# 4.15.37

Created: 2024-10-25 15:35:47 +0000 UTC

Image Digest: `sha256:da7da5023f153df1417ead29ed0a6e0998c3016a4173ca1956cf05da918b6ccb`


## Changes from 4.14.39

### Components

* Kubernetes upgraded from 1.27.16 to 1.28.14
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202410112148-0 to 415.92.202410232038-0


### New images

* [cluster-config-api](https://github.com/openshift/api) git [0a58f8c3](https://github.com/openshift/api/commit/0a58f8c30a8c309baaa4aecd05580039b4d3888b) `sha256:76ba6c68d8196b64df4797624cec73cdedfcdc4bdce485667caac91bf6043dd8`
* [installer-altinfra](https://github.com/openshift/installer) git [3bab4e95](https://github.com/openshift/installer/commit/3bab4e95dfd7faa115e58597909fce56b0c6b759) `sha256:bcf01f41ecba525b693a72965b292353ae975030df308470bdf55590a3295505`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:b704737cde303ce05b66b32e9015cdbb680b966ddc7c1ea1fc925c2a65f7bb49`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:0bc38f73612548070e15735d2216c1cff9b3c3370c2696d31916ceb9448391cf`


### Removed images

* kuryr-cni
* kuryr-controller


### Rebuilt images without code change

* machine-os-content `sha256:3f58d9a02b1af6172dc495d7a3d5427d3067119a3014d048d7c0d58b33e38462`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:2fb2883ab2eff8c41d8b8c9193a8b3c8924baae87b9288a8aa93b3bf9fec480c`
* rhel-coreos `sha256:28af50dc8deffa190bbb761e696220530000891f0abd9b4b430e0181bcb367b4`
* rhel-coreos-extensions `sha256:47ae89a5cfc964a6cd33cccc12a1b27616e7809f012e71275f11d37be0ddf174`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/213c57977cc8fe0d49464c80f7b6b52b65206a1e)

* [OCPBUGS-43022](https://issues.redhat.com/browse/OCPBUGS-43022): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) [#6894](https://github.com/openshift/assisted-service/pull/6894)
* [OCPBUGS-42571](https://issues.redhat.com/browse/OCPBUGS-42571): Libraries bump to mitigate CVE-2024-27289 (#6834) [#6834](https://github.com/openshift/assisted-service/pull/6834)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) [#6753](https://github.com/openshift/assisted-service/pull/6753)
* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6381) [#6381](https://github.com/openshift/assisted-service/pull/6381)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) [#6245](https://github.com/openshift/assisted-service/pull/6245)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) [#6217](https://github.com/openshift/assisted-service/pull/6217)
* 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) [#6211](https://github.com/openshift/assisted-service/pull/6211)
* Revert "MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)" (#6208) [#6194](https://github.com/openshift/assisted-service/pull/6194)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) [#6194](https://github.com/openshift/assisted-service/pull/6194)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6191) [#6191](https://github.com/openshift/assisted-service/pull/6191)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) [#6137](https://github.com/openshift/assisted-service/pull/6137)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) [#6135](https://github.com/openshift/assisted-service/pull/6135)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5876) [#5876](https://github.com/openshift/assisted-service/pull/5876)
* NO-ISSUE: Bump OCP versions: 4.12 (#5783) [#5783](https://github.com/openshift/assisted-service/pull/5783)
* [MGMT-16289](https://issues.redhat.com/browse/MGMT-16289): Add configuration variable and cluster attribute defining if soft timeouts feature is enabled (#5740) [#5740](https://github.com/openshift/assisted-service/pull/5740)
* NO-ISSUE: Bump OCP versions: 4.14, 4.11, 4.13, 4.15 (#5779) [#5779](https://github.com/openshift/assisted-service/pull/5779)
* fix: allow LVMS for MultiNode >=4.15.0 (#5757) [#5757](https://github.com/openshift/assisted-service/pull/5757)
* Update RHTAP references (#5776) [#5776](https://github.com/openshift/assisted-service/pull/5776)
* NO-ISSUE: add build tags option to enable FIPS build (#5768) [#5768](https://github.com/openshift/assisted-service/pull/5768)
* Update RHTAP references (#5774) [#5774](https://github.com/openshift/assisted-service/pull/5774)
* NO-ISSUE: update OS_IMAGES filter to 4.11 (#5773) [#5773](https://github.com/openshift/assisted-service/pull/5773)
* [MGMT-16303](https://issues.redhat.com/browse/MGMT-16303): Disable skip MCO reboot for architecture s390x (#5765) [#5765](https://github.com/openshift/assisted-service/pull/5765)
* Propagate OS_IMAGES var in deploy operator (#5762) [#5762](https://github.com/openshift/assisted-service/pull/5762)
* Update RHTAP references (#5767) [#5767](https://github.com/openshift/assisted-service/pull/5767)
* [MGMT-15425](https://issues.redhat.com/browse/MGMT-15425): Change chosen mce release to match openshift version (#5716) [#5716](https://github.com/openshift/assisted-service/pull/5716)
* [MGMT-14605](https://issues.redhat.com/browse/MGMT-14605): Gather more data for hypershift tests (#5344) [#5344](https://github.com/openshift/assisted-service/pull/5344)
* [MGMT-16320](https://issues.redhat.com/browse/MGMT-16320): Agent should connect to iBFT iSCSI targets (#5753) [#5753](https://github.com/openshift/assisted-service/pull/5753)
* MGMT-16312 fix update host ignition for unbound host (#5751) [#5751](https://github.com/openshift/assisted-service/pull/5751)
* NO-ISSUE: Inventory code cleanup - unused params (#5755) [#5755](https://github.com/openshift/assisted-service/pull/5755)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect ICSP for CAPI CI (#5747) [#5747](https://github.com/openshift/assisted-service/pull/5747)
* [MGMT-15690](https://issues.redhat.com/browse/MGMT-15690): Add support for external platform (#5738) [#5738](https://github.com/openshift/assisted-service/pull/5738)
* [MGMT-16235](https://issues.redhat.com/browse/MGMT-16235): Ensure that agent controller will watch for changes to ignition endpoint token. (#5736) [#5736](https://github.com/openshift/assisted-service/pull/5736)
* [MGMT-13461](https://issues.redhat.com/browse/MGMT-13461): Fix Tang validation when day2 host join an imported cluster (#5700) [#5700](https://github.com/openshift/assisted-service/pull/5700)
* [MGMT-15972](https://issues.redhat.com/browse/MGMT-15972): Remove Swagger definition for api_vip and ingress_vip (#5734) [#5734](https://github.com/openshift/assisted-service/pull/5734)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect check for CAPI image in ci (#5741) [#5741](https://github.com/openshift/assisted-service/pull/5741)
* Update RHTAP references (#5733) [#5733](https://github.com/openshift/assisted-service/pull/5733)
* [MGMT-16273](https://issues.redhat.com/browse/MGMT-16273): Allow installing on iSCSI disks on OCI (#5728) [#5728](https://github.com/openshift/assisted-service/pull/5728)
* [MGMT-16291](https://issues.redhat.com/browse/MGMT-16291): revert default faulty OCP images (#5737) [#5737](https://github.com/openshift/assisted-service/pull/5737)
* [MGMT-14810](https://issues.redhat.com/browse/MGMT-14810): Remove API and Ingress VIP (#5501) [#5501](https://github.com/openshift/assisted-service/pull/5501)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Missed service-cidr for capi ipv6 CI test (#5721) [#5721](https://github.com/openshift/assisted-service/pull/5721)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) [#5726](https://github.com/openshift/assisted-service/pull/5726)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) [#5722](https://github.com/openshift/assisted-service/pull/5722)
* Update baremetal operator (#5698) [#5698](https://github.com/openshift/assisted-service/pull/5698)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim agent daemonset name (#5699) [#5699](https://github.com/openshift/assisted-service/pull/5699)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Minor fixes for disconnected CAPI CI (#5713) [#5713](https://github.com/openshift/assisted-service/pull/5713)
* [AGENT-740](https://issues.redhat.com/browse/AGENT-740): Include baremetal host BMC fields in install-config override (#5675) [#5675](https://github.com/openshift/assisted-service/pull/5675)
* NO-ISSUE: adding me to owners (#5709) [#5709](https://github.com/openshift/assisted-service/pull/5709)
* NO-ISSUE: Cluster code cleanups (#5715) [#5715](https://github.com/openshift/assisted-service/pull/5715)
* NO-ISSUE: Bump OCP versions: 4.12 (#5714) [#5714](https://github.com/openshift/assisted-service/pull/5714)
* [MGMT-16236](https://issues.redhat.com/browse/MGMT-16236): remove elastic APM (#5702) [#5702](https://github.com/openshift/assisted-service/pull/5702)
* NO-ISSUE: Upgrade debug image to latest delve (#5711) [#5711](https://github.com/openshift/assisted-service/pull/5711)
* Update RHTAP references (#5688) [#5688](https://github.com/openshift/assisted-service/pull/5688)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Setup CI for disconnected ipv6 CAPI (#5536) [#5536](https://github.com/openshift/assisted-service/pull/5536)
* NO-ISSUE: Inventory code cleanups (#5695) [#5695](https://github.com/openshift/assisted-service/pull/5695)
* NO-ISSUE: dependabot optimize (#5697) [#5697](https://github.com/openshift/assisted-service/pull/5697)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) [#5701](https://github.com/openshift/assisted-service/pull/5701)
* NO-ISSUE: Remove unused functions (#5696) [#5696](https://github.com/openshift/assisted-service/pull/5696)
* NO-ISSUE: BMH and Agent controllers code cleanup (#5693) [#5693](https://github.com/openshift/assisted-service/pull/5693)
* NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) [#5694](https://github.com/openshift/assisted-service/pull/5694)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) [#5604](https://github.com/openshift/assisted-service/pull/5604)
* NO-ISSUE: ClusterDeployments controller code cleanup (#5689) [#5689](https://github.com/openshift/assisted-service/pull/5689)
* NO-ISSUE: InfraEnv controller code cleanup (#5690) [#5690](https://github.com/openshift/assisted-service/pull/5690)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Append kargs to installer for s390x (#5665) [#5665](https://github.com/openshift/assisted-service/pull/5665)
* Add missing scheme to `ServiceMonitor` (#5672) [#5672](https://github.com/openshift/assisted-service/pull/5672)
* Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) [#5495](https://github.com/openshift/assisted-service/pull/5495)
* [MGMT-15971](https://issues.redhat.com/browse/MGMT-15971): Create ManagedCluster CR so that the hub will show up as "Ready" in MCE (#5575) [#5575](https://github.com/openshift/assisted-service/pull/5575)
* Update RHTAP references (#5682) [#5682](https://github.com/openshift/assisted-service/pull/5682)
* NO-JIRA:  Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) [#5680](https://github.com/openshift/assisted-service/pull/5680)
* NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) [#5681](https://github.com/openshift/assisted-service/pull/5681)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS OPTIONS for s3 presigned url (#5674) [#5674](https://github.com/openshift/assisted-service/pull/5674)
* Update RHTAP references (#5654) [#5654](https://github.com/openshift/assisted-service/pull/5654)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) [#5671](https://github.com/openshift/assisted-service/pull/5671)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) [#5658](https://github.com/openshift/assisted-service/pull/5658)
* [MGMT-16077](https://issues.redhat.com/browse/MGMT-16077): Add 4.15 release and OS images (#5673) [#5673](https://github.com/openshift/assisted-service/pull/5673)
* [AGENT-723](https://issues.redhat.com/browse/AGENT-723): Use json.Marshal to correctly process vSphere credentials (#5592) [#5592](https://github.com/openshift/assisted-service/pull/5592)
* NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) [#5670](https://github.com/openshift/assisted-service/pull/5670)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger reboots for node event when day2 node moves to done (#5648) [#5648](https://github.com/openshift/assisted-service/pull/5648)
* NO-JIRA:  Allow the command in wait_for_cmd_amount to receive arguments (#5668) [#5668](https://github.com/openshift/assisted-service/pull/5668)
* [MGMT-16164](https://issues.redhat.com/browse/MGMT-16164): Install 4.14 redhat-operators catalog for LSO (#5669) [#5669](https://github.com/openshift/assisted-service/pull/5669)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Ensure that hosts emit event showing why preparation failed. (#5521) [#5521](https://github.com/openshift/assisted-service/pull/5521)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Add a condition to show the last preparation failure (#5524) [#5524](https://github.com/openshift/assisted-service/pull/5524)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): change default envoy sidecar timeout value (#5667) [#5667](https://github.com/openshift/assisted-service/pull/5667)
* [MGMT-16114](https://issues.redhat.com/browse/MGMT-16114): Update 4.14 release image to use GA version (#5651) [#5651](https://github.com/openshift/assisted-service/pull/5651)
* [MGMT-16052](https://issues.redhat.com/browse/MGMT-16052): Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) [#5659](https://github.com/openshift/assisted-service/pull/5659)
* Bump OCP versions: 4.14, 4.12 (#5661) [#5661](https://github.com/openshift/assisted-service/pull/5661)
* [MGMT-15405](https://issues.redhat.com/browse/MGMT-15405): Add a URL to infraenv to show download link from static network config (#5638) [#5638](https://github.com/openshift/assisted-service/pull/5638)
* [OCPBUGS-19823](https://issues.redhat.com/browse/OCPBUGS-19823): Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) [#5565](https://github.com/openshift/assisted-service/pull/5565)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Add the boot command line to the host inventory (#5649) [#5649](https://github.com/openshift/assisted-service/pull/5649)
* [MGMT-15680](https://issues.redhat.com/browse/MGMT-15680): Adds InfraEnv ctrl watch for pull secret changes (#5589) [#5589](https://github.com/openshift/assisted-service/pull/5589)
* NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) [#5653](https://github.com/openshift/assisted-service/pull/5653)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) [#5613](https://github.com/openshift/assisted-service/pull/5613)
* NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) [#5647](https://github.com/openshift/assisted-service/pull/5647)
* Update RHTAP references (#5637) [#5637](https://github.com/openshift/assisted-service/pull/5637)
* Bump OCP versions: 4.13 (#5645) [#5645](https://github.com/openshift/assisted-service/pull/5645)
* NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) [#5644](https://github.com/openshift/assisted-service/pull/5644)
* [MGMT-15683](https://issues.redhat.com/browse/MGMT-15683): Ensure that manifest filename has valid name part (#5635) [#5635](https://github.com/openshift/assisted-service/pull/5635)
* NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) [#5641](https://github.com/openshift/assisted-service/pull/5641)
* NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) [#5619](https://github.com/openshift/assisted-service/pull/5619)
* Update RHTAP references (#5624) [#5624](https://github.com/openshift/assisted-service/pull/5624)
* [MGMT-15684](https://issues.redhat.com/browse/MGMT-15684): Return appropriate HTTP error code for invalid manifest file path (#5634) [#5634](https://github.com/openshift/assisted-service/pull/5634)
* Bump OCP versions: 4.14 (#5633) [#5633](https://github.com/openshift/assisted-service/pull/5633)
* NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) [#5632](https://github.com/openshift/assisted-service/pull/5632)
* [MGMT-16037](https://issues.redhat.com/browse/MGMT-16037): fix messaging errors on big clusters (#5628) [#5628](https://github.com/openshift/assisted-service/pull/5628)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#5616) [#5616](https://github.com/openshift/assisted-service/pull/5616)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) [#5622](https://github.com/openshift/assisted-service/pull/5622)
* Revert "NO-ISSUE: use kubectl 1.28.2 (#5572)" (#5618) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Bump OCP versions: 4.12 (#5615) [#5615](https://github.com/openshift/assisted-service/pull/5615)
* [MGMT-16045](https://issues.redhat.com/browse/MGMT-16045): mitigate CVE-2023-44487 (#5614) [#5614](https://github.com/openshift/assisted-service/pull/5614)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Add event that shows the number of reboots for a node before completing installation (#5591) [#5591](https://github.com/openshift/assisted-service/pull/5591)
* Add skopeo to OCP build (#5558) [#5558](https://github.com/openshift/assisted-service/pull/5558)
* NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) [#5601](https://github.com/openshift/assisted-service/pull/5601)
* NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) [#5600](https://github.com/openshift/assisted-service/pull/5600)
* NO-ISSUE: vendor current master (#5594) [#5594](https://github.com/openshift/assisted-service/pull/5594)
* NO-ISSUE: fixing dependabot issues (#5595) [#5595](https://github.com/openshift/assisted-service/pull/5595)
* Bump OCP versions: 4.13, 4.14 (#5593) [#5593](https://github.com/openshift/assisted-service/pull/5593)
* Update RHTAP references (#5590) [#5590](https://github.com/openshift/assisted-service/pull/5590)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim daemonset name (#5579) [#5579](https://github.com/openshift/assisted-service/pull/5579)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5586) [#5586](https://github.com/openshift/assisted-service/pull/5586)
* [MGMT-13198](https://issues.redhat.com/browse/MGMT-13198): Add API endpoint to create assisted installer event (#5578) [#5578](https://github.com/openshift/assisted-service/pull/5578)
* [MGMT-15980](https://issues.redhat.com/browse/MGMT-15980): added missing Create op to infraenvs Webhook (#5569) [#5569](https://github.com/openshift/assisted-service/pull/5569)
* Update RHTAP references (#5573) [#5573](https://github.com/openshift/assisted-service/pull/5573)
* NO-ISSUE: use kubectl 1.28.2 (#5572) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Update RHTAP references (#5570) [#5570](https://github.com/openshift/assisted-service/pull/5570)
* [MGMT-15949](https://issues.redhat.com/browse/MGMT-15949): fix missing ImageSetRef validation (#5552) [#5552](https://github.com/openshift/assisted-service/pull/5552)
* Revert "NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)" (#5566) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) [#5549](https://github.com/openshift/assisted-service/pull/5549)
* NO-ISSUE: Fix console output in ZTP jobs (#5562) [#5562](https://github.com/openshift/assisted-service/pull/5562)
* NO-ISSUE: add console output for ztp (#5550) [#5550](https://github.com/openshift/assisted-service/pull/5550)
* Bump OCP versions: 4.14 (#5559) [#5559](https://github.com/openshift/assisted-service/pull/5559)
* [MGMT-15796](https://issues.redhat.com/browse/MGMT-15796): set CloudControllerManager to External for OCI (#5548) [#5548](https://github.com/openshift/assisted-service/pull/5548)
* NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* Bump OCP versions: 4.12, 4.14, 4.13 (#5546) [#5546](https://github.com/openshift/assisted-service/pull/5546)
* Update RHTAP references (#5539) [#5539](https://github.com/openshift/assisted-service/pull/5539)
* [MGMT-15950](https://issues.redhat.com/browse/MGMT-15950): Fix DNS wilcard domain validation (#5544) [#5544](https://github.com/openshift/assisted-service/pull/5544)
* WIP: Add assisted images service short URL routes (#5543) [#5543](https://github.com/openshift/assisted-service/pull/5543)
* Update RHTAP references (#5538) [#5538](https://github.com/openshift/assisted-service/pull/5538)
* [MGMT-15738](https://issues.redhat.com/browse/MGMT-15738): Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) [#5477](https://github.com/openshift/assisted-service/pull/5477)
* Bump OCP versions: 4.13, 4.11 (#5537) [#5537](https://github.com/openshift/assisted-service/pull/5537)
* [MGMT-14409](https://issues.redhat.com/browse/MGMT-14409): generate short image URL (#5523) [#5523](https://github.com/openshift/assisted-service/pull/5523)
* [MGMT-15762](https://issues.redhat.com/browse/MGMT-15762): fix odf validation failing where is one small disk (#5529) [#5529](https://github.com/openshift/assisted-service/pull/5529)
* Update RHTAP references (#5520) [#5520](https://github.com/openshift/assisted-service/pull/5520)
* Bump OCP versions: 4.12, 4.14 (#5528) [#5528](https://github.com/openshift/assisted-service/pull/5528)
* NO-ISSUE: fail upload if response is not 2XX (#5522) [#5522](https://github.com/openshift/assisted-service/pull/5522)
* Bump OCP versions: 4.14 (#5525) [#5525](https://github.com/openshift/assisted-service/pull/5525)
* NO-ISSUE: fix docker-ce-cli package missing (#5499) [#5499](https://github.com/openshift/assisted-service/pull/5499)
* NO-ISSUE: Add versions file to onprem event upload (#5514) [#5514](https://github.com/openshift/assisted-service/pull/5514)
* [MGMT-15699](https://issues.redhat.com/browse/MGMT-15699): Service changes for avoiding MCO reboot (#5453) [#5453](https://github.com/openshift/assisted-service/pull/5453)
* Update RHTAP references (#5517) [#5517](https://github.com/openshift/assisted-service/pull/5517)
* [MGMT-15598](https://issues.redhat.com/browse/MGMT-15598): Add a parameter to manifest list to disable filter (#5498) [#5498](https://github.com/openshift/assisted-service/pull/5498)
* Bump OCP versions: 4.12 (#5515) [#5515](https://github.com/openshift/assisted-service/pull/5515)
* Update RHTAP references (#5513) [#5513](https://github.com/openshift/assisted-service/pull/5513)
* Bump OCP versions: 4.14 (#5512) [#5512](https://github.com/openshift/assisted-service/pull/5512)
* NO-ISSUE: Fix email domain for event uploader (#5511) [#5511](https://github.com/openshift/assisted-service/pull/5511)
* Update RHTAP references (#5510) [#5510](https://github.com/openshift/assisted-service/pull/5510)
* Update RHTAP references (#5508) [#5508](https://github.com/openshift/assisted-service/pull/5508)
* Bump OCP versions: 4.12, 4.13 (#5506) [#5506](https://github.com/openshift/assisted-service/pull/5506)
* [MGMT-15808](https://issues.redhat.com/browse/MGMT-15808): change base image to stream9 (#5497) [#5497](https://github.com/openshift/assisted-service/pull/5497)
* [MGMT-15559](https://issues.redhat.com/browse/MGMT-15559): Change detached annotation condition in non-converged flow (#5445) [#5445](https://github.com/openshift/assisted-service/pull/5445)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Fix unbound variable (#5493) [#5493](https://github.com/openshift/assisted-service/pull/5493)
* Update RHTAP references (#5492) [#5492](https://github.com/openshift/assisted-service/pull/5492)
* Bump OCP versions: 4.14, 4.11 (#5496) [#5496](https://github.com/openshift/assisted-service/pull/5496)
* Update RHTAP references (#5470) [#5470](https://github.com/openshift/assisted-service/pull/5470)
* [MGMT-15715](https://issues.redhat.com/browse/MGMT-15715): Allow handling multi-document YAML custom manifests (#5480) [#5480](https://github.com/openshift/assisted-service/pull/5480)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Add extra flag var for hypershift install (#5469) [#5469](https://github.com/openshift/assisted-service/pull/5469)
* [XMGMT-15704](https://issues.redhat.com/browse/XMGMT-15704): Bugfix for local cluster import (#5484) [#5484](https://github.com/openshift/assisted-service/pull/5484)
* NO-ISSUE: update RHTAP deprecated image check (#5488) [#5488](https://github.com/openshift/assisted-service/pull/5488)
* Bump OCP versions: 4.12, 4.13 (#5483) [#5483](https://github.com/openshift/assisted-service/pull/5483)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Fix DNS regex validation (#5482) [#5482](https://github.com/openshift/assisted-service/pull/5482)
* [MGMT-15716](https://issues.redhat.com/browse/MGMT-15716): notify events when updating cluster status (#5476) [#5476](https://github.com/openshift/assisted-service/pull/5476)
* [MGMT-15503](https://issues.redhat.com/browse/MGMT-15503): Update operator bundle channel (#5474) [#5474](https://github.com/openshift/assisted-service/pull/5474)
* Bump OCP versions: 4.14 (#5472) [#5472](https://github.com/openshift/assisted-service/pull/5472)
* [MGMT-15306](https://issues.redhat.com/browse/MGMT-15306): Fix UpdateCluster for requests that include VIPS and UMA (#5462) [#5462](https://github.com/openshift/assisted-service/pull/5462)
* [Full changelog](https://github.com/openshift/assisted-service/compare/cb552dbc547508ec273f55c11d36ca7ae76248cc...213c57977cc8fe0d49464c80f7b6b52b65206a1e)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/fde2b2eace2f7ceaedc1ac63f0da77f21cfd78f7)

* [OCPBUGS-43026](https://issues.redhat.com/browse/OCPBUGS-43026): Pick up latest CVE changes by bumping service (#921) [#921](https://github.com/openshift/assisted-installer/pull/921)
* [OCPBUGS-42301](https://issues.redhat.com/browse/OCPBUGS-42301): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) [#907](https://github.com/openshift/assisted-installer/pull/907)
* [OCPBUGS-36779](https://issues.redhat.com/browse/OCPBUGS-36779): Reload host inventory on conflict (#891) [#891](https://github.com/openshift/assisted-installer/pull/891)
* [OCPBUGS-35894](https://issues.redhat.com/browse/OCPBUGS-35894): Fix race to mark node Joined (#859) [#859](https://github.com/openshift/assisted-installer/pull/859)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#851) [#851](https://github.com/openshift/assisted-installer/pull/851)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) [#833](https://github.com/openshift/assisted-installer/pull/833)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) [#827](https://github.com/openshift/assisted-installer/pull/827)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#824) [#824](https://github.com/openshift/assisted-installer/pull/824)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) [#756](https://github.com/openshift/assisted-installer/pull/756)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) [#755](https://github.com/openshift/assisted-installer/pull/755)
* [OCPBUGS-20049](https://issues.redhat.com/browse/OCPBUGS-20049): Remove uninitialized taint for agent-based installs (#739) [#739](https://github.com/openshift/assisted-installer/pull/739)
* [MGMT-16258](https://issues.redhat.com/browse/MGMT-16258): Partitions naming convetion is different for various disk types (#752) [#752](https://github.com/openshift/assisted-installer/pull/752)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) [#751](https://github.com/openshift/assisted-installer/pull/751)
* Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) [#719](https://github.com/openshift/assisted-installer/pull/719)
* [MGMT-15926](https://issues.redhat.com/browse/MGMT-15926): Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) [#748](https://github.com/openshift/assisted-installer/pull/748)
* NO-ISSUE: Add my github account as an OWNER for this repository (#749) [#749](https://github.com/openshift/assisted-installer/pull/749)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) [#747](https://github.com/openshift/assisted-installer/pull/747)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger event that notifies the number of reboots once the node installation is completed (#744) [#744](https://github.com/openshift/assisted-installer/pull/744)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#745) [#745](https://github.com/openshift/assisted-installer/pull/745)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) [#743](https://github.com/openshift/assisted-installer/pull/743)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) [#742](https://github.com/openshift/assisted-installer/pull/742)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#741) [#741](https://github.com/openshift/assisted-installer/pull/741)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) [#738](https://github.com/openshift/assisted-installer/pull/738)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): Update dependencies to remove goproxy dependency (#701) [#701](https://github.com/openshift/assisted-installer/pull/701)
* [MGMT-15984](https://issues.redhat.com/browse/MGMT-15984): Assisted installer doesn't freeze and unmount file systems used for overwriting os image (#737) [#737](https://github.com/openshift/assisted-installer/pull/737)
* NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) [#731](https://github.com/openshift/assisted-installer/pull/731)
* Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) [#718](https://github.com/openshift/assisted-installer/pull/718)
* [MGMT-15710](https://issues.redhat.com/browse/MGMT-15710): Assisted installer changes for avoiding MCO reboot (#713) [#713](https://github.com/openshift/assisted-installer/pull/713)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): fix image missing nsenter executable (#729) [#729](https://github.com/openshift/assisted-installer/pull/729)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): change base image to stream9 (#725) [#725](https://github.com/openshift/assisted-installer/pull/725)
* NO-ISSUE: fix dependabot ingored packages (#724) [#724](https://github.com/openshift/assisted-installer/pull/724)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5d64ad00cc9a2f045895dfccc43fe8d81027e745...fde2b2eace2f7ceaedc1ac63f0da77f21cfd78f7)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/366295f2cba23d0e7e1a61b384e226f707ff56a6)

