Update RHTAP references (release-4.14) [#3995](https://github.com/openshift/hypershift/pull/3995)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3958](https://github.com/openshift/hypershift/pull/3958)
* [OCPBUGS-33105](https://issues.redhat.com/browse/OCPBUGS-33105): [release-4.14] remove PrivateIngressController cleanup [#3960](https://github.com/openshift/hypershift/pull/3960)
* [OCPBUGS-32471](https://issues.redhat.com/browse/OCPBUGS-32471): Fix ICSP and IDMS inclusion as registriesOverrides [#3912](https://github.com/openshift/hypershift/pull/3912)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3920](https://github.com/openshift/hypershift/pull/3920)
* [OCPBUGS-32221](https://issues.redhat.com/browse/OCPBUGS-32221): Added support for OLM Disable default sources on HC creation [#3882](https://github.com/openshift/hypershift/pull/3882)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3903](https://github.com/openshift/hypershift/pull/3903)
* NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster [#3905](https://github.com/openshift/hypershift/pull/3905)
* [HOSTEDCP-1526](https://issues.redhat.com/browse/HOSTEDCP-1526): [release-4.14] Support additional node selectors for request serving nodes [#3898](https://github.com/openshift/hypershift/pull/3898)
* chore(deps): update rhtap references (release-4.14) [#3888](https://github.com/openshift/hypershift/pull/3888)
* NO-JIRA: Update RHTAP references (release-4.14) [#3874](https://github.com/openshift/hypershift/pull/3874)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3869](https://github.com/openshift/hypershift/pull/3869)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3858](https://github.com/openshift/hypershift/pull/3858)
* NO-JIRA: Update RHTAP references (release-4.14) [#3836](https://github.com/openshift/hypershift/pull/3836)
* [OCPBUGS-31657](https://issues.redhat.com/browse/OCPBUGS-31657): disable http2 for ignition server and proxy [#3831](https://github.com/openshift/hypershift/pull/3831)
* [OCPBUGS-31605](https://issues.redhat.com/browse/OCPBUGS-31605): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3826](https://github.com/openshift/hypershift/pull/3826)
* [HOSTEDCP-1322](https://issues.redhat.com/browse/HOSTEDCP-1322): NodeUpgradeType defaulted by provider [#3822](https://github.com/openshift/hypershift/pull/3822)
* NO-JIRA: Update RHTAP references (release-4.14) [#3813](https://github.com/openshift/hypershift/pull/3813)
* [OCPBUGS-31417](https://issues.redhat.com/browse/OCPBUGS-31417): honor HC image configuration [#3806](https://github.com/openshift/hypershift/pull/3806)
* [OCPBUGS-23914](https://issues.redhat.com/browse/OCPBUGS-23914): Added OLMCatalogPlacement option to the CLI [#3229](https://github.com/openshift/hypershift/pull/3229)
* [OCPBUGS-30211](https://issues.redhat.com/browse/OCPBUGS-30211): set Konnectivity cipher suites [#3679](https://github.com/openshift/hypershift/pull/3679)
* chore(deps): update rhtap references (release-4.14) [#3792](https://github.com/openshift/hypershift/pull/3792)
* [OCPBUGS-31048](https://issues.redhat.com/browse/OCPBUGS-31048): [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group [#3771](https://github.com/openshift/hypershift/pull/3771)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3756](https://github.com/openshift/hypershift/pull/3756)
* NO-JIRA: Update RHTAP references (release-4.14) [#3755](https://github.com/openshift/hypershift/pull/3755)
* chore(deps): update rhtap references (release-4.14) [#3739](https://github.com/openshift/hypershift/pull/3739)
* [OCPBUGS-30596](https://issues.redhat.com/browse/OCPBUGS-30596): Bump golang.org/x/net to version v0.17.0 [#3711](https://github.com/openshift/hypershift/pull/3711)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3706](https://github.com/openshift/hypershift/pull/3706)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3676](https://github.com/openshift/hypershift/pull/3676)
* NO-JIRA: Update RHTAP references (release-4.14) [#3672](https://github.com/openshift/hypershift/pull/3672)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3651](https://github.com/openshift/hypershift/pull/3651)
* [OCPBUGS-29782](https://issues.redhat.com/browse/OCPBUGS-29782): use 2040 for apiserver svc in IBM provider [#3594](https://github.com/openshift/hypershift/pull/3594)
* "[release-4.14] OCPBUGS-29259: Fix default release image lookup" [#3550](https://github.com/openshift/hypershift/pull/3550)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3620](https://github.com/openshift/hypershift/pull/3620)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3625](https://github.com/openshift/hypershift/pull/3625)
* [OCPBUGS-29094](https://issues.redhat.com/browse/OCPBUGS-29094): Make ControllerAvailabilityPolicy immutable [#3534](https://github.com/openshift/hypershift/pull/3534)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#3604](https://github.com/openshift/hypershift/pull/3604)
* NO-JIRA: Update RHTAP references (release-4.14) [#3591](https://github.com/openshift/hypershift/pull/3591)
* NO-JIRA: Update RHTAP references (release-4.14) [#3519](https://github.com/openshift/hypershift/pull/3519)
* NO-JIRA: Approvers update [#3580](https://github.com/openshift/hypershift/pull/3580)
* [Full changelog](https://github.com/openshift/hypershift/compare/e2f4e4ca1eed584b0a0c792a59987c9514db992f...895102472ff30070a1cbf02a2610353c2481b6a0)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/004ecde5e7e5394abdb9fe62b3063fd20300bb9c)

