# 4.14.61

Created: 2026-01-26 15:53:19 +0000 UTC

Image Digest: `sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43`


## Changes from 4.14.27

### Components

* Kubernetes upgraded from 1.27.13 to 1.27.16
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202405162017-0 to 414.92.202601191325-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [8ba0b37a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/8ba0b37a45510404a842d6dbd84d40a18008e81d) `sha256:f075635dc2971fd24b1ee333b0d9561b764bc9fd27ee6f4ab476a7a330d3522c`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:c17e6637f0124af43f136062ed3b616ad0a7445c7d9b9a7e973752c625769dbd`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:36b44cc6a03b4f64947a87d495d506c4ce84ba6a7368bb1ca1c3ffcaa7320971`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:9b546dc4264148677feba598f338c590817cfc375a360b837d99ca4a219dde78`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [609879c3](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/609879c3f1b9a65936e385f798398a2d1673aacd) `sha256:5b09a11e7dd3ec1b0e68130b15588fe1c6ae0b81e843b17920aa0f5ed272a459`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [2c864ca0](https://github.com/openshift/aws-pod-identity-webhook/commit/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63) `sha256:7b6538fe872d6b4355a0ddb52d11e809ee3e94e09fda512ee4ac04e9e7c85c19`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [91893576](https://github.com/openshift/azure-disk-csi-driver-operator/commit/918935767350f9f330b9d6a9c3ee03e9869e7828) `sha256:4098d93aa5d50bef5c269670e36b93a83fbb87a9ce75223989e505fa954c0876`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [4469d805](https://github.com/openshift/azure-file-csi-driver-operator/commit/4469d80589595dd5d05f0f0f296505800e3ad527) `sha256:d2def1c8ef143f5e767f0c8d347a19c494cd524446ab82f889440abeef200533`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [9203d4d5](https://github.com/openshift/cluster-authentication-operator/commit/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e) `sha256:2181520500945a0886e04423c06a782701bfe22cff5271045b4b1aeff189e800`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [32854baa](https://github.com/openshift/cluster-autoscaler-operator/commit/32854baae386c4d6854d7fd8658fdff75588e919) `sha256:9b5ce3abe4f4a7da6c9e44c23055c01dec97778fb652343c81c59f5308848b5b`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:84cd3ce0602236077d72366603edaf3fc4ef430af625167f57f998242fae8937`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [ae83c553](https://github.com/openshift/cluster-api/commit/ae83c5533706d539dc492229eebd67533468e48b) `sha256:980cf326e293498c8ad93968015df0dbc28ca082dac8d27b6ee1c2afcd636e9e`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [d4a11625](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/d4a1162514ecbf248b04e6e8625d17bc2b775ccd) `sha256:44236cef0b8a8a9fb2049f67e9bf014a6157320e8f399e625d30d982e15c8437`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:0cfc4f839f787c02f3e8c8cd95600b52e72277091c9f3c901e7799d7159e6bbf`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:f327117fd8420163eb1df94066fd7c3de3a4b9bc9cd8580109887ba755107e73`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [33f630dc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4) `sha256:0e6df943da8bc27d133bae2568cfbe52a0efb0afddfb3e10e93130bee6f5e5ef`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9cd9922a](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9cd9922a42a64fe058718f10e3b4123b943bb55f) `sha256:dccb777f2b04de40041fdbcad2b8fd58122b4a2d71f513adaadb2a733b15281f`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [0dbbb613](https://github.com/openshift/cluster-olm-operator/commit/0dbbb6132ced379602040731ff889eebb4202e73) `sha256:c4f810659a943fb212646b5ad4e115e23bff2b242b8ea6fda156d1faddb44588`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [700dc111](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/700dc111fd98c315648a78371b11be34fa4dbba3) `sha256:ebb90a1c385daaa3ac950eab94dbc455144efeff5d758bc6d462911008d654db`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:b5bc1f72f465ed8750e983791fce4889e9fc0147bd6ffbcc610e87c247716ee4`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:606bf15d91a1c7e30f8adc947eacb0c0dcb3891526a5300a8d266bbe285ad261`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6c652a5e](https://github.com/openshift/cluster-storage-operator/commit/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192) `sha256:8b07f48f38ff474e99d8e0d7ce0e9c9a25431634a3c600ea18ecd3681fc86214`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:9428b2323506a986de948031add1515301d7bce91736b1dd72aa76fd615d505c`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [d93a218f](https://github.com/openshift/csi-driver-manila-operator/commit/d93a218ff323960eb1dea529f0173f069ccfab42) `sha256:fa042be919ab37b1e1b6107d4f0302e43dc6f834a4df6770e8b097ac7223f809`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e1dd4537](https://github.com/openshift/csi-driver-nfs/commit/e1dd45373456cf8e47a58d6764212317fb2f8a97) `sha256:9e2ddf72f3126a206bd6e249106f99a599770017ec8cec643501432f0b015be0`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:3b60d98e1bd2189ba8ebc391a10eab8086917129b957ded0ae8291bba5320862`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:c74baf993dd1307626289f0d834b144f857691f73bfe4fcafb964f53703c830e`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:ae0b5d24961c4c1da777fdc2ca65b6ab175c3797fcfcf767f0c0a472637d29b0`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [06e8ce0d](https://github.com/openshift/csi-external-attacher/commit/06e8ce0d36f7c23f0906327cd66ec6bd15165366) `sha256:d9cae80019dc47b7c97705103a2ccb009586806674999a077ce04f02a7fd5bcf`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:34c5d38aa9b251fbe6c155a5f72b4dd2185f844ff9ef81948eab4e3a12e193b7`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:18914f78209ce605104c5b5b76024e965f857314408ca46fd4af3d451ab71494`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:15d12f69a283b3d493bced85f68de941db1d1f65a1ca4dc95b5c232e107e2b68`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:b1171047832f8bb1e89d8b6a7eb14e71878c86d0f8c257bdff71365f7550989b`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:af912a61f1132ec08a9ee7c6f026759b9c133058370313b0ec5d38c575810eb1`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:73081564efcceef6719fe729dd1aa24d8592883ef79ecc6e2d887905cd42909a`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:2c38152a2948ef1dc02b3cf4d8300deffccf76a2a203eada8601755eacd50782`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:e8ca3328e9e1077c67c84153b9c2e10dd0094ebf11845ce9d0e2ef6c4ea36fe9`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [d99fb31a](https://github.com/openshift/cluster-api-provider-gcp/commit/d99fb31aa7280f6b5da00880a64b4774600817a2) `sha256:16acba44dbff940e3cd070ad521a86680bd8a94accdcc01b49c838ca079d00a9`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [8a626fe5](https://github.com/openshift/gcp-pd-csi-driver/commit/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03) `sha256:7b169c61dc1c3fa13af76daa2482a3741de0354343814719697e1ade646a83c9`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:bd574d144512aa44692a88abe9d7107f36704bb27e8f398953de0c2f76c45295`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [7b56c306](https://github.com/openshift/ironic-rhcos-downloader/commit/7b56c30661e39b212fc632e8e184c70b14dcf3a2) `sha256:bc1a57887254df12af62cf87cacdddde6fa4f8034ce93c900e3ee3e665b92c88`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:97efe89808d3d7c6bacec00ba706024511b657886197e90a53e7232a24409513`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [db0c5499](https://github.com/openshift/kube-state-metrics/commit/db0c54994a6aad9155a94513eaa3480c1812f45e) `sha256:4568d7c0e77beb48afec2d25a25a70cd18d3e45144727d94760881264775d797`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [7d96f56d](https://github.com/openshift/cloud-provider-kubevirt/commit/7d96f56d4bbc8449fdddbdbc630d9337097f0030) `sha256:69defd568a1db62d38b5ac3ee1c9151a31c1dc4d0cd199bc4ea6d7e15aaddd6c`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [48fafc4a](https://github.com/openshift/kubevirt-csi-driver/commit/48fafc4a9edc202c5ff674b5f631568b4d62f7f5) `sha256:73cca00a8c67d5b282164d5cdc90cc6362fada86aa976a2c236962f14c5872e1`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:a5b7c79f895fa097448be4bd5bedae7d86e2a5f74c87107f278a8b84b9a192c9`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:f5ad4c2d69943bb75efb48e6173aaee689c50e7b2dc86d75e5043213dc88b30a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [34dfccba](https://github.com/openshift/cluster-api-provider-libvirt/commit/34dfccba84a23b871d4f29dcec55929c11696e91) `sha256:1aa64a3400c4e2cc578898423ead7a03edfc94f02f3d0b100aa4174e8643cd22`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [2a6627ba](https://github.com/openshift/image-customization-controller/commit/2a6627bafcbb00437ab97308fe1d7df9039104ad) `sha256:ac7f726fb22aa478192938cd7c95b9a842f32554aa1a1f32817648b7eb47ed63`
* machine-os-content `sha256:db5b313332148c0ed67791b44083bbc875dc59fe941c9317b5f9fd7a4a0c31d7`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:3206004e431b9fd7b34d67a93867e41958c0ff22d9fd0c988e0e8d4261660a1c`
* [network-tools](https://github.com/openshift/network-tools) git [e79d8173](https://github.com/openshift/network-tools/commit/e79d8173c5628065da85425bc7e4cb1d94f3c919) `sha256:b1c40c32f33adf4749f899845ae8850ec09d8f3b1141a6d7ad12f2418cb48a09`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [a4a2f270](https://github.com/openshift/oauth-proxy/commit/a4a2f270a57af830508e8cef52d4c8d4f4dfba76) `sha256:10064eec2bb2cd59a846b187510ebb9fcf17d9902629d3a92be5df378707f7f4`
* [oauth-server](https://github.com/openshift/oauth-server) git [35f4739f](https://github.com/openshift/oauth-server/commit/35f4739f342a5838fe6ceaf7a459c78f3777166d) `sha256:93ec8d88e36c2ea2d9354bb083d64d9e86f42efc031a3b96fa1502c9550cbff9`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:59d27fef74bfa7f7c23e0436beaec79921de61b6cd6d44153df88e796e8bcda9`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:e3b020ede06b2175f150d4afb38f77b65f1dc18e4ce64892dacf4700abac36df`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [dff4b0f4](https://github.com/openshift/openshift-state-metrics/commit/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf) `sha256:b74cc1037c24787cceb436e3b209adea19af3b7e3c5fe5b5aaa4c6745e3973d4`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [51f8e4d6](https://github.com/openshift/machine-api-provider-openstack/commit/51f8e4d69014bfa7a8815662ab0117b6505a6e29) `sha256:60fe326019854c19ae214567805a43524e626e12230a7e9fae93c27cd0fdf8cd`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:5b922e0d1036a48346978f6a2620fa44a2f943884b95a419183c73cb5d48af1a`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [2fa33aa7](https://github.com/openshift/ovirt-csi-driver-operator/commit/2fa33aa7f05da8640a8695372364f2367febd12a) `sha256:121bded14e953cda82aea719c3a864bc9188c03d10a8ecb7306dd0c825ce8f78`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:ab5a94295b1a90eb96028ee2b1a6520003b26fc5ab01994899411dfb28b71c75`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [7436369a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/7436369afce33811e543b13fcbea8d1e1ff65502) `sha256:ebff989d1990dd422c6f6da74824fc4b331a33f7492ebc55057a230edb242da7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [af40ed09](https://github.com/openshift/prom-label-proxy/commit/af40ed09f69fab6c4bf054436f537a3e569d5f02) `sha256:7e118fb1662457b961d048af23cc8e359f787e5a602db6ea4733089a5243fec9`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e3725166](https://github.com/openshift/prometheus-alertmanager/commit/e3725166cf8ef228f1672b00d063c488b69687aa) `sha256:0974a3bc11d136c5e26f55f5dd4d5117eed6e9c811b422beca1a7b339a65efde`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:2ddb1db5faf44e0b0542ea32b3e5f23915b9dfc4e51f0c552f032e5c79fe0adb`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [5ee0a9d9](https://github.com/openshift/node_exporter/commit/5ee0a9d957a04756ba76623a8bbc12be9949109f) `sha256:b393ddc187eab721a4d98023ae32c68673d41a6f42796d6279bbd0f8070a4818`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:b1b97a9941d1371e162333d090e11674db26ba6cb1579e15222ee0bbc187db3c`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:30e1dba9e83e93a435b8e9a8d765d1eca0afe21a96598cd36d25d90d455433d1`
* rhel-coreos `sha256:747b8abbeeeec3cfeca7ec2612357fb73b8b370f87c5df386272cc1906fb9d06`
* rhel-coreos-extensions `sha256:0c2cd1d0748f67767793c305838d0b9bd71d715a849e2f9dd1ca7c88b49e695f`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [1a5e72f4](https://github.com/openshift/route-controller-manager/commit/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e) `sha256:c747e6785efce002547eb63f7a213cd9c4c770a45879957da08729be52d2a8a8`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:3145ed5c813e7e67c2d750991259050585e66f14159447e25fd5a842eb7bc4ec`
* [thanos](https://github.com/openshift/thanos) git [a2671250](https://github.com/openshift/thanos/commit/a26712509e3f9c511926ca9d8bba3e3ea8e95ada) `sha256:76a5268d392228b9497f39a6404c78baad189ef2eff4006c3ad6cc0440dd72ea`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5d5105f9](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5d5105f93e02ba0c4c07890b3db630b11d839abf) `sha256:1f4ac98f2947d706085a3eeab1e248bfd647dde58afb5b25730d8cf1a2537c40`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6df4bf1f0f2b26e32346ae81f1291ce151780b58)

* [OCPBUGS-58632](https://issues.redhat.com/browse/OCPBUGS-58632), [OCPBUGS-58637](https://issues.redhat.com/browse/OCPBUGS-58637): Bump glog to v1.2.5 in release-4.14 (#7906) [#7906](https://github.com/openshift/assisted-service/pull/7906)
* [OCPBUGS-53691](https://issues.redhat.com/browse/OCPBUGS-53691): Bump jwt to 4.5.2 in release-4.14 (#7499) [#7499](https://github.com/openshift/assisted-service/pull/7499)
* [OCPBUGS-46941](https://issues.redhat.com/browse/OCPBUGS-46941): OCPBUGS-46184: Bump golang.org/x/net to 0.33.0 (#7200) [#7200](https://github.com/openshift/assisted-service/pull/7200)
* [OCPBUGS-15346](https://issues.redhat.com/browse/OCPBUGS-15346), [OCPBUGS-15347](https://issues.redhat.com/browse/OCPBUGS-15347): Update version go-http-metrics and gin-gonic/gin (#6899) [#6899](https://github.com/openshift/assisted-service/pull/6899)
* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6416) [#6416](https://github.com/openshift/assisted-service/pull/6416)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) [#6322](https://github.com/openshift/assisted-service/pull/6322)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5a1b7ea3776fddff93f66dae7963ac5dda3ab524...6df4bf1f0f2b26e32346ae81f1291ce151780b58)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/54aa57eb81d052a36ae8b78f2905d870ee0718ad)

* [OCPBUGS-58642](https://issues.redhat.com/browse/OCPBUGS-58642): CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) [#1194](https://github.com/openshift/assisted-installer/pull/1194)
* [OCPBUGS-53715](https://issues.redhat.com/browse/OCPBUGS-53715): Bump jwt to 4.5.2 in release-4.14 (#1093) [#1093](https://github.com/openshift/assisted-installer/pull/1093)
* Bump golang.org/x/net to v0.33.0 (#1012) [#1012](https://github.com/openshift/assisted-installer/pull/1012)
* [OCPBUGS-15347](https://issues.redhat.com/browse/OCPBUGS-15347): Update version go-http-metrics/gin (#933) [#933](https://github.com/openshift/assisted-installer/pull/933)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5d64ad00cc9a2f045895dfccc43fe8d81027e745...54aa57eb81d052a36ae8b78f2905d870ee0718ad)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/91a728121bc65eae12af93ae003695d879a8f019)

* [OCPBUGS-58652](https://issues.redhat.com/browse/OCPBUGS-58652), [OCPBUGS-58657](https://issues.redhat.com/browse/OCPBUGS-58657): Bump glog to v1.2.5 in release-4.14 (#1073) [#1073](https://github.com/openshift/assisted-installer-agent/pull/1073)
* [OCPBUGS-53707](https://issues.redhat.com/browse/OCPBUGS-53707): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) [#973](https://github.com/openshift/assisted-installer-agent/pull/973)
* [OCPBUGS-46955](https://issues.redhat.com/browse/OCPBUGS-46955): Bump golang.org/x/net to 0.33.0 (#885) [#885](https://github.com/openshift/assisted-installer-agent/pull/885)
* [OCPBUGS-16483](https://issues.redhat.com/browse/OCPBUGS-16483): Update apimachinery dependency to remove goproxy dep (#709) [#709](https://github.com/openshift/assisted-installer-agent/pull/709)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#725) [#725](https://github.com/openshift/assisted-installer-agent/pull/725)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1ef82f3a3397c0f5b3864c37bf8dcba4235e84fc...91a728121bc65eae12af93ae003695d879a8f019)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b3fa10c2f6a890f982a983510e8315b084867782)