* [OCPBUGS-43032](https://issues.redhat.com/browse/OCPBUGS-43032): Pick up latest CVE changes by bumping service (#803) [#803](https://github.com/openshift/assisted-installer-agent/pull/803)
* [OCPBUGS-42304](https://issues.redhat.com/browse/OCPBUGS-42304): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#786) [#786](https://github.com/openshift/assisted-installer-agent/pull/786)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#718) [#718](https://github.com/openshift/assisted-installer-agent/pull/718)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) [#704](https://github.com/openshift/assisted-installer-agent/pull/704)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) [#699](https://github.com/openshift/assisted-installer-agent/pull/699)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#695) [#695](https://github.com/openshift/assisted-installer-agent/pull/695)
* [MGMT-16335](https://issues.redhat.com/browse/MGMT-16335): set HasUUID on appliance mock disk (#634) [#634](https://github.com/openshift/assisted-installer-agent/pull/634)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#635) [#635](https://github.com/openshift/assisted-installer-agent/pull/635)
* NO-ISSUE: Add Eran Ifrach account and mine as owners (#633) [#633](https://github.com/openshift/assisted-installer-agent/pull/633)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#630) [#630](https://github.com/openshift/assisted-installer-agent/pull/630)
* [MGMT-15860](https://issues.redhat.com/browse/MGMT-15860): add strictfipsruntime to build (#629) [#629](https://github.com/openshift/assisted-installer-agent/pull/629)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#626) [#626](https://github.com/openshift/assisted-installer-agent/pull/626)
* [OCPBUGS-16483](https://issues.redhat.com/browse/OCPBUGS-16483): Update apimachinery dependency to remove goproxy dep (#590) [#590](https://github.com/openshift/assisted-installer-agent/pull/590)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Get cmdline and set IBM in vendor (#624) [#624](https://github.com/openshift/assisted-installer-agent/pull/624)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) [#623](https://github.com/openshift/assisted-installer-agent/pull/623)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) [#621](https://github.com/openshift/assisted-installer-agent/pull/621)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#619) [#619](https://github.com/openshift/assisted-installer-agent/pull/619)
* [MGMT-16011](https://issues.redhat.com/browse/MGMT-16011): Reduce agent image size (#617) [#617](https://github.com/openshift/assisted-installer-agent/pull/617)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#618) [#618](https://github.com/openshift/assisted-installer-agent/pull/618)
* [MGMT-15900](https://issues.redhat.com/browse/MGMT-15900): Add enable-skip-mco-reboot flag to assisted installer install command (#614) [#614](https://github.com/openshift/assisted-installer-agent/pull/614)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) [#612](https://github.com/openshift/assisted-installer-agent/pull/612)
* NO-ISSUE: add adriengentil as approver (#611) [#611](https://github.com/openshift/assisted-installer-agent/pull/611)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) [#608](https://github.com/openshift/assisted-installer-agent/pull/608)
* [MGMT-15809](https://issues.redhat.com/browse/MGMT-15809): change base image to stream9 (#604) [#604](https://github.com/openshift/assisted-installer-agent/pull/604)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#603) [#603](https://github.com/openshift/assisted-installer-agent/pull/603)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to v1.53.1 (#591) [#591](https://github.com/openshift/assisted-installer-agent/pull/591)
* NO-ISSUE: fix lint target and code (#605) [#605](https://github.com/openshift/assisted-installer-agent/pull/605)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Update domain validation from assisted-service changes (#599) [#599](https://github.com/openshift/assisted-installer-agent/pull/599)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/4106eb47e61f78e89002fa8e11b2d4b4e986c3f7...366295f2cba23d0e7e1a61b384e226f707ff56a6)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/33b7d855fdebd24a972f32dafafd29e40b117e46)

* [OCPBUGS-21874](https://issues.redhat.com/browse/OCPBUGS-21874): Update 4.15 ose-agent-installer-utils-container image to be consistent with ART [#31](https://github.com/openshift/agent-installer-utils/pull/31)
* Bump golang builder to rhel9 [#30](https://github.com/openshift/agent-installer-utils/pull/30)
* [OCPBUGS-19219](https://issues.redhat.com/browse/OCPBUGS-19219): Updating ose-agent-installer-utils images to be consistent with ART [#29](https://github.com/openshift/agent-installer-utils/pull/29)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b3fa10c2f6a890f982a983510e8315b084867782...33b7d855fdebd24a972f32dafafd29e40b117e46)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/abf4fa96550caf09e788b66fc06f1df802768397)

* [OCPBUGS-23697](https://issues.redhat.com/browse/OCPBUGS-23697): Add Snyk file to exclude vendor directory on scan [#48](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/48)
* [OCPBUGS-21984](https://issues.redhat.com/browse/OCPBUGS-21984): Bump golang.org/x/net to v0.19.0 [#41](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/41)
* [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39)
* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8ba0b37a45510404a842d6dbd84d40a18008e81d...abf4fa96550caf09e788b66fc06f1df802768397)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/be4888d3dc176b9801364981fbb34d831f6d6ffe)

* [OCPBUGS-24122](https://issues.redhat.com/browse/OCPBUGS-24122): Updating ose-alibaba-cloud-csi-driver-container image to be consistent with ART [#42](https://github.com/openshift/alibaba-cloud-csi-driver/pull/42)
* [STOR-1389](https://issues.redhat.com/browse/STOR-1389): Rebase to v1.2.1 for OCP 4.15 [#41](https://github.com/openshift/alibaba-cloud-csi-driver/pull/41)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#34](https://github.com/openshift/alibaba-cloud-csi-driver/pull/34)
* [OCPBUGS-19199](https://issues.redhat.com/browse/OCPBUGS-19199): Updating ose-alibaba-cloud-csi-driver images to be consistent with ART [#33](https://github.com/openshift/alibaba-cloud-csi-driver/pull/33)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3dc363d364c43c1fb03e223147e25d9057273428...be4888d3dc176b9801364981fbb34d831f6d6ffe)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/41b367ae3bb6de9292539c0ecd98c81c5edc8294)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#82](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/82)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#76](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/76)
* [OCPBUGS-25233](https://issues.redhat.com/browse/OCPBUGS-25233): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/77)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#72](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/72)
* [OCPBUGS-22541](https://issues.redhat.com/browse/OCPBUGS-22541): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#70](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/70)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#69](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/69)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/62)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#57](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/57)
* [OCPBUGS-19111](https://issues.redhat.com/browse/OCPBUGS-19111): Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#61](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/61)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/8853e6ef4966018b96f9d8bfbf99df3a984bb454...41b367ae3bb6de9292539c0ecd98c81c5edc8294)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#57](https://github.com/openshift/cluster-api-provider-alibaba/pull/57)
* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#47](https://github.com/openshift/cluster-api-provider-alibaba/pull/47)
* NO-JIRA: Update OWNERS [#45](https://github.com/openshift/cluster-api-provider-alibaba/pull/45)
* [OCPBUGS-19201](https://issues.redhat.com/browse/OCPBUGS-19201): Updating ose-alibaba-machine-controllers images to be consistent with ART [#44](https://github.com/openshift/cluster-api-provider-alibaba/pull/44)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/27f105d3b722e19f76b72588d36eeae9dac0a444...f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/adccbd5c16daecfe861fa530acdcbba5ec682a3a)

* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#60](https://github.com/openshift/apiserver-network-proxy/pull/60)
* Update golang Docker tag to v1.23.1 [#58](https://github.com/openshift/apiserver-network-proxy/pull/58)
* [OCPBUGS-31953](https://issues.redhat.com/browse/OCPBUGS-31953): Bump golang.org/x/net to v0.23.0 [#51](https://github.com/openshift/apiserver-network-proxy/pull/51)
* [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f56c606ae15041b0c981e654ab577d2b0a3a0a8f...adccbd5c16daecfe861fa530acdcbba5ec682a3a)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)

* [OCPBUGS-38577](https://issues.redhat.com/browse/OCPBUGS-38577): Ensure that addresses are added in network device index order [#92](https://github.com/openshift/cloud-provider-aws/pull/92)
* [OCPBUGS-31954](https://issues.redhat.com/browse/OCPBUGS-31954): update for CVE-2023-45288 [release-4.15] [#81](https://github.com/openshift/cloud-provider-aws/pull/81)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Updates build-rpm.sh to set release to build time [#76](https://github.com/openshift/cloud-provider-aws/pull/76)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77)
* [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Adds ecr-credential-plugin .spec [#70](https://github.com/openshift/cloud-provider-aws/pull/70)
* [OCPBUGS-26060](https://issues.redhat.com/browse/OCPBUGS-26060): bump go.opentelemetry.io [#64](https://github.com/openshift/cloud-provider-aws/pull/64)
* [OCPBUGS-24135](https://issues.redhat.com/browse/OCPBUGS-24135): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-aws/pull/58)
* [OCPBUGS-21839](https://issues.redhat.com/browse/OCPBUGS-21839): Upgrade x/net to v0.17.0 [#51](https://github.com/openshift/cloud-provider-aws/pull/51)
* Update OWNERS [#52](https://github.com/openshift/cloud-provider-aws/pull/52)
* [OCPCLOUD-2187](https://issues.redhat.com/browse/OCPCLOUD-2187): Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master [#47](https://github.com/openshift/cloud-provider-aws/pull/47)
* [OCPBUGS-19218](https://issues.redhat.com/browse/OCPBUGS-19218): Updating ose-aws-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-aws/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/9a7820e81baa6ba8885b47a71416026036d53d79...fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/51e7a81c40ab6d384e9b643dd6d2c97a417d1634)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#511](https://github.com/openshift/cluster-api-provider-aws/pull/511)
* [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#508](https://github.com/openshift/cluster-api-provider-aws/pull/508)
* [OCPBUGS-31036](https://issues.redhat.com/browse/OCPBUGS-31036): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#501](https://github.com/openshift/cluster-api-provider-aws/pull/501)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#504](https://github.com/openshift/cluster-api-provider-aws/pull/504)
* [OCPBUGS-24113](https://issues.redhat.com/browse/OCPBUGS-24113): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#485](https://github.com/openshift/cluster-api-provider-aws/pull/485)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#486](https://github.com/openshift/cluster-api-provider-aws/pull/486)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#471](https://github.com/openshift/cluster-api-provider-aws/pull/471)
* Update OWNERS [#480](https://github.com/openshift/cluster-api-provider-aws/pull/480)
* [OCPBUGS-21649](https://issues.redhat.com/browse/OCPBUGS-21649): Bump golang.org/x/net to v0.17.0 [#479](https://github.com/openshift/cluster-api-provider-aws/pull/479)
* [OCPBUGS-17279](https://issues.redhat.com/browse/OCPBUGS-17279), [OCPCLOUD-2216](https://issues.redhat.com/browse/OCPCLOUD-2216): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master [#478](https://github.com/openshift/cluster-api-provider-aws/pull/478)
* [OCPBUGS-19185](https://issues.redhat.com/browse/OCPBUGS-19185): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#477](https://github.com/openshift/cluster-api-provider-aws/pull/477)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4efe12cbfebbb27fe78b07da4f7e7f264a9812fb...51e7a81c40ab6d384e9b643dd6d2c97a417d1634)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7043c1cca6e17dd3c90006140f6361cf0e776d69)

* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): UPSTREAM: 1919: Add reserved-volume-attachments [#263](https://github.com/openshift/aws-ebs-csi-driver/pull/263)
* [OCPBUGS-25824](https://issues.redhat.com/browse/OCPBUGS-25824): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#253](https://github.com/openshift/aws-ebs-csi-driver/pull/253)
* [OCPBUGS-25601](https://issues.redhat.com/browse/OCPBUGS-25601): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#251](https://github.com/openshift/aws-ebs-csi-driver/pull/251)
* [OCPBUGS-24072](https://issues.redhat.com/browse/OCPBUGS-24072): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#245](https://github.com/openshift/aws-ebs-csi-driver/pull/245)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Rebase to v1.25.0 for OCP 4.15 [#244](https://github.com/openshift/aws-ebs-csi-driver/pull/244)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net@v0.17.0 [#237](https://github.com/openshift/aws-ebs-csi-driver/pull/237)
* [OCPBUGS-19101](https://issues.redhat.com/browse/OCPBUGS-19101): Updating ose-aws-ebs-csi-driver images to be consistent with ART [#235](https://github.com/openshift/aws-ebs-csi-driver/pull/235)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/4622deecace538b375edc782a19cb5da977ae458...7043c1cca6e17dd3c90006140f6361cf0e776d69)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2a2b9dd109ba9d4abce11411c96787b21887f929)

* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): Explicitly reserve 1 attachment for the root disk [#222](https://github.com/openshift/csi-operator/pull/222)
* [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): remove legacy directory and duplicate Dockerfile.*.test files [#201](https://github.com/openshift/csi-operator/pull/201)
* [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): move test manifest to top-level directory [#195](https://github.com/openshift/csi-operator/pull/195)
* [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93)
* [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#90](https://github.com/openshift/csi-operator/pull/90)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#82](https://github.com/openshift/csi-operator/pull/82)
* [OCPBUGS-25234](https://issues.redhat.com/browse/OCPBUGS-25234): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#83](https://github.com/openshift/csi-operator/pull/83)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/609879c3f1b9a65936e385f798398a2d1673aacd...2a2b9dd109ba9d4abce11411c96787b21887f929)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382)

* [OCPBUGS-24116](https://issues.redhat.com/browse/OCPBUGS-24116): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#93](https://github.com/openshift/machine-api-provider-aws/pull/93)
* [SPLAT-1220](https://issues.redhat.com/browse/SPLAT-1220): Assign Carrier IP to launch EC2 in AWS Wavelength Zones [#78](https://github.com/openshift/machine-api-provider-aws/pull/78)
* [OCPCLOUD-2193](https://issues.redhat.com/browse/OCPCLOUD-2193): Update k8s to 1.28 [#87](https://github.com/openshift/machine-api-provider-aws/pull/87)
* Update OWNERS [#86](https://github.com/openshift/machine-api-provider-aws/pull/86)
* [OCPBUGS-21640](https://issues.redhat.com/browse/OCPBUGS-21640): Update golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/machine-api-provider-aws/pull/85)
* [OCPBUGS-20266](https://issues.redhat.com/browse/OCPBUGS-20266): update bad url endpoint termination handler test [#84](https://github.com/openshift/machine-api-provider-aws/pull/84)
* [OCPBUGS-19190](https://issues.redhat.com/browse/OCPBUGS-19190): Updating ose-machine-api-provider-aws images to be consistent with ART [#82](https://github.com/openshift/machine-api-provider-aws/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/13385034ec9a843a6b40f8b3aec9966ada785115)

* [OCPBUGS-32886](https://issues.redhat.com/browse/OCPBUGS-32886): Upgrade go-jose module to 2.6.3 [#188](https://github.com/openshift/aws-pod-identity-webhook/pull/188)
* [OCPBUGS-24163](https://issues.redhat.com/browse/OCPBUGS-24163): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#179](https://github.com/openshift/aws-pod-identity-webhook/pull/179)
* NO-ISSUE: Sync OWNERS with team members [#173](https://github.com/openshift/aws-pod-identity-webhook/pull/173)
* snyk: exclude vendor/ [#170](https://github.com/openshift/aws-pod-identity-webhook/pull/170)
* Bump k8s deps for CVE-2023-39325 [#169](https://github.com/openshift/aws-pod-identity-webhook/pull/169)
* [OCPBUGS-19264](https://issues.redhat.com/browse/OCPBUGS-19264): Updating ose-aws-pod-identity-webhook images to be consistent with ART [#167](https://github.com/openshift/aws-pod-identity-webhook/pull/167)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63...13385034ec9a843a6b40f8b3aec9966ada785115)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d799a261f70bbdf546d911f5f8b59e2c324bd16)

* [OCPBUGS-33127](https://issues.redhat.com/browse/OCPBUGS-33127): Improvements to client timeouts to prevent hangs [#118](https://github.com/openshift/cloud-provider-azure/pull/118)
* [OCPBUGS-33092](https://issues.redhat.com/browse/OCPBUGS-33092): Bump otelgrpc [#117](https://github.com/openshift/cloud-provider-azure/pull/117)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update acr-credential-provider.spec [#115](https://github.com/openshift/cloud-provider-azure/pull/115)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds acr-credential-provider spec file and build script [#114](https://github.com/openshift/cloud-provider-azure/pull/114)
* [OCPBUGS-24166](https://issues.redhat.com/browse/OCPBUGS-24166): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#98](https://github.com/openshift/cloud-provider-azure/pull/98)
* [OCPBUGS-24164](https://issues.redhat.com/browse/OCPBUGS-24164): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#97](https://github.com/openshift/cloud-provider-azure/pull/97)
* [OCPBUGS-22265](https://issues.redhat.com/browse/OCPBUGS-22265): Bump x/net package to v0.17.0 [#90](https://github.com/openshift/cloud-provider-azure/pull/90)
* Update OWNERS [#87](https://github.com/openshift/cloud-provider-azure/pull/87)
* [OCPBUGS-17282](https://issues.redhat.com/browse/OCPBUGS-17282): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master [#84](https://github.com/openshift/cloud-provider-azure/pull/84)
* [OCPBUGS-19267](https://issues.redhat.com/browse/OCPBUGS-19267): Updating ose-azure-cloud-controller-manager images to be consistent with ART [#86](https://github.com/openshift/cloud-provider-azure/pull/86)
* [OCPBUGS-19265](https://issues.redhat.com/browse/OCPBUGS-19265): Updating ose-azure-cloud-node-manager images to be consistent with ART [#85](https://github.com/openshift/cloud-provider-azure/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d9800e1edcbe9bab5a7ca628cf05fc54cb46f5a9...0d799a261f70bbdf546d911f5f8b59e2c324bd16)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/44832d2da09778d7ff4d2413c9e10852f330a55d)

* [OCPBUGS-36024](https://issues.redhat.com/browse/OCPBUGS-36024): Update go-retryablehttp to v0.7.7 [#311](https://github.com/openshift/cluster-api-provider-azure/pull/311)
* [OCPBUGS-29502](https://issues.redhat.com/browse/OCPBUGS-29502): Bump helm to v3.14.4 [#303](https://github.com/openshift/cluster-api-provider-azure/pull/303)
* [OCPBUGS-24091](https://issues.redhat.com/browse/OCPBUGS-24091): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#291](https://github.com/openshift/cluster-api-provider-azure/pull/291)
* Update OWNERS [#287](https://github.com/openshift/cluster-api-provider-azure/pull/287)
* [OCPBUGS-21648](https://issues.redhat.com/browse/OCPBUGS-21648): Bump golang.org/x/net to v0.17.0 [#285](https://github.com/openshift/cluster-api-provider-azure/pull/285)
* [OCPCLOUD-2217](https://issues.redhat.com/browse/OCPCLOUD-2217): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master [#284](https://github.com/openshift/cluster-api-provider-azure/pull/284)
* [OCPBUGS-19147](https://issues.redhat.com/browse/OCPBUGS-19147): Updating ose-azure-cluster-api-controllers images to be consistent with ART [#282](https://github.com/openshift/cluster-api-provider-azure/pull/282)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f...44832d2da09778d7ff4d2413c9e10852f330a55d)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)

* [OCPBUGS-25768](https://issues.redhat.com/browse/OCPBUGS-25768): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#72](https://github.com/openshift/azure-disk-csi-driver/pull/72)
* [OCPBUGS-25236](https://issues.redhat.com/browse/OCPBUGS-25236): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#68](https://github.com/openshift/azure-disk-csi-driver/pull/68)
* [OCPBUGS-24120](https://issues.redhat.com/browse/OCPBUGS-24120): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#64](https://github.com/openshift/azure-disk-csi-driver/pull/64)
* [OCPBUGS-17542](https://issues.redhat.com/browse/OCPBUGS-17542): allow resizing to min required size for performance plus disks [#52](https://github.com/openshift/azure-disk-csi-driver/pull/52)
* [STOR-1394](https://issues.redhat.com/browse/STOR-1394): Rebase v1.29.0 for OCP 4.15 [#51](https://github.com/openshift/azure-disk-csi-driver/pull/51)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/azure-disk-csi-driver/pull/53)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver images to be consistent with ART [#50](https://github.com/openshift/azure-disk-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6d3558a3b5ae9d383988495cc64dc05b4bba0382...dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/160cf624a88f500de7a1f79e6dd9384bb7d17842)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#121](https://github.com/openshift/azure-disk-csi-driver-operator/pull/121)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#114](https://github.com/openshift/azure-disk-csi-driver-operator/pull/114)
* [OCPBUGS-25237](https://issues.redhat.com/browse/OCPBUGS-25237): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#115](https://github.com/openshift/azure-disk-csi-driver-operator/pull/115)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#110](https://github.com/openshift/azure-disk-csi-driver-operator/pull/110)
* [OCPBUGS-22560](https://issues.redhat.com/browse/OCPBUGS-22560): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#107](https://github.com/openshift/azure-disk-csi-driver-operator/pull/107)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#93](https://github.com/openshift/azure-disk-csi-driver-operator/pull/93)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#106](https://github.com/openshift/azure-disk-csi-driver-operator/pull/106)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#100](https://github.com/openshift/azure-disk-csi-driver-operator/pull/100)
* update readme [#99](https://github.com/openshift/azure-disk-csi-driver-operator/pull/99)
* simplify workload identity feature enablement [#92](https://github.com/openshift/azure-disk-csi-driver-operator/pull/92)
* update readme [#94](https://github.com/openshift/azure-disk-csi-driver-operator/pull/94)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#98](https://github.com/openshift/azure-disk-csi-driver-operator/pull/98)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/918935767350f9f330b9d6a9c3ee03e9869e7828...160cf624a88f500de7a1f79e6dd9384bb7d17842)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/bcf919dc0467f84192758155aac4976df5054da6)

* [OCPBUGS-39444](https://issues.redhat.com/browse/OCPBUGS-39444): bump mount-utils to treat ENODEV error as corrupted mount [#78](https://github.com/openshift/azure-file-csi-driver/pull/78)
* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): Rebase v1.29.5 for OCP 4.15 [#65](https://github.com/openshift/azure-file-csi-driver/pull/65)
* [OCPBUGS-25697](https://issues.redhat.com/browse/OCPBUGS-25697): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#50](https://github.com/openshift/azure-file-csi-driver/pull/50)
* [STOR-1390](https://issues.redhat.com/browse/STOR-1390): Rebase v1.29.2 for OCP 4.15 [#43](https://github.com/openshift/azure-file-csi-driver/pull/43)
* [OCPBUGS-24075](https://issues.redhat.com/browse/OCPBUGS-24075): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#44](https://github.com/openshift/azure-file-csi-driver/pull/44)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/azure-file-csi-driver/pull/36)
* [OCPBUGS-19110](https://issues.redhat.com/browse/OCPBUGS-19110): Updating azure-file-csi-driver images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver/pull/34)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/a737d1c4366b11757ca20478208f1e1275047418...bcf919dc0467f84192758155aac4976df5054da6)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/367c4e45899033f7fb7494c0004b83157b6723aa)

* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): add token audience for Azure File [#103](https://github.com/openshift/azure-file-csi-driver-operator/pull/103)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#95](https://github.com/openshift/azure-file-csi-driver-operator/pull/95)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#89](https://github.com/openshift/azure-file-csi-driver-operator/pull/89)
* [OCPBUGS-25238](https://issues.redhat.com/browse/OCPBUGS-25238): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#90](https://github.com/openshift/azure-file-csi-driver-operator/pull/90)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#84](https://github.com/openshift/azure-file-csi-driver-operator/pull/84)
* [OCPBUGS-22562](https://issues.redhat.com/browse/OCPBUGS-22562): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#82](https://github.com/openshift/azure-file-csi-driver-operator/pull/82)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#81](https://github.com/openshift/azure-file-csi-driver-operator/pull/81)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#75](https://github.com/openshift/azure-file-csi-driver-operator/pull/75)
* update readme [#70](https://github.com/openshift/azure-file-csi-driver-operator/pull/70)
* simplify workload identity feature enablement [#69](https://github.com/openshift/azure-file-csi-driver-operator/pull/69)
* [OCPBUGS-19170](https://issues.redhat.com/browse/OCPBUGS-19170): Updating azure-file-csi-driver-operator images to be consistent with ART [#74](https://github.com/openshift/azure-file-csi-driver-operator/pull/74)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/4469d80589595dd5d05f0f0f296505800e3ad527...367c4e45899033f7fb7494c0004b83157b6723aa)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/615b457bcfa1a40e7900585154952aac8194bed4)

* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#110](https://github.com/openshift/machine-api-provider-azure/pull/110)
* [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Remove startupScript vmextension lookup [#103](https://github.com/openshift/machine-api-provider-azure/pull/103)
* [OCPBUGS-25510](https://issues.redhat.com/browse/OCPBUGS-25510): bump x/crypto [#100](https://github.com/openshift/machine-api-provider-azure/pull/100)
* [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Improving performance of VMs created in Azure [#93](https://github.com/openshift/machine-api-provider-azure/pull/93)
* [OCPBUGS-24168](https://issues.redhat.com/browse/OCPBUGS-24168): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#86](https://github.com/openshift/machine-api-provider-azure/pull/86)
* Update OWNERS [#79](https://github.com/openshift/machine-api-provider-azure/pull/79)
* [OCPBUGS-21790](https://issues.redhat.com/browse/OCPBUGS-21790): Bump x/net package to v0.17.0 [#78](https://github.com/openshift/machine-api-provider-azure/pull/78)
* [OCPBUGS-20268](https://issues.redhat.com/browse/OCPBUGS-20268): update bad url endpoint termination handler test [#77](https://github.com/openshift/machine-api-provider-azure/pull/77)
* [OCPCLOUD-2192](https://issues.redhat.com/browse/OCPCLOUD-2192): Bump k8s packages to v1.28 [#76](https://github.com/openshift/machine-api-provider-azure/pull/76)
* [OCPBUGS-19269](https://issues.redhat.com/browse/OCPBUGS-19269): Updating ose-machine-api-provider-azure images to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-azure/pull/75)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/d526284e26f37f36f9d5297faa801ea117d81f48...615b457bcfa1a40e7900585154952aac8194bed4)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1)

* [OCPBUGS-32895](https://issues.redhat.com/browse/OCPBUGS-32895): Upgrade go-jose module to 2.6.3 [#17](https://github.com/openshift/azure-workload-identity/pull/17)
* [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13)
* [OCPBUGS-19244](https://issues.redhat.com/browse/OCPBUGS-19244): Updating ose-azure-workload-identity-webhook images to be consistent with ART [#6](https://github.com/openshift/azure-workload-identity/pull/6)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/bcb88d949151223362ecefc12f4e90566599e0e7...2333b7fae0592ae26d77cbac49ce23e7fbaa00b1)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3bab4e95dfd7faa115e58597909fce56b0c6b759)