* [OCPBUGS-27279](https://issues.redhat.com/browse/OCPBUGS-27279): Add Snyk file to exclude vendor directory on scan [#76](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/76)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/c62bc9d9dc7d5b9918694d67e1a521cc1d36b55f...004ecde5e7e5394abdb9fe62b3063fd20300bb9c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/50e132e0a016272f32f950fdb7fe45fc30526590)

* [OCPBUGS-33193](https://issues.redhat.com/browse/OCPBUGS-33193): anonymization - externalIP can be nil (#931) (#933) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31975](https://issues.redhat.com/browse/OCPBUGS-31975): bump golang.org/x/net version (#926) [#926](https://github.com/openshift/insights-operator/pull/926)
* [OCPBUGS-32343](https://issues.redhat.com/browse/OCPBUGS-32343): fix error message when the data processing was not successful (#833) (#928) [#833](https://github.com/openshift/insights-operator/pull/833)
* Add linting recommendations (#904) [#904](https://github.com/openshift/insights-operator/pull/904)
* gather etcd_server_slow metrics (#902) [#902](https://github.com/openshift/insights-operator/pull/902)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b90c2d6fa313e5240c3d307af6eb93c66a2d477e...50e132e0a016272f32f950fdb7fe45fc30526590)


### [ironic](https://github.com/openshift/ironic-image/tree/d732a6b52ea6369d91a71026838096afa1fae360)

* Bug OCPBUGS-34657: Disable installation of .pyc files through pip [#512](https://github.com/openshift/ironic-image/pull/512)
* [METAL-1004](https://issues.redhat.com/browse/METAL-1004): Update ironic-lib to latest release-4.14 commit [#492](https://github.com/openshift/ironic-image/pull/492)
* [OCPBUGS-32364](https://issues.redhat.com/browse/OCPBUGS-32364): [4.14] remove unused prometheus-exporter [#487](https://github.com/openshift/ironic-image/pull/487)
* [OCPBUGS-32169](https://issues.redhat.com/browse/OCPBUGS-32169): [4.14] Add hybrid configuration for cachito [#482](https://github.com/openshift/ironic-image/pull/482)
* [OCPBUGS-32388](https://issues.redhat.com/browse/OCPBUGS-32388): Use unix sockets by default for reverse proxy communication [#475](https://github.com/openshift/ironic-image/pull/475)
* [OCPBUGS-32169](https://issues.redhat.com/browse/OCPBUGS-32169): [4.14] Add requirements placeholders for cachito [#469](https://github.com/openshift/ironic-image/pull/469)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7296ed5171c6f2638cd127181c7ee9006aefd5c9...d732a6b52ea6369d91a71026838096afa1fae360)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/7e82a52f0406df18362d4bdc7c5cc95a376be587)