* [OCPBUGS-25727](https://issues.redhat.com/browse/OCPBUGS-25727): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.14 [#34](https://github.com/openshift/agent-installer-utils/pull/34)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ad8537697818870b53b6262041f0dfa78a3b41c2...b3fa10c2f6a890f982a983510e8315b084867782)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f56c606ae15041b0c981e654ab577d2b0a3a0a8f)

* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#61](https://github.com/openshift/apiserver-network-proxy/pull/61)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/a3c0e6b7016017e26603f9990bce2891374f3ca1...f56c606ae15041b0c981e654ab577d2b0a3a0a8f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/9a7820e81baa6ba8885b47a71416026036d53d79)

* [OCPBUGS-38786](https://issues.redhat.com/browse/OCPBUGS-38786): Ensure that addresses are added in network device index order [#93](https://github.com/openshift/cloud-provider-aws/pull/93)
* [OCPBUGS-32066](https://issues.redhat.com/browse/OCPBUGS-32066): update for CVE-2023-45288 [release-4.14] [#83](https://github.com/openshift/cloud-provider-aws/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/607e2dde6cde137b5c14d5f7687847f6df4cae94...9a7820e81baa6ba8885b47a71416026036d53d79)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e398c4d231e031066b488f8afffe69338220c30d)

* [OCPBUGS-61944](https://issues.redhat.com/browse/OCPBUGS-61944): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#574](https://github.com/openshift/cluster-api-provider-aws/pull/574)
* [OCPBUGS-58667](https://issues.redhat.com/browse/OCPBUGS-58667), [OCPBUGS-58672](https://issues.redhat.com/browse/OCPBUGS-58672): bump github.com/golang/glog to v1.2.5 [#563](https://github.com/openshift/cluster-api-provider-aws/pull/563)
* [OCPBUGS-44295](https://issues.redhat.com/browse/OCPBUGS-44295): [release-4.14] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#533](https://github.com/openshift/cluster-api-provider-aws/pull/533)
* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#516](https://github.com/openshift/cluster-api-provider-aws/pull/516)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/54a95bd18a84153e23430476fc218035255e3a0e...e398c4d231e031066b488f8afffe69338220c30d)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/4622deecace538b375edc782a19cb5da977ae458)

* [OCPBUGS-35123](https://issues.redhat.com/browse/OCPBUGS-35123): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#271](https://github.com/openshift/aws-ebs-csi-driver/pull/271)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/918bb4e9106bbd7498d0d5b3b44ec6df392789b5...4622deecace538b375edc782a19cb5da977ae458)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e2bb8297ff39438a8adae059a652e0687f56700a)

* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#154](https://github.com/openshift/machine-api-provider-aws/pull/154)
* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): revert: client: re-use a single file for building the session instead of randomly named files [#151](https://github.com/openshift/machine-api-provider-aws/pull/151)
* [OCPBUGS-63142](https://issues.redhat.com/browse/OCPBUGS-63142): client: re-use a single file for building the session instead of randomly named files [#142](https://github.com/openshift/machine-api-provider-aws/pull/142)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...e2bb8297ff39438a8adae059a652e0687f56700a)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/9ee3b74412f076928e05388af38b0372f484f3a9)

* [OCPBUGS-57111](https://issues.redhat.com/browse/OCPBUGS-57111): Adds acr-credential-provider spec file and build script [#144](https://github.com/openshift/cloud-provider-azure/pull/144)
* [OCPBUGS-23829](https://issues.redhat.com/browse/OCPBUGS-23829): Bump otelgrpc to v0.49.0 [#124](https://github.com/openshift/cloud-provider-azure/pull/124)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea...9ee3b74412f076928e05388af38b0372f484f3a9)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f)

* [OCPBUGS-36023](https://issues.redhat.com/browse/OCPBUGS-36023): Update go-retryablehttp to v0.7.7 [#313](https://github.com/openshift/cluster-api-provider-azure/pull/313)
* [OCPBUGS-35125](https://issues.redhat.com/browse/OCPBUGS-35125): Bump x/crypto to v0.24.0 [#307](https://github.com/openshift/cluster-api-provider-azure/pull/307)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7ad2773c64f0757ea92a18594f0aad59c6a55cde...8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6d3558a3b5ae9d383988495cc64dc05b4bba0382)

* [OCPBUGS-35126](https://issues.redhat.com/browse/OCPBUGS-35126): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#82](https://github.com/openshift/azure-disk-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b19eec11854e89a3e45f27455ce54d19c25f375b...6d3558a3b5ae9d383988495cc64dc05b4bba0382)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/71fa09b11075da73a8934127a181ee03abd738f8)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Regenerate go.mod to fix build failures [#95](https://github.com/openshift/azure-file-csi-driver/pull/95)
* [OCPBUGS-41164](https://issues.redhat.com/browse/OCPBUGS-41164): bump mount-utils to treat ENODEV error as corrupted mount [#79](https://github.com/openshift/azure-file-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f28a507244d4629404365c89b422f04b9d8d7943...71fa09b11075da73a8934127a181ee03abd738f8)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d526284e26f37f36f9d5297faa801ea117d81f48)

* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#109](https://github.com/openshift/machine-api-provider-azure/pull/109)
* [OCPBUGS-35133](https://issues.redhat.com/browse/OCPBUGS-35133): Bump x/crypto to v0.24.0 [#112](https://github.com/openshift/machine-api-provider-azure/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/8666a367160c23175f97c5df9db7c1844405865e...d526284e26f37f36f9d5297faa801ea117d81f48)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2cb82019194364a2f7ba1a9aa318fa6e5b4a7346)

* [OCPBUGS-53795](https://issues.redhat.com/browse/OCPBUGS-53795): github.com/golang-jwt/jwt/v4 v4.5.2 [#35](https://github.com/openshift/azure-workload-identity/pull/35)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/bcb88d949151223362ecefc12f4e90566599e0e7...2cb82019194364a2f7ba1a9aa318fa6e5b4a7346)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8b8a02b3af1095723220ea86c3d7d35dc7573dce)

* [OCPBUGS-62601](https://issues.redhat.com/browse/OCPBUGS-62601): update resolv.conf every time on bootstrap node [#9985](https://github.com/openshift/installer/pull/9985)
* [OCPBUGS-62814](https://issues.redhat.com/browse/OCPBUGS-62814): Release 4.14 bump terraform provider azurerm [#10001](https://github.com/openshift/installer/pull/10001)
* [OCPBUGS-55193](https://issues.redhat.com/browse/OCPBUGS-55193): data/manifests/bootkube/cvo-overrides: Default to eus-4.14 [#9643](https://github.com/openshift/installer/pull/9643)
* [OCPBUGS-54323](https://issues.redhat.com/browse/OCPBUGS-54323): Update upi references to api-internal [#9609](https://github.com/openshift/installer/pull/9609)
* [OCPBUGS-54264](https://issues.redhat.com/browse/OCPBUGS-54264): IBMCloud: Move to IBM TF openshift fork [#9605](https://github.com/openshift/installer/pull/9605)
* [OCPBUGS-54260](https://issues.redhat.com/browse/OCPBUGS-54260): vsphere-fix convert if only provided name [#9602](https://github.com/openshift/installer/pull/9602)
* [OCPBUGS-52996](https://issues.redhat.com/browse/OCPBUGS-52996): Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation [#9587](https://github.com/openshift/installer/pull/9587)
* [OCPBUGS-53210](https://issues.redhat.com/browse/OCPBUGS-53210): PowerVS: remove system pools [#9572](https://github.com/openshift/installer/pull/9572)
* [OCPBUGS-46606](https://issues.redhat.com/browse/OCPBUGS-46606): Power VS: Create region-zone-sysType hierarchy [#9331](https://github.com/openshift/installer/pull/9331)
* [OCPBUGS-48196](https://issues.redhat.com/browse/OCPBUGS-48196): IBMCloud: Ignore failed VPC regions [#9350](https://github.com/openshift/installer/pull/9350)
* [OCPBUGS-45464](https://issues.redhat.com/browse/OCPBUGS-45464): add chrony.conf file when additional NTP sources are configured [#9269](https://github.com/openshift/installer/pull/9269)
* [OCPBUGS-43505](https://issues.redhat.com/browse/OCPBUGS-43505): Stop rendering networks.config CRD [#9105](https://github.com/openshift/installer/pull/9105)
* [OCPBUGS-42285](https://issues.redhat.com/browse/OCPBUGS-42285): Add AWS r8g to arm tested instance types [#9050](https://github.com/openshift/installer/pull/9050)
* [OCPBUGS-42848](https://issues.redhat.com/browse/OCPBUGS-42848): add tested instance type for IBMCloud [#9082](https://github.com/openshift/installer/pull/9082)
* [OCPBUGS-25508](https://issues.redhat.com/browse/OCPBUGS-25508): Update Golang SSH package version update to 0.17.0 [#8992](https://github.com/openshift/installer/pull/8992)
* [OCPBUGS-39411](https://issues.redhat.com/browse/OCPBUGS-39411): Added yq to ci image [#8943](https://github.com/openshift/installer/pull/8943)
* [OCPBUGS-36180](https://issues.redhat.com/browse/OCPBUGS-36180): baremetal IPI without provisioning network failing on provisioning-interface.service [#8712](https://github.com/openshift/installer/pull/8712)
* [OCPBUGS-36089](https://issues.redhat.com/browse/OCPBUGS-36089): [release-4.14] bump go-retryablehttp for CVE fix [#8658](https://github.com/openshift/installer/pull/8658)
* [OCPBUGS-37183](https://issues.redhat.com/browse/OCPBUGS-37183): ic: fix typo in warning message [#8771](https://github.com/openshift/installer/pull/8771)
* [OCPBUGS-37068](https://issues.redhat.com/browse/OCPBUGS-37068): update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 [#8748](https://github.com/openshift/installer/pull/8748)
* [OCPBUGS-36748](https://issues.redhat.com/browse/OCPBUGS-36748): Add yq-v4 to the upi-installer image for CI [#8684](https://github.com/openshift/installer/pull/8684)
* [OCPBUGS-35827](https://issues.redhat.com/browse/OCPBUGS-35827): If host is offline or disconnected don't check ver [#8634](https://github.com/openshift/installer/pull/8634)
* [OCPBUGS-35826](https://issues.redhat.com/browse/OCPBUGS-35826): [release-4.14] bump github.com/containers/image for CVE fix [#8633](https://github.com/openshift/installer/pull/8633)
* [OCPBUGS-35485](https://issues.redhat.com/browse/OCPBUGS-35485): [release-4.14] aws: terraform: add spot instance support for masters [#8605](https://github.com/openshift/installer/pull/8605)
* [OCPBUGS-34024](https://issues.redhat.com/browse/OCPBUGS-34024): go.mod: bump aws-sdk-go for ca-west-1 support [#8440](https://github.com/openshift/installer/pull/8440)
* [OCPBUGS-33401](https://issues.redhat.com/browse/OCPBUGS-33401): PowerVS: Add composite_instance to listServiceInstances [#8479](https://github.com/openshift/installer/pull/8479)
* [CORS-2951](https://issues.redhat.com/browse/CORS-2951): Add deprecation notice for OpenShiftSDN for 4.14 users [#8518](https://github.com/openshift/installer/pull/8518)
* [Full changelog](https://github.com/openshift/installer/compare/3343d79fafcc7582e02d08dcba17744f15106afe...8b8a02b3af1095723220ea86c3d7d35dc7573dce)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/c7b46efd3d6ab77c094fa6ede36499fb7be5858f)

* [OCPBUGS-46643](https://issues.redhat.com/browse/OCPBUGS-46643): Bump x/net to 0.33.0 [#228](https://github.com/openshift/cluster-api-provider-baremetal/pull/228)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb20cdac93ab9647e9c9cabafb45c7811789b477...c7b46efd3d6ab77c094fa6ede36499fb7be5858f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/483d019146b8495b9299c08c57461747e727f3f7)

* [OCPBUGS-53337](https://issues.redhat.com/browse/OCPBUGS-53337): BMO can expose any secret via BMCEventSubscription CRD [#409](https://github.com/openshift/baremetal-operator/pull/409)
* [OCPBUGS-38940](https://issues.redhat.com/browse/OCPBUGS-38940): [OCP] Ability to disable agent power off after deployment [#374](https://github.com/openshift/baremetal-operator/pull/374)
* [OCPBUGS-34814](https://issues.redhat.com/browse/OCPBUGS-34814): PreprovisioningImage should not be created on poweroff [#359](https://github.com/openshift/baremetal-operator/pull/359)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/937b5fd7a151920c48f2d9588911e66b903a6e38...483d019146b8495b9299c08c57461747e727f3f7)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d)

* [OCPBUGS-37502](https://issues.redhat.com/browse/OCPBUGS-37502): Fix handling of ELB Node IP detection [#324](https://github.com/openshift/baremetal-runtimecfg/pull/324)
* [OCPBUGS-35846](https://issues.redhat.com/browse/OCPBUGS-35846): Add support for OVN HostCidrs annotation [#321](https://github.com/openshift/baremetal-runtimecfg/pull/321)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/393a268d0ae6e8cacc75d0b60b91bf6105fb9360...0ba9e555eeb173d42e5adf6f65e982e17acfdb9d)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/44b3ac26e654777e0283759d45a2b3351823fc5e)

* [OCPBUGS-35475](https://issues.redhat.com/browse/OCPBUGS-35475): Remove some of newapp unit tests relying on external deprecated images [#1802](https://github.com/openshift/oc/pull/1802)
* [OCPBUGS-35447](https://issues.redhat.com/browse/OCPBUGS-35447): bump go-git to 5.11.0 [#1799](https://github.com/openshift/oc/pull/1799)
* [Full changelog](https://github.com/openshift/oc/compare/f7b14a92857ad1f28be2e2eaec3ae8229d4c2761...44b3ac26e654777e0283759d45a2b3351823fc5e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b491a81980f16adba3dcdb95356302d8a00d5454)

* [OCPBUGS-60975](https://issues.redhat.com/browse/OCPBUGS-60975): ccoctl: aws to use proper issuer url on subsequent runs [#911](https://github.com/openshift/cloud-credential-operator/pull/911)
* [OCPBUGS-58677](https://issues.redhat.com/browse/OCPBUGS-58677): github.com/golang/glog v1.2.5 [#895](https://github.com/openshift/cloud-credential-operator/pull/895)
* [OCPBUGS-53418](https://issues.redhat.com/browse/OCPBUGS-53418): github.com/golang/glog v1.2.4 [#845](https://github.com/openshift/cloud-credential-operator/pull/845)
* [OCPBUGS-53819](https://issues.redhat.com/browse/OCPBUGS-53819): update github.com/golang-jwt/jwt [#841](https://github.com/openshift/cloud-credential-operator/pull/841)
* [OCPBUGS-51542](https://issues.redhat.com/browse/OCPBUGS-51542): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#830](https://github.com/openshift/cloud-credential-operator/pull/830)
* [OCPBUGS-47069](https://issues.redhat.com/browse/OCPBUGS-47069): golang.org/x/net v0.33.0 [#810](https://github.com/openshift/cloud-credential-operator/pull/810)
* [OCPBUGS-46487](https://issues.redhat.com/browse/OCPBUGS-46487): Add AWS region to aws-pod-identity-webhook [#801](https://github.com/openshift/cloud-credential-operator/pull/801)
* [OCPBUGS-45009](https://issues.redhat.com/browse/OCPBUGS-45009): Add retry to ccoctl gcp create functions [#791](https://github.com/openshift/cloud-credential-operator/pull/791)
* [OCPBUGS-45004](https://issues.redhat.com/browse/OCPBUGS-45004): github.com/golang-jwt/jwt/v4 v4.5.1 [#785](https://github.com/openshift/cloud-credential-operator/pull/785)
* [OCPBUGS-43647](https://issues.redhat.com/browse/OCPBUGS-43647): Only attempt timed token credentials on supported platforms. [#775](https://github.com/openshift/cloud-credential-operator/pull/775)
* [OCPBUGS-43339](https://issues.redhat.com/browse/OCPBUGS-43339): Update github.com/sirupsen/logrus v1.9.3 [#769](https://github.com/openshift/cloud-credential-operator/pull/769)
* [OCPBUGS-41236](https://issues.redhat.com/browse/OCPBUGS-41236): List secrets in batches to avoid api timeout [#755](https://github.com/openshift/cloud-credential-operator/pull/755)
* [OCPBUGS-38378](https://issues.redhat.com/browse/OCPBUGS-38378): Update google.golang.org/grpc v1.65.0 [#750](https://github.com/openshift/cloud-credential-operator/pull/750)
* [OCPBUGS-37823](https://issues.redhat.com/browse/OCPBUGS-37823): GCP passthrough permissions check to ignore problematic permissions. [#741](https://github.com/openshift/cloud-credential-operator/pull/741)
* [OCPBUGS-37062](https://issues.redhat.com/browse/OCPBUGS-37062): Update cloud.google.com/go/storage v1.43.0 [#742](https://github.com/openshift/cloud-credential-operator/pull/742)
* [OCPBUGS-37420](https://issues.redhat.com/browse/OCPBUGS-37420): SNYK ignore go-client misreporting [#739](https://github.com/openshift/cloud-credential-operator/pull/739)
* [OCPBUGS-37276](https://issues.redhat.com/browse/OCPBUGS-37276): Update to azidentity v1.7.0 [#732](https://github.com/openshift/cloud-credential-operator/pull/732)
* [OCPBUGS-36029](https://issues.redhat.com/browse/OCPBUGS-36029): IBM/go-sdk-core update to v5.17.4 [#721](https://github.com/openshift/cloud-credential-operator/pull/721)
* [OCPBUGS-36716](https://issues.redhat.com/browse/OCPBUGS-36716): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#713](https://github.com/openshift/cloud-credential-operator/pull/713)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/67fe51ea7cc53e73aba861d75696fc051b404d4d...b491a81980f16adba3dcdb95356302d8a00d5454)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1bd04641f210d19370f782086949f827bfb7a264)