* [OCPBUGS-42139](https://issues.redhat.com/browse/OCPBUGS-42139): add tested instance type for IBMCloud [#9032](https://github.com/openshift/installer/pull/9032)
* [OCPBUGS-42335](https://issues.redhat.com/browse/OCPBUGS-42335): Bump extract-machine-os timout to 20m [#9051](https://github.com/openshift/installer/pull/9051)
* [OCPBUGS-42180](https://issues.redhat.com/browse/OCPBUGS-42180): Add AWS r8g to arm tested instance types [#9040](https://github.com/openshift/installer/pull/9040)
* [OCPBUGS-39288](https://issues.redhat.com/browse/OCPBUGS-39288), [OCPBUGS-42011](https://issues.redhat.com/browse/OCPBUGS-42011): Openstack UPI - Reintroduce unique resource names [#9047](https://github.com/openshift/installer/pull/9047)
* [OCPBUGS-38198](https://issues.redhat.com/browse/OCPBUGS-38198): Remove timed context for gcp client [#8824](https://github.com/openshift/installer/pull/8824)
* [OCPBUGS-29591](https://issues.redhat.com/browse/OCPBUGS-29591): vsphere-fix convert if only provided name [#8034](https://github.com/openshift/installer/pull/8034)
* [OCPBUGS-32179](https://issues.redhat.com/browse/OCPBUGS-32179): Fix task for attaching IPv6 subnet to router. [#8262](https://github.com/openshift/installer/pull/8262)
* [OCPBUGS-34721](https://issues.redhat.com/browse/OCPBUGS-34721): fix usage of host and user CA bundle in the agent ignition [#8512](https://github.com/openshift/installer/pull/8512)
* [OCPBUGS-36090](https://issues.redhat.com/browse/OCPBUGS-36090): [release-4.15]: bump go-retryablehttp for CVE fix [#8655](https://github.com/openshift/installer/pull/8655)
* [OCPBUGS-37064](https://issues.redhat.com/browse/OCPBUGS-37064): Changed vsphere CPMS to not include fields controlled by failure domains. [#8735](https://github.com/openshift/installer/pull/8735)
* [OCPBUGS-37182](https://issues.redhat.com/browse/OCPBUGS-37182): ic: fix typo in warning message [#8770](https://github.com/openshift/installer/pull/8770)
* [OCPBUGS-37067](https://issues.redhat.com/browse/OCPBUGS-37067): update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 [#8746](https://github.com/openshift/installer/pull/8746)
* [OCPBUGS-33354](https://issues.redhat.com/browse/OCPBUGS-33354), [OCPBUGS-33402](https://issues.redhat.com/browse/OCPBUGS-33402): Use assisted-image-service for ignition editing [#8635](https://github.com/openshift/installer/pull/8635)
* : OCPBUGS-36400: PowerVS: add ibmcloud plugins [#8687](https://github.com/openshift/installer/pull/8687)
* [OCPBUGS-36225](https://issues.redhat.com/browse/OCPBUGS-36225): Make vSphere default ResourcePool formatting not contain double slash. [#8664](https://github.com/openshift/installer/pull/8664)
* [OCPBUGS-35131](https://issues.redhat.com/browse/OCPBUGS-35131), [OCPBUGS-35141](https://issues.redhat.com/browse/OCPBUGS-35141), [OCPBUGS-35144](https://issues.redhat.com/browse/OCPBUGS-35144): [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 [#8646](https://github.com/openshift/installer/pull/8646)
* [OCPBUGS-35359](https://issues.redhat.com/browse/OCPBUGS-35359): GCP: Prevent cluster installation with mismatched worker assets and worker replicas [#8581](https://github.com/openshift/installer/pull/8581)
* [OCPBUGS-35502](https://issues.redhat.com/browse/OCPBUGS-35502): [release-4.15] azure: bump profile used for network [#8607](https://github.com/openshift/installer/pull/8607)
* [OCPBUGS-35586](https://issues.redhat.com/browse/OCPBUGS-35586): [release-4.15] bump github.com/containers/image for CVE fix [#8621](https://github.com/openshift/installer/pull/8621)
* [OCPBUGS-31387](https://issues.redhat.com/browse/OCPBUGS-31387): If host is offline or disconnected don't check ver [#8208](https://github.com/openshift/installer/pull/8208)
* [OCPBUGS-35355](https://issues.redhat.com/browse/OCPBUGS-35355): baremetal: Don't always enable provisioning-interface.service [#8580](https://github.com/openshift/installer/pull/8580)
* [OCPBUGS-35032](https://issues.redhat.com/browse/OCPBUGS-35032): [release-4.15] aws: terraform: add spot instance support for masters [#8540](https://github.com/openshift/installer/pull/8540)
* [OCPBUGS-35059](https://issues.redhat.com/browse/OCPBUGS-35059): images: change libvirt-installer base [#8550](https://github.com/openshift/installer/pull/8550)
* [OCPBUGS-33672](https://issues.redhat.com/browse/OCPBUGS-33672): add quota support to ca-west-1 [#8412](https://github.com/openshift/installer/pull/8412)
* [OCPBUGS-33454](https://issues.redhat.com/browse/OCPBUGS-33454): go.mod: bump aws-sdk-go for ca-west-1 support [#8381](https://github.com/openshift/installer/pull/8381)
* [OCPBUGS-33205](https://issues.redhat.com/browse/OCPBUGS-33205): Gcp bootstraping release 4.15 [#8339](https://github.com/openshift/installer/pull/8339)
* [OCPBUGS-33542](https://issues.redhat.com/browse/OCPBUGS-33542): images: do not force terraform-providers to be statically linked [#8392](https://github.com/openshift/installer/pull/8392)
* [OCPBUGS-29929](https://issues.redhat.com/browse/OCPBUGS-29929): GCP Destroy cleanup correct zones/records [#8062](https://github.com/openshift/installer/pull/8062)
* [OCPBUGS-32383](https://issues.redhat.com/browse/OCPBUGS-32383): sdk/aws: add ssh security group rule for compute [#8282](https://github.com/openshift/installer/pull/8282)
* [OCPBUGS-32690](https://issues.redhat.com/browse/OCPBUGS-32690): AWS: bump CCO for permission fix [#8302](https://github.com/openshift/installer/pull/8302)
* [OCPBUGS-32264](https://issues.redhat.com/browse/OCPBUGS-32264): always save serial logs if they were gathered [#8274](https://github.com/openshift/installer/pull/8274)
* [OCPBUGS-30944](https://issues.redhat.com/browse/OCPBUGS-30944): Don't run libvirt validations in agent installer [#8167](https://github.com/openshift/installer/pull/8167)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#8285](https://github.com/openshift/installer/pull/8285)
* [OCPBUGS-32259](https://issues.redhat.com/browse/OCPBUGS-32259): escape '%' in proxy settings [#8272](https://github.com/openshift/installer/pull/8272)
* [OCPBUGS-32355](https://issues.redhat.com/browse/OCPBUGS-32355): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8277](https://github.com/openshift/installer/pull/8277)
* [OCPBUGS-31335](https://issues.redhat.com/browse/OCPBUGS-31335): openstack: Honour worker server group policy [#8202](https://github.com/openshift/installer/pull/8202)
* : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest [#8220](https://github.com/openshift/installer/pull/8220)
* [OCPBUGS-30922](https://issues.redhat.com/browse/OCPBUGS-30922): coreos-installer iso kargs show broken on Agent ISO [#8163](https://github.com/openshift/installer/pull/8163)
* [OCPBUGS-30822](https://issues.redhat.com/browse/OCPBUGS-30822): Validate control plane replicas [#8143](https://github.com/openshift/installer/pull/8143)
* [OCPBUGS-31274](https://issues.redhat.com/browse/OCPBUGS-31274): IBMCloud: Restrict CIS and DNS Service lookup [#8197](https://github.com/openshift/installer/pull/8197)
* [OCPBUGS-30605](https://issues.redhat.com/browse/OCPBUGS-30605): upi: aws: fix typo in worker templates [#8125](https://github.com/openshift/installer/pull/8125)
* Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8199](https://github.com/openshift/installer/pull/8199)
* [OCPBUGS-31087](https://issues.redhat.com/browse/OCPBUGS-31087): Fix vsi image missing [#8186](https://github.com/openshift/installer/pull/8186)
* [OCPBUGS-30098](https://issues.redhat.com/browse/OCPBUGS-30098): feat: add check for SNO bootstrap condition [#8089](https://github.com/openshift/installer/pull/8089)
* [OCPBUGS-30601](https://issues.redhat.com/browse/OCPBUGS-30601): update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 [#8122](https://github.com/openshift/installer/pull/8122)
* [OCPBUGS-30854](https://issues.redhat.com/browse/OCPBUGS-30854): Power VS: Fix wait_for_workspace [#8159](https://github.com/openshift/installer/pull/8159)
* [OCPBUGS-29964](https://issues.redhat.com/browse/OCPBUGS-29964): fix Azure API SKU calls timing out [#8086](https://github.com/openshift/installer/pull/8086)
* [OCPBUGS-30792](https://issues.redhat.com/browse/OCPBUGS-30792): Enable deploy by Service ID on PowerVS [#8138](https://github.com/openshift/installer/pull/8138)
* [OCPBUGS-30577](https://issues.redhat.com/browse/OCPBUGS-30577): Authn with platform-services-go-sdk for PowerVS [#8118](https://github.com/openshift/installer/pull/8118)
* [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094)
* [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076)
* [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052)
* Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050)
* [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024)
* Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996)
* [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977)
* [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065)
* [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032)
* [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035)
* [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026)
* [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013)
* [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016)
* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [OCPBUGS-27850](https://issues.redhat.com/browse/OCPBUGS-27850): PowerVS: COS region configurable [#7948](https://github.com/openshift/installer/pull/7948)
* [OCPBUGS-27814](https://issues.redhat.com/browse/OCPBUGS-27814): [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option [#7935](https://github.com/openshift/installer/pull/7935)
* [OCPBUGS-25251](https://issues.redhat.com/browse/OCPBUGS-25251): Changed OKD/FCOS workaround to also support Agent-based Installer [#7830](https://github.com/openshift/installer/pull/7830)
* [OCPBUGS-27299](https://issues.redhat.com/browse/OCPBUGS-27299): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7913](https://github.com/openshift/installer/pull/7913)
* [OCPBUGS-26515](https://issues.redhat.com/browse/OCPBUGS-26515): preserve category name when trying to find tag category [#7885](https://github.com/openshift/installer/pull/7885)
* [OCPBUGS-27311](https://issues.redhat.com/browse/OCPBUGS-27311): Fix depreciated typo [#7912](https://github.com/openshift/installer/pull/7912)
* [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Fix typo in CloudCredential validation [#7916](https://github.com/openshift/installer/pull/7916)
* [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Add load balancer info to cluster infra [#7903](https://github.com/openshift/installer/pull/7903)
* [OCPBUGS-27188](https://issues.redhat.com/browse/OCPBUGS-27188): Redact platform passwords in agent-gather output [#7910](https://github.com/openshift/installer/pull/7910)
* [CORS-3168](https://issues.redhat.com/browse/CORS-3168): build: only rebuild terraform providers if needed [#7853](https://github.com/openshift/installer/pull/7853)
* [OCPBUGS-27148](https://issues.redhat.com/browse/OCPBUGS-27148): baremetal: correct external_http_url for v6-only BMCs [#7906](https://github.com/openshift/installer/pull/7906)
* [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS [#7882](https://github.com/openshift/installer/pull/7882)
* [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Add cloud credential capability validation [#7890](https://github.com/openshift/installer/pull/7890)
* [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883)
* [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868)
* [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863)
* [OCPBUGS-24679](https://issues.redhat.com/browse/OCPBUGS-24679): Modify the terraform variables to support Nutanix Failure Domains [#7813](https://github.com/openshift/installer/pull/7813)
* [OCPBUGS-25463](https://issues.redhat.com/browse/OCPBUGS-25463): IBMCloud: Set IBM TF visibility based on URLs [#7844](https://github.com/openshift/installer/pull/7844)
* [OCPBUGS-25216](https://issues.redhat.com/browse/OCPBUGS-25216): ic: azure: fix retrieving marketplace image [#7829](https://github.com/openshift/installer/pull/7829)
* [OCPBUGS-25192](https://issues.redhat.com/browse/OCPBUGS-25192): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7827](https://github.com/openshift/installer/pull/7827)
* [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Update MAPI for BYOK [#7812](https://github.com/openshift/installer/pull/7812)
* [METAL-803](https://issues.redhat.com/browse/METAL-803): Update vendoring for baremetal-operator [#7809](https://github.com/openshift/installer/pull/7809)
* no-jira: Fix base image reference [#7810](https://github.com/openshift/installer/pull/7810)
* [CORS-2952](https://issues.redhat.com/browse/CORS-2952): GCP Set "ClusterHostedDNS" in the Infra CR based on the value of userProvisionedDNS [#7796](https://github.com/openshift/installer/pull/7796)
* [CORS-2813](https://issues.redhat.com/browse/CORS-2813): Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap [#7662](https://github.com/openshift/installer/pull/7662)
* [OCPBUGS-23140](https://issues.redhat.com/browse/OCPBUGS-23140), [OCPBUGS-23305](https://issues.redhat.com/browse/OCPBUGS-23305): Soften VIP validations for external load-balancer [#7803](https://github.com/openshift/installer/pull/7803)
* [AGENT-739](https://issues.redhat.com/browse/AGENT-739): Support for install-config baremetal host BMC fields [#7645](https://github.com/openshift/installer/pull/7645)
* [AGENT-729](https://issues.redhat.com/browse/AGENT-729): Support generic platform name for external platform [#7585](https://github.com/openshift/installer/pull/7585)
* [MULTIARCH-4042](https://issues.redhat.com/browse/MULTIARCH-4042): Reuse existing Transit Gateway in target Workspace, or create anew [#7592](https://github.com/openshift/installer/pull/7592)
* [OCPBUGS-23473](https://issues.redhat.com/browse/OCPBUGS-23473): update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 [#7770](https://github.com/openshift/installer/pull/7770)
* [AGENT-615](https://issues.redhat.com/browse/AGENT-615): Split create-cluster-and-infraenv.service [#7364](https://github.com/openshift/installer/pull/7364)
* no-jira: image: infra-providers: use base image instead of builder [#7800](https://github.com/openshift/installer/pull/7800)
* no-jira: hack: drop hardcoded -j8 in make invocations. [#7799](https://github.com/openshift/installer/pull/7799)
* [OCPBUGS-23458](https://issues.redhat.com/browse/OCPBUGS-23458): force destroy bootstrap ign [#7791](https://github.com/openshift/installer/pull/7791)
* [OSASINFRA-3261](https://issues.redhat.com/browse/OSASINFRA-3261): OpenStack: support dualstack in UPI [#7727](https://github.com/openshift/installer/pull/7727)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678): Patch for Agent Based Installer to support s390x as supported architecture. [#7712](https://github.com/openshift/installer/pull/7712)
* [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): AWS BYO VPC support for Wavelength Zones [#7652](https://github.com/openshift/installer/pull/7652)
* [CORS-2525](https://issues.redhat.com/browse/CORS-2525): Azure: remove storage account with bootstrap destroy [#7642](https://github.com/openshift/installer/pull/7642)
* [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Set VIPs directly in api, instead of install-config override [#7574](https://github.com/openshift/installer/pull/7574)
* [OCPVE-648](https://issues.redhat.com/browse/OCPVE-648): gomod: bump api version with CloudCredential cap [#7466](https://github.com/openshift/installer/pull/7466)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: ensure proper cleanup on exit [#7693](https://github.com/openshift/installer/pull/7693)
* [OCPBUGS-9066](https://issues.redhat.com/browse/OCPBUGS-9066): Retry image download on failure [#7106](https://github.com/openshift/installer/pull/7106)
* NO-ISSUE: Remove dead code from 'networking' asset [#7798](https://github.com/openshift/installer/pull/7798)
* PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option [#7795](https://github.com/openshift/installer/pull/7795)
* [OCPBUGS-24191](https://issues.redhat.com/browse/OCPBUGS-24191): set vmType in azure cloud config [#7793](https://github.com/openshift/installer/pull/7793)
* no-jira: pkg/asset: safety nets to keep installer from crashing [#7792](https://github.com/openshift/installer/pull/7792)
* [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Add support for BYOK [#7738](https://github.com/openshift/installer/pull/7738)
* [OCPBUGS-23539](https://issues.redhat.com/browse/OCPBUGS-23539): Keep Machine manifests out of OpenShift Manifests asset [#7753](https://github.com/openshift/installer/pull/7753)
* [CORS-3020](https://issues.redhat.com/browse/CORS-3020): IBMCloud: Bump IBM TF provider [#7784](https://github.com/openshift/installer/pull/7784)
* [MIXEDARCH-310](https://issues.redhat.com/browse/MIXEDARCH-310): Enable the use of the multi payload for agent installer [#7595](https://github.com/openshift/installer/pull/7595)
* [CORS-2775](https://issues.redhat.com/browse/CORS-2775): ic: azure: remove deprecated `errors` package [#7778](https://github.com/openshift/installer/pull/7778)
* [SPLAT-1126](https://issues.redhat.com/browse/SPLAT-1126): aws/clusterNetworkMTU config to change the MTU for overlay network [#7765](https://github.com/openshift/installer/pull/7765)
* [CORS-2785](https://issues.redhat.com/browse/CORS-2785): images: decouple installer and installer-artifacts [#7782](https://github.com/openshift/installer/pull/7782)
* [MULTIARCH-3793](https://issues.redhat.com/browse/MULTIARCH-3793): Power VS: Add mad and wdc assupported region [#7773](https://github.com/openshift/installer/pull/7773)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Generate Cluster API Machine Manifests [#7771](https://github.com/openshift/installer/pull/7771)
* [CORS-2854](https://issues.redhat.com/browse/CORS-2854): azure: Allow users to set visibility to components [#7547](https://github.com/openshift/installer/pull/7547)
* [OCPBUGS-24008](https://issues.redhat.com/browse/OCPBUGS-24008): Remove sno_arm.txt integration test [#7718](https://github.com/openshift/installer/pull/7718)
* [OCPBUGS-23947](https://issues.redhat.com/browse/OCPBUGS-23947): set client options when interacting with azure api [#7768](https://github.com/openshift/installer/pull/7768)
* [CORS-2978](https://issues.redhat.com/browse/CORS-2978): enable AWS SDK Installation through feature gates [#7715](https://github.com/openshift/installer/pull/7715)
* [CORS-2798](https://issues.redhat.com/browse/CORS-2798): GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information [#7631](https://github.com/openshift/installer/pull/7631)
* [CORS-2845](https://issues.redhat.com/browse/CORS-2845): azure: Enable storage account encryption [#7520](https://github.com/openshift/installer/pull/7520)
* [SPLAT-1277](https://issues.redhat.com/browse/SPLAT-1277): unrevert PR 7418; implement vSphere control plane machinesets [#7780](https://github.com/openshift/installer/pull/7780)
* [OSASINFRA-3303](https://issues.redhat.com/browse/OSASINFRA-3303): OpenStack: remove generation of trunks name [#7772](https://github.com/openshift/installer/pull/7772)
* [AGENT-670](https://issues.redhat.com/browse/AGENT-670): Add assisted-db data to agent-gather [#7719](https://github.com/openshift/installer/pull/7719)
* [SPLAT-1160](https://issues.redhat.com/browse/SPLAT-1160): AWS - Support Wavelength Zones with edge pool [#7369](https://github.com/openshift/installer/pull/7369)
* Skip cluster config [#7666](https://github.com/openshift/installer/pull/7666)
* [OCPBUGS-24031](https://issues.redhat.com/browse/OCPBUGS-24031): Bump Fedora CoreOS to latest stable [#7779](https://github.com/openshift/installer/pull/7779)
* no-jira:  destroy: azure: store session in the destroy object [#7777](https://github.com/openshift/installer/pull/7777)
* [CORS-2975](https://issues.redhat.com/browse/CORS-2975): Add support for il-central-1 in AWS [#7740](https://github.com/openshift/installer/pull/7740)
* [CORS-2428](https://issues.redhat.com/browse/CORS-2428): terraform: add build information to binaries [#7763](https://github.com/openshift/installer/pull/7763)
* [OCPBUGS-24026](https://issues.redhat.com/browse/OCPBUGS-24026): Add owner for user provided client CA bundle [#7749](https://github.com/openshift/installer/pull/7749)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Support Nutanix Failure Domains [#7730](https://github.com/openshift/installer/pull/7730)
* [CORS-2775](https://issues.redhat.com/browse/CORS-2775): destroy: azure: remove deprecated `errors` package [#7761](https://github.com/openshift/installer/pull/7761)
* no-jira: cmd/openshift-install: Remove "migrate" command [#7601](https://github.com/openshift/installer/pull/7601)
* no-jira: go.mod: remove unused terraform-providers-nutanix import [#7762](https://github.com/openshift/installer/pull/7762)
* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): pkg/infrastructure: remove ARO build tag [#7745](https://github.com/openshift/installer/pull/7745)
* [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): baremetal: populate customDeploy in advance [#7674](https://github.com/openshift/installer/pull/7674)
* [CORS-2933](https://issues.redhat.com/browse/CORS-2933): IBMCloud: Basic service endpoint override [#7632](https://github.com/openshift/installer/pull/7632)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce Cluster API Infrastructure manifest generation [#7672](https://github.com/openshift/installer/pull/7672)
* [OCPBUGS-22840](https://issues.redhat.com/browse/OCPBUGS-22840): ic/azure: validate field Plan when for marketplace images [#7721](https://github.com/openshift/installer/pull/7721)
* [CORS-2604](https://issues.redhat.com/browse/CORS-2604): tag user-provided azure vnet [#7611](https://github.com/openshift/installer/pull/7611)
* [MULTIARCH-3964](https://issues.redhat.com/browse/MULTIARCH-3964): Power VS: Control SMT level with machineconfig [#7704](https://github.com/openshift/installer/pull/7704)
* no-jira: destroy/azure: fix dropped negation from error comparison [#7758](https://github.com/openshift/installer/pull/7758)
* no-jira: destroy/azure: avoid cancelling main context [#7750](https://github.com/openshift/installer/pull/7750)
* [OCPCLOUD-2130](https://issues.redhat.com/browse/OCPCLOUD-2130): Fix Failuredomains check on manifests test [#7617](https://github.com/openshift/installer/pull/7617)
* [OSASINFRA-3295](https://issues.redhat.com/browse/OSASINFRA-3295): OpenStack: fix client used to list flavors [#7723](https://github.com/openshift/installer/pull/7723)
* [OSASINFRA-3294](https://issues.redhat.com/browse/OSASINFRA-3294): OpenStack: fix script to update bootstrap ignition shim [#7743](https://github.com/openshift/installer/pull/7743)
* no-jira: images: rename terraform- > infrastructure-providers [#7716](https://github.com/openshift/installer/pull/7716)
* [OCPBUGS-23376](https://issues.redhat.com/browse/OCPBUGS-23376): vSphere - when using RP network path is incorrect [#7737](https://github.com/openshift/installer/pull/7737)
* no-jira: Stop rendering networks.config CRD [#7732](https://github.com/openshift/installer/pull/7732)
* [OCPBUGS-22453](https://issues.redhat.com/browse/OCPBUGS-22453): Fixed systemd-resolved's split dns config in OKD/FCOS [#7634](https://github.com/openshift/installer/pull/7634)
* [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): upi/AWS: Templates to provision resources in Wavelength [#7722](https://github.com/openshift/installer/pull/7722)
* [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Support both VIP and VIPs in AgentClusterInstall [#7724](https://github.com/openshift/installer/pull/7724)
* [OSASINFRA-3229](https://issues.redhat.com/browse/OSASINFRA-3229): Remove support for Kuryr [#7675](https://github.com/openshift/installer/pull/7675)
* [CORS-2830](https://issues.redhat.com/browse/CORS-2830): Provision AWS Infrastructure with SDK [#7676](https://github.com/openshift/installer/pull/7676)
* [MULTIARCH-4009](https://issues.redhat.com/browse/MULTIARCH-4009): Prepare for varying SysTypes for new datacenters [#7717](https://github.com/openshift/installer/pull/7717)
* [MULTIARCH-3789](https://issues.redhat.com/browse/MULTIARCH-3789): Power VS: Remove cloud connection support [#7696](https://github.com/openshift/installer/pull/7696)
* [CORS-2876](https://issues.redhat.com/browse/CORS-2876): images/installer-altinfra: initial Dockerfile [#7711](https://github.com/openshift/installer/pull/7711)
* Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network [#7694](https://github.com/openshift/installer/pull/7694)
* [MULTIARCH-3965](https://issues.redhat.com/browse/MULTIARCH-3965): Check if PER is enabled in the target PowerVS workspace [#7683](https://github.com/openshift/installer/pull/7683)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): openstack: document etcd on local disk [#7664](https://github.com/openshift/installer/pull/7664)
* [OCPBUGS-23170](https://issues.redhat.com/browse/OCPBUGS-23170): Revert #7418 "SPLAT-1141: implement vSphere control plane machinesets" [#7708](https://github.com/openshift/installer/pull/7708)
* [MULTIARCH-2590](https://issues.redhat.com/browse/MULTIARCH-2590): PowerVS create service instance [#7695](https://github.com/openshift/installer/pull/7695)
* [SPLAT-1141](https://issues.redhat.com/browse/SPLAT-1141): implement vSphere control plane machinesets [#7418](https://github.com/openshift/installer/pull/7418)
* [CORS-2428](https://issues.redhat.com/browse/CORS-2428): images: add Dockerfile for a terraform-providers image [#7687](https://github.com/openshift/installer/pull/7687)
* [OSASINFRA-3237](https://issues.redhat.com/browse/OSASINFRA-3237): move controlPlanePort API to GA [#7570](https://github.com/openshift/installer/pull/7570)
* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): use build tags to produce installer with alternate infrastructure providers [#7656](https://github.com/openshift/installer/pull/7656)
* [CORS-2877](https://issues.redhat.com/browse/CORS-2877): Install Config Feature Gate Validation [#7413](https://github.com/openshift/installer/pull/7413)
* [OCPBUGS-22772](https://issues.redhat.com/browse/OCPBUGS-22772): return Terraform statefile on error [#7671](https://github.com/openshift/installer/pull/7671)
* NO-JIRA: destroy/aws: replaced deprecated sets syntax [#7680](https://github.com/openshift/installer/pull/7680)
* [OCPBUGS-19398](https://issues.redhat.com/browse/OCPBUGS-19398): IBMCloud: Add eu-es region [#7668](https://github.com/openshift/installer/pull/7668)
* [OCPBUGS-22830](https://issues.redhat.com/browse/OCPBUGS-22830): fix google cli verson to 447.0.0 [#7663](https://github.com/openshift/installer/pull/7663)
* [OCPBUGS-22113](https://issues.redhat.com/browse/OCPBUGS-22113): Do not generate azure-cloud-provider in manual mode for aro builds [#7608](https://github.com/openshift/installer/pull/7608)
* [OCPBUGS-22757](https://issues.redhat.com/browse/OCPBUGS-22757): update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 [#7654](https://github.com/openshift/installer/pull/7654)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce pkg/clusterapi, system, and local control plane [#7630](https://github.com/openshift/installer/pull/7630)
* [OCPBUGS-20403](https://issues.redhat.com/browse/OCPBUGS-20403): OpenStack: add SG rules for compact clusters on UPI [#7576](https://github.com/openshift/installer/pull/7576)
* [OCPBUGS-17866](https://issues.redhat.com/browse/OCPBUGS-17866): check GOOGLE_APPLICATION_CREDENTIALS env var [#6863](https://github.com/openshift/installer/pull/6863)
* [OCPBUGS-22773](https://issues.redhat.com/browse/OCPBUGS-22773): PowerVS: fix removeFromLoadBalancers [#7653](https://github.com/openshift/installer/pull/7653)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7650](https://github.com/openshift/installer/pull/7650)
* Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap [#7638](https://github.com/openshift/installer/pull/7638)
* [OCPBUGS-18387](https://issues.redhat.com/browse/OCPBUGS-18387): Add Azure ConfidentialVM capability and DiskEncryptionSet validations [#7469](https://github.com/openshift/installer/pull/7469)
* [OCPBUGS-22489](https://issues.redhat.com/browse/OCPBUGS-22489): destroy: gcp: fix destroying regional disks [#7643](https://github.com/openshift/installer/pull/7643)
* [OCPBUGS-22058](https://issues.redhat.com/browse/OCPBUGS-22058): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7590](https://github.com/openshift/installer/pull/7590)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Skip the deletion of instance profiles marked shared [#7537](https://github.com/openshift/installer/pull/7537)
* hack/go-lint: update golanci-lint to v1.53.1 [#7635](https://github.com/openshift/installer/pull/7635)
* [OCPBUGS-22655](https://issues.redhat.com/browse/OCPBUGS-22655): Bump Fedora CoreOS to latest stable [#7644](https://github.com/openshift/installer/pull/7644)
* bootkube.sh: drop final mention of `machine-os-content` [#7636](https://github.com/openshift/installer/pull/7636)
* update tested x86 instance type on 4.14 [#7639](https://github.com/openshift/installer/pull/7639)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Skip gatewayd units only on OKD agent-installer [#7629](https://github.com/openshift/installer/pull/7629)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Build and package Cluster API and providers [#7620](https://github.com/openshift/installer/pull/7620)
* [AGENT-713](https://issues.redhat.com/browse/AGENT-713): Use BM hosts in install-config if not defined in agent-config [#7531](https://github.com/openshift/installer/pull/7531)
* [MIXEDARCH-353](https://issues.redhat.com/browse/MIXEDARCH-353): Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage's manifest-list image [#7567](https://github.com/openshift/installer/pull/7567)
* openstack: dual stack UPI - create security group rules for IPv6 [#7552](https://github.com/openshift/installer/pull/7552)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): bump openshift/api [#7613](https://github.com/openshift/installer/pull/7613)
* [AGENT-718](https://issues.redhat.com/browse/AGENT-718): Add vSphere credentials to install-config overrides [#7593](https://github.com/openshift/installer/pull/7593)
* Revert #7428 "OCPBUGS-13664: Add KMS encryption keys if provided" [#7625](https://github.com/openshift/installer/pull/7625)
* [OCPBUGS-10906](https://issues.redhat.com/browse/OCPBUGS-10906): check extracted base iso coreos version is in sync [#7030](https://github.com/openshift/installer/pull/7030)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Enable gatewayd units only on RHCOS [#7580](https://github.com/openshift/installer/pull/7580)
* [OCPBUGS-21720](https://issues.redhat.com/browse/OCPBUGS-21720): images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 [#6813](https://github.com/openshift/installer/pull/6813)
* [CORS-2836](https://issues.redhat.com/browse/CORS-2836): Refactor Stages, encapsulate terraform [#7488](https://github.com/openshift/installer/pull/7488)
* [OCPBUGS-20356](https://issues.redhat.com/browse/OCPBUGS-20356): update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 [#7616](https://github.com/openshift/installer/pull/7616)
* [OCPBUGS-20364](https://issues.redhat.com/browse/OCPBUGS-20364): azure: validation: validate defaultMachinePlatform [#7584](https://github.com/openshift/installer/pull/7584)
* [OCPBUGS-20525](https://issues.redhat.com/browse/OCPBUGS-20525): aws: use security groups from defaultMachinePlatform [#7589](https://github.com/openshift/installer/pull/7589)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7428](https://github.com/openshift/installer/pull/7428)
* [OCPBUGS-5471](https://issues.redhat.com/browse/OCPBUGS-5471): Try to select rendezvousIP among non-worker hosts [#7443](https://github.com/openshift/installer/pull/7443)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Rectify GCP label key validation check [#7596](https://github.com/openshift/installer/pull/7596)
* Revert skipping integration test agent sno arm [#7561](https://github.com/openshift/installer/pull/7561)
* [OCPBUGS-20350](https://issues.redhat.com/browse/OCPBUGS-20350): vSphere,segfault on version check [#7575](https://github.com/openshift/installer/pull/7575)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093): skip agent-tui on OCI [#7512](https://github.com/openshift/installer/pull/7512)
* [OCPVE-675](https://issues.redhat.com/browse/OCPVE-675): feat: bump api to add OLM capability [#7495](https://github.com/openshift/installer/pull/7495)
* Enforcing the serial execution of the integration tests [#7591](https://github.com/openshift/installer/pull/7591)
* images: Cleanup CI Dockerfiles [#7507](https://github.com/openshift/installer/pull/7507)
* [OCPBUGS-20440](https://issues.redhat.com/browse/OCPBUGS-20440): Warn about host and target compatibility [#7582](https://github.com/openshift/installer/pull/7582)
* [OCPBUGS-19444](https://issues.redhat.com/browse/OCPBUGS-19444): Use changes to AgentClusterInstall during loading [#7506](https://github.com/openshift/installer/pull/7506)
* OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules [#7577](https://github.com/openshift/installer/pull/7577)
* Remove unused method [#7438](https://github.com/openshift/installer/pull/7438)
* PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality [#7564](https://github.com/openshift/installer/pull/7564)
* [OCPBUGS-19552](https://issues.redhat.com/browse/OCPBUGS-19552): Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved [#7516](https://github.com/openshift/installer/pull/7516)
* docs: Described process of adding vGPU capable nodes. [#6606](https://github.com/openshift/installer/pull/6606)
* [OCPBUGS-19086](https://issues.redhat.com/browse/OCPBUGS-19086): Check if nmstatectl executable exists in the system [#7492](https://github.com/openshift/installer/pull/7492)
* [OCPBUGS-16666](https://issues.redhat.com/browse/OCPBUGS-16666): Change where AdditionalTrustBundle is set [#7485](https://github.com/openshift/installer/pull/7485)
* [OCPBUGS-18455](https://issues.redhat.com/browse/OCPBUGS-18455): Unable to disable external CCM for platform external [#7533](https://github.com/openshift/installer/pull/7533)
* [OCPBUGS-18552](https://issues.redhat.com/browse/OCPBUGS-18552): Truncate vlan names defined in nmstate if > 15 chars [#7486](https://github.com/openshift/installer/pull/7486)
* OpenStack: enable IPv6 primary dual-stack cluster [#7259](https://github.com/openshift/installer/pull/7259)
* [OCPBUGS-20110](https://issues.redhat.com/browse/OCPBUGS-20110): Add an unit test - at least one interface must be defined for each node [#7555](https://github.com/openshift/installer/pull/7555)
* [OSASINFRA-3199](https://issues.redhat.com/browse/OSASINFRA-3199): Configure User-Agent for OpenStack API calls [#7548](https://github.com/openshift/installer/pull/7548)
* [OCPBUGS-17757](https://issues.redhat.com/browse/OCPBUGS-17757): check credentials type to handle different gcp authentication methods [#7422](https://github.com/openshift/installer/pull/7422)
* Docs: Fix openstack command for image update in upi installation [#7556](https://github.com/openshift/installer/pull/7556)
* PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions [#7563](https://github.com/openshift/installer/pull/7563)
* PowerVS: Remove deprecated errors package [#7544](https://github.com/openshift/installer/pull/7544)
* Disable pxe sno arm integration test [#7557](https://github.com/openshift/installer/pull/7557)
* Inefficient wait for all clusteroperators [#7535](https://github.com/openshift/installer/pull/7535)
* [OCPBUGS-15844](https://issues.redhat.com/browse/OCPBUGS-15844): Enable FIPS in agent ISO [#7540](https://github.com/openshift/installer/pull/7540)
* [OCPBUGS-20058](https://issues.redhat.com/browse/OCPBUGS-20058): Use updated ansible-core for Openstack image [#7549](https://github.com/openshift/installer/pull/7549)
* OWNERS: Remove obsolete agent reviewers [#7545](https://github.com/openshift/installer/pull/7545)
* [OCPBUGS-5728](https://issues.redhat.com/browse/OCPBUGS-5728): Log "agent wait-for" commands to .openshift_install.log [#7452](https://github.com/openshift/installer/pull/7452)
* [OCPBUGS-19092](https://issues.redhat.com/browse/OCPBUGS-19092): Enable serial console for external OCI platform [#7511](https://github.com/openshift/installer/pull/7511)
* [OCPBUGS-18690](https://issues.redhat.com/browse/OCPBUGS-18690): ic: azure: validate NVMe-only family types [#7500](https://github.com/openshift/installer/pull/7500)
* [CORS-2479](https://issues.redhat.com/browse/CORS-2479): agent: Ensure registries.conf is world readable [#6745](https://github.com/openshift/installer/pull/6745)
* add jbtrystram to coreOS approvers and reviewers [#7464](https://github.com/openshift/installer/pull/7464)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093), [OCPBUGS-19688](https://issues.redhat.com/browse/OCPBUGS-19688): Allow agent-tui to use serial console [#7526](https://github.com/openshift/installer/pull/7526)
* Tweaks to validateRendezvousIPNotWorker [#7437](https://github.com/openshift/installer/pull/7437)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Tag aws instance profiles. [#7510](https://github.com/openshift/installer/pull/7510)
* [OCPBUGS-19376](https://issues.redhat.com/browse/OCPBUGS-19376): GCP default value for service account [#7519](https://github.com/openshift/installer/pull/7519)
* [MULTIARCH-3701](https://issues.redhat.com/browse/MULTIARCH-3701): Enable ppc64le for agent installer [#7366](https://github.com/openshift/installer/pull/7366)
* pkg/asset/installconfig/powervs: fix dropped error [#7419](https://github.com/openshift/installer/pull/7419)
* [OCPBUGS-19699](https://issues.redhat.com/browse/OCPBUGS-19699): Remove warning about CPUPartitioning [#7527](https://github.com/openshift/installer/pull/7527)
* [OCPBUGS-18187](https://issues.redhat.com/browse/OCPBUGS-18187): Increase bootstrap timeout for vSphere platform by 30 mins [#7518](https://github.com/openshift/installer/pull/7518)
* [OCPBUGS-18830](https://issues.redhat.com/browse/OCPBUGS-18830): AWS terraform bootstrap destroy will not refresh state [#7491](https://github.com/openshift/installer/pull/7491)
* [OCPBUGS-12707](https://issues.redhat.com/browse/OCPBUGS-12707): always write AWS cloud.conf [#7514](https://github.com/openshift/installer/pull/7514)
* [AGENT-710](https://issues.redhat.com/browse/AGENT-710): Use invoker for bootstrap template generation [#7508](https://github.com/openshift/installer/pull/7508)
* [OCPBUGS-18876](https://issues.redhat.com/browse/OCPBUGS-18876): Pass CPUPartitioning via install-config overrides if set [#7513](https://github.com/openshift/installer/pull/7513)
* OpenStack: fix IPv6 docs [#7482](https://github.com/openshift/installer/pull/7482)
* [OCPBUGS-18945](https://issues.redhat.com/browse/OCPBUGS-18945): update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 [#7499](https://github.com/openshift/installer/pull/7499)
* LICENSE: Update [#7502](https://github.com/openshift/installer/pull/7502)
* [OCPBUGS-19286](https://issues.redhat.com/browse/OCPBUGS-19286): Updating ose-installer-artifacts images to be consistent with ART [#7496](https://github.com/openshift/installer/pull/7496)
* [SPLAT-1170](https://issues.redhat.com/browse/SPLAT-1170): enable cloud controller manager type to be defined [#7457](https://github.com/openshift/installer/pull/7457)
* OpenStack: Set external network for cloud-provider [#7411](https://github.com/openshift/installer/pull/7411)
* [OCPBUGS-17724](https://issues.redhat.com/browse/OCPBUGS-17724): Graceful fail for AWS getUser on destroy [#7429](https://github.com/openshift/installer/pull/7429)
* AGENT: publish services diagrams [#7323](https://github.com/openshift/installer/pull/7323)
* [OCPBUGS-19149](https://issues.redhat.com/browse/OCPBUGS-19149): Updating ose-baremetal-installer images to be consistent with ART [#7494](https://github.com/openshift/installer/pull/7494)
* [OCPBUGS-19130](https://issues.redhat.com/browse/OCPBUGS-19130): Updating ose-installer images to be consistent with ART [#7493](https://github.com/openshift/installer/pull/7493)
* [OCPBUGS-17218](https://issues.redhat.com/browse/OCPBUGS-17218): Warn when firewall rull missing. [#7417](https://github.com/openshift/installer/pull/7417)
* [OSASINFRA-3236](https://issues.redhat.com/browse/OSASINFRA-3236): deps: Bump gophercloud to v1.6.0 [#7208](https://github.com/openshift/installer/pull/7208)
* [OCPBUGS-19037](https://issues.redhat.com/browse/OCPBUGS-19037): Handle agent tui failure gracefully [#7490](https://github.com/openshift/installer/pull/7490)
* [OCPBUGS-19017](https://issues.redhat.com/browse/OCPBUGS-19017): Add Net capabilities to dnsmasq container [#7487](https://github.com/openshift/installer/pull/7487)
* [OCPBUGS-18113](https://issues.redhat.com/browse/OCPBUGS-18113): Do not set FailureDomains on CPMS when in a single zone Azure region [#7448](https://github.com/openshift/installer/pull/7448)
* [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7450](https://github.com/openshift/installer/pull/7450)
* [OCPBUGS-18304](https://issues.redhat.com/browse/OCPBUGS-18304): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7451](https://github.com/openshift/installer/pull/7451)
* Implement workaround to allow SNO installations for OKD/FCOS [#7445](https://github.com/openshift/installer/pull/7445)
* [Full changelog](https://github.com/openshift/installer/compare/b6457e9f2cd4849b9c336742af469ae2058a0984...3bab4e95dfd7faa115e58597909fce56b0c6b759)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/73a72cc821224eb7ad0fad25d3bcc8272658238b)