* [OCPBUGS-33452](https://issues.redhat.com/browse/OCPBUGS-33452): update ironic-lib with latest fixes [#133](https://github.com/openshift/ironic-agent-image/pull/133)
* [METAL-1004](https://issues.redhat.com/browse/METAL-1004): Update ironic-lib to latest release-4.14 commit [#130](https://github.com/openshift/ironic-agent-image/pull/130)
* [OCPBUGS-32170](https://issues.redhat.com/browse/OCPBUGS-32170): [4.14] Add hybrid configuration for cachito [#127](https://github.com/openshift/ironic-agent-image/pull/127)
* [OCPBUGS-32170](https://issues.redhat.com/browse/OCPBUGS-32170): [4.14] Add placeholders for cachito [#124](https://github.com/openshift/ironic-agent-image/pull/124)
* [OCPBUGS-29454](https://issues.redhat.com/browse/OCPBUGS-29454): Always add ignition to set hostname on /etc/hostname [#109](https://github.com/openshift/ironic-agent-image/pull/109)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/2100ada8741ee8509a13254e3441c565124020ef...7e82a52f0406df18362d4bdc7c5cc95a376be587)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/7d96f56d4bbc8449fdddbdbc630d9337097f0030)

* [OCPBUGS-23866](https://issues.redhat.com/browse/OCPBUGS-23866): deps,  bump opentelemetry [#38](https://github.com/openshift/cloud-provider-kubevirt/pull/38)
* [OCPBUGS-21174](https://issues.redhat.com/browse/OCPBUGS-21174): Bump golang.org/x/net to v0.18.0 [#37](https://github.com/openshift/cloud-provider-kubevirt/pull/37)
* [OCPBUGS-30861](https://issues.redhat.com/browse/OCPBUGS-30861): Bump golang.org/x/net to v0.18.0 [#36](https://github.com/openshift/cloud-provider-kubevirt/pull/36)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/62ca8ad354f49028ce80cb9ec5c48aab3d0f1ecd...7d96f56d4bbc8449fdddbdbc630d9337097f0030)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/48fafc4a9edc202c5ff674b5f631568b4d62f7f5)

* "OCPBUGS-29792: [release-4.14] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs" [#34](https://github.com/openshift/kubevirt-csi-driver/pull/34)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/831ff3eb2247295c45742fea89df666ed6600d71...48fafc4a9edc202c5ff674b5f631568b4d62f7f5)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/73f2a1f3f772b86bff3755bb444cfa7e182775f9)

* [OCPBUGS-31980](https://issues.redhat.com/browse/OCPBUGS-31980): Update x/net to v0.25.0 [#1236](https://github.com/openshift/machine-api-operator/pull/1236)
* [OCPBUGS-30898](https://issues.redhat.com/browse/OCPBUGS-30898): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1224](https://github.com/openshift/machine-api-operator/pull/1224)
* [OCPBUGS-28745](https://issues.redhat.com/browse/OCPBUGS-28745): Set --max-concurrent-reconciles=10 for Azure machine controller [#1217](https://github.com/openshift/machine-api-operator/pull/1217)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4390dd703858b58d4ff50592497c9b93e14c3563...73f2a1f3f772b86bff3755bb444cfa7e182775f9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3aec7f32a44af5baf4f9af27edeb260ac7853776)