* [OCPBUGS-34197](https://issues.redhat.com/browse/OCPBUGS-34197): Avoid panic when looking up attachedOutboundRule.ID in azure [#147](https://github.com/openshift/cloud-network-config-controller/pull/147)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f350a68fc59fadeff0555b0dab614f3449953230...1bd04641f210d19370f782086949f827bfb7a264)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d030dbaade38e116d27d5039a3597f694f73ea2b)

* [OCPBUGS-45150](https://issues.redhat.com/browse/OCPBUGS-45150): [release-4.14] VPA: Update OWNERS file [#327](https://github.com/openshift/kubernetes-autoscaler/pull/327)
* [OCPBUGS-40925](https://issues.redhat.com/browse/OCPBUGS-40925): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#316](https://github.com/openshift/kubernetes-autoscaler/pull/316)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9d87281f73fc26a5fac17c50dcf63c2de17f619a...d030dbaade38e116d27d5039a3597f694f73ea2b)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/affcfb54666c47e569d1ba4f2e44aeaf9ef28bf7)

* [OCPBUGS-31977](https://issues.redhat.com/browse/OCPBUGS-31977): bump x/net to 0.23.0 [#438](https://github.com/openshift/cluster-baremetal-operator/pull/438)
* [OCPBUGS-22943](https://issues.redhat.com/browse/OCPBUGS-22943): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#379](https://github.com/openshift/cluster-baremetal-operator/pull/379)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/270579c644f97dd9f2e8e771c939833ffee1dd3e...affcfb54666c47e569d1ba4f2e44aeaf9ef28bf7)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/60cc3e65ff4817e43fe3114bccbbdb14374bac2c)

* [OCPBUGS-37974](https://issues.redhat.com/browse/OCPBUGS-37974): fix: sort CredentialsRequest manifests after namespace [#194](https://github.com/openshift/cluster-capi-operator/pull/194)
* [OCPBUGS-36369](https://issues.redhat.com/browse/OCPBUGS-36369): Revert cluster-api-operator go.sum hash [#184](https://github.com/openshift/cluster-capi-operator/pull/184)
* [OCPBUGS-35128](https://issues.redhat.com/browse/OCPBUGS-35128): Bump x/crypto to v0.24.0 [#177](https://github.com/openshift/cluster-capi-operator/pull/177)
* [OCPBUGS-35957](https://issues.redhat.com/browse/OCPBUGS-35957): Fix gcp providers-list.yaml branch [#178](https://github.com/openshift/cluster-capi-operator/pull/178)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b4c4fb13a40c2c71b8f21fe379befad95e341a77...60cc3e65ff4817e43fe3114bccbbdb14374bac2c)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/54dce160186799ac2d6e21f9609f8f8b1e493003)

* [OCPBUGS-63170](https://issues.redhat.com/browse/OCPBUGS-63170): ccm: disable unused secure-serving port and webhook [#425](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/425)
* [OCPBUGS-34556](https://issues.redhat.com/browse/OCPBUGS-34556): update azure and ash tolerations on node manager [#347](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33a706e8a2430fa67f4472dbd0f61cea8de6bd6f...54dce160186799ac2d6e21f9609f8f8b1e493003)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/2378670aee1858db6b1ff425a1d208eb7d73afec)

* [OCPBUGS-44095](https://issues.redhat.com/browse/OCPBUGS-44095): Backport SDN live migration [#425](https://github.com/openshift/cluster-config-operator/pull/425)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/91fa980a5be1d3c91786ff41a0a9394adb75671f...2378670aee1858db6b1ff425a1d208eb7d73afec)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/783d9dd134451c12f0c1abf7e53c30b61ddd74bf)

* [OCPBUGS-48211](https://issues.redhat.com/browse/OCPBUGS-48211): Add unreadyNodeGracePeriod for allowing brief node hiccups [#340](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/340)
* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#319](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/319)
* [OCPBUGS-35520](https://issues.redhat.com/browse/OCPBUGS-35520): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#309](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/309)
* [OCPBUGS-35338](https://issues.redhat.com/browse/OCPBUGS-35338): Improved debugging of API listing errors [#303](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/303)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/074a22ce411beae063af06423ecf3458c67e9cc3...783d9dd134451c12f0c1abf7e53c30b61ddd74bf)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0164e3c4464f03d5ddbbba5d426f4bf02822753d)

* [OCPBUGS-52500](https://issues.redhat.com/browse/OCPBUGS-52500): [release-4.14] Add runbook_url for CoreDNSErrorsHigh [#433](https://github.com/openshift/cluster-dns-operator/pull/433)
* [OCPBUGS-5943](https://issues.redhat.com/browse/OCPBUGS-5943): Enable topology-aware hints iff nodes in >=2 zones [#416](https://github.com/openshift/cluster-dns-operator/pull/416)
* [OCPBUGS-5943](https://issues.redhat.com/browse/OCPBUGS-5943): Ignore max unavailable for status [#400](https://github.com/openshift/cluster-dns-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5553a22698ac7fce2cc401ed5884eb1bdb36a02d...0164e3c4464f03d5ddbbba5d426f4bf02822753d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9abf7d22b5fda0e06fb1f9a2fa90caaa09d5a932)

* [OCPBUGS-53507](https://issues.redhat.com/browse/OCPBUGS-53507): fix CVE-2025-30204 [#1405](https://github.com/openshift/cluster-etcd-operator/pull/1405)
* [OCPBUGS-34495](https://issues.redhat.com/browse/OCPBUGS-34495): return errors in wait-for-ceo [#1266](https://github.com/openshift/cluster-etcd-operator/pull/1266)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/42629b1d6b82c006d01af486e9939fe46756b1ac...9abf7d22b5fda0e06fb1f9a2fa90caaa09d5a932)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/e858d0e42c044d0dc43e292219a5713c5b713e25)

* [OCPBUGS-53867](https://issues.redhat.com/browse/OCPBUGS-53867): Bump github.com/golang-jwt/jwt [#1229](https://github.com/openshift/cluster-image-registry-operator/pull/1229)
* [OCPBUGS-53867](https://issues.redhat.com/browse/OCPBUGS-53867): Bump github.com/golang-jwt/jwt [#1224](https://github.com/openshift/cluster-image-registry-operator/pull/1224)
* [OCPBUGS-51598](https://issues.redhat.com/browse/OCPBUGS-51598): bump golang.org/x/oauth2 [#1213](https://github.com/openshift/cluster-image-registry-operator/pull/1213)
* [OCPBUGS-51312](https://issues.redhat.com/browse/OCPBUGS-51312): ensure that storage names don't end in dashes [#1185](https://github.com/openshift/cluster-image-registry-operator/pull/1185)
* [OCPBUGS-44048](https://issues.redhat.com/browse/OCPBUGS-44048): fix proxy config and leader election test flakes [#1153](https://github.com/openshift/cluster-image-registry-operator/pull/1153)
* [OCPBUGS-44002](https://issues.redhat.com/browse/OCPBUGS-44002): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1152](https://github.com/openshift/cluster-image-registry-operator/pull/1152)
* [OCPBUGS-42935](https://issues.redhat.com/browse/OCPBUGS-42935): azureclient: stop validating credentials when creating the client [#1137](https://github.com/openshift/cluster-image-registry-operator/pull/1137)
* [OCPBUGS-39100](https://issues.redhat.com/browse/OCPBUGS-39100): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1114](https://github.com/openshift/cluster-image-registry-operator/pull/1114)
* [OCPBUGS-36035](https://issues.redhat.com/browse/OCPBUGS-36035): go.*,vendor: bump go-retryablehttp [#1069](https://github.com/openshift/cluster-image-registry-operator/pull/1069)
* [OCPBUGS-33147](https://issues.redhat.com/browse/OCPBUGS-33147): azure-path-fix: get client secret from k8s secret [#1058](https://github.com/openshift/cluster-image-registry-operator/pull/1058)
* [OCPBUGS-34668](https://issues.redhat.com/browse/OCPBUGS-34668): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1051](https://github.com/openshift/cluster-image-registry-operator/pull/1051)
* [OCPBUGS-33409](https://issues.redhat.com/browse/OCPBUGS-33409): azurepathfix: check if platform status is nil before accessing it [#1033](https://github.com/openshift/cluster-image-registry-operator/pull/1033)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/367570eb0bbce5e1374c083ef1af8075c05e8d32...e858d0e42c044d0dc43e292219a5713c5b713e25)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e302d85665274cb299d873eb624867384e5c37b1)

* [OCPBUGS-36467](https://issues.redhat.com/browse/OCPBUGS-36467): Allow operator to update Route spec.subdomain [#1101](https://github.com/openshift/cluster-ingress-operator/pull/1101)
* [OCPBUGS-36555](https://issues.redhat.com/browse/OCPBUGS-36555): Implement connect timeout tuning option [#1105](https://github.com/openshift/cluster-ingress-operator/pull/1105)
* [OCPBUGS-36461](https://issues.redhat.com/browse/OCPBUGS-36461): Add Regexp Anchor to TestAll [#1098](https://github.com/openshift/cluster-ingress-operator/pull/1098)
* [OCPBUGS-35399](https://issues.redhat.com/browse/OCPBUGS-35399): Internal service changed: fix target port logic [#1086](https://github.com/openshift/cluster-ingress-operator/pull/1086)
* [OCPBUGS-34973](https://issues.redhat.com/browse/OCPBUGS-34973): TestHostNetworkPortBinding: Delete t.Parallel() [#1077](https://github.com/openshift/cluster-ingress-operator/pull/1077)
* [OCPBUGS-34410](https://issues.redhat.com/browse/OCPBUGS-34410): Don't add clientca-configmap finalizer if deleting [#1063](https://github.com/openshift/cluster-ingress-operator/pull/1063)
* [OCPBUGS-34407](https://issues.redhat.com/browse/OCPBUGS-34407): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1061](https://github.com/openshift/cluster-ingress-operator/pull/1061)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d876f5ab48e3748057ec196d90b6f7aae633b081...e302d85665274cb299d873eb624867384e5c37b1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9267f4543589ccb408d3e62fc0e35708d4b783df)

* [OCPBUGS-50662](https://issues.redhat.com/browse/OCPBUGS-50662): Increase waitForFallbackDegradedConditionTimeout [#1807](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1807)
* [OCPBUGS-31354](https://issues.redhat.com/browse/OCPBUGS-31354): add SNO control plane high cpu usage alert [#1707](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1707)
* [OCPBUGS-33930](https://issues.redhat.com/browse/OCPBUGS-33930): add a controller that reconciles SCCs' volumes [#1681](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1681)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2eab0f9e27db4399bf8885d62ca338c3d02fdd35...9267f4543589ccb408d3e62fc0e35708d4b783df)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/38a758d0026346b751774b2459520174b46e39bf)

* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Ensure trailing dots on DNS names do not block serving cert auth [#259](https://github.com/openshift/cluster-machine-approver/pull/259)
* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Client internal DNS checks should ignore trailing dot [#255](https://github.com/openshift/cluster-machine-approver/pull/255)
* [OCPBUGS-44774](https://issues.redhat.com/browse/OCPBUGS-44774): Client internal DNS checks should be case insensitive [#246](https://github.com/openshift/cluster-machine-approver/pull/246)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/711b4f6eeb038f8c7bd88db3ea51ebad350a116d...38a758d0026346b751774b2459520174b46e39bf)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e0950380f0281a5da3c2fd51abbdab1155d26b4e)

* [OCPBUGS-48368](https://issues.redhat.com/browse/OCPBUGS-48368): Add new metrics for OpenShift logging telemetry [#2556](https://github.com/openshift/cluster-monitoring-operator/pull/2556)
* [OCPBUGS-44007](https://issues.redhat.com/browse/OCPBUGS-44007): fix(monitoring-plugin): disable emitting nginx version on error pages [#2520](https://github.com/openshift/cluster-monitoring-operator/pull/2520)
* [OCPBUGS-43916](https://issues.redhat.com/browse/OCPBUGS-43916): Add runbook url for TelemeterClientFail… [#2510](https://github.com/openshift/cluster-monitoring-operator/pull/2510)
* [OCPBUGS-43678](https://issues.redhat.com/browse/OCPBUGS-43678): Remove temporary no more needed code [#2496](https://github.com/openshift/cluster-monitoring-operator/pull/2496)
* [OCPBUGS-42603](https://issues.redhat.com/browse/OCPBUGS-42603): Exclude windows nodes from kubelet servicemonitor [#2489](https://github.com/openshift/cluster-monitoring-operator/pull/2489)
* [OCPBUGS-41916](https://issues.redhat.com/browse/OCPBUGS-41916): filter alerts sent to Telemeter [#2473](https://github.com/openshift/cluster-monitoring-operator/pull/2473)
* [OCPBUGS-39176](https://issues.redhat.com/browse/OCPBUGS-39176): Backport #2441 for 4.14 [#2449](https://github.com/openshift/cluster-monitoring-operator/pull/2449)
* [OCPBUGS-37468](https://issues.redhat.com/browse/OCPBUGS-37468): Backport of PR #2384 [#2433](https://github.com/openshift/cluster-monitoring-operator/pull/2433)
* [OCPBUGS-36565](https://issues.redhat.com/browse/OCPBUGS-36565): add runbook_url annotations [#2407](https://github.com/openshift/cluster-monitoring-operator/pull/2407)
* [OCPBUGS-37296](https://issues.redhat.com/browse/OCPBUGS-37296): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2415](https://github.com/openshift/cluster-monitoring-operator/pull/2415)
* [OCPBUGS-36416](https://issues.redhat.com/browse/OCPBUGS-36416): inject trusted CA bundle into UWM Alertmanager [#2402](https://github.com/openshift/cluster-monitoring-operator/pull/2402)
* [OCPBUGS-34023](https://issues.redhat.com/browse/OCPBUGS-34023): fix KRP permissions for Thanos Querier [#2374](https://github.com/openshift/cluster-monitoring-operator/pull/2374)
* [OCPBUGS-33585](https://issues.redhat.com/browse/OCPBUGS-33585): fix Thanos ruler alert generator url [#2345](https://github.com/openshift/cluster-monitoring-operator/pull/2345)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1839fb4d246aa49ad3689f765e720fc51a38ae5c...e0950380f0281a5da3c2fd51abbdab1155d26b4e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c7f9fb8f2168ce81250bd588624e58bc2f6f36f8)