* [OCPBUGS-30876](https://issues.redhat.com/browse/OCPBUGS-30876): Bump golang-protobuf version [#214](https://github.com/openshift/cluster-api-provider-baremetal/pull/214)
* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [OCPBUGS-24108](https://issues.redhat.com/browse/OCPBUGS-24108): Updating baremetal-machine-controller-container image to be consistent with ART [#205](https://github.com/openshift/cluster-api-provider-baremetal/pull/205)
* NO-ISSUE: Log when applying updates to BareMetalHost [#203](https://github.com/openshift/cluster-api-provider-baremetal/pull/203)
* [OCPBUGS-21794](https://issues.redhat.com/browse/OCPBUGS-21794): Uplift x/net to v0.17.0 [#197](https://github.com/openshift/cluster-api-provider-baremetal/pull/197)
* [OCPBUGS-19178](https://issues.redhat.com/browse/OCPBUGS-19178): Updating baremetal-machine-controller images to be consistent with ART [#196](https://github.com/openshift/cluster-api-provider-baremetal/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb20cdac93ab9647e9c9cabafb45c7811789b477...73a72cc821224eb7ad0fad25d3bcc8272658238b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/62a7d56e20785c3f4cf02cb2511270a7aa32deea)

* [OCPBUGS-38939](https://issues.redhat.com/browse/OCPBUGS-38939): [OCP] Ability to disable agent power off after deployment [#373](https://github.com/openshift/baremetal-operator/pull/373)
* [OCPBUGS-34682](https://issues.redhat.com/browse/OCPBUGS-34682): PreprovisioningImage should not be created on poweroff [#358](https://github.com/openshift/baremetal-operator/pull/358)
* [OCPBUGS-24117](https://issues.redhat.com/browse/OCPBUGS-24117): Updating ose-baremetal-operator-container image to be consistent with ART [#323](https://github.com/openshift/baremetal-operator/pull/323)
* [METAL-376](https://issues.redhat.com/browse/METAL-376): Merge upstream [#322](https://github.com/openshift/baremetal-operator/pull/322)
* [METAL-376](https://issues.redhat.com/browse/METAL-376): Re-enable RAID interfaces [#319](https://github.com/openshift/baremetal-operator/pull/319)
* [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): Do not update instance_info and deploy_interface for active nodes [#316](https://github.com/openshift/baremetal-operator/pull/316)
* [OCPBUGS-8764](https://issues.redhat.com/browse/OCPBUGS-8764): Merge upstream [#315](https://github.com/openshift/baremetal-operator/pull/315)
* Merge upstream [#314](https://github.com/openshift/baremetal-operator/pull/314)
* [OCPBUGS-21736](https://issues.redhat.com/browse/OCPBUGS-21736): Uplift x/net to v0.17.0 [#313](https://github.com/openshift/baremetal-operator/pull/313)
* Merge upstream [#303](https://github.com/openshift/baremetal-operator/pull/303)
* [OCPBUGS-19191](https://issues.redhat.com/browse/OCPBUGS-19191): Updating ose-baremetal-operator images to be consistent with ART [#302](https://github.com/openshift/baremetal-operator/pull/302)
* Merge upstream [#301](https://github.com/openshift/baremetal-operator/pull/301)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/68e882497c1ff28c6a7361c5f188819edc823c5a...62a7d56e20785c3f4cf02cb2511270a7aa32deea)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)

* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Change mechanism of debug flag [#325](https://github.com/openshift/baremetal-runtimecfg/pull/325)
* [OCPBUGS-36278](https://issues.redhat.com/browse/OCPBUGS-36278): Fix handling of ELB Node IP detection [#322](https://github.com/openshift/baremetal-runtimecfg/pull/322)
* [OCPBUGS-35543](https://issues.redhat.com/browse/OCPBUGS-35543): Add support for OVN HostCidrs annotation [#319](https://github.com/openshift/baremetal-runtimecfg/pull/319)
* [OCPBUGS-32024](https://issues.redhat.com/browse/OCPBUGS-32024): Decrease log level when detecting node IP [#304](https://github.com/openshift/baremetal-runtimecfg/pull/304)
* [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299)
* [OCPBUGS-24070](https://issues.redhat.com/browse/OCPBUGS-24070): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#289](https://github.com/openshift/baremetal-runtimecfg/pull/289)
* [OCPBUGS-26927](https://issues.redhat.com/browse/OCPBUGS-26927): Add .snyk file to ignore vendor and test files [#293](https://github.com/openshift/baremetal-runtimecfg/pull/293)
* [CORS-2818](https://issues.redhat.com/browse/CORS-2818): Adding ability to render Cloud LB IPs [#286](https://github.com/openshift/baremetal-runtimecfg/pull/286)
* [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#287](https://github.com/openshift/baremetal-runtimecfg/pull/287)
* [OCPBUGS-22204](https://issues.redhat.com/browse/OCPBUGS-22204): deps: upgrade x/sys [#280](https://github.com/openshift/baremetal-runtimecfg/pull/280)
* [OCPBUGS-19492](https://issues.redhat.com/browse/OCPBUGS-19492): Increase timeout for bootstrap kubeapi [#276](https://github.com/openshift/baremetal-runtimecfg/pull/276)
* [OCPBUGS-19098](https://issues.redhat.com/browse/OCPBUGS-19098): Updating baremetal-runtimecfg images to be consistent with ART [#274](https://github.com/openshift/baremetal-runtimecfg/pull/274)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d...1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/82316376e25f6453b58258df6bf1e11ec4abb670)

* [OCPBUGS-42726](https://issues.redhat.com/browse/OCPBUGS-42726): Check cast result in adm prune deployments to prevent panic [#1893](https://github.com/openshift/oc/pull/1893)
* [OCPBUGS-39426](https://issues.redhat.com/browse/OCPBUGS-39426): Ignore pruning when deployment points to replicationcontroller [#1865](https://github.com/openshift/oc/pull/1865)
* [OCPBUGS-36329](https://issues.redhat.com/browse/OCPBUGS-36329): Set required-scc annotation to privileged for node debug pods [#1818](https://github.com/openshift/oc/pull/1818)
* [OCPBUGS-35201](https://issues.redhat.com/browse/OCPBUGS-35201): Bump joelanford/ignore to bump go-git to 5.11.0 [#1798](https://github.com/openshift/oc/pull/1798)
* [OCPBUGS-32840](https://issues.redhat.com/browse/OCPBUGS-32840): Bump go-jose indirect reference to 2.6.3 [#1749](https://github.com/openshift/oc/pull/1749)
* [OCPBUGS-31879](https://issues.redhat.com/browse/OCPBUGS-31879): Add OIDC specific certificate authority bundle flag [#1730](https://github.com/openshift/oc/pull/1730)
* [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Remove some of newapp unit tests relying on external deprecated images [#1726](https://github.com/openshift/oc/pull/1726)
* [OCPBUGS-30286](https://issues.redhat.com/browse/OCPBUGS-30286): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1698](https://github.com/openshift/oc/pull/1698)
* [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696)
* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [WRKLDS-1041](https://issues.redhat.com/browse/WRKLDS-1041): oc login: Built-in cred exec plugin implementation and wiring [#1658](https://github.com/openshift/oc/pull/1658)
* [OCPBUGS-24695](https://issues.redhat.com/browse/OCPBUGS-24695): Remove deprecated password defaulting in default config flag [#1620](https://github.com/openshift/oc/pull/1620)
* [OCPBUGS-25016](https://issues.redhat.com/browse/OCPBUGS-25016): Bump api to include the new CloudCredential cap [#1623](https://github.com/openshift/oc/pull/1623)
* [OCPBUGS-24375](https://issues.redhat.com/browse/OCPBUGS-24375): Overwrite template's namespace with the explicit one [#1612](https://github.com/openshift/oc/pull/1612)
* [OCPBUGS-23723](https://issues.redhat.com/browse/OCPBUGS-23723): Add .snyk file to exclude vendor and ignore unit tests [#1604](https://github.com/openshift/oc/pull/1604)
* [ACM-7713](https://issues.redhat.com/browse/ACM-7713): Skip related objects which are invalid [#1550](https://github.com/openshift/oc/pull/1550)
* [OTA-1035](https://issues.redhat.com/browse/OTA-1035): `adm upgrade status` Add control plane update status [#1597](https://github.com/openshift/oc/pull/1597)
* [OCPBUGS-23071](https://issues.redhat.com/browse/OCPBUGS-23071): Mention inspection completion in the error message [#1601](https://github.com/openshift/oc/pull/1601)
* NO-JIRA: Add client version in must-gather summary [#1603](https://github.com/openshift/oc/pull/1603)
* [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): Promote some experimental commands, deprecate others [#1596](https://github.com/openshift/oc/pull/1596)
* [WRKLDS-860](https://issues.redhat.com/browse/WRKLDS-860): Add volume usage percentage checker script in must-gather's gather container [#1533](https://github.com/openshift/oc/pull/1533)
* [OTA-1035](https://issues.redhat.com/browse/OTA-1035): Allow testing `adm upgrade status` on mock data [#1595](https://github.com/openshift/oc/pull/1595)
* NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594)
* Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591)
* [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588)
* moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532)
* [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586)
* pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583)
* oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585)
* create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582)
* pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581)
* [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557)
* [OCPBUGS-20381](https://issues.redhat.com/browse/OCPBUGS-20381): Bump golang.org/x/net to v0.17.0 [#1578](https://github.com/openshift/oc/pull/1578)
* [OCPBUGS-20528](https://issues.redhat.com/browse/OCPBUGS-20528): Revert "OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror" [#1575](https://github.com/openshift/oc/pull/1575)
* [OCPBUGS-20474](https://issues.redhat.com/browse/OCPBUGS-20474): Set ImportPolicy to PreserveOriginal to honor --keep-manifest-list when mirroring a payload to an image stream [#1572](https://github.com/openshift/oc/pull/1572)
* [OCPBUGS-20342](https://issues.redhat.com/browse/OCPBUGS-20342): Reflect container's exit code for long running tasks not attached to terminal [#1571](https://github.com/openshift/oc/pull/1571)
* [OCPBUGS-20063](https://issues.redhat.com/browse/OCPBUGS-20063): regeneratemco: explicitly check for PlatformStatus field [#1555](https://github.com/openshift/oc/pull/1555)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Bump distribution/v3 to sync with oc-mirror [#1556](https://github.com/openshift/oc/pull/1556)
* [OCPBUGS-20181](https://issues.redhat.com/browse/OCPBUGS-20181): Use quay redis image instead docker mysql [#1559](https://github.com/openshift/oc/pull/1559)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Introduce refreshable dynamic credential store for image manifests [#1540](https://github.com/openshift/oc/pull/1540)
* Updating excluded list of  unsupported oc adm commands in MicroShift [#1558](https://github.com/openshift/oc/pull/1558)
* [WINC-692](https://issues.redhat.com/browse/WINC-692): Add Windows node functionality to debug command [#1524](https://github.com/openshift/oc/pull/1524)
* [WRKLDS-537](https://issues.redhat.com/browse/WRKLDS-537): oc adm release info: Add --first-parent to git log for simplification [#1552](https://github.com/openshift/oc/pull/1552)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#1547](https://github.com/openshift/oc/pull/1547)
* [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545)
* [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544)
* [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548)
* [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546)
* [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542)
* [Full changelog](https://github.com/openshift/oc/compare/44b3ac26e654777e0283759d45a2b3351823fc5e...82316376e25f6453b58258df6bf1e11ec4abb670)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/106e6a0ed9e660c6d494ffed672b713e8ad1d8b9)