* [OCPBUGS-34716](https://issues.redhat.com/browse/OCPBUGS-34716): If multiple hostnames are returned, use the first one for the Node name [#4385](https://github.com/openshift/machine-config-operator/pull/4385)
* [OCPBUGS-17658](https://issues.redhat.com/browse/OCPBUGS-17658): Controller pod is spamming unknown field "spec.dns.spec.platform" message [#4383](https://github.com/openshift/machine-config-operator/pull/4383)
* [OCPBUGS-33643](https://issues.redhat.com/browse/OCPBUGS-33643): Don't error if the certs.d dir doesn't exist yet [#4362](https://github.com/openshift/machine-config-operator/pull/4362)
* [OCPBUGS-32341](https://issues.redhat.com/browse/OCPBUGS-32341): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4325](https://github.com/openshift/machine-config-operator/pull/4325)
* [OCPBUGS-27030](https://issues.redhat.com/browse/OCPBUGS-27030): Log network service output to console [#4114](https://github.com/openshift/machine-config-operator/pull/4114)
* : OCPBUGS-31731: kubelet: restorecon necessary files on kubelet's prestart [#4307](https://github.com/openshift/machine-config-operator/pull/4307)
* [OCPBUGS-32260](https://issues.redhat.com/browse/OCPBUGS-32260): fix: resources were in the wrong indentation level [#4322](https://github.com/openshift/machine-config-operator/pull/4322)
* [OCPBUGS-27108](https://issues.redhat.com/browse/OCPBUGS-27108): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4117](https://github.com/openshift/machine-config-operator/pull/4117)
* [OCPBUGS-31487](https://issues.redhat.com/browse/OCPBUGS-31487): Prevent OVS-configuration to run before kdump [#4291](https://github.com/openshift/machine-config-operator/pull/4291)
* [OCPBUGS-29400](https://issues.redhat.com/browse/OCPBUGS-29400): Run resolv-prepender entirely async [#4182](https://github.com/openshift/machine-config-operator/pull/4182)
* [OCPBUGS-31681](https://issues.redhat.com/browse/OCPBUGS-31681): make verify should use MCO's kube version [#4305](https://github.com/openshift/machine-config-operator/pull/4305)
* [OCPBUGS-30992](https://issues.redhat.com/browse/OCPBUGS-30992): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4266](https://github.com/openshift/machine-config-operator/pull/4266)
* [OCPBUGS-30872](https://issues.redhat.com/browse/OCPBUGS-30872): add static pods for rbacproxy [#4258](https://github.com/openshift/machine-config-operator/pull/4258)
* [OCPBUGS-30107](https://issues.redhat.com/browse/OCPBUGS-30107): annotate on-prem static pods for workload partitioning [#4230](https://github.com/openshift/machine-config-operator/pull/4230)
* [OCPBUGS-30225](https://issues.redhat.com/browse/OCPBUGS-30225): set nodeStatusReportFrequency [#4242](https://github.com/openshift/machine-config-operator/pull/4242)
* [OCPBUGS-29290](https://issues.redhat.com/browse/OCPBUGS-29290): AWS: Always persist the existing node name on 4.14 [#4215](https://github.com/openshift/machine-config-operator/pull/4215)
* [OCPBUGS-20039](https://issues.redhat.com/browse/OCPBUGS-20039): Add v6-primary dual stack support to VSphere UPI [#3956](https://github.com/openshift/machine-config-operator/pull/3956)
* [OCPBUGS-29457](https://issues.redhat.com/browse/OCPBUGS-29457): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4187](https://github.com/openshift/machine-config-operator/pull/4187)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/43bb134a55f5ccefcb548f8ce1c6d3515d92cee2...3aec7f32a44af5baf4f9af27edeb260ac7853776)


### [multus-cni](https://github.com/openshift/multus-cni/tree/4ed99c3a8b0aff168f50d166e82bce2a371c2dbb)

* [OCPBUGS-33478](https://issues.redhat.com/browse/OCPBUGS-33478): Fix CNI cache update function to prevent nil access [#232](https://github.com/openshift/multus-cni/pull/232)
* [OCPBUGS-26331](https://issues.redhat.com/browse/OCPBUGS-26331): Fix SAST scan issues for multus-cni-container [4.14] [#220](https://github.com/openshift/multus-cni/pull/220)
* [Full changelog](https://github.com/openshift/multus-cni/compare/599223b858ca334e23eba3f12b4866e833807826...4ed99c3a8b0aff168f50d166e82bce2a371c2dbb)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/3cc3de77f370e15fddd80d58656b503d6873ce4c)