* [OCPBUGS-51170](https://issues.redhat.com/browse/OCPBUGS-51170): Use applyconfigurations for updating network.oprerator status [#2660](https://github.com/openshift/cluster-network-operator/pull/2660)
* [OCPBUGS-48323](https://issues.redhat.com/browse/OCPBUGS-48323): Pass transit_switch_subnet options in ovnkube-node pod for single-zone [#2617](https://github.com/openshift/cluster-network-operator/pull/2617)
* [OCPBUGS-42754](https://issues.redhat.com/browse/OCPBUGS-42754): Set mount propagation to HostToContainer for /var/lib/kubelet [#2521](https://github.com/openshift/cluster-network-operator/pull/2521)
* [OCPBUGS-47320](https://issues.redhat.com/browse/OCPBUGS-47320): Pass transit_switch_subnet options in ovnkube-node pod [#2607](https://github.com/openshift/cluster-network-operator/pull/2607)
* [OCPBUGS-43821](https://issues.redhat.com/browse/OCPBUGS-43821): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2546](https://github.com/openshift/cluster-network-operator/pull/2546)
* [OCPBUGS-39086](https://issues.redhat.com/browse/OCPBUGS-39086): Fix wait logic for IPsec certificate signing request [#2481](https://github.com/openshift/cluster-network-operator/pull/2481)
* [OCPBUGS-41508](https://issues.redhat.com/browse/OCPBUGS-41508): Tighten the permissions on whereabouts.conf [#2493](https://github.com/openshift/cluster-network-operator/pull/2493)
* [OCPBUGS-42021](https://issues.redhat.com/browse/OCPBUGS-42021): Add proxy env vars to onvkube-node [#2505](https://github.com/openshift/cluster-network-operator/pull/2505)
* [OCPBUGS-38440](https://issues.redhat.com/browse/OCPBUGS-38440): [release-4.14] 4.14 subnet config [#2473](https://github.com/openshift/cluster-network-operator/pull/2473)
* [OCPBUGS-37221](https://issues.redhat.com/browse/OCPBUGS-37221): Ensure that the node-identity webhook address contains colons for IPv6 [#2440](https://github.com/openshift/cluster-network-operator/pull/2440)
* [OCPBUGS-38073](https://issues.redhat.com/browse/OCPBUGS-38073): Fix IC distributed control plane alerts [#2463](https://github.com/openshift/cluster-network-operator/pull/2463)
* [OCPBUGS-37468](https://issues.redhat.com/browse/OCPBUGS-37468): Backport ipsec state metric [#2444](https://github.com/openshift/cluster-network-operator/pull/2444)
* [OCPBUGS-32706](https://issues.redhat.com/browse/OCPBUGS-32706): Add conditions for ignored-namespaces [#2380](https://github.com/openshift/cluster-network-operator/pull/2380)
* [OCPBUGS-36722](https://issues.redhat.com/browse/OCPBUGS-36722): update whereabouts crd [#2434](https://github.com/openshift/cluster-network-operator/pull/2434)
* [OCPBUGS-34885](https://issues.redhat.com/browse/OCPBUGS-34885): [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled [#2390](https://github.com/openshift/cluster-network-operator/pull/2390)
* [OCPBUGS-27925](https://issues.redhat.com/browse/OCPBUGS-27925), [OCPBUGS-30579](https://issues.redhat.com/browse/OCPBUGS-30579): [release-4.14] tighten conditions for the state transitions in IC upgrade [#2207](https://github.com/openshift/cluster-network-operator/pull/2207)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d429c8bc14a64bd56fb9160b218bfa75a891219f...c7f9fb8f2168ce81250bd588624e58bc2f6f36f8)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5511c8df81e608a45bf37cb021707f7b9ede9c9a)

* e2e:performance: decode to valid kubeletconfig object (#1276) [#1276](https://github.com/openshift/cluster-node-tuning-operator/pull/1276)
* Fix context deadlines in ExecCommandOnPod() (#1272) [#1272](https://github.com/openshift/cluster-node-tuning-operator/pull/1272)
* [OCPBUGS-44506](https://issues.redhat.com/browse/OCPBUGS-44506): Drop sched_migration_cost_ns setting (#1215) [#1215](https://github.com/openshift/cluster-node-tuning-operator/pull/1215)
* [OCPBUGS-44283](https://issues.redhat.com/browse/OCPBUGS-44283): right-hand-side profile_dirs take precedence (#1210) [#1210](https://github.com/openshift/cluster-node-tuning-operator/pull/1210)
* [OCPBUGS-42567](https://issues.redhat.com/browse/OCPBUGS-42567): Add cluster-wide proxy env file (#1176) [#1176](https://github.com/openshift/cluster-node-tuning-operator/pull/1176)
* TuneD prior to kubelet in one-shot mode (#1137) [#1137](https://github.com/openshift/cluster-node-tuning-operator/pull/1137)
* [OCPBUGS-37754](https://issues.redhat.com/browse/OCPBUGS-37754): Remove tuned/rendered object (#1133) [#1133](https://github.com/openshift/cluster-node-tuning-operator/pull/1133)
* [OCPBUGS-37734](https://issues.redhat.com/browse/OCPBUGS-37734): Backport fix for OCPBUGS-36355 (#1126) [#1126](https://github.com/openshift/cluster-node-tuning-operator/pull/1126)
* [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1074) [#1074](https://github.com/openshift/cluster-node-tuning-operator/pull/1074)
* Add a '.snyk' to silence static code analysis warnings (#1002) [#1002](https://github.com/openshift/cluster-node-tuning-operator/pull/1002)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ce4b975b395cae629f120934326d9b1a9a75d0a3...5511c8df81e608a45bf37cb021707f7b9ede9c9a)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/09d62091346f86f54938587acfd680f6bd6b7af6)

* [OCPBUGS-48841](https://issues.redhat.com/browse/OCPBUGS-48841): Add new team members to the OWNERS file [#380](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/380)
* [OCPBUGS-33295](https://issues.redhat.com/browse/OCPBUGS-33295): Update opentelemetry to mitigate CVE-2023-47108 [#344](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/344)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/3985c55f99e1ea013be2db096059c09b2ed98118...09d62091346f86f54938587acfd680f6bd6b7af6)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/63a0ae4b409b7eea4d7335f6c372e5b03be91238)

* [OCPBUGS-63518](https://issues.redhat.com/browse/OCPBUGS-63518): references to github.com/sclorg/django-ex.git now also refer to the branch [#661](https://github.com/openshift/cluster-samples-operator/pull/661)
* [OCPBUGS-55655](https://issues.redhat.com/browse/OCPBUGS-55655): Adding mutex to func createSamples on handler.go [#635](https://github.com/openshift/cluster-samples-operator/pull/635)
* [OCPBUGS-54537](https://issues.redhat.com/browse/OCPBUGS-54537): add rhdmalone to owners [#624](https://github.com/openshift/cluster-samples-operator/pull/624)
* [OCPBUGS-49421](https://issues.redhat.com/browse/OCPBUGS-49421): add shannon and aroyoredhat as owners [#598](https://github.com/openshift/cluster-samples-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/61a34659e4499188ab6f790e3a07aba8be9e9bdd...63a0ae4b409b7eea4d7335f6c372e5b03be91238)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/1a7a6e229dc980540f51b969c4f1d9ef5dbc3ab5)

* [OCPBUGS-43628](https://issues.redhat.com/browse/OCPBUGS-43628): keys: Update Red Hat keys to use SHA256 signatures [#66](https://github.com/openshift/cluster-update-keys/pull/66)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e0c26a084139906e866d9eec89f05d2d3211b334...1a7a6e229dc980540f51b969c4f1d9ef5dbc3ab5)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a1bf930103a77b25e99130644504c3fecdcc4c67)

* [OCPBUGS-50592](https://issues.redhat.com/browse/OCPBUGS-50592): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1151](https://github.com/openshift/cluster-version-operator/pull/1151)
* [OCPBUGS-45331](https://issues.redhat.com/browse/OCPBUGS-45331): deps: bump golang.org/x/net to 0.31.0 [#1120](https://github.com/openshift/cluster-version-operator/pull/1120)
* [OCPBUGS-44704](https://issues.redhat.com/browse/OCPBUGS-44704): Fix desired before sync_worker's work is initialized [#1109](https://github.com/openshift/cluster-version-operator/pull/1109)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/af210dc66d38bce5793155aac8bfb6220a7085d9...a1bf930103a77b25e99130644504c3fecdcc4c67)


### [console](https://github.com/openshift/console/tree/06827468f1806ff4a7b90f274a8ac44af3fd517f)

* [OCPBUGS-44158](https://issues.redhat.com/browse/OCPBUGS-44158): bump dompurify to latest [#15593](https://github.com/openshift/console/pull/15593)
* [OCPBUGS-59998](https://issues.redhat.com/browse/OCPBUGS-59998): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15464](https://github.com/openshift/console/pull/15464)
* [OCPBUGS-58274](https://issues.redhat.com/browse/OCPBUGS-58274): Fix TypeError Cannot read properties of null (reading 'metadata') [#15228](https://github.com/openshift/console/pull/15228)
* [OCPBUGS-57099](https://issues.redhat.com/browse/OCPBUGS-57099): Add all files to `vendor` regardless of gitignore [#15135](https://github.com/openshift/console/pull/15135)
* [OCPBUGS-55942](https://issues.redhat.com/browse/OCPBUGS-55942): fix bug where operator appears twice [#15033](https://github.com/openshift/console/pull/15033)
* [OCPBUGS-55427](https://issues.redhat.com/browse/OCPBUGS-55427): Add missing pipelines plugin name to known plugins [#15005](https://github.com/openshift/console/pull/15005)
* [OCPBUGS-39010](https://issues.redhat.com/browse/OCPBUGS-39010): fix crash if helm chart metadata is nil [#14198](https://github.com/openshift/console/pull/14198)
* [OCPBUGS-53437](https://issues.redhat.com/browse/OCPBUGS-53437): Show Observe section without PROMETHEUS and MONITORING flags [#14892](https://github.com/openshift/console/pull/14892)
* [OCPBUGS-54404](https://issues.redhat.com/browse/OCPBUGS-54404): Update the monitoring topic used by the console team [#14910](https://github.com/openshift/console/pull/14910)
* [OCPBUGS-54167](https://issues.redhat.com/browse/OCPBUGS-54167): fix run time error when no completed version exists [#14899](https://github.com/openshift/console/pull/14899)
* [OCPBUGS-51118](https://issues.redhat.com/browse/OCPBUGS-51118): redirect to correct alert [#14823](https://github.com/openshift/console/pull/14823)
* [OCPBUGS-49753](https://issues.redhat.com/browse/OCPBUGS-49753): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14711](https://github.com/openshift/console/pull/14711)
* [OCPBUGS-46603](https://issues.redhat.com/browse/OCPBUGS-46603): Unable to remove finally tasks in pipeline builder mode [#14642](https://github.com/openshift/console/pull/14642)
* [OCPBUGS-33145](https://issues.redhat.com/browse/OCPBUGS-33145): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14370](https://github.com/openshift/console/pull/14370)
* [OCPBUGS-45323](https://issues.redhat.com/browse/OCPBUGS-45323): Use vCenterCluster value from CM as primary resource [#14574](https://github.com/openshift/console/pull/14574)
* [OCPBUGS-39368](https://issues.redhat.com/browse/OCPBUGS-39368): Remove deprecated resources from spec of the Pipeline [#14230](https://github.com/openshift/console/pull/14230)
* [OCPBUGS-45283](https://issues.redhat.com/browse/OCPBUGS-45283): Add IBM Block Storage CSI driver support for RWX [#14569](https://github.com/openshift/console/pull/14569)
* [OCPBUGS-44791](https://issues.redhat.com/browse/OCPBUGS-44791): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14518](https://github.com/openshift/console/pull/14518)
* [OCPBUGS-42962](https://issues.redhat.com/browse/OCPBUGS-42962): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14386](https://github.com/openshift/console/pull/14386)
* [OCPBUGS-43000](https://issues.redhat.com/browse/OCPBUGS-43000): List of default Camel K event sources disappears when adding a custom event source [#14388](https://github.com/openshift/console/pull/14388)
* [OCPBUGS-36558](https://issues.redhat.com/browse/OCPBUGS-36558): Increase login flow state paramater length/entropy [#14439](https://github.com/openshift/console/pull/14439)
* [OCPBUGS-10337](https://issues.redhat.com/browse/OCPBUGS-10337): Updating openshift-enterprise-console images to be consistent with ART [#12760](https://github.com/openshift/console/pull/12760)
* [OCPBUGS-42518](https://issues.redhat.com/browse/OCPBUGS-42518): The filepath including leading slash makes error during parsing devfile using Gitlab [#14342](https://github.com/openshift/console/pull/14342)
* [OCPBUGS-42517](https://issues.redhat.com/browse/OCPBUGS-42517): Values entered into the Instantiate Template form are automatically cleared [#14341](https://github.com/openshift/console/pull/14341)
* [OCPBUGS-42757](https://issues.redhat.com/browse/OCPBUGS-42757): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14369](https://github.com/openshift/console/pull/14369)
* [OCPBUGS-38883](https://issues.redhat.com/browse/OCPBUGS-38883): Fix password set to Secret created through Start Pipeline form [#14184](https://github.com/openshift/console/pull/14184)
* [OCPBUGS-37353](https://issues.redhat.com/browse/OCPBUGS-37353): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#14108](https://github.com/openshift/console/pull/14108)
* [OCPBUGS-41836](https://issues.redhat.com/browse/OCPBUGS-41836): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14281](https://github.com/openshift/console/pull/14281)
* [OCPBUGS-39389](https://issues.redhat.com/browse/OCPBUGS-39389): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#14231](https://github.com/openshift/console/pull/14231)
* [OCPBUGS-41581](https://issues.redhat.com/browse/OCPBUGS-41581): Increased max nodes limit to 200 in topology page [#14262](https://github.com/openshift/console/pull/14262)
* [OCPBUGS-38972](https://issues.redhat.com/browse/OCPBUGS-38972): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14234](https://github.com/openshift/console/pull/14234)
* [OCPBUGS-38053](https://issues.redhat.com/browse/OCPBUGS-38053): fix BMH restart annotation [#14109](https://github.com/openshift/console/pull/14109)
* [OCPBUGS-33748](https://issues.redhat.com/browse/OCPBUGS-33748): Fix Pipeline details page with when expression using CEL expression [#13856](https://github.com/openshift/console/pull/13856)
* [OCPBUGS-32499](https://issues.redhat.com/browse/OCPBUGS-32499): Fixed some problems in topology Chinese translation text [#13779](https://github.com/openshift/console/pull/13779)
* [OCPBUGS-33942](https://issues.redhat.com/browse/OCPBUGS-33942): make sure folder is encapsulated with quotas [#13869](https://github.com/openshift/console/pull/13869)
* [OCPBUGS-35723](https://issues.redhat.com/browse/OCPBUGS-35723): Upgrade Pipeline trigger resources to v1beta1 [#13985](https://github.com/openshift/console/pull/13985)
* [OCPBUGS-33558](https://issues.redhat.com/browse/OCPBUGS-33558): Display "With Data upload form" in Create PVC drop down once [#13840](https://github.com/openshift/console/pull/13840)
* [OCPBUGS-33064](https://issues.redhat.com/browse/OCPBUGS-33064): Fix PipelineRun Logs tab navigation [#13673](https://github.com/openshift/console/pull/13673)
* [Full changelog](https://github.com/openshift/console/compare/b9c2c6f74dad4b6473219a0666e789864d9c3e1f...06827468f1806ff4a7b90f274a8ac44af3fd517f)


### [console-operator](https://github.com/openshift/console-operator/tree/e5d3f29136a89a273ed48023ce3a89c27980cf4f)

* [OCPBUGS-31916](https://issues.redhat.com/browse/OCPBUGS-31916): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#885](https://github.com/openshift/console-operator/pull/885)
* [Full changelog](https://github.com/openshift/console-operator/compare/855f3fcebb968880eca12713f01157aedee98d64...e5d3f29136a89a273ed48023ce3a89c27980cf4f)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/a1b773076bd1a8ac10e622e58a36259a7a6e596a)

* [OCPBUGS-56046](https://issues.redhat.com/browse/OCPBUGS-56046): Check error returned by ipv6 SettleAddresses [#193](https://github.com/openshift/containernetworking-plugins/pull/193)
* [OCPBUGS-46121](https://issues.redhat.com/browse/OCPBUGS-46121): [4.14] cherry-pick containernetworking/plugins#997 [#168](https://github.com/openshift/containernetworking-plugins/pull/168)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407...a1b773076bd1a8ac10e622e58a36259a7a6e596a)


### [coredns](https://github.com/openshift/coredns/tree/d10f7ff3322ac6844fc1ff070528664c8931ed24)

* [OCPBUGS-58713](https://issues.redhat.com/browse/OCPBUGS-58713): [release-4.14] Bump github.com/golang/glog to v1.2.4 [#139](https://github.com/openshift/coredns/pull/139)
* [OCPBUGS-37467](https://issues.redhat.com/browse/OCPBUGS-37467): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#126](https://github.com/openshift/coredns/pull/126)
* [Full changelog](https://github.com/openshift/coredns/compare/7d3fa777871ed2e5a70715e7f3e71d3f01785330...d10f7ff3322ac6844fc1ff070528664c8931ed24)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/6957b24475043718e946ec2e0b5e373c96a1f03e)

* [OCPBUGS-58887](https://issues.redhat.com/browse/OCPBUGS-58887): CARRY: don't ignore json files [#343](https://github.com/openshift/cloud-provider-openstack/pull/343)
* [OCPBUGS-52413](https://issues.redhat.com/browse/OCPBUGS-52413): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 [#315](https://github.com/openshift/cloud-provider-openstack/pull/315)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/697083a8e5e1f68978458a0a00c426e094665271...6957b24475043718e946ec2e0b5e373c96a1f03e)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7)

* [OCPBUGS-35112](https://issues.redhat.com/browse/OCPBUGS-35112): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#99](https://github.com/openshift/csi-external-provisioner/pull/99)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/78a710fd2ccd6f87f7789c314349192d063f9f37...e18ed7f00d8c80564a8dd5827013cd49f33ff0d7)