* [OCPBUGS-43338](https://issues.redhat.com/browse/OCPBUGS-43338): Update github.com/sirupsen/logrus v1.9.3 [#768](https://github.com/openshift/cloud-credential-operator/pull/768)
* [OCPBUGS-41235](https://issues.redhat.com/browse/OCPBUGS-41235): List secrets in batches to avoid api timeout [#754](https://github.com/openshift/cloud-credential-operator/pull/754)
* [OCPBUGS-38377](https://issues.redhat.com/browse/OCPBUGS-38377): Update google.golang.org/grpc v1.65.0 [#749](https://github.com/openshift/cloud-credential-operator/pull/749)
* [OCPBUGS-37461](https://issues.redhat.com/browse/OCPBUGS-37461): Set required-scc for openshift workloads [#736](https://github.com/openshift/cloud-credential-operator/pull/736)
* [OCPBUGS-37277](https://issues.redhat.com/browse/OCPBUGS-37277): Update to cloud.google.com/go/storage v1.43.0 [#729](https://github.com/openshift/cloud-credential-operator/pull/729)
* [OCPBUGS-37288](https://issues.redhat.com/browse/OCPBUGS-37288): GCP passthrough permissions check to ignore problematic permissions. [#730](https://github.com/openshift/cloud-credential-operator/pull/730)
* [OCPBUGS-37419](https://issues.redhat.com/browse/OCPBUGS-37419): SNYK ignore go-client misreporting [#738](https://github.com/openshift/cloud-credential-operator/pull/738)
* [OCPBUGS-37061](https://issues.redhat.com/browse/OCPBUGS-37061): Update to azidentity v1.7.0 [#728](https://github.com/openshift/cloud-credential-operator/pull/728)
* [OCPBUGS-36030](https://issues.redhat.com/browse/OCPBUGS-36030): IBM/go-sdk-core update to v5.17.4 [#720](https://github.com/openshift/cloud-credential-operator/pull/720)
* [OCPBUGS-36291](https://issues.redhat.com/browse/OCPBUGS-36291): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#709](https://github.com/openshift/cloud-credential-operator/pull/709)
* [OCPBUGS-32900](https://issues.redhat.com/browse/OCPBUGS-32900): Upgrade go-jose module to 2.6.3 [#696](https://github.com/openshift/cloud-credential-operator/pull/696)
* [OCPBUGS-31924](https://issues.redhat.com/browse/OCPBUGS-31924): aws: remove non-existent permission [#691](https://github.com/openshift/cloud-credential-operator/pull/691)
* [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686)
* [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675)
* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [OCPBUGS-27919](https://issues.redhat.com/browse/OCPBUGS-27919): Report manualpodidentity mode in metrics when using Azure Workload Identity [#661](https://github.com/openshift/cloud-credential-operator/pull/661)
* [OCPBUGS-27117](https://issues.redhat.com/browse/OCPBUGS-27117): Write manifests when AWS IAM roles already exist. [#653](https://github.com/openshift/cloud-credential-operator/pull/653)
* [OCPBUGS-26510](https://issues.redhat.com/browse/OCPBUGS-26510): Use live client for metrics [#646](https://github.com/openshift/cloud-credential-operator/pull/646)
* [OCPVE-647](https://issues.redhat.com/browse/OCPVE-647): annotate manifests with capability name [#594](https://github.com/openshift/cloud-credential-operator/pull/594)
* [CCO-338](https://issues.redhat.com/browse/CCO-338): cmd/operator: use correct kubeconfig for all clients [#638](https://github.com/openshift/cloud-credential-operator/pull/638)
* [CCO-244](https://issues.redhat.com/browse/CCO-244): gcp-ro-credentialrequest to use granular permissions [#626](https://github.com/openshift/cloud-credential-operator/pull/626)
* [OCPBUGS-23178](https://issues.redhat.com/browse/OCPBUGS-23178): Enable GCP sync to undelete custom roles [#637](https://github.com/openshift/cloud-credential-operator/pull/637)
* [OCPBUGS-13597](https://issues.redhat.com/browse/OCPBUGS-13597): Discover AWS dns suffix from partition and region. [#596](https://github.com/openshift/cloud-credential-operator/pull/596)
* [CCO-372](https://issues.redhat.com/browse/CCO-372): Azure Workload Identity info in CredsRequests creates a Secret [#587](https://github.com/openshift/cloud-credential-operator/pull/587)
* [OCPBUGS-20478](https://issues.redhat.com/browse/OCPBUGS-20478): Explicitly set the vsphere secret credential data on sync. [#628](https://github.com/openshift/cloud-credential-operator/pull/628)
* [CCO-440](https://issues.redhat.com/browse/CCO-440): Bump k8s deps to 0.28.3 [#614](https://github.com/openshift/cloud-credential-operator/pull/614)
* [CCO-192](https://issues.redhat.com/browse/CCO-192): Use Leases for leader election [#627](https://github.com/openshift/cloud-credential-operator/pull/627)
* [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611)
* snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613)
* [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610)
* Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609)
* [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607)
* Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606)
* Revert #592 "CCO-421: *: split pod identity webhooks from core controller" [#604](https://github.com/openshift/cloud-credential-operator/pull/604)
* [CCO-421](https://issues.redhat.com/browse/CCO-421): *: split pod identity webhooks from core controller [#592](https://github.com/openshift/cloud-credential-operator/pull/592)
* Docs: azure workload identity no longer requires TechPreviewNoUpgrade [#603](https://github.com/openshift/cloud-credential-operator/pull/603)
* [CCO-437](https://issues.redhat.com/browse/CCO-437): Document steps for in-place migration to Azure AD Workload Identity. [#598](https://github.com/openshift/cloud-credential-operator/pull/598)
* [OCPBUGS-19123](https://issues.redhat.com/browse/OCPBUGS-19123): Updating ose-cloud-credential-operator images to be consistent with ART [#600](https://github.com/openshift/cloud-credential-operator/pull/600)
* [OCPBUGS-18246](https://issues.redhat.com/browse/OCPBUGS-18246): Add networkResourceGroupName parameter for Azure [#597](https://github.com/openshift/cloud-credential-operator/pull/597)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a0245d57d1e629ce4521eea53d7829530545f5d8...106e6a0ed9e660c6d494ffed672b713e8ad1d8b9)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/6864da0642026d6004df171539fa9fd5bcb6c2df)

* [OCPBUGS-33780](https://issues.redhat.com/browse/OCPBUGS-33780): Avoid panic when looking up attachedOutboundRule.ID in azure [#145](https://github.com/openshift/cloud-network-config-controller/pull/145)
* [OCPBUGS-31754](https://issues.redhat.com/browse/OCPBUGS-31754): Avoid nil pointer panic while assigning private IP on Azure [#137](https://github.com/openshift/cloud-network-config-controller/pull/137)
* Kube 1.28 rebase for cloud-network-config-controller [#124](https://github.com/openshift/cloud-network-config-controller/pull/124)
* Bump CI image [#123](https://github.com/openshift/cloud-network-config-controller/pull/123)
* [OCPBUGS-5491](https://issues.redhat.com/browse/OCPBUGS-5491): Azure: skip backend pool if attached to an outbound rule [#121](https://github.com/openshift/cloud-network-config-controller/pull/121)
* [OCPBUGS-19163](https://issues.redhat.com/browse/OCPBUGS-19163): Updating ose-cloud-network-config-controller images to be consistent with ART [#122](https://github.com/openshift/cloud-network-config-controller/pull/122)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/1bd04641f210d19370f782086949f827bfb7a264...6864da0642026d6004df171539fa9fd5bcb6c2df)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)

* [OCPBUGS-34795](https://issues.redhat.com/browse/OCPBUGS-34795): set required-scc for openshift workloads [#675](https://github.com/openshift/cluster-authentication-operator/pull/675)
* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [OCPBUGS-24081](https://issues.redhat.com/browse/OCPBUGS-24081): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#643](https://github.com/openshift/cluster-authentication-operator/pull/643)
* [OCPBUGS-24217](https://issues.redhat.com/browse/OCPBUGS-24217): Annotate certs with ownership information [#642](https://github.com/openshift/cluster-authentication-operator/pull/642)
* [OCPBUGS-21719](https://issues.redhat.com/browse/OCPBUGS-21719): go.mod: bump golang.org/x/net to v0.17.0 [#635](https://github.com/openshift/cluster-authentication-operator/pull/635)
* [OCPBUGS-17987](https://issues.redhat.com/browse/OCPBUGS-17987): generate only >=0 number of random bits [#629](https://github.com/openshift/cluster-authentication-operator/pull/629)
* [OCPBUGS-19125](https://issues.redhat.com/browse/OCPBUGS-19125): Updating ose-cluster-authentication-operator images to be consistent with ART [#634](https://github.com/openshift/cluster-authentication-operator/pull/634)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e...7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/e78ea20540f3f445f7417cf4fe138738f3a4143a)

* [OCPBUGS-40930](https://issues.redhat.com/browse/OCPBUGS-40930): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#315](https://github.com/openshift/kubernetes-autoscaler/pull/315)
* [OCPBUGS-33885](https://issues.redhat.com/browse/OCPBUGS-33885): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#301](https://github.com/openshift/kubernetes-autoscaler/pull/301)
* [OCPBUGS-31464](https://issues.redhat.com/browse/OCPBUGS-31464): add check for taint.value == nil [#293](https://github.com/openshift/kubernetes-autoscaler/pull/293)
* [OCPBUGS-27750](https://issues.redhat.com/browse/OCPBUGS-27750): Fix unstructured taint parsing in Cluster API provider [#282](https://github.com/openshift/kubernetes-autoscaler/pull/282)
* [OCPBUGS-23576](https://issues.redhat.com/browse/OCPBUGS-23576): Add Snyk file to exclude vendor directory on scan [#275](https://github.com/openshift/kubernetes-autoscaler/pull/275)
* [OCPBUGS-24066](https://issues.redhat.com/browse/OCPBUGS-24066): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#270](https://github.com/openshift/kubernetes-autoscaler/pull/270)
* [OCPBUGS-24146](https://issues.redhat.com/browse/OCPBUGS-24146): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#269](https://github.com/openshift/kubernetes-autoscaler/pull/269)
* [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265)
* Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261)
* [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262)
* [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c8e7aaeda2819e1f61a392541ef8537308faaf53...e78ea20540f3f445f7417cf4fe138738f3a4143a)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8425d88b5bedd5d22acfb0f6c0edf929ec401288)

* [OCPBUGS-41798](https://issues.redhat.com/browse/OCPBUGS-41798): set required-scc for openshift workloads [#332](https://github.com/openshift/cluster-autoscaler-operator/pull/332)
* [OCPBUGS-31947](https://issues.redhat.com/browse/OCPBUGS-31947): Update x/net to v0.24.0 [#319](https://github.com/openshift/cluster-autoscaler-operator/pull/319)
* [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307)
* [OCPBUGS-24102](https://issues.redhat.com/browse/OCPBUGS-24102): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-autoscaler-operator/pull/302)
* [OCPCLOUD-2137](https://issues.redhat.com/browse/OCPCLOUD-2137): Check scale from zero annotations on MachineSets [#294](https://github.com/openshift/cluster-autoscaler-operator/pull/294)
* [OCPBUGS-21791](https://issues.redhat.com/browse/OCPBUGS-21791): Bump x/net package to v0.17.0 [#295](https://github.com/openshift/cluster-autoscaler-operator/pull/295)
* Update OWNERS [#296](https://github.com/openshift/cluster-autoscaler-operator/pull/296)
* [OCPCLOUD-2196](https://issues.redhat.com/browse/OCPCLOUD-2196): Update dependencies k8s 1.28 [#293](https://github.com/openshift/cluster-autoscaler-operator/pull/293)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#284](https://github.com/openshift/cluster-autoscaler-operator/pull/284)
* [OCPBUGS-18954](https://issues.redhat.com/browse/OCPBUGS-18954): Ensure status reporter caches exit if they don't sync [#285](https://github.com/openshift/cluster-autoscaler-operator/pull/285)
* [OCPBUGS-19411](https://issues.redhat.com/browse/OCPBUGS-19411): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#287](https://github.com/openshift/cluster-autoscaler-operator/pull/287)
* [OCPBUGS-19169](https://issues.redhat.com/browse/OCPBUGS-19169): Updating ose-cluster-autoscaler-operator images to be consistent with ART [#286](https://github.com/openshift/cluster-autoscaler-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/32854baae386c4d6854d7fd8658fdff75588e919...8425d88b5bedd5d22acfb0f6c0edf929ec401288)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/934c2181e98f11c1a2629bd34d4a09e61323ffd6)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#443](https://github.com/openshift/cluster-baremetal-operator/pull/443)
* [OCPBUGS-31948](https://issues.redhat.com/browse/OCPBUGS-31948): bump x/net to 0.23.0 [#437](https://github.com/openshift/cluster-baremetal-operator/pull/437)
* [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405)
* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [OCPBUGS-20572](https://issues.redhat.com/browse/OCPBUGS-20572): Obsolete protocols for webhook [#375](https://github.com/openshift/cluster-baremetal-operator/pull/375)
* [OCPBUGS-24125](https://issues.redhat.com/browse/OCPBUGS-24125): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#392](https://github.com/openshift/cluster-baremetal-operator/pull/392)
* NO-ISSUE: Fix ordering problem in the unit tests [#390](https://github.com/openshift/cluster-baremetal-operator/pull/390)
* [OCPBUGS-23131](https://issues.redhat.com/browse/OCPBUGS-23131), [OCPBUGS-23149](https://issues.redhat.com/browse/OCPBUGS-23149): fix IRONIC_EXTERNAL_URL_V6 [#380](https://github.com/openshift/cluster-baremetal-operator/pull/380)
* [MGMT-16047](https://issues.redhat.com/browse/MGMT-16047): update dependencies [#383](https://github.com/openshift/cluster-baremetal-operator/pull/383)
* NO-ISSUE: Stop linting when building the image [#343](https://github.com/openshift/cluster-baremetal-operator/pull/343)
* [OCPBUGS-20563](https://issues.redhat.com/browse/OCPBUGS-20563): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#374](https://github.com/openshift/cluster-baremetal-operator/pull/374)
* [OCPBUGS-17003](https://issues.redhat.com/browse/OCPBUGS-17003): Trigger reconcile on service-ca CO [#365](https://github.com/openshift/cluster-baremetal-operator/pull/365)
* [OCPBUGS-21741](https://issues.redhat.com/browse/OCPBUGS-21741): Uplift x/net to v0.17.0 [#368](https://github.com/openshift/cluster-baremetal-operator/pull/368)
* Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes [#352](https://github.com/openshift/cluster-baremetal-operator/pull/352)
* [OCPBUGS-18788](https://issues.redhat.com/browse/OCPBUGS-18788): Remove metrics port from baremetal-operator [#361](https://github.com/openshift/cluster-baremetal-operator/pull/361)
* [OCPBUGS-19203](https://issues.redhat.com/browse/OCPBUGS-19203): Updating ose-cluster-baremetal-operator images to be consistent with ART [#362](https://github.com/openshift/cluster-baremetal-operator/pull/362)
* [OCPBUGS-17589](https://issues.redhat.com/browse/OCPBUGS-17589): Guard against nil PlatformStatus [#359](https://github.com/openshift/cluster-baremetal-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/affcfb54666c47e569d1ba4f2e44aeaf9ef28bf7...934c2181e98f11c1a2629bd34d4a09e61323ffd6)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e)

* [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101)
* [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/93fba13f576831ba0953190663ab26aaf5766984...0849c462de13b9a5765b9a8c882acb9e6e8bf39e)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2053e13cb0fda9188e9b685db83c1e1f492e6efa)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#206](https://github.com/openshift/cluster-api/pull/206)
* [OCPBUGS-33200](https://issues.redhat.com/browse/OCPBUGS-33200): Bump protobuf to v1.33.0 [#204](https://github.com/openshift/cluster-api/pull/204)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#201](https://github.com/openshift/cluster-api/pull/201)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198)
* [OCPBUGS-24311](https://issues.redhat.com/browse/OCPBUGS-24311): Updating ose-cluster-api-container image to be consistent with ART [#188](https://github.com/openshift/cluster-api/pull/188)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#189](https://github.com/openshift/cluster-api/pull/189)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#179](https://github.com/openshift/cluster-api/pull/179)
* Update OWNERS [#183](https://github.com/openshift/cluster-api/pull/183)
* [OCPBUGS-21645](https://issues.redhat.com/browse/OCPBUGS-21645): Bump golang.org/x/net to v0.17.0 [#182](https://github.com/openshift/cluster-api/pull/182)
* [OCPBUGS-17286](https://issues.redhat.com/browse/OCPBUGS-17286), [OCPCLOUD-2222](https://issues.redhat.com/browse/OCPCLOUD-2222): Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master [#181](https://github.com/openshift/cluster-api/pull/181)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-cluster-api images to be consistent with ART [#180](https://github.com/openshift/cluster-api/pull/180)
* [Full changelog](https://github.com/openshift/cluster-api/compare/ae83c5533706d539dc492229eebd67533468e48b...2053e13cb0fda9188e9b685db83c1e1f492e6efa)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/203435ef87a2bed13fc43db893deb8bee1dff97f)

* [OCPBUGS-37849](https://issues.redhat.com/browse/OCPBUGS-37849): fix: sort CredentialsRequest manifests after namespace [#193](https://github.com/openshift/cluster-capi-operator/pull/193)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests-gen: also add CustomNoUpgrade annotation value [#166](https://github.com/openshift/cluster-capi-operator/pull/166)
* [OCPBUGS-30118](https://issues.redhat.com/browse/OCPBUGS-30118): create openshift-cluster-api namespace in CustomNoUpgrade [#167](https://github.com/openshift/cluster-capi-operator/pull/167)
* [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160)
* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155)
* [OCPBUGS-24150](https://issues.redhat.com/browse/OCPBUGS-24150): Updating ose-cluster-capi-operator-container image to be consistent with ART [#147](https://github.com/openshift/cluster-capi-operator/pull/147)
* [OCPVE-787](https://issues.redhat.com/browse/OCPVE-787): annotate credentials request manifests [#143](https://github.com/openshift/cluster-capi-operator/pull/143)
* [OCPBUGS-24301](https://issues.redhat.com/browse/OCPBUGS-24301): openstack: Don't substitute manager container command [#148](https://github.com/openshift/cluster-capi-operator/pull/148)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255), [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): refactor: remove cluster-api-operator, rework assets/manifests [#121](https://github.com/openshift/cluster-capi-operator/pull/121)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): Add granular permissions for Azure [#124](https://github.com/openshift/cluster-capi-operator/pull/124)
* [OCPBUGS-19842](https://issues.redhat.com/browse/OCPBUGS-19842): Limit deletion webhook to openshift namespace [#135](https://github.com/openshift/cluster-capi-operator/pull/135)
* [OCPBUGS-23467](https://issues.redhat.com/browse/OCPBUGS-23467): manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration [#145](https://github.com/openshift/cluster-capi-operator/pull/145)
* [OCPBUGS-19841](https://issues.redhat.com/browse/OCPBUGS-19841): Add format key into the worker-user-data secret [#140](https://github.com/openshift/cluster-capi-operator/pull/140)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Bump CAPG to v1.5.0 [#142](https://github.com/openshift/cluster-capi-operator/pull/142)
* [OCPBUGS-22403](https://issues.redhat.com/browse/OCPBUGS-22403): Disable CAPI Azure Infrastructure Provider [#141](https://github.com/openshift/cluster-capi-operator/pull/141)
* Update OWNERS [#133](https://github.com/openshift/cluster-capi-operator/pull/133)
* [OCPBUGS-17287](https://issues.redhat.com/browse/OCPBUGS-17287), [OCPBUGS-21642](https://issues.redhat.com/browse/OCPBUGS-21642), [OCPCLOUD-2214](https://issues.redhat.com/browse/OCPCLOUD-2214): Bump capi/capi providers/k8s 1.27 [#132](https://github.com/openshift/cluster-capi-operator/pull/132)
* [OCPBUGS-19240](https://issues.redhat.com/browse/OCPBUGS-19240): Updating ose-cluster-capi-operator images to be consistent with ART [#129](https://github.com/openshift/cluster-capi-operator/pull/129)
* [MULTIARCH-3761](https://issues.redhat.com/browse/MULTIARCH-3761): Power VS CAPI Remove deprecated flag [#128](https://github.com/openshift/cluster-capi-operator/pull/128)
* [OCPBUGS-18504](https://issues.redhat.com/browse/OCPBUGS-18504): e2e: set ControlPlaneEndpoint in AWSCluster [#126](https://github.com/openshift/cluster-capi-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60cc3e65ff4817e43fe3114bccbbdb14374bac2c...203435ef87a2bed13fc43db893deb8bee1dff97f)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/56181136d91dff7bac4aa5acb2c1461381ac6e34)

* [OCPBUGS-36821](https://issues.redhat.com/browse/OCPBUGS-36821): Increase GCP Concurrent Service Syncs to 10 [#359](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/359)
* [OCPBUGS-33547](https://issues.redhat.com/browse/OCPBUGS-33547): update azure and ash tolerations on node manager [#343](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/343)
* Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC [#339](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/339)
* [OCPBUGS-25751](https://issues.redhat.com/browse/OCPBUGS-25751): Add Snyk file to exclude vendor directory on scan [#314](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/314)
* [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320)
* [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319)
* [OCPVE-788](https://issues.redhat.com/browse/OCPVE-788): annotate credentials request manifests [#293](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/293)
* Undo TRT-1378: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#306](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/306)
* [TRT-1378](https://issues.redhat.com/browse/TRT-1378): Revert #304 "Undo TRT-1374: Revert for \"OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS\"" [#305](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/305)
* Undo TRT-1374: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#304](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/304)
* [OCPBUGS-24127](https://issues.redhat.com/browse/OCPBUGS-24127): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/302)
* [TRT-1374](https://issues.redhat.com/browse/TRT-1374): Revert #301 "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#303](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/303)
* [OCPCLOUD-2278](https://issues.redhat.com/browse/OCPCLOUD-2278): Add kube-rbac-proxy container & ensure metrics are only available via HTTPS [#301](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/301)
* [OCPBUGS-23996](https://issues.redhat.com/browse/OCPBUGS-23996): trust bundle CA controller: add owner annotation for ccm-trusted-ca configmap [#300](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/300)
* [OCPBUGS-23308](https://issues.redhat.com/browse/OCPBUGS-23308): Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only [#299](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/299)
* [OSASINFRA-3289](https://issues.redhat.com/browse/OSASINFRA-3289): OpenStack: Remove Kuryr bits [#294](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/294)
* [OSASINFRA-3284](https://issues.redhat.com/browse/OSASINFRA-3284): Add Events to OpenStack's RBAC [#292](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/292)
* [OCPBUGS-20213](https://issues.redhat.com/browse/OCPBUGS-20213): Add azure cloud config transformer [#291](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/291)
* Update OWNERS [#290](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/290)
* [OCPBUGS-17652](https://issues.redhat.com/browse/OCPBUGS-17652): apply necessary RBAC for the alibaba cloud controller manager [#276](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/276)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Additional permissions for internal load balancer on STS [#287](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/287)
* [OCPCLOUD-2188](https://issues.redhat.com/browse/OCPCLOUD-2188): Bump k8s packages to v1.28 [#285](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/285)
* update readme to stable status [#286](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/286)
* [OCPBUGS-19205](https://issues.redhat.com/browse/OCPBUGS-19205): Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#278](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/278)
* [OCPBUGS-18641](https://issues.redhat.com/browse/OCPBUGS-18641): Set dual-stack IPFamilyPriority for vSphere [#279](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/279)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Ensure subnets read permission for granular roles [#281](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/281)
* [OCPBUGS-14718](https://issues.redhat.com/browse/OCPBUGS-14718): Add message for CABundleControllerDegradedCondition error [#275](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/275)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a0b9c0d70748ff24de5a40874207de3ea5bfa91e...56181136d91dff7bac4aa5acb2c1461381ac6e34)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)

* [OCPBUGS-36151](https://issues.redhat.com/browse/OCPBUGS-36151): Set required-scc for openshift workloads [#420](https://github.com/openshift/cluster-config-operator/pull/420)
* [OCPBUGS-26542](https://issues.redhat.com/browse/OCPBUGS-26542): remove duplicate manifests in image [#395](https://github.com/openshift/cluster-config-operator/pull/395)
* [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402)
* Revert "OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART" [#388](https://github.com/openshift/cluster-config-operator/pull/388)
* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator-container image to be consistent with ART [#385](https://github.com/openshift/cluster-config-operator/pull/385)
* read featuregates from openshift/api [#349](https://github.com/openshift/cluster-config-operator/pull/349)
* yield CRDs and empty resource rendering to api imge [#379](https://github.com/openshift/cluster-config-operator/pull/379)
* [CNF-10479](https://issues.redhat.com/browse/CNF-10479): Bump up api to pull mixed cpu allocation feature gate [#386](https://github.com/openshift/cluster-config-operator/pull/386)
* [NP-793](https://issues.redhat.com/browse/NP-793): Bump github.com/openshift/api [#375](https://github.com/openshift/cluster-config-operator/pull/375)
* create manifest directory during rendering [#382](https://github.com/openshift/cluster-config-operator/pull/382)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#378](https://github.com/openshift/cluster-config-operator/pull/378)
* create parent dir for output [#381](https://github.com/openshift/cluster-config-operator/pull/381)
* Allow split rendering between cluster-config and openshift/api [#380](https://github.com/openshift/cluster-config-operator/pull/380)
* [MON-3480](https://issues.redhat.com/browse/MON-3480): Add MetricsServer FeatureGate [#377](https://github.com/openshift/cluster-config-operator/pull/377)
* NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie [#361](https://github.com/openshift/cluster-config-operator/pull/361)
* [MCO-813](https://issues.redhat.com/browse/MCO-813): add MCN featuregate [#368](https://github.com/openshift/cluster-config-operator/pull/368)
* [SPLAT-1127](https://issues.redhat.com/browse/SPLAT-1127): bring in vSphere CPMSO API updates [#342](https://github.com/openshift/cluster-config-operator/pull/342)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Update openshift/api package to latest version [#365](https://github.com/openshift/cluster-config-operator/pull/365)
* [OCPBUGS-21744](https://issues.redhat.com/browse/OCPBUGS-21744): bump library-go to include switch to HTTP/1.1 [#366](https://github.com/openshift/cluster-config-operator/pull/366)
* [CFE-887](https://issues.redhat.com/browse/CFE-887): Bump openshift/api to add DNSNameResolver. [#364](https://github.com/openshift/cluster-config-operator/pull/364)
* Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. [#358](https://github.com/openshift/cluster-config-operator/pull/358)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Remove Build CRD [#360](https://github.com/openshift/cluster-config-operator/pull/360)
* Remove AdmissionWebhookMatchConditions feature gate [#359](https://github.com/openshift/cluster-config-operator/pull/359)
* [OCPVE-708](https://issues.redhat.com/browse/OCPVE-708): feat: bump(api) [#357](https://github.com/openshift/cluster-config-operator/pull/357)
* [OCPCLOUD-1989](https://issues.redhat.com/browse/OCPCLOUD-1989): Promote GCP CCM from TPNU to default [#319](https://github.com/openshift/cluster-config-operator/pull/319)
* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator images to be consistent with ART [#353](https://github.com/openshift/cluster-config-operator/pull/353)
* [CCO-412](https://issues.redhat.com/browse/CCO-412): Bump API to promote azureWorkloadIdentity to defaultFeatures [#351](https://github.com/openshift/cluster-config-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/91fa980a5be1d3c91786ff41a0a9394adb75671f...0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c03231f93a4630b94d86dde98688f357777c14b6)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#326](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/326)
* [OCPBUGS-24632](https://issues.redhat.com/browse/OCPBUGS-24632): Prevent rollout due to irrelevant path artifacts [#317](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/317)
* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#318](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/318)
* [OCPBUGS-34971](https://issues.redhat.com/browse/OCPBUGS-34971): Add unreadyNodeGracePeriod for allowing brief node hiccups [#299](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/299)
* [OCPBUGS-35496](https://issues.redhat.com/browse/OCPBUGS-35496): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#308](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/308)
* [OCPBUGS-35255](https://issues.redhat.com/browse/OCPBUGS-35255): Improved debugging of API listing errors [#301](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/301)
* [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec [#290](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/290)
* [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. [#289](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/289)
* [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279)
* [OCPBUGS-24140](https://issues.redhat.com/browse/OCPBUGS-24140): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#266](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/266)
* [SPLAT-1280](https://issues.redhat.com/browse/SPLAT-1280): update documentation for vSphere [#267](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/267)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains [#258](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/258)
* [SPLAT-1129](https://issues.redhat.com/browse/SPLAT-1129): adding failure domain awareness for vSphere [#228](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/228)
* [OCPCLOUD-2297](https://issues.redhat.com/browse/OCPCLOUD-2297): webhook/openstack: validate etcd block device size [#264](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/264)
* Revert #239 "OCPCLOUD-2167: Test unhealthy node cases" [#262](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/262)
* OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices [#255](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/255)
* [OCPCLOUD-2167](https://issues.redhat.com/browse/OCPCLOUD-2167): Test unhealthy node cases [#239](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/239)
* [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Reimplement "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#234](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/234)
* [SPLAT-1211](https://issues.redhat.com/browse/SPLAT-1211): recognize topology and failure domains represented by the infrastructure resource [#250](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/250)
* Update OWNERS [#253](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/253)
* [OCPBUGS-21863](https://issues.redhat.com/browse/OCPBUGS-21863): webhooks: set min version TLS 1.2 [#252](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/252)
* [OCPBUGS-21641](https://issues.redhat.com/browse/OCPBUGS-21641): Bump golang.org/x/net to v0.17.0 [#251](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/251)
* [OCPBUGS-17288](https://issues.redhat.com/browse/OCPBUGS-17288), [OCPCLOUD-2179](https://issues.redhat.com/browse/OCPCLOUD-2179): Update dependencies to k8s 1.28 [#248](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/248)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): e2e: gcp e2-custom increase memory [#246](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/246)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): fix: e2e: add gcp custom type to test framework [#244](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/244)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Check CPMS events are not present when we expect error [#243](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/243)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Add events for machine creation/deletion [#242](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/242)
* [OCPBUGS-19226](https://issues.redhat.com/browse/OCPBUGS-19226): Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#241](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/241)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/bcb227e2c5775ce4f33416de60df0eb974549ff2...c03231f93a4630b94d86dde98688f357777c14b6)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/65dbb12b710b7126f662f5f7f2d8272f9f6868cc)