* [OCPBUGS-35263](https://issues.redhat.com/browse/OCPBUGS-35263): Use IP to identify orphaned allocation to be deleted [#289](https://github.com/openshift/whereabouts-cni/pull/289)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/13aebf7480b626f199cb5dbce3f37405dfd486e1...3cc3de77f370e15fddd80d58656b503d6873ce4c)


### [network-tools](https://github.com/openshift/network-tools/tree/e79d8173c5628065da85425bc7e4cb1d94f3c919)

* [OCPBUGS-31862](https://issues.redhat.com/browse/OCPBUGS-31862): replace wireshark with wireshark-cli [#122](https://github.com/openshift/network-tools/pull/122)
* [Full changelog](https://github.com/openshift/network-tools/compare/a1dc6afd7c96374babe7fd11b3c236fcc5d7618a...e79d8173c5628065da85425bc7e4cb1d94f3c919)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/a0733c17322f96d14f9158604fe74f1bfecc4a53)

* Bump version to include v5.11.0 of go-git (#822) [#822](https://github.com/openshift/oc-mirror/pull/822)
* Fix to ensure operator not found error exits with correct status (#797) [#797](https://github.com/openshift/oc-mirror/pull/797)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/68747309c90d1c64d5404ec9ea12bc7c36a80555...a0733c17322f96d14f9158604fe74f1bfecc4a53)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f41d636587a25e25f397c3af8322dd3babf2dd9a)

* [OCPBUGS-31509](https://issues.redhat.com/browse/OCPBUGS-31509): vendor upgrade runtime-utils [#426](https://github.com/openshift/openshift-apiserver/pull/426)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/9e9b51d26b393cceb2d5c7c9d5b04a4f71fc8a19...f41d636587a25e25f397c3af8322dd3babf2dd9a)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/1713e9716ce9efe64bc87c3203e0f991e72132d2)

* [OCPBUGS-35337](https://issues.redhat.com/browse/OCPBUGS-35337): Correct out-of-bounds check [#173](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/173)
* [OCPBUGS-34792](https://issues.redhat.com/browse/OCPBUGS-34792): Make Cinder CSI Driver Topology feature configurable [#162](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/162)
* [OCPBUGS-25657](https://issues.redhat.com/browse/OCPBUGS-25657): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#153](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/153)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6516b6e06e29971c2b876647ccfa0d9664ead7ba...1713e9716ce9efe64bc87c3203e0f991e72132d2)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/51f8e4d69014bfa7a8815662ab0117b6505a6e29)

* [OCPBUGS-32428](https://issues.redhat.com/browse/OCPBUGS-32428): Ensure portSecurity is correctly set in the Instance Ports [#109](https://github.com/openshift/machine-api-provider-openstack/pull/109)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/898587671ad3ed5c1844f549175411736ebcabc1...51f8e4d69014bfa7a8815662ab0117b6505a6e29)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/169e31524fb95c9294a42226f4aac186bbc1a80a)

* [OCPBUGS-31969](https://issues.redhat.com/browse/OCPBUGS-31969), [OCPBUGS-31970](https://issues.redhat.com/browse/OCPBUGS-31970): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#787](https://github.com/openshift/operator-framework-olm/pull/787)
* [OCPBUGS-35230](https://issues.redhat.com/browse/OCPBUGS-35230): Unblock CI [#771](https://github.com/openshift/operator-framework-olm/pull/771)
* [OCPBUGS-33356](https://issues.redhat.com/browse/OCPBUGS-33356): UPSTREAM: <carry>: bump go-jose [#743](https://github.com/openshift/operator-framework-olm/pull/743)
* [OCPBUGS-30775](https://issues.redhat.com/browse/OCPBUGS-30775): [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) [#715](https://github.com/openshift/operator-framework-olm/pull/715)
* [OCPBUGS-29192](https://issues.redhat.com/browse/OCPBUGS-29192): [release-4.14]: Clear (existing) error cond from Subscription, once error resolved [#686](https://github.com/openshift/operator-framework-olm/pull/686)
* [OCPBUGS-29194](https://issues.redhat.com/browse/OCPBUGS-29194): Retry failing unpack jobs [#689](https://github.com/openshift/operator-framework-olm/pull/689)
* NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 [#674](https://github.com/openshift/operator-framework-olm/pull/674)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/1a03f4bab6bbf3d3b74c6dc9fdb8c53d1e6d7bad...169e31524fb95c9294a42226f4aac186bbc1a80a)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9)