### [docker-builder](https://github.com/openshift/builder/tree/57539b86d3c60b773090f6dc05790aad032444c3)

* [OCPBUGS-66112](https://issues.redhat.com/browse/OCPBUGS-66112): BuildConfig inline Dockerfile fails with heredoc syntax [#492](https://github.com/openshift/builder/pull/492)
* [OCPBUGS-58140](https://issues.redhat.com/browse/OCPBUGS-58140): S2I build cpu limits observed by assemble are limited to 1 cpu [#476](https://github.com/openshift/builder/pull/476)
* [OCPBUGS-42915](https://issues.redhat.com/browse/OCPBUGS-42915), [OCPBUGS-43297](https://issues.redhat.com/browse/OCPBUGS-43297): Bump buildah to 1.33.12 [#447](https://github.com/openshift/builder/pull/447)
* [OCPBUGS-43190](https://issues.redhat.com/browse/OCPBUGS-43190): runc library bump to 1.1.12 [#438](https://github.com/openshift/builder/pull/438)
* [OCPBUGS-48495](https://issues.redhat.com/browse/OCPBUGS-48495): skipping some unit tests to avoid failures as they are duplicate [#430](https://github.com/openshift/builder/pull/430)
* [OCPBUGS-48477](https://issues.redhat.com/browse/OCPBUGS-48477): Add team members to the OWNERS file [#429](https://github.com/openshift/builder/pull/429)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#404](https://github.com/openshift/builder/pull/404)
* [Full changelog](https://github.com/openshift/builder/compare/9c104de024e5c52e224ffedfbab0e9053fb1efd6...57539b86d3c60b773090f6dc05790aad032444c3)


### [docker-registry](https://github.com/openshift/image-registry/tree/ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1)

* [OCPBUGS-53651](https://issues.redhat.com/browse/OCPBUGS-53651): bump jwt and oauth dependencies [#434](https://github.com/openshift/image-registry/pull/434)
* [Full changelog](https://github.com/openshift/image-registry/compare/f03c24040cea924f846aca8b4e02bf802159a238...ce0483f140c5065a1b4aafbbbb94b1b9ca5f29e1)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f)

* [OCPBUGS-35143](https://issues.redhat.com/browse/OCPBUGS-35143): update to go 1.19 and k8s.io mods to v0.27.4 [#87](https://github.com/openshift/egress-router-cni/pull/87)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/afffdd455b65a944751f9155852781f9ddce0f5d...96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f)


### [etcd](https://github.com/openshift/etcd/tree/5ed5044c5661c55d297ab0348056b50969af9627)

* [OCPBUGS-32813](https://issues.redhat.com/browse/OCPBUGS-32813): Revert "Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… [#265](https://github.com/openshift/etcd/pull/265)
* [Full changelog](https://github.com/openshift/etcd/compare/b0c0321e61acdf93649ff4b753b2a399ffff411b...5ed5044c5661c55d297ab0348056b50969af9627)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/7bf14fb2d7eabbb2e22d39d203b43dc6a5443a21)

* [OCPBUGS-56194](https://issues.redhat.com/browse/OCPBUGS-56194): Disable shielded VMs for non-UEFI disks [#118](https://github.com/openshift/machine-api-provider-gcp/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125...7bf14fb2d7eabbb2e22d39d203b43dc6a5443a21)


### [haproxy-router](https://github.com/openshift/router/tree/c3a2430c09ccea623bb8a599ce56a6e267009620)

* [OCPBUGS-32634](https://issues.redhat.com/browse/OCPBUGS-32634): Properly handle rewrite-target annotation [#583](https://github.com/openshift/router/pull/583)
* [Full changelog](https://github.com/openshift/router/compare/99b0c3119a0e2c7db4775cd58dcdb3e33dda9d3e...c3a2430c09ccea623bb8a599ce56a6e267009620)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/03a907c6d182353a0e9b83a224a6f0398406f6d5)

* [OCPBUGS-39413](https://issues.redhat.com/browse/OCPBUGS-39413): Return from EnsureHostInPool on all NIC errors [#2073](https://github.com/openshift/kubernetes/pull/2073)
* : OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated [#2060](https://github.com/openshift/kubernetes/pull/2060)
* NO-JIRA: update downstream owners [#2051](https://github.com/openshift/kubernetes/pull/2051)
* [OCPBUGS-37623](https://issues.redhat.com/browse/OCPBUGS-37623): Bump to Kubernetes v1.27.16 [#2043](https://github.com/openshift/kubernetes/pull/2043)
* [OCPBUGS-35553](https://issues.redhat.com/browse/OCPBUGS-35553): Disable vulncheck [#2010](https://github.com/openshift/kubernetes/pull/2010)
* [OCPBUGS-35553](https://issues.redhat.com/browse/OCPBUGS-35553): Bump k8s 1.27.15 [#1992](https://github.com/openshift/kubernetes/pull/1992)
* [OCPBUGS-33964](https://issues.redhat.com/browse/OCPBUGS-33964): UPSTREAM: 123055: Fix race condition between resizer and kubelet [#1973](https://github.com/openshift/kubernetes/pull/1973)
* UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check [#1951](https://github.com/openshift/kubernetes/pull/1951)
* [OCPBUGS-33712](https://issues.redhat.com/browse/OCPBUGS-33712): Bump to Kubernetes v1.27.14 [#1970](https://github.com/openshift/kubernetes/pull/1970)
* [Full changelog](https://github.com/openshift/kubernetes/compare/048520e2550f287e0b8013cd53b2bf74e6af1529...03a907c6d182353a0e9b83a224a6f0398406f6d5)


### [hypershift](https://github.com/openshift/hypershift/tree/b11c804b44516f34e50344eeb94901936018d9d1)

* [OCPBUGS-61176](https://issues.redhat.com/browse/OCPBUGS-61176): Add missing service network DNS entries to KAS cert [#6742](https://github.com/openshift/hypershift/pull/6742)
* [OCPBUGS-57321](https://issues.redhat.com/browse/OCPBUGS-57321): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 [#6252](https://github.com/openshift/hypershift/pull/6252)
* [OCPBUGS-55936](https://issues.redhat.com/browse/OCPBUGS-55936): [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… [#6129](https://github.com/openshift/hypershift/pull/6129)
* [CNTRLPLANE-921](https://issues.redhat.com/browse/CNTRLPLANE-921): Konflux build pipeline service account migration [#6080](https://github.com/openshift/hypershift/pull/6080)
* [CNTRLPLANE-921](https://issues.redhat.com/browse/CNTRLPLANE-921): Konflux build pipeline service account migration [#6085](https://github.com/openshift/hypershift/pull/6085)
* [OCPBUGS-51802](https://issues.redhat.com/browse/OCPBUGS-51802): Fix golang crypto dependency go.mod replacement [#5996](https://github.com/openshift/hypershift/pull/5996)
* [OCPBUGS-53899](https://issues.redhat.com/browse/OCPBUGS-53899): bump golang-jwt v4 [#5909](https://github.com/openshift/hypershift/pull/5909)
* [OCPBUGS-53433](https://issues.redhat.com/browse/OCPBUGS-53433): Prevent IgnitionServer from flooding the API server with patch requests [#5878](https://github.com/openshift/hypershift/pull/5878)
* [OCPBUGS-51731](https://issues.redhat.com/browse/OCPBUGS-51731), [OCPBUGS-51802](https://issues.redhat.com/browse/OCPBUGS-51802): Bump dependencies to OCP fork in backports [#5899](https://github.com/openshift/hypershift/pull/5899)
* Red Hat Konflux update control-plane-operator-4-14 [#5953](https://github.com/openshift/hypershift/pull/5953)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5921](https://github.com/openshift/hypershift/pull/5921)
* [OCPBUGS-53314](https://issues.redhat.com/browse/OCPBUGS-53314): Fix IsIPv4 function identifying also addresses instead of CIDRs [#5867](https://github.com/openshift/hypershift/pull/5867)
* [OCPBUGS-45559](https://issues.redhat.com/browse/OCPBUGS-45559): Add Network Policies for Konnectivity server and Ignition server proxy [#5816](https://github.com/openshift/hypershift/pull/5816)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 [#5730](https://github.com/openshift/hypershift/pull/5730)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 [#5725](https://github.com/openshift/hypershift/pull/5725)
* chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 [#5687](https://github.com/openshift/hypershift/pull/5687)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 [#5681](https://github.com/openshift/hypershift/pull/5681)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5688](https://github.com/openshift/hypershift/pull/5688)
* [OCPBUGS-50700](https://issues.redhat.com/browse/OCPBUGS-50700): add region to AWS creds passed to operators managed by CPO [#5668](https://github.com/openshift/hypershift/pull/5668)
* NO-JIRA:  Red Hat Konflux update control-plane-operator-4-14 [#5339](https://github.com/openshift/hypershift/pull/5339)
* [OCPBUGS-47630](https://issues.redhat.com/browse/OCPBUGS-47630): Separate CPO containerfiles [#5619](https://github.com/openshift/hypershift/pull/5619)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 [#5538](https://github.com/openshift/hypershift/pull/5538)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 [#5537](https://github.com/openshift/hypershift/pull/5537)
* [OCPBUGS-49405](https://issues.redhat.com/browse/OCPBUGS-49405): add ValidIDPConfiguration condition to report IDP config issues [#5520](https://github.com/openshift/hypershift/pull/5520)
* NO-JIRA: chore: update konflux references & bump up go version to 1.20 [#5517](https://github.com/openshift/hypershift/pull/5517)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) [#5444](https://github.com/openshift/hypershift/pull/5444)
* NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) [#5430](https://github.com/openshift/hypershift/pull/5430)
* NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net [#5372](https://github.com/openshift/hypershift/pull/5372)
* NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) [#5331](https://github.com/openshift/hypershift/pull/5331)
* NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) [#5330](https://github.com/openshift/hypershift/pull/5330)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned [#5308](https://github.com/openshift/hypershift/pull/5308)
* [OCPBUGS-44279](https://issues.redhat.com/browse/OCPBUGS-44279): Configure OAuth https proxy to dial cloud endpoints directly [#5067](https://github.com/openshift/hypershift/pull/5067)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) [#5162](https://github.com/openshift/hypershift/pull/5162)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5145](https://github.com/openshift/hypershift/pull/5145)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5121](https://github.com/openshift/hypershift/pull/5121)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) [#5105](https://github.com/openshift/hypershift/pull/5105)
* NO-JIRA: Update Konflux references (release-4.14) [#5100](https://github.com/openshift/hypershift/pull/5100)
* chore(deps): update konflux references (release-4.14) [#5076](https://github.com/openshift/hypershift/pull/5076)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#5055](https://github.com/openshift/hypershift/pull/5055)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) [#5056](https://github.com/openshift/hypershift/pull/5056)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) [#5043](https://github.com/openshift/hypershift/pull/5043)
* chore(deps): update konflux references (release-4.14) [#5026](https://github.com/openshift/hypershift/pull/5026)
* chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) [#5021](https://github.com/openshift/hypershift/pull/5021)
* chore(deps): update konflux references to f53fe54 (release-4.14) [#5020](https://github.com/openshift/hypershift/pull/5020)
* NO-JIRA: Update Konflux references (release-4.14) [#5011](https://github.com/openshift/hypershift/pull/5011)
* [OCPBUGS-41701](https://issues.redhat.com/browse/OCPBUGS-41701): cmd: report server version, supported OCP [#4718](https://github.com/openshift/hypershift/pull/4718)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4975](https://github.com/openshift/hypershift/pull/4975)
* [OCPBUGS-43688](https://issues.redhat.com/browse/OCPBUGS-43688): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4964](https://github.com/openshift/hypershift/pull/4964)
* chore(deps): update konflux references (release-4.14) [#4953](https://github.com/openshift/hypershift/pull/4953)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.14) [#4948](https://github.com/openshift/hypershift/pull/4948)
* [OCPBUGS-43368](https://issues.redhat.com/browse/OCPBUGS-43368): Let payload generation pick the release for the NodePool [#4913](https://github.com/openshift/hypershift/pull/4913)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4934](https://github.com/openshift/hypershift/pull/4934)
* NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) [#4924](https://github.com/openshift/hypershift/pull/4924)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) [#4917](https://github.com/openshift/hypershift/pull/4917)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) [#4910](https://github.com/openshift/hypershift/pull/4910)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4898](https://github.com/openshift/hypershift/pull/4898)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) [#4879](https://github.com/openshift/hypershift/pull/4879)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 [#4851](https://github.com/openshift/hypershift/pull/4851)
* [OCPBUGS-42533](https://issues.redhat.com/browse/OCPBUGS-42533): enable audit log for oauth-openshift [#4822](https://github.com/openshift/hypershift/pull/4822)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) [#4794](https://github.com/openshift/hypershift/pull/4794)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) [#4828](https://github.com/openshift/hypershift/pull/4828)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4813](https://github.com/openshift/hypershift/pull/4813)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) [#4805](https://github.com/openshift/hypershift/pull/4805)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) [#4788](https://github.com/openshift/hypershift/pull/4788)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) [#4758](https://github.com/openshift/hypershift/pull/4758)
* chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) [#4784](https://github.com/openshift/hypershift/pull/4784)
* [OCPBUGS-41374](https://issues.redhat.com/browse/OCPBUGS-41374): CPO oauth idp converter: resolve names before dialing [#4763](https://github.com/openshift/hypershift/pull/4763)
* NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) [#4783](https://github.com/openshift/hypershift/pull/4783)
* chore(deps): update konflux references to 2c3426a (release-4.14) [#4773](https://github.com/openshift/hypershift/pull/4773)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4757](https://github.com/openshift/hypershift/pull/4757)
* [OCPBUGS-42221](https://issues.redhat.com/browse/OCPBUGS-42221): Make guest cluster components use the correct KAS port [#4753](https://github.com/openshift/hypershift/pull/4753)
* [OCPBUGS-38060](https://issues.redhat.com/browse/OCPBUGS-38060): Add HTTP konnectivity proxy to OAuth server [#4498](https://github.com/openshift/hypershift/pull/4498)
* [OCPBUGS-38066](https://issues.redhat.com/browse/OCPBUGS-38066): [release-4.14] Use HTTP proxy for ingress controller [#4724](https://github.com/openshift/hypershift/pull/4724)
* NO-JIRA: Security fixes for openshift-ci-security job [#4752](https://github.com/openshift/hypershift/pull/4752)
* [OCPBUGS-42184](https://issues.redhat.com/browse/OCPBUGS-42184): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4747](https://github.com/openshift/hypershift/pull/4747)
* [OCPBUGS-41506](https://issues.redhat.com/browse/OCPBUGS-41506): fix: bump google.golang.org/protobuf [#4687](https://github.com/openshift/hypershift/pull/4687)
* [HOSTEDCP-1957](https://issues.redhat.com/browse/HOSTEDCP-1957): bump go-jose version [#4698](https://github.com/openshift/hypershift/pull/4698)
* [OCPBUGS-39378](https://issues.redhat.com/browse/OCPBUGS-39378): Set KCM node monitor grace period [#4659](https://github.com/openshift/hypershift/pull/4659)
* chore(deps): update konflux references (release-4.14) [#4683](https://github.com/openshift/hypershift/pull/4683)
* [OCPBUGS-39183](https://issues.redhat.com/browse/OCPBUGS-39183): fix: bump github.com/IBM/go-sdk-core/v5 [#4626](https://github.com/openshift/hypershift/pull/4626)
* NO-JIRA: Add PodDisruptionBudget for router deployment [#4692](https://github.com/openshift/hypershift/pull/4692)
* NO-JIRA: Revert "Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308" [#4667](https://github.com/openshift/hypershift/pull/4667)
* NO-JIRA: PDB backports [#4661](https://github.com/openshift/hypershift/pull/4661)
* NO-JIRA: Konflux migration 4.14 [#4648](https://github.com/openshift/hypershift/pull/4648)
* [OCPBUGS-39230](https://issues.redhat.com/browse/OCPBUGS-39230): set proxy envvars on aws CCM [#4638](https://github.com/openshift/hypershift/pull/4638)
* [OCPBUGS-38791](https://issues.redhat.com/browse/OCPBUGS-38791): Let the CPO oidc check resolve through data plane [#4617](https://github.com/openshift/hypershift/pull/4617)
* NO-JIRA: Flaky cert validation test [#4633](https://github.com/openshift/hypershift/pull/4633)
* [HOSTEDCP-1897](https://issues.redhat.com/browse/HOSTEDCP-1897): [release-4.14] Allow setting Kube APIServer maximum requests in flight [#4553](https://github.com/openshift/hypershift/pull/4553)
* [OCPBUGS-37076](https://issues.redhat.com/browse/OCPBUGS-37076): Fixed audit-logs sigterm failing to terminate gracefully [#4369](https://github.com/openshift/hypershift/pull/4369)
* [OCPBUGS-38624](https://issues.redhat.com/browse/OCPBUGS-38624): remove weak ciphers from security profile [#4575](https://github.com/openshift/hypershift/pull/4575)
* [OCPBUGS-37173](https://issues.redhat.com/browse/OCPBUGS-37173): Add newline after TLS certs referenced by image.config [#4471](https://github.com/openshift/hypershift/pull/4471)
* [OCPBUGS-37172](https://issues.redhat.com/browse/OCPBUGS-37172): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4490](https://github.com/openshift/hypershift/pull/4490)
* [OCPBUGS-36944](https://issues.redhat.com/browse/OCPBUGS-36944): [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4360](https://github.com/openshift/hypershift/pull/4360)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4473](https://github.com/openshift/hypershift/pull/4473)
* [OCPBUGS-37175](https://issues.redhat.com/browse/OCPBUGS-37175): Delete IDMS in dataplane once HCP ICS field is removed [#4472](https://github.com/openshift/hypershift/pull/4472)
* NO-JIRA: Konflux mce-2.4 pipeline fixes [#4464](https://github.com/openshift/hypershift/pull/4464)
* NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4288](https://github.com/openshift/hypershift/pull/4288)
* NO-JIRA: [release-4.14] test/e2e: remove api budget checks [#4438](https://github.com/openshift/hypershift/pull/4438)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned [#4363](https://github.com/openshift/hypershift/pull/4363)
* NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned [#4326](https://github.com/openshift/hypershift/pull/4326)
* NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned [#4325](https://github.com/openshift/hypershift/pull/4325)
* [OCPBUGS-36518](https://issues.redhat.com/browse/OCPBUGS-36518): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4315](https://github.com/openshift/hypershift/pull/4315)
* [OCPBUGS-36159](https://issues.redhat.com/browse/OCPBUGS-36159): Generate default worker security group rules based on machineCIDR [#4270](https://github.com/openshift/hypershift/pull/4270)
* [OCPBUGS-35549](https://issues.redhat.com/browse/OCPBUGS-35549): Restrict image registry overrides to control plane component [#4223](https://github.com/openshift/hypershift/pull/4223)
* [OCPBUGS-35365](https://issues.redhat.com/browse/OCPBUGS-35365): fix router on 4.14 y-stream upgrade [#4205](https://github.com/openshift/hypershift/pull/4205)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4257](https://github.com/openshift/hypershift/pull/4257)
* [OCPBUGS-35401](https://issues.redhat.com/browse/OCPBUGS-35401): Fix disconnected metadata inspection for nodepool [#4208](https://github.com/openshift/hypershift/pull/4208)
* [OCPBUGS-35482](https://issues.redhat.com/browse/OCPBUGS-35482): Add TrustedBundles to OAS container [#4216](https://github.com/openshift/hypershift/pull/4216)
* [OCPBUGS-35290](https://issues.redhat.com/browse/OCPBUGS-35290): [release-4.14] Backport etcd defrag [#4189](https://github.com/openshift/hypershift/pull/4189)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4248](https://github.com/openshift/hypershift/pull/4248)
* [OCPBUGS-35183](https://issues.redhat.com/browse/OCPBUGS-35183): add AWS STS URL to OIDC provider audiences [#4179](https://github.com/openshift/hypershift/pull/4179)
* NO-JIRA: hack: make the e2e script generic [#4201](https://github.com/openshift/hypershift/pull/4201)
* chore(deps): update konflux references to 2be7c9c (release-4.14) [#4225](https://github.com/openshift/hypershift/pull/4225)
* NO-JIRA: Update Konflux references to 1025001 (release-4.14) [#4181](https://github.com/openshift/hypershift/pull/4181)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4168](https://github.com/openshift/hypershift/pull/4168)
* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): [release-4.14] OCPBUGS-34855: Add new permission required in CAPA [#4149](https://github.com/openshift/hypershift/pull/4149)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4159](https://github.com/openshift/hypershift/pull/4159)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#4112](https://github.com/openshift/hypershift/pull/4112)
* NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) [#4073](https://github.com/openshift/hypershift/pull/4073)
* NO-JIRA: Remove CLI inspection of release image [#4061](https://github.com/openshift/hypershift/pull/4061)
* [OCPBUGS-33713](https://issues.redhat.com/browse/OCPBUGS-33713): Reconcile over ICSP/IDMS [#4059](https://github.com/openshift/hypershift/pull/4059)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) [#4065](https://github.com/openshift/hypershift/pull/4065)
* [OCPBUGS-33844](https://issues.redhat.com/browse/OCPBUGS-33844): Fix disconnected metadata inspection [#4049](https://github.com/openshift/hypershift/pull/4049)
* [OCPBUGS-33843](https://issues.redhat.com/browse/OCPBUGS-33843): Recycler-pod image now points to the OCP Payload reference [#4048](https://github.com/openshift/hypershift/pull/4048)
* [Full changelog](https://github.com/openshift/hypershift/compare/a43159eadaf22c5f8e056d955c8177f2b0ca8ed2...b11c804b44516f34e50344eeb94901936018d9d1)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/f39488c53ab5151cebf11e8f82510a255a8005d3)