* [OCPBUGS-36377](https://issues.redhat.com/browse/OCPBUGS-36377): Set required-scc for openshift workloads [#211](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/211)
* [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): create suitable role and roleBinding for csi-snapshot-webhook [#203](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/203)
* [OCPBUGS-25240](https://issues.redhat.com/browse/OCPBUGS-25240): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#180](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/180)
* [OCPBUGS-24099](https://issues.redhat.com/browse/OCPBUGS-24099): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#176](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/176)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#175](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/175)
* [OCPBUGS-22569](https://issues.redhat.com/browse/OCPBUGS-22569): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#173](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/173)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#172](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/172)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#166](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/166)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Restart webhook Pods if `csi-snapshot-webhook-secret` changed [#157](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/157)
* [OCPBUGS-19162](https://issues.redhat.com/browse/OCPBUGS-19162): Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#160](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/160)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Move readonlyRootFilesystem to the right place [#159](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/159)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d4a1162514ecbf248b04e6e8625d17bc2b775ccd...65dbb12b710b7126f662f5f7f2d8272f9f6868cc)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/49290d7db2194df73dfaeb1e719580dabf166690)

* [OCPBUGS-32093](https://issues.redhat.com/browse/OCPBUGS-32093): Add RBAC related to featuregates to fix hypershift upgrade [#407](https://github.com/openshift/cluster-dns-operator/pull/407)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399)
* [OCPBUGS-24082](https://issues.redhat.com/browse/OCPBUGS-24082): Updating ose-cluster-dns-operator-container image to be consistent with ART [#396](https://github.com/openshift/cluster-dns-operator/pull/396)
* [OCPBUGS-23741](https://issues.redhat.com/browse/OCPBUGS-23741): Bump to k8s.io v0.28.3, controller-runtime v0.16.3 [#395](https://github.com/openshift/cluster-dns-operator/pull/395)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Ignore max unavailable for status [#386](https://github.com/openshift/cluster-dns-operator/pull/386)
* [OCPBUGS-22018](https://issues.redhat.com/browse/OCPBUGS-22018): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#387](https://github.com/openshift/cluster-dns-operator/pull/387)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "Revert "Set DNS DaemonSet's maxSurge value to 10%"" [#384](https://github.com/openshift/cluster-dns-operator/pull/384)
* [OCPBUGS-19510](https://issues.redhat.com/browse/OCPBUGS-19510): test/e2e: Set controller-runtime logger [#381](https://github.com/openshift/cluster-dns-operator/pull/381)
* [OCPBUGS-19126](https://issues.redhat.com/browse/OCPBUGS-19126): Updating ose-cluster-dns-operator images to be consistent with ART [#380](https://github.com/openshift/cluster-dns-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0ea96c98243f4f0afae3331fc3766200a4c038b5...49290d7db2194df73dfaeb1e719580dabf166690)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b72a596d1f588da8eca821f28f286dfd609691d1)

* [OCPBUGS-33564](https://issues.redhat.com/browse/OCPBUGS-33564): return errors in wait-for-ceo [#1261](https://github.com/openshift/cluster-etcd-operator/pull/1261)
* [OCPBUGS-32952](https://issues.redhat.com/browse/OCPBUGS-32952): remove etcd-health-probe log [#1257](https://github.com/openshift/cluster-etcd-operator/pull/1257)
* [OCPBUGS-31942](https://issues.redhat.com/browse/OCPBUGS-31942): update golang x net [#1253](https://github.com/openshift/cluster-etcd-operator/pull/1253)
* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#1220](https://github.com/openshift/cluster-etcd-operator/pull/1220)
* [OCPBUGS-30915](https://issues.redhat.com/browse/OCPBUGS-30915): CEO aliveness check should only detect deadlocks [#1225](https://github.com/openshift/cluster-etcd-operator/pull/1225)
* [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212)
* [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191)
* [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206)
* [OCPBUGS-24087](https://issues.redhat.com/browse/OCPBUGS-24087): Updating cluster-etcd-operator-container image to be consistent with ART [#1169](https://github.com/openshift/cluster-etcd-operator/pull/1169)
* [MON-3287](https://issues.redhat.com/browse/MON-3287): manage RBAC resources for prometheus to scrape openshift-etcd [#1164](https://github.com/openshift/cluster-etcd-operator/pull/1164)
* Revert "OCPBUGS-17199: remove revision stability check from bootstrap complet…" [#1167](https://github.com/openshift/cluster-etcd-operator/pull/1167)
* [OCPBUGS-23461](https://issues.redhat.com/browse/OCPBUGS-23461): Add annotation in the etcd-guard static pod for worklo… [#1161](https://github.com/openshift/cluster-etcd-operator/pull/1161)
* [OCPBUGS-21922](https://issues.redhat.com/browse/OCPBUGS-21922): fixing CVE-2023-39325 by updating dependencies [#1141](https://github.com/openshift/cluster-etcd-operator/pull/1141)
* [OCPBUGS-17199](https://issues.redhat.com/browse/OCPBUGS-17199): remove revision stability check from bootstrap complet… [#1087](https://github.com/openshift/cluster-etcd-operator/pull/1087)
* [ETCD-478](https://issues.redhat.com/browse/ETCD-478): Use golang etcd client for auto backups [#1099](https://github.com/openshift/cluster-etcd-operator/pull/1099)
* [OCPBUGS-19987](https://issues.redhat.com/browse/OCPBUGS-19987): relax readiness to local serializable requests [#1134](https://github.com/openshift/cluster-etcd-operator/pull/1134)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): prioritize podman pull in etcdctl dl [#1132](https://github.com/openshift/cluster-etcd-operator/pull/1132)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): remove UpgradeBackupController [#1129](https://github.com/openshift/cluster-etcd-operator/pull/1129)
* [ETCD-187](https://issues.redhat.com/browse/ETCD-187): add dashboards CPU iotwait on master nodes [#1119](https://github.com/openshift/cluster-etcd-operator/pull/1119)
* [OCPBUGS-19528](https://issues.redhat.com/browse/OCPBUGS-19528): introduce backup removal controller [#1126](https://github.com/openshift/cluster-etcd-operator/pull/1126)
* [OCPBUGS-19137](https://issues.redhat.com/browse/OCPBUGS-19137): Updating cluster-etcd-operator images to be consistent with ART [#1115](https://github.com/openshift/cluster-etcd-operator/pull/1115)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1123](https://github.com/openshift/cluster-etcd-operator/pull/1123)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): Avoid caching etcdctl on cluster-backup.sh [#1113](https://github.com/openshift/cluster-etcd-operator/pull/1113)
* indicate ownership of etcd certificates [#1110](https://github.com/openshift/cluster-etcd-operator/pull/1110)
* [OCPBUGS-18990](https://issues.redhat.com/browse/OCPBUGS-18990): restore the correct static pod list [#1111](https://github.com/openshift/cluster-etcd-operator/pull/1111)
* [OCPBUGS-18357](https://issues.redhat.com/browse/OCPBUGS-18357): prepend authfile to podman create [#1105](https://github.com/openshift/cluster-etcd-operator/pull/1105)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a85f3135b23924ceb5bb5c05ab72af99b23ba061...b72a596d1f588da8eca821f28f286dfd609691d1)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/42c15cb71f326c66993d259a9a692ad0e5f1c720)

* [OCPBUGS-42934](https://issues.redhat.com/browse/OCPBUGS-42934): azureclient: stop validating credentials when creating the client [#1135](https://github.com/openshift/cluster-image-registry-operator/pull/1135)
* [OCPBUGS-39099](https://issues.redhat.com/browse/OCPBUGS-39099): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1111](https://github.com/openshift/cluster-image-registry-operator/pull/1111)
* [OCPBUGS-38895](https://issues.redhat.com/browse/OCPBUGS-38895): pkg/resource: invoke update-ca-trust extract with --output [#1105](https://github.com/openshift/cluster-image-registry-operator/pull/1105)
* [OCPBUGS-36325](https://issues.redhat.com/browse/OCPBUGS-36325): Set required-scc for openshift workloads [#1067](https://github.com/openshift/cluster-image-registry-operator/pull/1067)
* [OCPBUGS-36036](https://issues.redhat.com/browse/OCPBUGS-36036): go.*,vendor: bump go-retryablehttp [#1068](https://github.com/openshift/cluster-image-registry-operator/pull/1068)
* [OCPBUGS-34571](https://issues.redhat.com/browse/OCPBUGS-34571): azure-path-fix: get client secret from k8s secret [#1049](https://github.com/openshift/cluster-image-registry-operator/pull/1049)
* [OCPBUGS-34539](https://issues.redhat.com/browse/OCPBUGS-34539): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1048](https://github.com/openshift/cluster-image-registry-operator/pull/1048)
* [OCPBUGS-33208](https://issues.redhat.com/browse/OCPBUGS-33208): azurepathfix: check if platform status is nil before accessing it [#1031](https://github.com/openshift/cluster-image-registry-operator/pull/1031)
* [OCPBUGS-32396](https://issues.redhat.com/browse/OCPBUGS-32396): azure-path-fix: support auth via account key (without clientID) [#1022](https://github.com/openshift/cluster-image-registry-operator/pull/1022)
* [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): bump aws-sdk-go from v1.44 to v1.50 [#1014](https://github.com/openshift/cluster-image-registry-operator/pull/1014)
* [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009)
* [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000)
* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [OCPBUGS-26936](https://issues.redhat.com/browse/OCPBUGS-26936): MULTIARCH-4074: PowerVS: update supported regions [#988](https://github.com/openshift/cluster-image-registry-operator/pull/988)
* [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984)
* [OCPBUGS-25460](https://issues.redhat.com/browse/OCPBUGS-25460): add private endpoint permissions to Azure credentials request [#978](https://github.com/openshift/cluster-image-registry-operator/pull/978)
* [OCPBUGS-24684](https://issues.redhat.com/browse/OCPBUGS-24684): Revert "Merge pull request #965 from jstuever/TRT-1368" [#972](https://github.com/openshift/cluster-image-registry-operator/pull/972)
* [OCPVE-790](https://issues.redhat.com/browse/OCPVE-790): annotate credentials request manifests [#959](https://github.com/openshift/cluster-image-registry-operator/pull/959)
* [OCPBUGS-24161](https://issues.redhat.com/browse/OCPBUGS-24161): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#966](https://github.com/openshift/cluster-image-registry-operator/pull/966)
* [TRT-1368](https://issues.redhat.com/browse/TRT-1368): Revert "Merge pull request #935 from flavianmissi/CCO-248" [#965](https://github.com/openshift/cluster-image-registry-operator/pull/965)
* [IR-366](https://issues.redhat.com/browse/IR-366), [IR-367](https://issues.redhat.com/browse/IR-367), [IR-411](https://issues.redhat.com/browse/IR-411): allow users to configure private storage accounts in Azure [#930](https://github.com/openshift/cluster-image-registry-operator/pull/930)
* [IR-408](https://issues.redhat.com/browse/IR-408): request individual permissions for gcs [#935](https://github.com/openshift/cluster-image-registry-operator/pull/935)
* [OCPBUGS-2889](https://issues.redhat.com/browse/OCPBUGS-2889): accept user/pass OR application credentials on Swift UPI secret [#924](https://github.com/openshift/cluster-image-registry-operator/pull/924)
* [IR-406](https://issues.redhat.com/browse/IR-406), [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): bump k8s and openshift packages [#936](https://github.com/openshift/cluster-image-registry-operator/pull/936)
* [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): disable http2 for metrics endpoint [#938](https://github.com/openshift/cluster-image-registry-operator/pull/938)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): move pruner role creation from openshift-apiserver [#925](https://github.com/openshift/cluster-image-registry-operator/pull/925)
* [OCPBUGS-19262](https://issues.redhat.com/browse/OCPBUGS-19262): Updating ose-cluster-image-registry-operator images to be consistent with ART [#918](https://github.com/openshift/cluster-image-registry-operator/pull/918)
* [OCPBUGS-18469](https://issues.redhat.com/browse/OCPBUGS-18469): increase storage account key cache expiration [#912](https://github.com/openshift/cluster-image-registry-operator/pull/912)
* [OCPBUGS-17060](https://issues.redhat.com/browse/OCPBUGS-17060): use Recreate on operator deployment [#908](https://github.com/openshift/cluster-image-registry-operator/pull/908)
* [OCPBUGS-18103](https://issues.redhat.com/browse/OCPBUGS-18103): check if response is nil before using it [#909](https://github.com/openshift/cluster-image-registry-operator/pull/909)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/460eea9127fbedcb5a545024581b4f55510e474b...42c15cb71f326c66993d259a9a692ad0e5f1c720)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/9e0d092565a4589dbcbafb7b1212651afa6d36fa)

* [OCPBUGS-42480](https://issues.redhat.com/browse/OCPBUGS-42480): Limit SHA-1 check to the leaf cert in default cert chain [#1154](https://github.com/openshift/cluster-ingress-operator/pull/1154)
* [OCPBUGS-41635](https://issues.redhat.com/browse/OCPBUGS-41635): Refine logging for accurate infra CR status updates [#1141](https://github.com/openshift/cluster-ingress-operator/pull/1141)
* [OCPBUGS-36466](https://issues.redhat.com/browse/OCPBUGS-36466): Allow operator to update Route spec.subdomain [#1100](https://github.com/openshift/cluster-ingress-operator/pull/1100)
* [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Implement connect timeout tuning option [#1097](https://github.com/openshift/cluster-ingress-operator/pull/1097)
* [OCPBUGS-36279](https://issues.redhat.com/browse/OCPBUGS-36279): Add Regexp Anchor to TestAll [#1096](https://github.com/openshift/cluster-ingress-operator/pull/1096)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Prevent upgrades for SHA1 default cert and SHA1 route certs [#1014](https://github.com/openshift/cluster-ingress-operator/pull/1014)
* [OCPBUGS-35028](https://issues.redhat.com/browse/OCPBUGS-35028): internalServiceChanged: Fix target port logic [#1081](https://github.com/openshift/cluster-ingress-operator/pull/1081)
* [OCPBUGS-34887](https://issues.redhat.com/browse/OCPBUGS-34887): TestHostNetworkPortBinding: Delete t.Parallel() [#1075](https://github.com/openshift/cluster-ingress-operator/pull/1075)
* [OCPBUGS-34252](https://issues.redhat.com/browse/OCPBUGS-34252): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1058](https://github.com/openshift/cluster-ingress-operator/pull/1058)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [OCPBUGS-26544](https://issues.redhat.com/browse/OCPBUGS-26544): Replace GCP role with explicit permissions [#1015](https://github.com/openshift/cluster-ingress-operator/pull/1015)
* [OCPBUGS-24167](https://issues.redhat.com/browse/OCPBUGS-24167): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1002](https://github.com/openshift/cluster-ingress-operator/pull/1002)
* [OCPBUGS-25227](https://issues.redhat.com/browse/OCPBUGS-25227): annotate credentials request manifests [#1005](https://github.com/openshift/cluster-ingress-operator/pull/1005)
* [OCPBUGS-23742](https://issues.redhat.com/browse/OCPBUGS-23742): Bump controller-runtime to v0.16.3 [#1001](https://github.com/openshift/cluster-ingress-operator/pull/1001)
* [NE-1402](https://issues.redhat.com/browse/NE-1402): Add service endpoint override capability to IBM DNS provider [#990](https://github.com/openshift/cluster-ingress-operator/pull/990)
* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Revert "OCPBUGS-16762: Bump openshift/api for container.maxLength fix" [#982](https://github.com/openshift/cluster-ingress-operator/pull/982)
* [OCPBUGS-14994](https://issues.redhat.com/browse/OCPBUGS-14994): Don't add clientca-configmap finalizer if deleting [#948](https://github.com/openshift/cluster-ingress-operator/pull/948)
* [OCPBUGS-22020](https://issues.redhat.com/browse/OCPBUGS-22020): Bump golang.org/x/net for CVE-2023-44487 [#985](https://github.com/openshift/cluster-ingress-operator/pull/985)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): test/e2e: Add test case for 2000000 maxConnections [#983](https://github.com/openshift/cluster-ingress-operator/pull/983)
* [OCPBUGS-20192](https://issues.redhat.com/browse/OCPBUGS-20192): Require non-readonly filesystem in router container [#981](https://github.com/openshift/cluster-ingress-operator/pull/981)
* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Bump openshift/api for container.maxLength fix [#979](https://github.com/openshift/cluster-ingress-operator/pull/979)
* [OCPBUGS-3541](https://issues.redhat.com/browse/OCPBUGS-3541): Don't create route metrics for ingress controllers that are not admitted [#869](https://github.com/openshift/cluster-ingress-operator/pull/869)
* [OCPBUGS-18248](https://issues.redhat.com/browse/OCPBUGS-18248): Prevent GatewayClass from getting recreated [#975](https://github.com/openshift/cluster-ingress-operator/pull/975)
* [OCPBUGS-19268](https://issues.redhat.com/browse/OCPBUGS-19268): Updating ose-cluster-ingress-operator images to be consistent with ART [#977](https://github.com/openshift/cluster-ingress-operator/pull/977)
* [OCPBUGS-15900](https://issues.redhat.com/browse/OCPBUGS-15900): TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. [#973](https://github.com/openshift/cluster-ingress-operator/pull/973)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): E2E test for cookie length truncation [#871](https://github.com/openshift/cluster-ingress-operator/pull/871)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e302d85665274cb299d873eb624867384e5c37b1...9e0d092565a4589dbcbafb7b1212651afa6d36fa)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/aabc7863cdbd76f8909a10fbc1be53b032e4ec31)

* [OCPBUGS-37566](https://issues.redhat.com/browse/OCPBUGS-37566): add disabled syncer as reason to CFE for PSA [#1716](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1716)
* [OCPBUGS-35832](https://issues.redhat.com/browse/OCPBUGS-35832): add SNO control plane high cpu usage alert [#1706](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1706)
* [OCPBUGS-29361](https://issues.redhat.com/browse/OCPBUGS-29361): operator: stop removing kube-apiserver-slos asset [#1643](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1643)
* [OCPBUGS-34492](https://issues.redhat.com/browse/OCPBUGS-34492): Create one-shot migrations for the flowcontrol group. [#1692](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1692)
* [OCPBUGS-33697](https://issues.redhat.com/browse/OCPBUGS-33697): add a controller that reconciles SCCs' volumes [#1679](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1679)
* [OCPBUGS-33277](https://issues.redhat.com/browse/OCPBUGS-33277): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1672](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1672)
* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): Use RotatedSigningCASecret in update only mode [#1662](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1662)
* [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653)
* [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647)
* [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639)
* [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636)
* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [OCPBUGS-24098](https://issues.redhat.com/browse/OCPBUGS-24098): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1589](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1589)
* [OCPBUGS-18761](https://issues.redhat.com/browse/OCPBUGS-18761): revert dev cert rotation in 4.15 [#1598](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1598)
* [AUTH-442](https://issues.redhat.com/browse/AUTH-442): psa cluster fleet evaluation [#1588](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1588)
* [OCPBUGS-24213](https://issues.redhat.com/browse/OCPBUGS-24213): Annotate managed certs [#1568](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1568)
* [OCPBUGS-23796](https://issues.redhat.com/browse/OCPBUGS-23796): use AlwaysAllow UnhealthyPodEvictionPolicy option [#1579](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1579)
* [OCPBUGS-21836](https://issues.redhat.com/browse/OCPBUGS-21836): use external load balancer url for jwks-uri [#1578](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1578)
* manifests: set owning component for TLS artifacts [#1583](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1583)
* [OCPBUGS-19160](https://issues.redhat.com/browse/OCPBUGS-19160): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1550](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1550)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules [#1566](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1566)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests: rename API performance dashboard [#1565](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1565)
* [OCPBUGS-21729](https://issues.redhat.com/browse/OCPBUGS-21729): bump library-go to include switch to HTTP/1.1 [#1567](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1567)
* Update required GV for ValidatingAdmissionPolicy gate. [#1561](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1561)
* Update "deprecated API in use" alert expressions for 1.28. [#1562](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1562)
* bump(openshift/client-go,library-go) [#1560](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1560)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1557](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1557)
* [OCPBUGS-19024](https://issues.redhat.com/browse/OCPBUGS-19024): remove featuregate upgradeable controller that moved to cluster-config-operator [#1547](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1547)
* [OCPBUGS-18247](https://issues.redhat.com/browse/OCPBUGS-18247): manifests: don't include recording rules when Console capability is not enabled [#1542](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1542)
* [OCPBUGS-15504](https://issues.redhat.com/browse/OCPBUGS-15504): manifest: remove kube-apiserver PrometheusRule [#1543](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1543)
* Bump openshift/* libs [#1549](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1549)
* Update to Kubernetes 1.28.2 [#1548](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1548)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1534](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1534)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1fe5769f9c30c79140484b11340f40e5208b5d2c...aabc7863cdbd76f8909a10fbc1be53b032e4ec31)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e)

* [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34)
* [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31)
* Update OWNERS [#26](https://github.com/openshift/cluster-api-operator/pull/26)
* [OCPBUGS-17289](https://issues.redhat.com/browse/OCPBUGS-17289), [OCPBUGS-21650](https://issues.redhat.com/browse/OCPBUGS-21650), [OCPCLOUD-2215](https://issues.redhat.com/browse/OCPCLOUD-2215): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main [#25](https://github.com/openshift/cluster-api-operator/pull/25)
* [OCPBUGS-19135](https://issues.redhat.com/browse/OCPBUGS-19135): Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#24](https://github.com/openshift/cluster-api-operator/pull/24)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b287d08b3dabe6b3b67b87a8a284f19ed12a165e...128d8e08c48e2002c416e84d0dec816bf5999c7e)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f)

* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#801](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/801)
* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#797](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/797)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#790](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/790)
* [OCPBUGS-24162](https://issues.redhat.com/browse/OCPBUGS-24162): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#772](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/772)
* [OCPBUGS-24215](https://issues.redhat.com/browse/OCPBUGS-24215): Annotate rotated certificates [#769](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/769)
* [OCPBUGS-23462](https://issues.redhat.com/browse/OCPBUGS-23462): bump(library-go) [#771](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/771)
* bump(k8s) [#763](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/763)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): bump(openshift/api|client-go|library-go) to pick up http2 disablement [#762](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/762)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): Bump deps to address CVE-2023-44487 [#755](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/755)
* bump(openshift/client-go,library-go) [#753](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/753)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#750](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/750)
* [OCPBUGS-19263](https://issues.redhat.com/browse/OCPBUGS-19263): Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#747](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/747)
* Bump openshift/* libs [#746](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/746)
* Update to Kubernetes 1.28.2 [#744](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/744)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#742](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/742)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/4e059638c2cbf003551ee699106dc024760eece3...ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/f054dfaf189b43b262c11ef7f97038c79592c796)

* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#537](https://github.com/openshift/cluster-kube-scheduler-operator/pull/537)
* [OCPBUGS-24106](https://issues.redhat.com/browse/OCPBUGS-24106): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#513](https://github.com/openshift/cluster-kube-scheduler-operator/pull/513)
* [OCPBUGS-24218](https://issues.redhat.com/browse/OCPBUGS-24218): Annotate serviceaccount-ca with ownership information [#511](https://github.com/openshift/cluster-kube-scheduler-operator/pull/511)
* [OCPBUGS-23463](https://issues.redhat.com/browse/OCPBUGS-23463): bump(library-go) [#512](https://github.com/openshift/cluster-kube-scheduler-operator/pull/512)
* NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof [#507](https://github.com/openshift/cluster-kube-scheduler-operator/pull/507)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 [#508](https://github.com/openshift/cluster-kube-scheduler-operator/pull/508)
* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump openshift/library-go to disable http/2 by default [#503](https://github.com/openshift/cluster-kube-scheduler-operator/pull/503)
* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump deps to address CVE-2023-44487 [#500](https://github.com/openshift/cluster-kube-scheduler-operator/pull/500)
* bump(openshift/client-go,library-go) [#498](https://github.com/openshift/cluster-kube-scheduler-operator/pull/498)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#496](https://github.com/openshift/cluster-kube-scheduler-operator/pull/496)
* [OCPBUGS-19175](https://issues.redhat.com/browse/OCPBUGS-19175): Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-kube-scheduler-operator/pull/493)
* Bump openshift/* libs [#492](https://github.com/openshift/cluster-kube-scheduler-operator/pull/492)
* Update to Kubernetes 1.28.2 [#491](https://github.com/openshift/cluster-kube-scheduler-operator/pull/491)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#490](https://github.com/openshift/cluster-kube-scheduler-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4...f054dfaf189b43b262c11ef7f97038c79592c796)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e76cea5f52bd5a125d051c6a0da4127a4dae6700)

* [OCPBUGS-36322](https://issues.redhat.com/browse/OCPBUGS-36322): Set required-scc for openshift workloads [#112](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/112)
* [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100)
* [OCPBUGS-21738](https://issues.redhat.com/browse/OCPBUGS-21738): bump library-go to include switch to HTTP/1.1 [#95](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/95)
* [OCPBUGS-19253](https://issues.redhat.com/browse/OCPBUGS-19253): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#94](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/94)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9cd9922a42a64fe058718f10e3b4123b943bb55f...e76cea5f52bd5a125d051c6a0da4127a4dae6700)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)

* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [OCPBUGS-24154](https://issues.redhat.com/browse/OCPBUGS-24154): Updating ose-cluster-machine-approver-container image to be consistent with ART [#217](https://github.com/openshift/cluster-machine-approver/pull/217)
* [OCPCLOUD-2277](https://issues.redhat.com/browse/OCPCLOUD-2277): Ensure Cluster Machine Approver metrics are only available via HTTPS [#211](https://github.com/openshift/cluster-machine-approver/pull/211)
* [OCPBUGS-21594](https://issues.redhat.com/browse/OCPBUGS-21594): Filter non node CSRs in metrics [#208](https://github.com/openshift/cluster-machine-approver/pull/208)
* [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204)
* Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205)
* [OCPBUGS-19250](https://issues.redhat.com/browse/OCPBUGS-19250): Updating ose-cluster-machine-approver images to be consistent with ART [#201](https://github.com/openshift/cluster-machine-approver/pull/201)
* [OCPCLOUD-2181](https://issues.redhat.com/browse/OCPCLOUD-2181): Update K8s dependencies to 1.28 [#203](https://github.com/openshift/cluster-machine-approver/pull/203)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/711b4f6eeb038f8c7bd88db3ea51ebad350a116d...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4275516b8c4a1039f44d4e8075e2bbb1f7e75478)

* [OCPBUGS-42586](https://issues.redhat.com/browse/OCPBUGS-42586): Exclude windows nodes from kubelet servicemonitor [#2487](https://github.com/openshift/cluster-monitoring-operator/pull/2487)
* [OCPBUGS-41913](https://issues.redhat.com/browse/OCPBUGS-41913): filter alerts sent to Telemeter [#2472](https://github.com/openshift/cluster-monitoring-operator/pull/2472)
* [OCPBUGS-39172](https://issues.redhat.com/browse/OCPBUGS-39172): Backport #2441 for 4.15 [#2448](https://github.com/openshift/cluster-monitoring-operator/pull/2448)
* [OCPBUGS-37608](https://issues.redhat.com/browse/OCPBUGS-37608): set required-scc for openshift workloads [#2420](https://github.com/openshift/cluster-monitoring-operator/pull/2420)
* [OCPBUGS-36563](https://issues.redhat.com/browse/OCPBUGS-36563): add runbook_url annotations [#2406](https://github.com/openshift/cluster-monitoring-operator/pull/2406)
* [OCPBUGS-37194](https://issues.redhat.com/browse/OCPBUGS-37194): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2413](https://github.com/openshift/cluster-monitoring-operator/pull/2413)
* [OCPBUGS-36312](https://issues.redhat.com/browse/OCPBUGS-36312): inject trusted CA bundle into UWM Alertmanager [#2400](https://github.com/openshift/cluster-monitoring-operator/pull/2400)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Ipsec state backport [#2384](https://github.com/openshift/cluster-monitoring-operator/pull/2384)
* [OCPBUGS-33512](https://issues.redhat.com/browse/OCPBUGS-33512): fix Thanos ruler alert generator url [#2343](https://github.com/openshift/cluster-monitoring-operator/pull/2343)
* [OCPBUGS-32055](https://issues.redhat.com/browse/OCPBUGS-32055): backport ols metric allowlist to 4.15 [#2313](https://github.com/openshift/cluster-monitoring-operator/pull/2313)
* [OCPBUGS-28769](https://issues.redhat.com/browse/OCPBUGS-28769): fix generation of telemeter token hash [#2303](https://github.com/openshift/cluster-monitoring-operator/pull/2303)
* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [OCPBUGS-25322](https://issues.redhat.com/browse/OCPBUGS-25322): go.mod: bump prometheus-operator to v0.70.0 [#2201](https://github.com/openshift/cluster-monitoring-operator/pull/2201)
* [OCPBUGS-25309](https://issues.redhat.com/browse/OCPBUGS-25309): additionalArgs: list items must have named fields [#2197](https://github.com/openshift/cluster-monitoring-operator/pull/2197)
* [OCPBUGS-24149](https://issues.redhat.com/browse/OCPBUGS-24149): Updating cluster-monitoring-operator-container image to be consistent with ART [#2170](https://github.com/openshift/cluster-monitoring-operator/pull/2170)
* [MON-3553](https://issues.redhat.com/browse/MON-3553): Set scrape.timestamp tolerance [#2187](https://github.com/openshift/cluster-monitoring-operator/pull/2187)
* [OCPBUGS-23516](https://issues.redhat.com/browse/OCPBUGS-23516): prevent plugin entry assets from caching [#2186](https://github.com/openshift/cluster-monitoring-operator/pull/2186)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Detect ipv4/ipv6 socket in pod ip for nginx conf [#2173](https://github.com/openshift/cluster-monitoring-operator/pull/2173)
* [MON-3134](https://issues.redhat.com/browse/MON-3134): allow to query alerts from thanos-querier tenancy port [#2184](https://github.com/openshift/cluster-monitoring-operator/pull/2184)
* [MON-3551](https://issues.redhat.com/browse/MON-3551): fix: simplify jq script avoids error with jq1.7 [#2180](https://github.com/openshift/cluster-monitoring-operator/pull/2180)
* [MON-3454](https://issues.redhat.com/browse/MON-3454): Add track timestamps staleness [#2160](https://github.com/openshift/cluster-monitoring-operator/pull/2160)
* [OCPBUGS-24212](https://issues.redhat.com/browse/OCPBUGS-24212): Add ownership annotation for certificates [#2158](https://github.com/openshift/cluster-monitoring-operator/pull/2158)
* [MON-3379](https://issues.redhat.com/browse/MON-3379): Replace the oauth-proxy before thanos-querier with kube-rbac-proxy [#2136](https://github.com/openshift/cluster-monitoring-operator/pull/2136)
* [MON-3544](https://issues.redhat.com/browse/MON-3544): Adjust NodeClock* alerting rules to work with PTP operator [#2182](https://github.com/openshift/cluster-monitoring-operator/pull/2182)
* [OCPBUGS-23745](https://issues.redhat.com/browse/OCPBUGS-23745): Wait for 3 (instead of 2) consecutive failing reconcil… [#2179](https://github.com/openshift/cluster-monitoring-operator/pull/2179)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): [bot] Synchronize versions of the downstream components [#2183](https://github.com/openshift/cluster-monitoring-operator/pull/2183)
* [MON-3543](https://issues.redhat.com/browse/MON-3543): Update API docs for Metrics Server [#2181](https://github.com/openshift/cluster-monitoring-operator/pull/2181)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): synchronize versions of the downstream components [#2174](https://github.com/openshift/cluster-monitoring-operator/pull/2174)
* [OCPBUGS-24340](https://issues.redhat.com/browse/OCPBUGS-24340): patch securityContext for Thanos querier [#2178](https://github.com/openshift/cluster-monitoring-operator/pull/2178)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): update prometheus-operator jsonnet to v0.70.0 [#2177](https://github.com/openshift/cluster-monitoring-operator/pull/2177)
* [MON-3287](https://issues.redhat.com/browse/MON-3287): Remove openshift-etcd related RBAC as they will be manager by [#2165](https://github.com/openshift/cluster-monitoring-operator/pull/2165)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): revert #2166 [#2172](https://github.com/openshift/cluster-monitoring-operator/pull/2172)
* [MON-3524](https://issues.redhat.com/browse/MON-3524): Update metrics-server in CHANGELOG and README [#2169](https://github.com/openshift/cluster-monitoring-operator/pull/2169)
* [MON-3533](https://issues.redhat.com/browse/MON-3533): Update cluster:kube_persistentvolume_plugin_type_counts:sum [#2171](https://github.com/openshift/cluster-monitoring-operator/pull/2171)
* [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add SELinux metrics to telemetry [#2155](https://github.com/openshift/cluster-monitoring-operator/pull/2155)
* [MON-3500](https://issues.redhat.com/browse/MON-3500): Enable sending exemplars over RW in UWM [#2161](https://github.com/openshift/cluster-monitoring-operator/pull/2161)
* [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Change config to allow ipv6/4 [#2166](https://github.com/openshift/cluster-monitoring-operator/pull/2166)
* [MON-3511](https://issues.redhat.com/browse/MON-3511): hack/local-cmo.sh: pass desired version in cmo run command [#2168](https://github.com/openshift/cluster-monitoring-operator/pull/2168)
* [MON-3211](https://issues.redhat.com/browse/MON-3211): Implement switching to metrics-server [#2022](https://github.com/openshift/cluster-monitoring-operator/pull/2022)
* [MON-3505](https://issues.redhat.com/browse/MON-3505): move aggregated-metrics-reader role to cmo jsonnet [#2163](https://github.com/openshift/cluster-monitoring-operator/pull/2163)
* [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2162](https://github.com/openshift/cluster-monitoring-operator/pull/2162)
* [OCPBUGS-23495](https://issues.redhat.com/browse/OCPBUGS-23495): Change UWM Prometheus' kube-rbac-proxy-thanos port num… [#2164](https://github.com/openshift/cluster-monitoring-operator/pull/2164)
* [MON-3479](https://issues.redhat.com/browse/MON-3479): update Prometheus operator assets to v0.69.1 [#2152](https://github.com/openshift/cluster-monitoring-operator/pull/2152)
* [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2150](https://github.com/openshift/cluster-monitoring-operator/pull/2150)
* [MON-3421](https://issues.redhat.com/browse/MON-3421): improve the detection of CMO unavailability/degradation due to U… [#2129](https://github.com/openshift/cluster-monitoring-operator/pull/2129)
* [MON-3476](https://issues.redhat.com/browse/MON-3476): Add code block to check FeatureGate status [#2151](https://github.com/openshift/cluster-monitoring-operator/pull/2151)
* [OCPBUGS-17035](https://issues.redhat.com/browse/OCPBUGS-17035): fix KRP permissions for Thanos Querier [#2057](https://github.com/openshift/cluster-monitoring-operator/pull/2057)
* [OCPBUGS-22742](https://issues.redhat.com/browse/OCPBUGS-22742): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2138](https://github.com/openshift/cluster-monitoring-operator/pull/2138)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2145](https://github.com/openshift/cluster-monitoring-operator/pull/2145)
* [MON-3398](https://issues.redhat.com/browse/MON-3398): Add RHACM telemetry metric [#2100](https://github.com/openshift/cluster-monitoring-operator/pull/2100)
* Synchronize versions of the downstream components [#2135](https://github.com/openshift/cluster-monitoring-operator/pull/2135)
* Fix UWM alert access permissions [#2131](https://github.com/openshift/cluster-monitoring-operator/pull/2131)
* Synchronize versions of the downstream components [#2133](https://github.com/openshift/cluster-monitoring-operator/pull/2133)
* [OCPBUGS-4069](https://issues.redhat.com/browse/OCPBUGS-4069): Prometheus Adatper takes metrics from kubelet job only. [#2117](https://github.com/openshift/cluster-monitoring-operator/pull/2117)
* [MON-3422](https://issues.redhat.com/browse/MON-3422): Remove temporary no more needed code [#2132](https://github.com/openshift/cluster-monitoring-operator/pull/2132)
* fix: force HTTP/1.1 connections [#2128](https://github.com/openshift/cluster-monitoring-operator/pull/2128)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2105](https://github.com/openshift/cluster-monitoring-operator/pull/2105)
* [OCPBUGS-21631](https://issues.redhat.com/browse/OCPBUGS-21631): upgrade golang.org/x/net to v0.17.0 [#2120](https://github.com/openshift/cluster-monitoring-operator/pull/2120)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): revert previous fix to avoid activating console capability during update [#2118](https://github.com/openshift/cluster-monitoring-operator/pull/2118)
* [MON-3286](https://issues.redhat.com/browse/MON-3286): Remove no longer needed code. [#2116](https://github.com/openshift/cluster-monitoring-operator/pull/2116)
* [OCPBUGS-17850](https://issues.redhat.com/browse/OCPBUGS-17850): replace nonResourceURLs permissions by subresource [#2099](https://github.com/openshift/cluster-monitoring-operator/pull/2099)
* Synchronize versions of the downstream components [#2115](https://github.com/openshift/cluster-monitoring-operator/pull/2115)
* Update jsonnet dependencies [#2076](https://github.com/openshift/cluster-monitoring-operator/pull/2076)
* OWNERS: remove sthaha [#2114](https://github.com/openshift/cluster-monitoring-operator/pull/2114)
* build: add `-e` to `go list` command to install tools [#2112](https://github.com/openshift/cluster-monitoring-operator/pull/2112)
* Change kube-rbac-proxy-thanos port [#2113](https://github.com/openshift/cluster-monitoring-operator/pull/2113)
* [OCPBUGS-11344](https://issues.redhat.com/browse/OCPBUGS-11344): alertmanager: use alertmanager CRD's automountServiceAccountToken option [#2111](https://github.com/openshift/cluster-monitoring-operator/pull/2111)
* Remove deprecated ioutil [#2108](https://github.com/openshift/cluster-monitoring-operator/pull/2108)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add console capability annotation to dashboards and monitoring-plugin. [#2101](https://github.com/openshift/cluster-monitoring-operator/pull/2101)
* [MON-3302](https://issues.redhat.com/browse/MON-3302): add RHACS telemetry metrics [#2062](https://github.com/openshift/cluster-monitoring-operator/pull/2062)
* add `machine424` and `rexagod`  to OWNERS [#2083](https://github.com/openshift/cluster-monitoring-operator/pull/2083)
* Remove bparees from approvers [#2104](https://github.com/openshift/cluster-monitoring-operator/pull/2104)
* Revert "feat: add olm capability annotation" [#2103](https://github.com/openshift/cluster-monitoring-operator/pull/2103)
* [MON-3270](https://issues.redhat.com/browse/MON-3270): Add kube-metrics-server to image-references [#2102](https://github.com/openshift/cluster-monitoring-operator/pull/2102)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2095](https://github.com/openshift/cluster-monitoring-operator/pull/2095)
* chore: fix imports order [#2098](https://github.com/openshift/cluster-monitoring-operator/pull/2098)
* Set Thanos version in the Thanos Ruler spec [#2094](https://github.com/openshift/cluster-monitoring-operator/pull/2094)
* [OCPBUGS-19237](https://issues.redhat.com/browse/OCPBUGS-19237): Updating cluster-monitoring-operator images to be consistent with ART [#2084](https://github.com/openshift/cluster-monitoring-operator/pull/2084)
* Synchronize versions of the downstream components [#2093](https://github.com/openshift/cluster-monitoring-operator/pull/2093)
* Synchronize versions of the downstream components [#2089](https://github.com/openshift/cluster-monitoring-operator/pull/2089)
* [MON-3383](https://issues.redhat.com/browse/MON-3383): Remove weak cryptograhic primitive usage [#2086](https://github.com/openshift/cluster-monitoring-operator/pull/2086)
* [OCPBUGS-18390](https://issues.redhat.com/browse/OCPBUGS-18390): jsonnet/rules: exclude -1 from etcd objects count [#2081](https://github.com/openshift/cluster-monitoring-operator/pull/2081)
* [OCPBUGS-19059](https://issues.redhat.com/browse/OCPBUGS-19059): Enable ipv6 on monitoring-plugin nginx [#2090](https://github.com/openshift/cluster-monitoring-operator/pull/2090)
* [MON-3376](https://issues.redhat.com/browse/MON-3376): Remove deprecated --logtostderr argument [#2077](https://github.com/openshift/cluster-monitoring-operator/pull/2077)
* [OCPBUGS-19356](https://issues.redhat.com/browse/OCPBUGS-19356): Topology spread constraints admission webhook [#2073](https://github.com/openshift/cluster-monitoring-operator/pull/2073)
* [OCPBUGS-17682](https://issues.redhat.com/browse/OCPBUGS-17682): add topologySpreadConstraints to UWM prometheus operator [#2072](https://github.com/openshift/cluster-monitoring-operator/pull/2072)
* Synchronize versions of the downstream components [#2082](https://github.com/openshift/cluster-monitoring-operator/pull/2082)
* [MON-2642](https://issues.redhat.com/browse/MON-2642): Improve e2e tests for alertrelabelconfigs CRD [#2080](https://github.com/openshift/cluster-monitoring-operator/pull/2080)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/6264a944344f25502d3898eb6478aa527306f627...4275516b8c4a1039f44d4e8075e2bbb1f7e75478)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6af7942e3f86d46eef4416e905d52e2516792b07)

* [OCPBUGS-43268](https://issues.redhat.com/browse/OCPBUGS-43268): Update network operator status for IPsec [#2530](https://github.com/openshift/cluster-network-operator/pull/2530)
* [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Configure narrowing=yes for IPsec connections [#2529](https://github.com/openshift/cluster-network-operator/pull/2529)
* [OCPBUGS-42020](https://issues.redhat.com/browse/OCPBUGS-42020): HyperShift: do not use antiaffinity on single replica control planes [#2504](https://github.com/openshift/cluster-network-operator/pull/2504)
* [OCPBUGS-41947](https://issues.redhat.com/browse/OCPBUGS-41947): Add proxy env vars to onvkube-node [#2503](https://github.com/openshift/cluster-network-operator/pull/2503)
* [OCPBUGS-31447](https://issues.redhat.com/browse/OCPBUGS-31447): Tighten the permissions on whereabouts.conf [#2324](https://github.com/openshift/cluster-network-operator/pull/2324)
* [NP-1064](https://issues.redhat.com/browse/NP-1064), [OCPBUGS-39336](https://issues.redhat.com/browse/OCPBUGS-39336): Remove managed cluster checking for live migration [#2485](https://github.com/openshift/cluster-network-operator/pull/2485)
* [OCPBUGS-34613](https://issues.redhat.com/browse/OCPBUGS-34613), [OCPBUGS-34726](https://issues.redhat.com/browse/OCPBUGS-34726), [OCPBUGS-34727](https://issues.redhat.com/browse/OCPBUGS-34727): Live migration backports [#2393](https://github.com/openshift/cluster-network-operator/pull/2393)
* [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix IC distributed control plane alerts [#2459](https://github.com/openshift/cluster-network-operator/pull/2459)
* [OCPBUGS-35837](https://issues.redhat.com/browse/OCPBUGS-35837): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2420](https://github.com/openshift/cluster-network-operator/pull/2420)
* [OCPBUGS-37205](https://issues.redhat.com/browse/OCPBUGS-37205): Check every MachineConfigPool for IPsec plugin existence [#2439](https://github.com/openshift/cluster-network-operator/pull/2439)
* [OCPBUGS-34809](https://issues.redhat.com/browse/OCPBUGS-34809): Ensure that the node-identity webhook address contains colons for IPv6 [#2396](https://github.com/openshift/cluster-network-operator/pull/2396)
* [OCPBUGS-36347](https://issues.redhat.com/browse/OCPBUGS-36347): Create the configmap mtu if not found [#2426](https://github.com/openshift/cluster-network-operator/pull/2426)
* [OCPBUGS-36499](https://issues.redhat.com/browse/OCPBUGS-36499): [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) [#2375](https://github.com/openshift/cluster-network-operator/pull/2375)
* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): update whereabouts crd [#2427](https://github.com/openshift/cluster-network-operator/pull/2427)
* [OCPBUGS-32989](https://issues.redhat.com/browse/OCPBUGS-32989): Add conditions for ignored-namespaces [#2379](https://github.com/openshift/cluster-network-operator/pull/2379)
* [OCPBUGS-29739](https://issues.redhat.com/browse/OCPBUGS-29739): Run dhcp-daemon pods as system-node-critical priority [#2283](https://github.com/openshift/cluster-network-operator/pull/2283)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Add ipsec state metric [#2389](https://github.com/openshift/cluster-network-operator/pull/2389)
* [OCPBUGS-32515](https://issues.redhat.com/browse/OCPBUGS-32515): Fix wait logic for IPsec certificate signing request [#2348](https://github.com/openshift/cluster-network-operator/pull/2348)
* [OCPBUGS-29092](https://issues.redhat.com/browse/OCPBUGS-29092): Add probes to node-network-identity [#2253](https://github.com/openshift/cluster-network-operator/pull/2253)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): Fully disable network-node-identity on ROKS [#2314](https://github.com/openshift/cluster-network-operator/pull/2314)
* [OCPBUGS-30927](https://issues.redhat.com/browse/OCPBUGS-30927): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2310](https://github.com/openshift/cluster-network-operator/pull/2310)
* [OCPBUGS-30615](https://issues.redhat.com/browse/OCPBUGS-30615): Fix managed cluster detection on ARO [#2304](https://github.com/openshift/cluster-network-operator/pull/2304)
* [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251)
* [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272)
* [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278)
* [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263)
* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [OCPBUGS-25652](https://issues.redhat.com/browse/OCPBUGS-25652): fix whereabouts conformance test failures [#2168](https://github.com/openshift/cluster-network-operator/pull/2168)
* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): [release-4.15] Add ConfigMap mount to the whereabouts-reconciler [#2214](https://github.com/openshift/cluster-network-operator/pull/2214)
* [OCPBUGS-27198](https://issues.redhat.com/browse/OCPBUGS-27198): [release-4.15] Update ovn-k managed control-plane RBAC [#2204](https://github.com/openshift/cluster-network-operator/pull/2204)
* [OCPBUGS-27286](https://issues.redhat.com/browse/OCPBUGS-27286): Use specific permissions for CNCC in GCP [#2190](https://github.com/openshift/cluster-network-operator/pull/2190)
* [OCPBUGS-27001](https://issues.redhat.com/browse/OCPBUGS-27001): Keep the live migration annotation consistant with the enhancement doc [#2194](https://github.com/openshift/cluster-network-operator/pull/2194)
* [OCPBUGS-27186](https://issues.redhat.com/browse/OCPBUGS-27186): Ns ipsec 4.15 [#2200](https://github.com/openshift/cluster-network-operator/pull/2200)
* [OCPBUGS-25864](https://issues.redhat.com/browse/OCPBUGS-25864): HyperShift, network-node-identity: Check the deployment in the management cluster [#2180](https://github.com/openshift/cluster-network-operator/pull/2180)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167)
* [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181)
* [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Set enable-multi-external-gateway flag in ovnkube.conf [#2158](https://github.com/openshift/cluster-network-operator/pull/2158)
* [OCPBUGS-19817](https://issues.redhat.com/browse/OCPBUGS-19817), [SDN-4162](https://issues.redhat.com/browse/SDN-4162): Upgrade IPsec with single daemonset pod [#2087](https://github.com/openshift/cluster-network-operator/pull/2087)
* [NP-615](https://issues.redhat.com/browse/NP-615): Live migration [#2091](https://github.com/openshift/cluster-network-operator/pull/2091)
* [OCPBUGS-23161](https://issues.redhat.com/browse/OCPBUGS-23161): Set logging for controller-runtime [#2129](https://github.com/openshift/cluster-network-operator/pull/2129)
* [SDN-4061](https://issues.redhat.com/browse/SDN-4061): Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture [#2101](https://github.com/openshift/cluster-network-operator/pull/2101)
* [OCPVE-779](https://issues.redhat.com/browse/OCPVE-779): Annotate credentials request manifests [#2105](https://github.com/openshift/cluster-network-operator/pull/2105)
* [NP-615](https://issues.redhat.com/browse/NP-615): Bump github.com/openshift/api [#2138](https://github.com/openshift/cluster-network-operator/pull/2138)
* [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Update status merge for APBRoute and EgressFirewall. [#2132](https://github.com/openshift/cluster-network-operator/pull/2132)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Add apbroute/status patch rights for ovnkube-node to update status [#2139](https://github.com/openshift/cluster-network-operator/pull/2139)
* [NETOBSERV-1047](https://issues.redhat.com/browse/NETOBSERV-1047): Add a cluster monitoring dashboard for ovn [#1871](https://github.com/openshift/cluster-network-operator/pull/1871)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump library-go [#2082](https://github.com/openshift/cluster-network-operator/pull/2082)
* [SDN-4101](https://issues.redhat.com/browse/SDN-4101): Remove HyperShift API dependency, Bump kubernetes dependencies [#2128](https://github.com/openshift/cluster-network-operator/pull/2128)
* NO ISSUE: add ownership of the proxy-ca [#2111](https://github.com/openshift/cluster-network-operator/pull/2111)
* [OCPBUGS-22869](https://issues.redhat.com/browse/OCPBUGS-22869): hypershift, hosted clusters: enable multi-homing and multi-net features [#2113](https://github.com/openshift/cluster-network-operator/pull/2113)
* [OCPBUGS-23082](https://issues.redhat.com/browse/OCPBUGS-23082): set automountServiceAccountToken to false for hypershift managed network-node-identity deploy [#2100](https://github.com/openshift/cluster-network-operator/pull/2100)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060)
* [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084)
* two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052)
* [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047)
* [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048)
* [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795)
* multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010)
* [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986)
* [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074)
* [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819)
* Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929)
* [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065)
* Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037)
* Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056)
* [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051)
* [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049)
* Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038)
* Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778)
* [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042)
* Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985)
* [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039)
* [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018)
* [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021)
* [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031)
* [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030)
* [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978)
* [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009)
* [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007)
* [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983)
* [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020)
* [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003)
* [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015)
* [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845)
* Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982)
* [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999)
* [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006)
* separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938)
* [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981)
* [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990)
* [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996)
* [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d5b4552ec3bcb1b690d3ccad9264dab7f6e10633...6af7942e3f86d46eef4416e905d52e2516792b07)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a8fa7edc32e7c6dfb3e3e1b1569a9269c84acd6e)