* [OCPBUGS-32067](https://issues.redhat.com/browse/OCPBUGS-32067): update golang.org/x/net for CVE-2023-45288 [#565](https://github.com/operator-framework/operator-marketplace/pull/565)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a367cea6e2371a0db2957403de40958852f817b3...3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/bdc67edd064afc3519c4780f43c1c3837cd4143f)

* [OCPBUGS-35009](https://issues.redhat.com/browse/OCPBUGS-35009): ipv6+all protocols conntrack flush [#2199](https://github.com/openshift/ovn-kubernetes/pull/2199)
* [OCPBUGS-34570](https://issues.redhat.com/browse/OCPBUGS-34570): Fix EIP GARP config overwritten by gateway update [#2188](https://github.com/openshift/ovn-kubernetes/pull/2188)
* [OCPBUGS-33721](https://issues.redhat.com/browse/OCPBUGS-33721): use a forked version of j-keck/arping that fixes a threading issue [#2170](https://github.com/openshift/ovn-kubernetes/pull/2170)
* [OCPBUGS-34076](https://issues.redhat.com/browse/OCPBUGS-34076): Reuse node-subnet from cache if exists [#2177](https://github.com/openshift/ovn-kubernetes/pull/2177)
* [OCPBUGS-34405](https://issues.redhat.com/browse/OCPBUGS-34405): [release-4.14] dns: fix deadlock in case of error [#2183](https://github.com/openshift/ovn-kubernetes/pull/2183)
* [OCPBUGS-33469](https://issues.redhat.com/browse/OCPBUGS-33469): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2160](https://github.com/openshift/ovn-kubernetes/pull/2160)
* [OCPBUGS-33537](https://issues.redhat.com/browse/OCPBUGS-33537): Improves service iptables efficiency on start up [#2164](https://github.com/openshift/ovn-kubernetes/pull/2164)
* [OCPBUGS-32104](https://issues.redhat.com/browse/OCPBUGS-32104): Periodically check the ovnkube-node certificate is not expired [#2117](https://github.com/openshift/ovn-kubernetes/pull/2117)
* [OCPBUGS-32319](https://issues.redhat.com/browse/OCPBUGS-32319): [release-4.14] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2128](https://github.com/openshift/ovn-kubernetes/pull/2128)
* [Release 4.14] OCPBUGS-32987: Bump OVS [#2148](https://github.com/openshift/ovn-kubernetes/pull/2148)
* [OCPBUGS-32247](https://issues.redhat.com/browse/OCPBUGS-32247): [release-4.14] OVN bump to 23.09.0-139 [#2123](https://github.com/openshift/ovn-kubernetes/pull/2123)
* [OCPBUGS-29397](https://issues.redhat.com/browse/OCPBUGS-29397): 4.14 High CPU usage with APB CRD [#2118](https://github.com/openshift/ovn-kubernetes/pull/2118)
* [OCPBUGS-32353](https://issues.redhat.com/browse/OCPBUGS-32353): Custom v4 and v6 transit switch subnets while creating kind cluster [#2122](https://github.com/openshift/ovn-kubernetes/pull/2122)
* [OCPBUGS-31853](https://issues.redhat.com/browse/OCPBUGS-31853), [OCPBUGS-31854](https://issues.redhat.com/browse/OCPBUGS-31854): EIP multi NIC IPv6 support and default route with next hop [#2114](https://github.com/openshift/ovn-kubernetes/pull/2114)
* [OCPBUGS-31648](https://issues.redhat.com/browse/OCPBUGS-31648): Set mac binding age threshold in gateway routers [#2115](https://github.com/openshift/ovn-kubernetes/pull/2115)
* [OCPBUGS-29342](https://issues.redhat.com/browse/OCPBUGS-29342): AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods [#2076](https://github.com/openshift/ovn-kubernetes/pull/2076)
* [OCPBUGS-29606](https://issues.redhat.com/browse/OCPBUGS-29606): Update HostNetworkNamespace address_set for remote zone nodes [#2091](https://github.com/openshift/ovn-kubernetes/pull/2091)
* [OCPBUGS-28726](https://issues.redhat.com/browse/OCPBUGS-28726): Update netpol namespace address sets usage to the old ways [#2068](https://github.com/openshift/ovn-kubernetes/pull/2068)
* [OCPBUGS-28819](https://issues.redhat.com/browse/OCPBUGS-28819): Support Permanent Session Affinity [#2046](https://github.com/openshift/ovn-kubernetes/pull/2046)
* [OCPBUGS-29231](https://issues.redhat.com/browse/OCPBUGS-29231): [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup [#2061](https://github.com/openshift/ovn-kubernetes/pull/2061)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/243fa48adf67ddbabf2dafe082bb715ee671a2d9...bdc67edd064afc3519c4780f43c1c3837cd4143f)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/ceacf8b4308cf0c00c18952f7dbcdc112efdbb46)