* [OCPBUGS-23861](https://issues.redhat.com/browse/OCPBUGS-23861): Bump otelgrpc to v0.49.0 [#73](https://github.com/openshift/cloud-provider-ibm/pull/73)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/446871ff7626c4199836929f5bc777aba2a5f001...f39488c53ab5151cebf11e8f82510a255a8005d3)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/4b4154380e9e4f5551a7681b9a440dc22e075b03)

* [OCPBUGS-58738](https://issues.redhat.com/browse/OCPBUGS-58738): bump github.com/golang/glog to v1.2.4 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/109)
* [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#93](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/93)
* [OCPBUGS-53907](https://issues.redhat.com/browse/OCPBUGS-53907): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#86](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/86)
* [OCPBUGS-36065](https://issues.redhat.com/browse/OCPBUGS-36065): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#73](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/02471d9625339b1cd6d638e358a10c88b223d30e...4b4154380e9e4f5551a7681b9a440dc22e075b03)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/6258347568415eb6187a9fd988806e3212fa4f5e)

* [OCPBUGS-59791](https://issues.redhat.com/browse/OCPBUGS-59791): [IBM VPC] set offlineExpansion to false in e2e test manifest [#151](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/151)
* [OCPBUGS-36071](https://issues.redhat.com/browse/OCPBUGS-36071): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#122](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/7fd94aa73f7e61cba93657cc2411e04e1b40e87b...6258347568415eb6187a9fd988806e3212fa4f5e)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/01349bbdf3c459146c5e58b0a96526a2ba78391c)

* [OCPBUGS-56065](https://issues.redhat.com/browse/OCPBUGS-56065): tech debt: rework vendor patches [#50](https://github.com/openshift/ibm-vpc-node-label-updater/pull/50)
* [OCPBUGS-53539](https://issues.redhat.com/browse/OCPBUGS-53539): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#46](https://github.com/openshift/ibm-vpc-node-label-updater/pull/46)
* [OCPBUGS-36011](https://issues.redhat.com/browse/OCPBUGS-36011): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#42](https://github.com/openshift/ibm-vpc-node-label-updater/pull/42)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/44a2b9430e38e4dc0fe6ef0c08cd759ed97fd43f...01349bbdf3c459146c5e58b0a96526a2ba78391c)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/b69846edfe7bb171f60229dc7a7b43ea64513644)

* [OCPBUGS-67290](https://issues.redhat.com/browse/OCPBUGS-67290): [release-4.14] Fix incomplete vendor/ [#136](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/136)
* [OCPBUGS-51816](https://issues.redhat.com/browse/OCPBUGS-51816): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#123](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/123)
* [OCPBUGS-36077](https://issues.redhat.com/browse/OCPBUGS-36077): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 [#88](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/88)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/004ecde5e7e5394abdb9fe62b3063fd20300bb9c...b69846edfe7bb171f60229dc7a7b43ea64513644)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/a63c6aabeb484cf8d7f976edc80622de959abde4)

* [OCPBUGS-36083](https://issues.redhat.com/browse/OCPBUGS-36083): Bump dependency for CVE [#57](https://github.com/openshift/machine-api-provider-ibmcloud/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...a63c6aabeb484cf8d7f976edc80622de959abde4)


### [insights-operator](https://github.com/openshift/insights-operator/tree/acc99f557871cbf137f57a540f26989c27bb1301)

* Ignore previous status when disabling alerts (#1059) [#1059](https://github.com/openshift/insights-operator/pull/1059)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1058) [#1058](https://github.com/openshift/insights-operator/pull/1058)
* Add haproxy metric (#999) [#999](https://github.com/openshift/insights-operator/pull/999)
* Add missing permission for GatherClusterIngressCertificates (#984) [#984](https://github.com/openshift/insights-operator/pull/984)
* [OCPBUGS-37673](https://issues.redhat.com/browse/OCPBUGS-37673): Ingress controller related certificates' validate dates gathering (#976) [#976](https://github.com/openshift/insights-operator/pull/976)
* [OCPBUGS-36475](https://issues.redhat.com/browse/OCPBUGS-36475): properly encode the URL for the advisor links (#962) [#962](https://github.com/openshift/insights-operator/pull/962)
* [OCPBUGS-36380](https://issues.redhat.com/browse/OCPBUGS-36380): Collect aggregated Prometheus Alertmanager instances (#960) [#960](https://github.com/openshift/insights-operator/pull/960)
* [Full changelog](https://github.com/openshift/insights-operator/compare/50e132e0a016272f32f950fdb7fe45fc30526590...acc99f557871cbf137f57a540f26989c27bb1301)


### [ironic](https://github.com/openshift/ironic-image/tree/87eb83fa35a4b56cf21c280619b945156020590e)

* [OCPBUGS-48147](https://issues.redhat.com/browse/OCPBUGS-48147), [OCPBUGS-48594](https://issues.redhat.com/browse/OCPBUGS-48594): Bump jinja2 to 3.0.1-6.el9.2 [#625](https://github.com/openshift/ironic-image/pull/625)
* [OCPBUGS-43954](https://issues.redhat.com/browse/OCPBUGS-43954), [OCPBUGS-43962](https://issues.redhat.com/browse/OCPBUGS-43962): Bump python-waitress [4.14] [#607](https://github.com/openshift/ironic-image/pull/607)
* [OCPBUGS-39019](https://issues.redhat.com/browse/OCPBUGS-39019): Bump ironic-lib to fix utf8 decoding issue [#571](https://github.com/openshift/ironic-image/pull/571)
* [OCPBUGS-32266](https://issues.redhat.com/browse/OCPBUGS-32266): redfish-virtualmedia fails on XFusion nodes [#548](https://github.com/openshift/ironic-image/pull/548)
* [OCPBUGS-37762](https://issues.redhat.com/browse/OCPBUGS-37762), [OCPBUGS-39382](https://issues.redhat.com/browse/OCPBUGS-39382): Include fixes for CVE-2024-44082 [#584](https://github.com/openshift/ironic-image/pull/584)
* [OCPBUGS-38508](https://issues.redhat.com/browse/OCPBUGS-38508): set min version for python3-webob [#555](https://github.com/openshift/ironic-image/pull/555)
* [OCPBUGS-33375](https://issues.redhat.com/browse/OCPBUGS-33375): bump werkzeug [#537](https://github.com/openshift/ironic-image/pull/537)
* [OCPBUGS-37410](https://issues.redhat.com/browse/OCPBUGS-37410): bump jinja2 [#530](https://github.com/openshift/ironic-image/pull/530)
* [OCPBUGS-37115](https://issues.redhat.com/browse/OCPBUGS-37115): Update eventlet version [#524](https://github.com/openshift/ironic-image/pull/524)
* Bug OCPBUGS-34657: Disable installation of .pyc files through pip [#512](https://github.com/openshift/ironic-image/pull/512)
* [Full changelog](https://github.com/openshift/ironic-image/compare/62ee6d02ad9c35861fec43a5d635ca3df7a98976...87eb83fa35a4b56cf21c280619b945156020590e)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/e839a4e87eb09b78e562a3bab8f23f1c767742a4)

* [OCPBUGS-39019](https://issues.redhat.com/browse/OCPBUGS-39019): Bump ironic-lib to fix utf8 decoding issue [#158](https://github.com/openshift/ironic-agent-image/pull/158)
* [OCPBUGS-39382](https://issues.redhat.com/browse/OCPBUGS-39382): Include fixes for CVE-2024-44082 [#163](https://github.com/openshift/ironic-agent-image/pull/163)
* [OCPBUGS-33375](https://issues.redhat.com/browse/OCPBUGS-33375): set webob and bump werkzeug [#151](https://github.com/openshift/ironic-agent-image/pull/151)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/7e82a52f0406df18362d4bdc7c5cc95a376be587...e839a4e87eb09b78e562a3bab8f23f1c767742a4)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/1b194fd16b59c4a48223a2c9ac1bfb998a55c615)

* [OCPBUGS-49890](https://issues.redhat.com/browse/OCPBUGS-49890): Fix subnet validation [#50](https://github.com/openshift/ironic-static-ip-manager/pull/50)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...1b194fd16b59c4a48223a2c9ac1bfb998a55c615)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/03e5f40783e1b573f3d07d7640619ad9592f9a77)

* [OCPBUGS-30414](https://issues.redhat.com/browse/OCPBUGS-30414): update unit tests in egress/dns-proxy [#173](https://github.com/openshift/images/pull/173)
* [Full changelog](https://github.com/openshift/images/compare/f08cee3389569256aa288c33bad701a2704ce9db...03e5f40783e1b573f3d07d7640619ad9592f9a77)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/1f611c53ca22ebcf23d6a34ca07121f4fa2808d6)

* [OCPBUGS-54991](https://issues.redhat.com/browse/OCPBUGS-54991): Handle `openshift-host-network` namespace as special when it modifies [#655](https://github.com/openshift/sdn/pull/655)
* [OCPBUGS-46536](https://issues.redhat.com/browse/OCPBUGS-46536): Bump openvswitch [#647](https://github.com/openshift/sdn/pull/647)
* [Release 4.14] OCPBUGS-43484: NP-1092: backport SDN live migration [#631](https://github.com/openshift/sdn/pull/631)
* [Full changelog](https://github.com/openshift/sdn/compare/1a9befcb519d0b6c6a0907d514493f1d88aacf45...1f611c53ca22ebcf23d6a34ca07121f4fa2808d6)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/b8b8259584046eabb7565f262c8105c2686107a4)

* [OCPBUGS-31971](https://issues.redhat.com/browse/OCPBUGS-31971): bump golang.org/x/net [4.14] [#108](https://github.com/openshift/kube-rbac-proxy/pull/108)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/1a646b98d8864e53accb726531d86f084ab13977...b8b8259584046eabb7565f262c8105c2686107a4)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). [#229](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/229)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...b533e08c1ee5ac79d5b9219ec0ac2fefca353d9d)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/28aa32fc3084d7e3a91378fd9d70ddd9832404cc)

* [OCPBUGS-53296](https://issues.redhat.com/browse/OCPBUGS-53296): add image/read permissions [#1350](https://github.com/openshift/machine-api-operator/pull/1350)
* [OCPBUGS-48245](https://issues.redhat.com/browse/OCPBUGS-48245): VSphere: Handle cloned instance with lost taskID [#1322](https://github.com/openshift/machine-api-operator/pull/1322)
* [OCPBUGS-47659](https://issues.redhat.com/browse/OCPBUGS-47659): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1318](https://github.com/openshift/machine-api-operator/pull/1318)
* [OCPBUGS-43821](https://issues.redhat.com/browse/OCPBUGS-43821): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1303](https://github.com/openshift/machine-api-operator/pull/1303)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1260](https://github.com/openshift/machine-api-operator/pull/1260)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/73f2a1f3f772b86bff3755bb444cfa7e182775f9...28aa32fc3084d7e3a91378fd9d70ddd9832404cc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/00b2e0b1cc83e119995bbbe2ae06665c3d1655d7)

* [OCPBUGS-57341](https://issues.redhat.com/browse/OCPBUGS-57341): Do not enable on-prem-resolv-prepender.path for UPI [#5114](https://github.com/openshift/machine-config-operator/pull/5114)
* [OCPBUGS-43743](https://issues.redhat.com/browse/OCPBUGS-43743): Soften haproxy timeout for kubeapi probe [#4664](https://github.com/openshift/machine-config-operator/pull/4664)
* [OCPBUGS-54228](https://issues.redhat.com/browse/OCPBUGS-54228): Update ObservedGeneration in KubeletConfig [#4950](https://github.com/openshift/machine-config-operator/pull/4950)
* [OCPBUGS-50631](https://issues.redhat.com/browse/OCPBUGS-50631): Add clarification to invalid maxUnavailable alert [#4848](https://github.com/openshift/machine-config-operator/pull/4848)
* [OCPBUGS-48801](https://issues.redhat.com/browse/OCPBUGS-48801): Wait for all subcontrollers [#4808](https://github.com/openshift/machine-config-operator/pull/4808)
* [OCPBUGS-46057](https://issues.redhat.com/browse/OCPBUGS-46057): Remove trailing periods from AWS provided hostnames [#4747](https://github.com/openshift/machine-config-operator/pull/4747)
* [OCPBUGS-45271](https://issues.redhat.com/browse/OCPBUGS-45271): Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously [#4725](https://github.com/openshift/machine-config-operator/pull/4725)
* [OCPBUGS-42111](https://issues.redhat.com/browse/OCPBUGS-42111): Do not use 'restart' for 'oneshot' service [#4622](https://github.com/openshift/machine-config-operator/pull/4622)
* [MCO-1278](https://issues.redhat.com/browse/MCO-1278): Backport Telemetry to 4.14 [#4672](https://github.com/openshift/machine-config-operator/pull/4672)
* [OCPBUGS-43981](https://issues.redhat.com/browse/OCPBUGS-43981): Panic seen in CI job for MCC pod [#4671](https://github.com/openshift/machine-config-operator/pull/4671)
* [OCPBUGS-43980](https://issues.redhat.com/browse/OCPBUGS-43980): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4673](https://github.com/openshift/machine-config-operator/pull/4673)
* [OCPBUGS-37552](https://issues.redhat.com/browse/OCPBUGS-37552): On-Prem resolv prepender to watch for NM changes [#4500](https://github.com/openshift/machine-config-operator/pull/4500)
* [OCPBUGS-35322](https://issues.redhat.com/browse/OCPBUGS-35322): Decrease logs of haproxy [#4405](https://github.com/openshift/machine-config-operator/pull/4405)
* [OCPBUGS-32258](https://issues.redhat.com/browse/OCPBUGS-32258): Log network service output to console [#4320](https://github.com/openshift/machine-config-operator/pull/4320)
* [OCPBUGS-38371](https://issues.redhat.com/browse/OCPBUGS-38371): Revert "MCD-pull: run after network-online.target in Azure" [#4526](https://github.com/openshift/machine-config-operator/pull/4526)
* [OCPBUGS-37769](https://issues.redhat.com/browse/OCPBUGS-37769): Move StartLimitIntervalSec to Unit section [#4521](https://github.com/openshift/machine-config-operator/pull/4521)
* [OCPBUGS-30794](https://issues.redhat.com/browse/OCPBUGS-30794): Mount /run/nodeip-configuration into coredns containers [#4253](https://github.com/openshift/machine-config-operator/pull/4253)
* [OCPBUGS-37483](https://issues.redhat.com/browse/OCPBUGS-37483): Remove weights from ingress check script [#4485](https://github.com/openshift/machine-config-operator/pull/4485)
* [OCPBUGS-37738](https://issues.redhat.com/browse/OCPBUGS-37738): Openshift uncordoned compute-node that was intentionally cordoned [#4502](https://github.com/openshift/machine-config-operator/pull/4502)
* [OCPBUGS-36915](https://issues.redhat.com/browse/OCPBUGS-36915): Use NM's dns-change event for resolv.conf [#4473](https://github.com/openshift/machine-config-operator/pull/4473)
* [OCPBUGS-37223](https://issues.redhat.com/browse/OCPBUGS-37223): Copy RHEL9 binaries used in HCP [#4479](https://github.com/openshift/machine-config-operator/pull/4479)
* [OCPBUGS-36776](https://issues.redhat.com/browse/OCPBUGS-36776): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4463](https://github.com/openshift/machine-config-operator/pull/4463)
* [OCPBUGS-36593](https://issues.redhat.com/browse/OCPBUGS-36593): MCD-pull: run after network-online.target in Azure [#4456](https://github.com/openshift/machine-config-operator/pull/4456)
* [OCPBUGS-36356](https://issues.redhat.com/browse/OCPBUGS-36356): daemon/update: disable systemd unit before overwriting [#4447](https://github.com/openshift/machine-config-operator/pull/4447)
* [OCPBUGS-32472](https://issues.redhat.com/browse/OCPBUGS-32472): Delete state files on reboot only [#4331](https://github.com/openshift/machine-config-operator/pull/4331)
* [OCPBUGS-33590](https://issues.redhat.com/browse/OCPBUGS-33590): ovs-configure: fix `vlan_parent` calculation [#4361](https://github.com/openshift/machine-config-operator/pull/4361)
* [OCPBUGS-34716](https://issues.redhat.com/browse/OCPBUGS-34716): If multiple hostnames are returned, use the first one for the Node name [#4385](https://github.com/openshift/machine-config-operator/pull/4385)
* [OCPBUGS-17658](https://issues.redhat.com/browse/OCPBUGS-17658): Controller pod is spamming unknown field "spec.dns.spec.platform" message [#4383](https://github.com/openshift/machine-config-operator/pull/4383)
* [OCPBUGS-33643](https://issues.redhat.com/browse/OCPBUGS-33643): Don't error if the certs.d dir doesn't exist yet [#4362](https://github.com/openshift/machine-config-operator/pull/4362)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/83d66a9228fef00885826e00ad3d392c5525bfab...00b2e0b1cc83e119995bbbe2ae06665c3d1655d7)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/0d48bf342fdb75481e2746dfa1b1f51434ac3770)

* [OCPBUGS-54171](https://issues.redhat.com/browse/OCPBUGS-54171): Change rhcos release browser url [#59](https://github.com/openshift/machine-os-images/pull/59)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...0d48bf342fdb75481e2746dfa1b1f51434ac3770)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/4fa70433b2249d44cbe74c6f4ee48625babb2cf1)

* [OCPBUGS-44392](https://issues.redhat.com/browse/OCPBUGS-44392): fix cross-spawn vulnerable dependency [#278](https://github.com/openshift/monitoring-plugin/pull/278)
* NO-JIRA: [release-4.14] OU-179: Fix the root cause of externalLabels not present on alerts [#244](https://github.com/openshift/monitoring-plugin/pull/244)
* [OCPBUGS-44137](https://issues.redhat.com/browse/OCPBUGS-44137): upgrade dompurify dependency [#243](https://github.com/openshift/monitoring-plugin/pull/243)
* [OCPBUGS-43243](https://issues.redhat.com/browse/OCPBUGS-43243): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.14 [#219](https://github.com/openshift/monitoring-plugin/pull/219)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6fb208108720b9a35782f7d4f6738010ec97ba85...4fa70433b2249d44cbe74c6f4ee48625babb2cf1)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/75d37a9cae194ebba203a9e6442dc0d90c02aba4)

* [OCPBUGS-58763](https://issues.redhat.com/browse/OCPBUGS-58763): Bump github.com/golang/glog to v1.2.4 [#105](https://github.com/openshift/multus-admission-controller/pull/105)
* [OCPBUGS-42048](https://issues.redhat.com/browse/OCPBUGS-42048): Update owners [#91](https://github.com/openshift/multus-admission-controller/pull/91)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/5e74b0fa273076f4a73db00dd0081032f0325405...75d37a9cae194ebba203a9e6442dc0d90c02aba4)


### [multus-cni](https://github.com/openshift/multus-cni/tree/8e48cb09759aadd3ca21d2dcbfbdc6470440cbc2)

* [OCPBUGS-48160](https://issues.redhat.com/browse/OCPBUGS-48160): [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket [#262](https://github.com/openshift/multus-cni/pull/262)
* [OCPBUGS-35578](https://issues.redhat.com/browse/OCPBUGS-35578): Update owners file [#243](https://github.com/openshift/multus-cni/pull/243)
* [OCPBUGS-33478](https://issues.redhat.com/browse/OCPBUGS-33478): Fix CNI cache update function to prevent nil access [#232](https://github.com/openshift/multus-cni/pull/232)
* [Full changelog](https://github.com/openshift/multus-cni/compare/823eb514dda63e04bb6de25428334ef59420e316...8e48cb09759aadd3ca21d2dcbfbdc6470440cbc2)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/f670647c0cb7b6f870f8176b26f83ce6614e209e)

* Update owners (#62) [#62](https://github.com/openshift/multus-networkpolicy/pull/62)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/cd6eae10a368d23b94530cdc2a2c2f2356d8cc02...f670647c0cb7b6f870f8176b26f83ce6614e209e)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/5965fed661f71112104ca6cef22aa883f542226d)

* [OCPBUGS-42049](https://issues.redhat.com/browse/OCPBUGS-42049): [release-4.15]Update owners [#60](https://github.com/openshift/route-override-cni/pull/60)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/078aee5c466ffc79126a34b85953534c6674f28c...5965fed661f71112104ca6cef22aa883f542226d)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/f95487b0831b560de7b8d7c5d1c986338224800b)

* [OCPBUGS-55620](https://issues.redhat.com/browse/OCPBUGS-55620): Fixes leftover podref issue [#367](https://github.com/openshift/whereabouts-cni/pull/367)
* [OCPBUGS-42047](https://issues.redhat.com/browse/OCPBUGS-42047): Update owners [#311](https://github.com/openshift/whereabouts-cni/pull/311)
* [OCPBUGS-37815](https://issues.redhat.com/browse/OCPBUGS-37815), [OCPBUGS-37817](https://issues.redhat.com/browse/OCPBUGS-37817): [release-4.14] align api calls timeout and skip pods marked for deletion [#309](https://github.com/openshift/whereabouts-cni/pull/309)
* [OCPBUGS-36722](https://issues.redhat.com/browse/OCPBUGS-36722): Return previous IP allocation for add cmd [#296](https://github.com/openshift/whereabouts-cni/pull/296)
* [OCPBUGS-35263](https://issues.redhat.com/browse/OCPBUGS-35263): Use IP to identify orphaned allocation to be deleted [#289](https://github.com/openshift/whereabouts-cni/pull/289)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/13aebf7480b626f199cb5dbce3f37405dfd486e1...f95487b0831b560de7b8d7c5d1c986338224800b)


### [must-gather](https://github.com/openshift/must-gather/tree/b8585ca862a3fbe77134e5cbe6155d7c04efc269)

* [OCPBUGS-42971](https://issues.redhat.com/browse/OCPBUGS-42971): Collect etcd object count [#457](https://github.com/openshift/must-gather/pull/457)
* [OCPBUGS-48084](https://issues.redhat.com/browse/OCPBUGS-48084): Update owners [#475](https://github.com/openshift/must-gather/pull/475)
* [OCPBUGS-48058](https://issues.redhat.com/browse/OCPBUGS-48058): Support gathering IPsec data [#472](https://github.com/openshift/must-gather/pull/472)
* [OCPBUGS-43058](https://issues.redhat.com/browse/OCPBUGS-43058): [Backport 4.14] Multus is now a Pod and will be captured by normal [#451](https://github.com/openshift/must-gather/pull/451)
* [Full changelog](https://github.com/openshift/must-gather/compare/833e1de991e2319439fb48550c86d2d44d412501...b8585ca862a3fbe77134e5cbe6155d7c04efc269)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/84d7ac4e326e55fea98629d3851e98730c8d44a9)

* [OCPBUGS-58778](https://issues.redhat.com/browse/OCPBUGS-58778): Bump github.com/golang/glog to v1.2.4 (#115) [#115](https://github.com/openshift/network-metrics-daemon/pull/115)
* [OCPBUGS-60394](https://issues.redhat.com/browse/OCPBUGS-60394): Replace e2e test image (#128) [#128](https://github.com/openshift/network-metrics-daemon/pull/128)
* swtich golint install method (#127) [#127](https://github.com/openshift/network-metrics-daemon/pull/127)
* Correct 4.16 owners file (#100) [#100](https://github.com/openshift/network-metrics-daemon/pull/100)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/69d0021a4b60db315f47d83bde1c455362a03808...84d7ac4e326e55fea98629d3851e98730c8d44a9)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/8930f295dfa97cc63321c63192c93a78306fe23b)

* [OCPBUGS-23873](https://issues.redhat.com/browse/OCPBUGS-23873): fix for CVE-2023-47108 [#43](https://github.com/openshift/cloud-provider-nutanix/pull/43)
* [OCPBUGS-17304](https://issues.redhat.com/browse/OCPBUGS-17304), [OCPBUGS-20899](https://issues.redhat.com/browse/OCPBUGS-20899): bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/cloud-provider-nutanix/pull/39)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...8930f295dfa97cc63321c63192c93a78306fe23b)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/c06616804f2de1635fb34fd45fdb625fd0b1b506)

* [OCPBUGS-47265](https://issues.redhat.com/browse/OCPBUGS-47265): fixing CVE-2024-45338 [#116](https://github.com/openshift/machine-api-provider-nutanix/pull/116)
* [OCPBUGS-51852](https://issues.redhat.com/browse/OCPBUGS-51852): Fixing CVE-2025-22868 [#108](https://github.com/openshift/machine-api-provider-nutanix/pull/108)
* [OCPBUGS-17305](https://issues.redhat.com/browse/OCPBUGS-17305): bump golang.org/x/net to 0.17.0 [#85](https://github.com/openshift/machine-api-provider-nutanix/pull/85)
* [OCPBUGS-29549](https://issues.redhat.com/browse/OCPBUGS-29549): IPI install fails on Nutanix when using DHCP [#70](https://github.com/openshift/machine-api-provider-nutanix/pull/70)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6f50b1ac83fa493cdaa38fb0a05804882333172b...c06616804f2de1635fb34fd45fdb625fd0b1b506)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e1cd9d05b032fbe83df7f68c813309ad7df5d59e)

* [OCPBUGS-31982](https://issues.redhat.com/browse/OCPBUGS-31982): bump x/net to 0.24.0 [#110](https://github.com/openshift/oauth-apiserver/pull/110)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/8f5c90c74205a45787960a3bec1f12929a391471...e1cd9d05b032fbe83df7f68c813309ad7df5d59e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/056043d10e0713432e541d58a285f41829c0be6e)

* changes the owners file (#1013) [#1013](https://github.com/openshift/oc-mirror/pull/1013)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1023) [#1023](https://github.com/openshift/oc-mirror/pull/1023)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a0733c17322f96d14f9158604fe74f1bfecc4a53...056043d10e0713432e541d58a285f41829c0be6e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/16560ffb541e7ffdeb51fdb4c49015cf076aacec)

* [OCPBUGS-56613](https://issues.redhat.com/browse/OCPBUGS-56613): Fix image reference in TestImageStreamImportQuayIO [#518](https://github.com/openshift/openshift-apiserver/pull/518)
* [OCPBUGS-50477](https://issues.redhat.com/browse/OCPBUGS-50477): Pass expected type to deploymentconfig/scale object validation. [#497](https://github.com/openshift/openshift-apiserver/pull/497)
* [OCPBUGS-32445](https://issues.redhat.com/browse/OCPBUGS-32445): bump(x/net) to v0.23.0 [#429](https://github.com/openshift/openshift-apiserver/pull/429)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f41d636587a25e25f397c3af8322dd3babf2dd9a...16560ffb541e7ffdeb51fdb4c49015cf076aacec)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1c76570bb6ca3b55faa0461f085e43097cc06c50)

* [OCPBUGS-57940](https://issues.redhat.com/browse/OCPBUGS-57940): Set node-pullsecrets volume to read-only to protect image pull credentials [#398](https://github.com/openshift/openshift-controller-manager/pull/398)
* [OCPBUGS-56951](https://issues.redhat.com/browse/OCPBUGS-56951): Empty proxy variables are causing issues during the build [#386](https://github.com/openshift/openshift-controller-manager/pull/386)
* [OCPBUGS-48480](https://issues.redhat.com/browse/OCPBUGS-48480): Add team members to the OWNERS file [#360](https://github.com/openshift/openshift-controller-manager/pull/360)
* NO-JIRA: cleanup root and app OWNERS [#349](https://github.com/openshift/openshift-controller-manager/pull/349)
* [OCPBUGS-32869](https://issues.redhat.com/browse/OCPBUGS-32869): replaces deprecated square/go-jose wtih go-jose/go-jose [#342](https://github.com/openshift/openshift-controller-manager/pull/342)
* [OCPBUGS-41951](https://issues.redhat.com/browse/OCPBUGS-41951): Add adambkaplan as approver [#334](https://github.com/openshift/openshift-controller-manager/pull/334)
* [release 4.14] OCPBUGS-33288: Update opentelemetry dependency [#295](https://github.com/openshift/openshift-controller-manager/pull/295)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/27209ef14fcfca236ddba24ac7289bb3d01be8e6...1c76570bb6ca3b55faa0461f085e43097cc06c50)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/1713e9716ce9efe64bc87c3203e0f991e72132d2)

* [OCPBUGS-35337](https://issues.redhat.com/browse/OCPBUGS-35337): Correct out-of-bounds check [#173](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/173)
* [OCPBUGS-34792](https://issues.redhat.com/browse/OCPBUGS-34792): Make Cinder CSI Driver Topology feature configurable [#162](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/162)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/3a74316128f526245959b33958aac5bcb68bce99...1713e9716ce9efe64bc87c3203e0f991e72132d2)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f493a75f8bd6f62e3032fbb4f7b790bfcfd29047)