* [OCPBUGS-33637](https://issues.redhat.com/browse/OCPBUGS-33637): Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 [#81](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/8ecfd7fd6a201844bb9a926146db70468345852b...ceacf8b4308cf0c00c18952f7dbcdc112efdbb46)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/a4b845a7ae4e1ffb62eae963406481f1c3456bfe)

* [OCPBUGS-30015](https://issues.redhat.com/browse/OCPBUGS-30015): fix: convert `continue` field between v1beta1 and v1alpha1 [#279](https://github.com/openshift/prometheus-operator/pull/279)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/73729eda632c401837124ffe7a2bf903e7421076...a4b845a7ae4e1ffb62eae963406481f1c3456bfe)


### [telemeter](https://github.com/openshift/telemeter/tree/7e8f45bd4d78c36fbc9b504745c4ca471a23d0c5)

* [OCPBUGS-32888](https://issues.redhat.com/browse/OCPBUGS-32888): update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 [#535](https://github.com/openshift/telemeter/pull/535)
* [Full changelog](https://github.com/openshift/telemeter/compare/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9...7e8f45bd4d78c36fbc9b504745c4ca471a23d0c5)


### [tests](https://github.com/openshift/origin/tree/d44a62a72c314a3711a4389c9b989bb707ae2161)

* [OCPBUGS-33417](https://issues.redhat.com/browse/OCPBUGS-33417): Provide SCC access via RBAC [#28806](https://github.com/openshift/origin/pull/28806)
* [OCPBUGS-33563](https://issues.redhat.com/browse/OCPBUGS-33563): Adjust the method of get the apiServer (release-4.14) [#28763](https://github.com/openshift/origin/pull/28763)
* [OCPBUGS-29970](https://issues.redhat.com/browse/OCPBUGS-29970): Do not assume there is just a single kubelet systemd service [#28620](https://github.com/openshift/origin/pull/28620)
* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28647](https://github.com/openshift/origin/pull/28647)
* [OCPBUGS-29928](https://issues.redhat.com/browse/OCPBUGS-29928): Only extract node role from properly formatted node-role label [#28616](https://github.com/openshift/origin/pull/28616)
* [Full changelog](https://github.com/openshift/origin/compare/66c16a89c4c87ab1db22373758315e6712f82e0f...d44a62a72c314a3711a4389c9b989bb707ae2161)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4598e1709f3e28f2fcd5c890df33e16ff81b7c8f)

* [OCPBUGS-33798](https://issues.redhat.com/browse/OCPBUGS-33798): FailedPrecondition volume does not appear staged [#119](https://github.com/openshift/vmware-vsphere-csi-driver/pull/119)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/a5ed57f5120136bf08e134bf478186c82bfb81da...4598e1709f3e28f2fcd5c890df33e16ff81b7c8f)