* [OCPBUGS-61469](https://issues.redhat.com/browse/OCPBUGS-61469): [release-4.14] Add NetworkPolicy as a supported kind [#1052](https://github.com/openshift/operator-framework-olm/pull/1052)
* [OCPBUGS-61390](https://issues.redhat.com/browse/OCPBUGS-61390): [4.14] e2e stability fixes [#1085](https://github.com/openshift/operator-framework-olm/pull/1085)
* [OCPBUGS-46927](https://issues.redhat.com/browse/OCPBUGS-46927), [OCPBUGS-46934](https://issues.redhat.com/browse/OCPBUGS-46934), [OCPBUGS-47314](https://issues.redhat.com/browse/OCPBUGS-47314): x/net bump to v0.34.0 [release-4.14] [#941](https://github.com/openshift/operator-framework-olm/pull/941)
* [OCPBUGS-46595](https://issues.redhat.com/browse/OCPBUGS-46595): CRD upgrade existing CR validation fix (#3442) [#921](https://github.com/openshift/operator-framework-olm/pull/921)
* [OCPBUGS-45080](https://issues.redhat.com/browse/OCPBUGS-45080): SSA for Services and ClusterRoleBindings [#905](https://github.com/openshift/operator-framework-olm/pull/905)
* [OCPBUGS-42828](https://issues.redhat.com/browse/OCPBUGS-42828): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata [#878](https://github.com/openshift/operator-framework-olm/pull/878)
* [OCPBUGS-41872](https://issues.redhat.com/browse/OCPBUGS-41872): Fix e2e flake: upgrade CRD with deprecated version [#865](https://github.com/openshift/operator-framework-olm/pull/865)
* [OCPBUGS-42150](https://issues.redhat.com/browse/OCPBUGS-42150): (fix) registry pods do not come up again after node failure (#3366) [#872](https://github.com/openshift/operator-framework-olm/pull/872)
* [OCPBUGS-42017](https://issues.redhat.com/browse/OCPBUGS-42017): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#869](https://github.com/openshift/operator-framework-olm/pull/869)
* [OCPBUGS-38544](https://issues.redhat.com/browse/OCPBUGS-38544): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#842](https://github.com/openshift/operator-framework-olm/pull/842)
* [OCPBUGS-36949](https://issues.redhat.com/browse/OCPBUGS-36949): [CARRY] perform operator apiService certificate validity checks directly [#821](https://github.com/openshift/operator-framework-olm/pull/821)
* [OCPBUGS-37016](https://issues.redhat.com/browse/OCPBUGS-37016): Bump github.com/containers/image/v5 [#824](https://github.com/openshift/operator-framework-olm/pull/824)
* [OCPBUGS-36452](https://issues.redhat.com/browse/OCPBUGS-36452): Can't install operator on 4.15 after uninstalling it on a prior version [#811](https://github.com/openshift/operator-framework-olm/pull/811)
* [OCPBUGS-31969](https://issues.redhat.com/browse/OCPBUGS-31969), [OCPBUGS-31970](https://issues.redhat.com/browse/OCPBUGS-31970): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#787](https://github.com/openshift/operator-framework-olm/pull/787)
* [OCPBUGS-35230](https://issues.redhat.com/browse/OCPBUGS-35230): Unblock CI [#771](https://github.com/openshift/operator-framework-olm/pull/771)
* [OCPBUGS-33356](https://issues.redhat.com/browse/OCPBUGS-33356): UPSTREAM: <carry>: bump go-jose [#743](https://github.com/openshift/operator-framework-olm/pull/743)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dcfcfb3b2225bc8e59588e8df86700e3349697c4...f493a75f8bd6f62e3032fbb4f7b790bfcfd29047)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/63ccdc559d1944457375d190b4a209ce0c85d27c)

* [OCPBUGS-62222](https://issues.redhat.com/browse/OCPBUGS-62222): Remove Expect func so that the test case can use the retry logic [#673](https://github.com/operator-framework/operator-marketplace/pull/673)
* [OCPBUGS-49427](https://issues.redhat.com/browse/OCPBUGS-49427): Upgrade golang.org/x/net [release-4.14] [#589](https://github.com/operator-framework/operator-marketplace/pull/589)
* [OCPBUGS-32067](https://issues.redhat.com/browse/OCPBUGS-32067): update golang.org/x/net for CVE-2023-45288 [#565](https://github.com/operator-framework/operator-marketplace/pull/565)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a367cea6e2371a0db2957403de40958852f817b3...63ccdc559d1944457375d190b4a209ce0c85d27c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/beb3430c5fc2b3c37eeb90b816dd925ed4065fe6)

* [OCPBUGS-59872](https://issues.redhat.com/browse/OCPBUGS-59872): Dockerfile: Remove ovs version pinning [#2695](https://github.com/openshift/ovn-kubernetes/pull/2695)
* [OCPBUGS-57102](https://issues.redhat.com/browse/OCPBUGS-57102): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 [#2590](https://github.com/openshift/ovn-kubernetes/pull/2590)
* [OCPBUGS-56420](https://issues.redhat.com/browse/OCPBUGS-56420): Update to FDP25.A.1 24.03.5-40. [#2574](https://github.com/openshift/ovn-kubernetes/pull/2574)
* [OCPBUGS-48522](https://issues.redhat.com/browse/OCPBUGS-48522): Let OVN-northd bind remote ports [#2418](https://github.com/openshift/ovn-kubernetes/pull/2418)
* [OCPBUGS-54732](https://issues.redhat.com/browse/OCPBUGS-54732): Dockerfile.base: bump OVS version to 3.3 [#2511](https://github.com/openshift/ovn-kubernetes/pull/2511)
* [OCPBUGS-50584](https://issues.redhat.com/browse/OCPBUGS-50584): Bump OVN to 23.09.6-12 to consume fix for FDP-905 [#2455](https://github.com/openshift/ovn-kubernetes/pull/2455)
* [OCPBUGS-45096](https://issues.redhat.com/browse/OCPBUGS-45096): pin libreswan to 4.6-3.el9_0.3 [#2368](https://github.com/openshift/ovn-kubernetes/pull/2368)
* [OCPBUGS-44784](https://issues.redhat.com/browse/OCPBUGS-44784): Bump ovs to 3.1.0-137 [#2360](https://github.com/openshift/ovn-kubernetes/pull/2360)
* [OCPBUGS-44793](https://issues.redhat.com/browse/OCPBUGS-44793): Delete EgressIP LRP stale nexthops when node is not found [#2361](https://github.com/openshift/ovn-kubernetes/pull/2361)
* [OCPBUGS-42944](https://issues.redhat.com/browse/OCPBUGS-42944): Fix egress gateway pod cleanup for remote zone pods. [#2356](https://github.com/openshift/ovn-kubernetes/pull/2356)
* [OCPBUGS-44379](https://issues.redhat.com/browse/OCPBUGS-44379): Revert "Pin libreswan to the known working version 4.5" [#2344](https://github.com/openshift/ovn-kubernetes/pull/2344)
* [OCPBUGS-42952](https://issues.redhat.com/browse/OCPBUGS-42952): pin libreswan to the known working version 4.5 [#2323](https://github.com/openshift/ovn-kubernetes/pull/2323)
* [OCPBUGS-42986](https://issues.redhat.com/browse/OCPBUGS-42986): Add subnet overlap check for transit switch subnet [#2317](https://github.com/openshift/ovn-kubernetes/pull/2317)
* [OCPBUGS-38263](https://issues.redhat.com/browse/OCPBUGS-38263): [release-4.14] Bump OVSDBTimeout and make it configurable [#2275](https://github.com/openshift/ovn-kubernetes/pull/2275)
* [OCPBUGS-38073](https://issues.redhat.com/browse/OCPBUGS-38073): Fix registering northd metrics on appropriate nodes [#2249](https://github.com/openshift/ovn-kubernetes/pull/2249)
* [OCPBUGS-37197](https://issues.redhat.com/browse/OCPBUGS-37197): [release-4.14] ovspinning: Set affinity of each thread [#2236](https://github.com/openshift/ovn-kubernetes/pull/2236)
* [OCPBUGS-36253](https://issues.redhat.com/browse/OCPBUGS-36253): EgressIP: Reload certificates for the grpc heatlhcheck server [#2213](https://github.com/openshift/ovn-kubernetes/pull/2213)
* [OCPBUGS-36554](https://issues.redhat.com/browse/OCPBUGS-36554): Handle IP fragments in SGW mode [#2219](https://github.com/openshift/ovn-kubernetes/pull/2219)
* [OCPBUGS-36703](https://issues.redhat.com/browse/OCPBUGS-36703): Bump ovn to 23.09.4-16 [#2222](https://github.com/openshift/ovn-kubernetes/pull/2222)
* [OCPBUGS-35009](https://issues.redhat.com/browse/OCPBUGS-35009): ipv6+all protocols conntrack flush [#2199](https://github.com/openshift/ovn-kubernetes/pull/2199)
* [OCPBUGS-34570](https://issues.redhat.com/browse/OCPBUGS-34570): Fix EIP GARP config overwritten by gateway update [#2188](https://github.com/openshift/ovn-kubernetes/pull/2188)
* [OCPBUGS-33721](https://issues.redhat.com/browse/OCPBUGS-33721): use a forked version of j-keck/arping that fixes a threading issue [#2170](https://github.com/openshift/ovn-kubernetes/pull/2170)
* [OCPBUGS-34076](https://issues.redhat.com/browse/OCPBUGS-34076): Reuse node-subnet from cache if exists [#2177](https://github.com/openshift/ovn-kubernetes/pull/2177)
* [OCPBUGS-34405](https://issues.redhat.com/browse/OCPBUGS-34405): [release-4.14] dns: fix deadlock in case of error [#2183](https://github.com/openshift/ovn-kubernetes/pull/2183)
* [OCPBUGS-33469](https://issues.redhat.com/browse/OCPBUGS-33469): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2160](https://github.com/openshift/ovn-kubernetes/pull/2160)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4f1ff16966404db73da7a64c5e0e535847c5dbbe...beb3430c5fc2b3c37eeb90b816dd925ed4065fe6)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/988f7109b4493f62cb13187bc190eae60c77d1e7)

* [OCPBUGS-36095](https://issues.redhat.com/browse/OCPBUGS-36095): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#90](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/90)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/ceacf8b4308cf0c00c18952f7dbcdc112efdbb46...988f7109b4493f62cb13187bc190eae60c77d1e7)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/19cf1d3f4985a22e9777aad16531a382c4feed45)

* [OCPBUGS-36105](https://issues.redhat.com/browse/OCPBUGS-36105): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 [#75](https://github.com/openshift/cloud-provider-powervs/pull/75)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/32c1028ecf58851eb1270f47351a4423ba081c3b...19cf1d3f4985a22e9777aad16531a382c4feed45)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ea93a47d3af967bfe0a738f29336de51f457a143)

* [OCPBUGS-54754](https://issues.redhat.com/browse/OCPBUGS-54754): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 [#116](https://github.com/openshift/machine-api-provider-powervs/pull/116)
* [OCPBUGS-41978](https://issues.redhat.com/browse/OCPBUGS-41978): Update go.mod to fix CVE - 4.14 [#86](https://github.com/openshift/machine-api-provider-powervs/pull/86)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/1a957dae3a7c9c36752b4869854a90e6b88eaf7e...ea93a47d3af967bfe0a738f29336de51f457a143)


### [prometheus](https://github.com/openshift/prometheus/tree/3aff0d1e4f08b135b958494c14f7c3d914dfe005)

* [OCPBUGS-43670](https://issues.redhat.com/browse/OCPBUGS-43670): fix(discovery): Handle cache.DeletedFinalStateUnknown … [#239](https://github.com/openshift/prometheus/pull/239)
* [Full changelog](https://github.com/openshift/prometheus/compare/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd...3aff0d1e4f08b135b958494c14f7c3d914dfe005)


### [telemeter](https://github.com/openshift/telemeter/tree/1f7268163afc74f9f3c1ff89d8c0149760694e6c)

* [OCPBUGS-34830](https://issues.redhat.com/browse/OCPBUGS-34830): fix issuer check during JWT authentication 4.14 [#539](https://github.com/openshift/telemeter/pull/539)
* [OCPBUGS-32888](https://issues.redhat.com/browse/OCPBUGS-32888): update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 [#535](https://github.com/openshift/telemeter/pull/535)
* [Full changelog](https://github.com/openshift/telemeter/compare/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9...1f7268163afc74f9f3c1ff89d8c0149760694e6c)


### [tests](https://github.com/openshift/origin/tree/5c351387d1cdcafa68f792d4d9f529c651d4f573)

* [OCPBUGS-63674](https://issues.redhat.com/browse/OCPBUGS-63674): Fix regex parser [#30391](https://github.com/openshift/origin/pull/30391)
* [OCPBUGS-61233](https://issues.redhat.com/browse/OCPBUGS-61233): images/tests: Remove rteval [#30208](https://github.com/openshift/origin/pull/30208)
* [OCPBUGS-55747](https://issues.redhat.com/browse/OCPBUGS-55747): [build] Ensure Git Clone Does Not Run Privileged [#29758](https://github.com/openshift/origin/pull/29758)
* [OCPBUGS-54770](https://issues.redhat.com/browse/OCPBUGS-54770): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29665](https://github.com/openshift/origin/pull/29665)
* [OCPBUGS-52583](https://issues.redhat.com/browse/OCPBUGS-52583): Use payload pullspec for image info test [#29591](https://github.com/openshift/origin/pull/29591)
* [OCPBUGS-51363](https://issues.redhat.com/browse/OCPBUGS-51363): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29567](https://github.com/openshift/origin/pull/29567)
* [OCPBUGS-51044](https://issues.redhat.com/browse/OCPBUGS-51044): Add/remove team members to the OWNERS file for Builds [#29554](https://github.com/openshift/origin/pull/29554)
* [OCPBUGS-44107](https://issues.redhat.com/browse/OCPBUGS-44107): Adjust createDNSPod() to support hypershift dual-stack test [#29256](https://github.com/openshift/origin/pull/29256)
* [OCPBUGS-39137](https://issues.redhat.com/browse/OCPBUGS-39137): Bump timeout for the pod-network-service endpoints check [#29062](https://github.com/openshift/origin/pull/29062)
* [OCPBUGS-38365](https://issues.redhat.com/browse/OCPBUGS-38365): add Proxy config [#28998](https://github.com/openshift/origin/pull/28998)
* [OCPBUGS-36800](https://issues.redhat.com/browse/OCPBUGS-36800): Removes dependency on samples operator images [#28952](https://github.com/openshift/origin/pull/28952)
* #28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28792](https://github.com/openshift/origin/pull/28792)
* #28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary [#28899](https://github.com/openshift/origin/pull/28899)
* [OCPBUGS-36464](https://issues.redhat.com/browse/OCPBUGS-36464): test/extended: skip etcd leader change check on hypershift [#28921](https://github.com/openshift/origin/pull/28921)
* [OCPBUGS-35475](https://issues.redhat.com/browse/OCPBUGS-35475): Use centos7 tag instead of latest for cmd images tests [#28881](https://github.com/openshift/origin/pull/28881)
* [OCPBUGS-33417](https://issues.redhat.com/browse/OCPBUGS-33417): Provide SCC access via RBAC [#28806](https://github.com/openshift/origin/pull/28806)
* [Full changelog](https://github.com/openshift/origin/compare/4687f49aea46ef0f4284051164af0ddecfe98d1a...5c351387d1cdcafa68f792d4d9f529c651d4f573)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/efaed5cdb8c7d4b0b7fe38e203c545278ccfab4d)

* [OCPBUGS-23889](https://issues.redhat.com/browse/OCPBUGS-23889): Bump otelgrpc to v0.49.0 [#70](https://github.com/openshift/cloud-provider-vsphere/pull/70)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b04567f77273f6c338ece9fda29c0a65297130d5...efaed5cdb8c7d4b0b7fe38e203c545278ccfab4d)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/b6a13f92b85c8616f2720bb5c640bea1c54d7898)

* [OCPBUGS-61655](https://issues.redhat.com/browse/OCPBUGS-61655): Fix unit tests [#74](https://github.com/openshift/cluster-api-provider-vsphere/pull/74)
* [OCPBUGS-35136](https://issues.redhat.com/browse/OCPBUGS-35136): Bump x/crypto to v0.24.0 [#46](https://github.com/openshift/cluster-api-provider-vsphere/pull/46)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/72e998c300e17a7ba81d4a5a7624d69b0a104603...b6a13f92b85c8616f2720bb5c640bea1c54d7898)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/b5d0e7ddd2262c616147e5ce16220dae2a4de59d)

* [OCPBUGS-51045](https://issues.redhat.com/browse/OCPBUGS-51045): Prevent node cache update during attach & detach [#139](https://github.com/openshift/vmware-vsphere-csi-driver/pull/139)
* [OCPBUGS-35138](https://issues.redhat.com/browse/OCPBUGS-35138): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#123](https://github.com/openshift/vmware-vsphere-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4598e1709f3e28f2fcd5c890df33e16ff81b7c8f...b5d0e7ddd2262c616147e5ce16220dae2a4de59d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/664a9e321965e1a6c98cf2551506a8b10a6cf2f6)

* [OCPBUGS-67891](https://issues.redhat.com/browse/OCPBUGS-67891): bump github.com/sirupsen/logrus to v1.9.3 [#202](https://github.com/openshift/vsphere-problem-detector/pull/202)
* [OCPBUGS-38347](https://issues.redhat.com/browse/OCPBUGS-38347): Drop event when CheckDefaultDatastore fails [#171](https://github.com/openshift/vsphere-problem-detector/pull/171)
* [OCPBUGS-35913](https://issues.redhat.com/browse/OCPBUGS-35913): Fix missing failure-domains [#162](https://github.com/openshift/vsphere-problem-detector/pull/162)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/ece171d2d5b5fa417d1aece9aa80714841c35cec...664a9e321965e1a6c98cf2551506a8b10a6cf2f6)