* [OCPBUGS-42284](https://issues.redhat.com/browse/OCPBUGS-42284): Add cluster-wide proxy env file (#1171) [#1171](https://github.com/openshift/cluster-node-tuning-operator/pull/1171)
* TuneD prior to kubelet in one-shot mode (#1125) [#1125](https://github.com/openshift/cluster-node-tuning-operator/pull/1125)
* set required-scc for openshift workloads (#1117) [#1117](https://github.com/openshift/cluster-node-tuning-operator/pull/1117)
* [OCPBUGS-36870](https://issues.redhat.com/browse/OCPBUGS-36870): Remove tuned/rendered object (#1110) [#1110](https://github.com/openshift/cluster-node-tuning-operator/pull/1110)
* [OCPBUGS-36355](https://issues.redhat.com/browse/OCPBUGS-36355): Backport fix for OCPBUGS-30647 (#1095) [#1095](https://github.com/openshift/cluster-node-tuning-operator/pull/1095)
* [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1066) [#1066](https://github.com/openshift/cluster-node-tuning-operator/pull/1066)
* Add a '.snyk' to silence static code analysis warnings (#1001) [#1001](https://github.com/openshift/cluster-node-tuning-operator/pull/1001)
* fix extra-reboot on upgrade with paused mcp worker (#1049) [#1049](https://github.com/openshift/cluster-node-tuning-operator/pull/1049)
* fix rendering extra ctrcfgs (#975) [#975](https://github.com/openshift/cluster-node-tuning-operator/pull/975)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes  (#1012) (#1043) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* Reduce number of reboots in offline tests (#1014) [#1014](https://github.com/openshift/cluster-node-tuning-operator/pull/1014)
* Systemd processes not being moved to cpuset/systemd.slice fix (#1016) [#1016](https://github.com/openshift/cluster-node-tuning-operator/pull/1016)
* Scheduler plugin: ignore IRQs (#983) [#983](https://github.com/openshift/cluster-node-tuning-operator/pull/983)
* e2e: when crun is enabled by default skip checking runc config (#1013) [#1013](https://github.com/openshift/cluster-node-tuning-operator/pull/1013)
* [OCPBUGS-30507](https://issues.redhat.com/browse/OCPBUGS-30507): Add performance real time tuned template (#984) [#984](https://github.com/openshift/cluster-node-tuning-operator/pull/984)
* Report duplicate priority only for multiple matching profiles (#965) [#965](https://github.com/openshift/cluster-node-tuning-operator/pull/965)
* hack: fix backport of render-sync.sh (#996) [#996](https://github.com/openshift/cluster-node-tuning-operator/pull/996)
* [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963)
* Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959)
* Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952)
* [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953)
* [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing  (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942)
* makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941)
* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897)
* [OCPBUGS-25596](https://issues.redhat.com/browse/OCPBUGS-25596): Make MC names deterministic (#888) [#888](https://github.com/openshift/cluster-node-tuning-operator/pull/888)
* [OCPBUGS-25552](https://issues.redhat.com/browse/OCPBUGS-25552): rps: fix mask update for SR-IOV devices (#886) [#886](https://github.com/openshift/cluster-node-tuning-operator/pull/886)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#869) [#869](https://github.com/openshift/cluster-node-tuning-operator/pull/869)
* cpuset-configure: exit gracefully on cgroup v2 (#866) [#866](https://github.com/openshift/cluster-node-tuning-operator/pull/866)
* [CNF-7610](https://issues.redhat.com/browse/CNF-7610): Mixed CPUs plugin deployment support (#853) [#853](https://github.com/openshift/cluster-node-tuning-operator/pull/853)
* New MachineConfig render command (#844) [#844](https://github.com/openshift/cluster-node-tuning-operator/pull/844)
* Report duplicate profiles as ERRORs (#864) [#864](https://github.com/openshift/cluster-node-tuning-operator/pull/864)
* [CNF-10473](https://issues.redhat.com/browse/CNF-10473): featuregates: main: add feature gates support for PAO controller (#858) [#858](https://github.com/openshift/cluster-node-tuning-operator/pull/858)
* e2e:latency: omit LatencyTestRun env variable (#857) [#857](https://github.com/openshift/cluster-node-tuning-operator/pull/857)
* [OCPBUGS-18649](https://issues.redhat.com/browse/OCPBUGS-18649): E2E: PPC Test cases (#708) [#708](https://github.com/openshift/cluster-node-tuning-operator/pull/708)
* [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): Fix Racing Machine Configs and add Day 0 Support (#854) [#854](https://github.com/openshift/cluster-node-tuning-operator/pull/854)
* Avoid k8s.io/kubernetes as dep (#848) [#848](https://github.com/openshift/cluster-node-tuning-operator/pull/848)
* Remove most //nolint:* overrides (#837) [#837](https://github.com/openshift/cluster-node-tuning-operator/pull/837)
* [CNF-10294](https://issues.redhat.com/browse/CNF-10294): main: remove deprecated multi ns function (#770) [#770](https://github.com/openshift/cluster-node-tuning-operator/pull/770)
* [OCPBUGS-22519](https://issues.redhat.com/browse/OCPBUGS-22519): bump opentelemetry package (#840) [#840](https://github.com/openshift/cluster-node-tuning-operator/pull/840)
* Disable HTTP/2 for webhook and metrics servers (#834) [#834](https://github.com/openshift/cluster-node-tuning-operator/pull/834)
* Remove obsolete protocols and weak ciphers (#827) [#827](https://github.com/openshift/cluster-node-tuning-operator/pull/827)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): rps: trigger udev even per queue (#816) [#816](https://github.com/openshift/cluster-node-tuning-operator/pull/816)
* render: change dir path (#824) [#824](https://github.com/openshift/cluster-node-tuning-operator/pull/824)
* Makefile: remote tmp folder on clean target (#823) [#823](https://github.com/openshift/cluster-node-tuning-operator/pull/823)
* Add golangci-lint (#793) [#793](https://github.com/openshift/cluster-node-tuning-operator/pull/793)
* Updating cluster-node-tuning-operator images to be consistent with ART (#795) [#795](https://github.com/openshift/cluster-node-tuning-operator/pull/795)
* fix: add if check for no resource match error (#801) [#801](https://github.com/openshift/cluster-node-tuning-operator/pull/801)
* nto: avoid timeout when there are too many CSV (#731) [#731](https://github.com/openshift/cluster-node-tuning-operator/pull/731)
* Set non-default UserAgent for easier debugging (#807) [#807](https://github.com/openshift/cluster-node-tuning-operator/pull/807)
* Improve co/node-tuning operand version reporting (#792) [#792](https://github.com/openshift/cluster-node-tuning-operator/pull/792)
* Add the k8s reporter to the configuration suite (#815) [#815](https://github.com/openshift/cluster-node-tuning-operator/pull/815)
* [OCPBUGS-18783](https://issues.redhat.com/browse/OCPBUGS-18783): e2e: perfprof: enhance the scheduling domain tests (#791) [#791](https://github.com/openshift/cluster-node-tuning-operator/pull/791)
* Add kubeconfig path for IBM Managed OpenShift (#810) [#810](https://github.com/openshift/cluster-node-tuning-operator/pull/810)
* Add k8s reporter to e2e tests (#666) [#666](https://github.com/openshift/cluster-node-tuning-operator/pull/666)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#804) [#804](https://github.com/openshift/cluster-node-tuning-operator/pull/804)
* Memory manager E2E test fixes (#784) [#784](https://github.com/openshift/cluster-node-tuning-operator/pull/784)
* Some unit tests fail with go1.19 as some modules require 1.20 (#794) [#794](https://github.com/openshift/cluster-node-tuning-operator/pull/794)
* e2e: add expected max latancy to hwlatdetec test & rename constant (#719) [#719](https://github.com/openshift/cluster-node-tuning-operator/pull/719)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): e2e:rps: improve logging (#787) [#787](https://github.com/openshift/cluster-node-tuning-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/099cc7b137f1c34f89e4352a6b7c82fe78e7ebbf...a8fa7edc32e7c6dfb3e3e1b1569a9269c84acd6e)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a7ba89874970cd10765e1d0753405e32fb357d84)

* [OCPBUGS-25399](https://issues.redhat.com/browse/OCPBUGS-25399): [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#40](https://github.com/openshift/cluster-olm-operator/pull/40)
* [OCPBUGS-24451](https://issues.redhat.com/browse/OCPBUGS-24451): Bump k8s dependencies [#36](https://github.com/openshift/cluster-olm-operator/pull/36)
* [OCPBUGS-24068](https://issues.redhat.com/browse/OCPBUGS-24068): Updating ose-cluster-olm-operator-container image to be consistent with ART [#35](https://github.com/openshift/cluster-olm-operator/pull/35)
* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART [#34](https://github.com/openshift/cluster-olm-operator/pull/34)
* [OCPBUGS-21670](https://issues.redhat.com/browse/OCPBUGS-21670): Bump golang.org/x/net to v0.17.0 [#32](https://github.com/openshift/cluster-olm-operator/pull/32)
* [OCPBUGS-19095](https://issues.redhat.com/browse/OCPBUGS-19095): Updating ose-cluster-olm-operator images to be consistent with ART [#31](https://github.com/openshift/cluster-olm-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0dbbb6132ced379602040731ff889eebb4202e73...a7ba89874970cd10765e1d0753405e32fb357d84)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/078c81f6e3e39675e8b1edd864e1ddf72472bb73)

* [OCPBUGS-36150](https://issues.redhat.com/browse/OCPBUGS-36150): Set required-scc for openshift workloads [#581](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/581)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#567](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/567)
* [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#551](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/551)
* [OCPBUGS-19231](https://issues.redhat.com/browse/OCPBUGS-19231): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#548](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/548)
* [OCPBUGS-21733](https://issues.redhat.com/browse/OCPBUGS-21733): bump library-go to include switch to HTTP/1.1 [#552](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/700dc111fd98c315648a78371b11be34fa4dbba3...078c81f6e3e39675e8b1edd864e1ddf72472bb73)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/68e8bcd5c5df5072d5eefb8abd9c9ecab289adf4)

* [OCPBUGS-35922](https://issues.redhat.com/browse/OCPBUGS-35922): lots of churn during image registry managed/removed transition [#358](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/358)
* [OCPBUGS-35869](https://issues.redhat.com/browse/OCPBUGS-35869): nil pointer reference in ocm-operator [#357](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/357)
* [OCPBUGS-36152](https://issues.redhat.com/browse/OCPBUGS-36152): Set required-scc for openshift workloads [#361](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/361)
* [OCPBUGS-31708](https://issues.redhat.com/browse/OCPBUGS-31708): Update opentelemetry dependency 415 [#342](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/342)
* [OCPBUGS-25985](https://issues.redhat.com/browse/OCPBUGS-25985): Disable deployer-controller when deploymentconfig is disabled [#322](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/322)
* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319)
* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [OCPBUGS-22956](https://issues.redhat.com/browse/OCPBUGS-22956): Remove blockage of ConfigObserver by build informer HasSynced flag [#315](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/315)
* Revert "Revert #300 "API-1666: add image pull secret cleanup controller"" [#314](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/314)
* Revert #300 "API-1666: add image pull secret cleanup controller" [#313](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/313)
* [API-1642](https://issues.redhat.com/browse/API-1642): add image pull secret cleanup controller [#300](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/300)
* [API-1642](https://issues.redhat.com/browse/API-1642): Do not generate image pull secrets for internal registry when internal registry is disabled. [#298](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/298)
* [OCPBUGS-21830](https://issues.redhat.com/browse/OCPBUGS-21830): bump(k8s,openshift) to address CVE-2023-44487 [#308](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/308)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Include Build CRD in manifests [#306](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/306)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#305](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/305)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#304](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/304)
* [OCPBUGS-18932](https://issues.redhat.com/browse/OCPBUGS-18932): Always sort disabled controller list [#302](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/302)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable BuildConfigChange controller when Build cap is disabled [#299](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/accd87730fd3652584bef210626cab3b6d49271f...68e8bcd5c5df5072d5eefb8abd9c9ecab289adf4)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5)

* [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104)
* manifests: Simplify filenames for default runlevel [#101](https://github.com/openshift/platform-operators/pull/101)
* Makefile: Drop yq prerequisite from 'manifests' target [#103](https://github.com/openshift/platform-operators/pull/103)
* [OCPBUGS-22457](https://issues.redhat.com/browse/OCPBUGS-22457): manifests/0000_50_cluster-platform-operator-manager_07-aggregated-clusteroperator: Drop namespace [#100](https://github.com/openshift/platform-operators/pull/100)
* switch to bingo for dependency management (and bump golangci-lint@v1.51.0) [#95](https://github.com/openshift/platform-operators/pull/95)
* [OCPBUGS-20511](https://issues.redhat.com/browse/OCPBUGS-20511): Bump golang.org/x/net to v0.17.0 [#92](https://github.com/openshift/platform-operators/pull/92)
* [OCPBUGS-19118](https://issues.redhat.com/browse/OCPBUGS-19118): Updating ose-cluster-platform-operators-manager images to be consistent with ART [#91](https://github.com/openshift/platform-operators/pull/91)
* [Full changelog](https://github.com/openshift/platform-operators/compare/08fb27e72e32ea0a06ab02b3b746114148d96c25...37a0a919b1032f7affa49b756eda4762d77751d5)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/cc48f3152213bfe6e42fdd82f760246e862d208f)

* [OCPBUGS-24078](https://issues.redhat.com/browse/OCPBUGS-24078): Updating ose-cluster-policy-controller-container image to be consistent with ART [#143](https://github.com/openshift/cluster-policy-controller/pull/143)
* go.mod: remove replaces [#138](https://github.com/openshift/cluster-policy-controller/pull/138)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): bump(k8s,openshift) to address CVE-2023-44487 [#137](https://github.com/openshift/cluster-policy-controller/pull/137)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): Bump deps to address CVE-2023-44487 [#133](https://github.com/openshift/cluster-policy-controller/pull/133)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#132](https://github.com/openshift/cluster-policy-controller/pull/132)
* [OCPBUGS-19119](https://issues.redhat.com/browse/OCPBUGS-19119): Updating cluster-policy-controller images to be consistent with ART [#131](https://github.com/openshift/cluster-policy-controller/pull/131)
* [OCPBUGS-17458](https://issues.redhat.com/browse/OCPBUGS-17458): ps syncer: don't hotloop on a missing namespace [#130](https://github.com/openshift/cluster-policy-controller/pull/130)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/219f6f6f072d867201d4923d39fd8bcaecbe7c59...cc48f3152213bfe6e42fdd82f760246e862d208f)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/dac17316605b5dbdc0b12f84af7ff3aa41e8f577)

* [OCPBUGS-37464](https://issues.redhat.com/browse/OCPBUGS-37464): Set required-scc for openshift workloads [#548](https://github.com/openshift/cluster-samples-operator/pull/548)
* [OCPBUGS-38157](https://issues.redhat.com/browse/OCPBUGS-38157): add mfrancisc and metlos as owners add owners 4.15 [#550](https://github.com/openshift/cluster-samples-operator/pull/550)
* [OCPBUGS-22034](https://issues.redhat.com/browse/OCPBUGS-22034): bump K8s version to 29.2 [#538](https://github.com/openshift/cluster-samples-operator/pull/538)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator-container image to be consistent with ART [#523](https://github.com/openshift/cluster-samples-operator/pull/523)
* [SO-119](https://issues.redhat.com/browse/SO-119): Fix mariadb import url in OKD [#525](https://github.com/openshift/cluster-samples-operator/pull/525)
* [SO-118](https://issues.redhat.com/browse/SO-118): Bumping the K8s to 28.2 and golang to 1.20 [#524](https://github.com/openshift/cluster-samples-operator/pull/524)
* [SO-117](https://issues.redhat.com/browse/SO-117): Library Sync for OCP release 4.15 [#522](https://github.com/openshift/cluster-samples-operator/pull/522)
* [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519)
* Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/61a34659e4499188ab6f790e3a07aba8be9e9bdd...dac17316605b5dbdc0b12f84af7ff3aa41e8f577)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98)

* [OCPBUGS-36374](https://issues.redhat.com/browse/OCPBUGS-36374): Set required-scc for openshift workloads [#484](https://github.com/openshift/cluster-storage-operator/pull/484)
* [OCPBUGS-33466](https://issues.redhat.com/browse/OCPBUGS-33466): Fix problem-detector proxy setting [#471](https://github.com/openshift/cluster-storage-operator/pull/471)
* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461)
* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [OCPBUGS-27017](https://issues.redhat.com/browse/OCPBUGS-27017): replace instanceAdmin role with specific compute permissions [#439](https://github.com/openshift/cluster-storage-operator/pull/439)
* [OCPBUGS-25241](https://issues.redhat.com/browse/OCPBUGS-25241): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#433](https://github.com/openshift/cluster-storage-operator/pull/433)
* [OCPVE-789](https://issues.redhat.com/browse/OCPVE-789): annotate credentials request manifests [#418](https://github.com/openshift/cluster-storage-operator/pull/418)
* [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add Prometheus rules for SELinux telemetry [#422](https://github.com/openshift/cluster-storage-operator/pull/422)
* [TRT-1376](https://issues.redhat.com/browse/TRT-1376): Revert #410 "CCO-251: use granular permissions for gcp credentails request" [#426](https://github.com/openshift/cluster-storage-operator/pull/426)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): use granular permissions for gcp credentails request [#410](https://github.com/openshift/cluster-storage-operator/pull/410)
* [OCPBUGS-24112](https://issues.redhat.com/browse/OCPBUGS-24112): Updating ose-cluster-storage-operator-container image to be consistent with ART [#424](https://github.com/openshift/cluster-storage-operator/pull/424)
* [STOR-1487](https://issues.redhat.com/browse/STOR-1487): bump openshift/api to get IBMCloudCSIDriverConfigSpec [#423](https://github.com/openshift/cluster-storage-operator/pull/423)
* [OCPBUGS-24027](https://issues.redhat.com/browse/OCPBUGS-24027): forbidden access to resource on shared-resource-csi-driver-operator [#425](https://github.com/openshift/cluster-storage-operator/pull/425)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#421](https://github.com/openshift/cluster-storage-operator/pull/421)
* [OCPBUGS-23120](https://issues.redhat.com/browse/OCPBUGS-23120): [IBM ROKS] cluster-storage-operator does not set upgradeable=True [#417](https://github.com/openshift/cluster-storage-operator/pull/417)
* [STOR-1453](https://issues.redhat.com/browse/STOR-1453): Grant permissions to access `apiserver` to CSI driver operators [#415](https://github.com/openshift/cluster-storage-operator/pull/415)
* [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404)
* [OCPBUGS-13669](https://issues.redhat.com/browse/OCPBUGS-13669): skip Azure File installation on Azure StackHub [#395](https://github.com/openshift/cluster-storage-operator/pull/395)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Move KAS access label to right place [#403](https://github.com/openshift/cluster-storage-operator/pull/403)
* update readme [#400](https://github.com/openshift/cluster-storage-operator/pull/400)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399)
* [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398)
* [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192...4c2b89d6a00e5a0c300b61dbad2a9e289c404e98)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/802233d84243d3eeceef50a29579501e94ebbf26)

* [OCPBUGS-43626](https://issues.redhat.com/browse/OCPBUGS-43626): keys: Update Red Hat keys to use SHA256 signatures [#65](https://github.com/openshift/cluster-update-keys/pull/65)
* [OCPBUGS-24115](https://issues.redhat.com/browse/OCPBUGS-24115): Updating ose-cluster-update-keys-container image to be consistent with ART [#52](https://github.com/openshift/cluster-update-keys/pull/52)
* [OCPBUGS-19189](https://issues.redhat.com/browse/OCPBUGS-19189): Updating ose-cluster-update-keys images to be consistent with ART [#51](https://github.com/openshift/cluster-update-keys/pull/51)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e0c26a084139906e866d9eec89f05d2d3211b334...802233d84243d3eeceef50a29579501e94ebbf26)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cb586f43f568a6d156933fcda4486fc310a25806)

* [OCPBUGS-36817](https://issues.redhat.com/browse/OCPBUGS-36817): Set required-scc for openshift workloads [#1068](https://github.com/openshift/cluster-version-operator/pull/1068)
* [OCPBUGS-33984](https://issues.redhat.com/browse/OCPBUGS-33984): Add admin-gate for OCP 4.16 [#1049](https://github.com/openshift/cluster-version-operator/pull/1049)
* [OCPBUGS-27359](https://issues.redhat.com/browse/OCPBUGS-27359): CO health: only track current in-progress upgrade start [#1023](https://github.com/openshift/cluster-version-operator/pull/1023)
* [OCPBUGS-26607](https://issues.redhat.com/browse/OCPBUGS-26607): clusterOperatorBuilder: Reconcile metadata on COs [#1017](https://github.com/openshift/cluster-version-operator/pull/1017)
* [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013)
* [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007)
* [OCPBUGS-25690](https://issues.redhat.com/browse/OCPBUGS-25690): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1008](https://github.com/openshift/cluster-version-operator/pull/1008)
* [OTA-917](https://issues.redhat.com/browse/OTA-917): pkg/customsignaturestore: Implement signatureStores customization [#994](https://github.com/openshift/cluster-version-operator/pull/994)
* [OCPVE-646](https://issues.redhat.com/browse/OCPVE-646): add cloud credential capability [#963](https://github.com/openshift/cluster-version-operator/pull/963)
* [OTA-855](https://issues.redhat.com/browse/OTA-855): Create GET requests to the Prometheus API server [#999](https://github.com/openshift/cluster-version-operator/pull/999)
* [OCPBUGS-23290](https://issues.redhat.com/browse/OCPBUGS-23290): install/0000_90_cluster-version-operator_02_servicemonitor: 'oc get …'  for CannotRetrieveUpdates [#995](https://github.com/openshift/cluster-version-operator/pull/995)
* [OCPBUGS-24138](https://issues.redhat.com/browse/OCPBUGS-24138): NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART [#1000](https://github.com/openshift/cluster-version-operator/pull/1000)
* [OCPBUGS-23377](https://issues.redhat.com/browse/OCPBUGS-23377): to reduce log noise, only log sync_worker messages on retry or payload change [#997](https://github.com/openshift/cluster-version-operator/pull/997)
* [OCPBUGS-19391](https://issues.redhat.com/browse/OCPBUGS-19391): do not reconcile rules if aggregationRule is set [#993](https://github.com/openshift/cluster-version-operator/pull/993)
* [OCPBUGS-8079](https://issues.redhat.com/browse/OCPBUGS-8079): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#992](https://github.com/openshift/cluster-version-operator/pull/992)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): vendor: bump openshift/api [#984](https://github.com/openshift/cluster-version-operator/pull/984)
* [OCPBUGS-21933](https://issues.redhat.com/browse/OCPBUGS-21933): Bump http-related deps [#983](https://github.com/openshift/cluster-version-operator/pull/983)
* [OCPVE-673](https://issues.redhat.com/browse/OCPVE-673): Bump API to Add OLM Capability [#971](https://github.com/openshift/cluster-version-operator/pull/971)
* Revert openshift/api bump PR merged by mistake (977) [#978](https://github.com/openshift/cluster-version-operator/pull/978)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api [#977](https://github.com/openshift/cluster-version-operator/pull/977)
* [OCPBUGS-19868](https://issues.redhat.com/browse/OCPBUGS-19868): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#975](https://github.com/openshift/cluster-version-operator/pull/975)
* [OCPBUGS-19512](https://issues.redhat.com/browse/OCPBUGS-19512): pkg/clusterconditions/promql: Warm cache with 1s delay [#939](https://github.com/openshift/cluster-version-operator/pull/939)
* [OCPBUGS-18386](https://issues.redhat.com/browse/OCPBUGS-18386): Properly reconcile SCC resources [#966](https://github.com/openshift/cluster-version-operator/pull/966)
* [OTA-854](https://issues.redhat.com/browse/OTA-854): Add configurable CVO knobs for risk-evaluation PromQL target [#926](https://github.com/openshift/cluster-version-operator/pull/926)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition [#968](https://github.com/openshift/cluster-version-operator/pull/968)
* [OCPBUGS-19222](https://issues.redhat.com/browse/OCPBUGS-19222): Updating cluster-version-operator images to be consistent with ART [#970](https://github.com/openshift/cluster-version-operator/pull/970)
* [OCPBUGS-18567](https://issues.redhat.com/browse/OCPBUGS-18567): lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment [#965](https://github.com/openshift/cluster-version-operator/pull/965)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/af210dc66d38bce5793155aac8bfb6220a7085d9...cb586f43f568a6d156933fcda4486fc310a25806)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/617398f581faadbad2c7ded993bfa3169a87b6ab)

* Updating configmap-reload-container image to be consistent with ART [#57](https://github.com/openshift/configmap-reload/pull/57)
* [OCPBUGS-19171](https://issues.redhat.com/browse/OCPBUGS-19171): Updating configmap-reload images to be consistent with ART [#56](https://github.com/openshift/configmap-reload/pull/56)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/716a0c33bb693127fba3b3512622710785a59e8e...617398f581faadbad2c7ded993bfa3169a87b6ab)


### [console](https://github.com/openshift/console/tree/51f940e2be787ce72159922c310ddace10730992)

* [OCPBUGS-37202](https://issues.redhat.com/browse/OCPBUGS-37202): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#14073](https://github.com/openshift/console/pull/14073)
* [OCPBUGS-42470](https://issues.redhat.com/browse/OCPBUGS-42470): List of default Camel K event sources disappears when adding a custom event source [#14331](https://github.com/openshift/console/pull/14331)
* [OCPBUGS-42471](https://issues.redhat.com/browse/OCPBUGS-42471): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14332](https://github.com/openshift/console/pull/14332)
* [OCPBUGS-33283](https://issues.redhat.com/browse/OCPBUGS-33283): Adjust NAD name to "network-xxx-xxx" when creating [#14020](https://github.com/openshift/console/pull/14020)
* [OCPBUGS-42611](https://issues.redhat.com/browse/OCPBUGS-42611): Topology screen crashes when completed pod is selected [#14353](https://github.com/openshift/console/pull/14353)
* [OCPBUGS-42648](https://issues.redhat.com/browse/OCPBUGS-42648): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14358](https://github.com/openshift/console/pull/14358)
* [OCPBUGS-38764](https://issues.redhat.com/browse/OCPBUGS-38764): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14177](https://github.com/openshift/console/pull/14177)
* [OCPBUGS-41991](https://issues.redhat.com/browse/OCPBUGS-41991): Values entered into the Instantiate Template form are automatically cleared [#14294](https://github.com/openshift/console/pull/14294)
* [OCPBUGS-42384](https://issues.redhat.com/browse/OCPBUGS-42384): Fix updating the "Until" field on the Silence > Edit page [#14322](https://github.com/openshift/console/pull/14322)
* [OCPBUGS-39343](https://issues.redhat.com/browse/OCPBUGS-39343): The filepath including leading slash makes error during parsing devfile using Gitlab [#14227](https://github.com/openshift/console/pull/14227)
* [OCPBUGS-42144](https://issues.redhat.com/browse/OCPBUGS-42144): Use vCenterCluster value from CM as primary resource [#14307](https://github.com/openshift/console/pull/14307)
* [OCPBUGS-38537](https://issues.redhat.com/browse/OCPBUGS-38537): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14158](https://github.com/openshift/console/pull/14158)
* [OCPBUGS-38108](https://issues.redhat.com/browse/OCPBUGS-38108): Revert - terminal: use username if uid is not present [#14114](https://github.com/openshift/console/pull/14114)
* [OCPBUGS-32793](https://issues.redhat.com/browse/OCPBUGS-32793): Fix that telemetry events didn't incl. an userId anymore [#13792](https://github.com/openshift/console/pull/13792)
* [OCPBUGS-38970](https://issues.redhat.com/browse/OCPBUGS-38970): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14195](https://github.com/openshift/console/pull/14195)
* [OCPBUGS-38969](https://issues.redhat.com/browse/OCPBUGS-38969): Tooltip on Pipeline when expression is not shows [#14194](https://github.com/openshift/console/pull/14194)
* [OCPBUGS-39085](https://issues.redhat.com/browse/OCPBUGS-39085): Fix utilization card limits/total display [#14209](https://github.com/openshift/console/pull/14209)
* [OCPBUGS-33938](https://issues.redhat.com/browse/OCPBUGS-33938): Add validation for vSphere fields Handle submit errors correctly [#14210](https://github.com/openshift/console/pull/14210)
* [OCPBUGS-39112](https://issues.redhat.com/browse/OCPBUGS-39112): Disable Knative e2e tests [#14197](https://github.com/openshift/console/pull/14197)
* [OCPBUGS-33076](https://issues.redhat.com/browse/OCPBUGS-33076): Remove deprecated resources from spec of the Pipeline [#13801](https://github.com/openshift/console/pull/13801)
* [OCPBUGS-35495](https://issues.redhat.com/browse/OCPBUGS-35495): fix crash if helm chart metadata is nil [#13977](https://github.com/openshift/console/pull/13977)
* [OCPBUGS-37452](https://issues.redhat.com/browse/OCPBUGS-37452): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14083](https://github.com/openshift/console/pull/14083)
* [OCPBUGS-38496](https://issues.redhat.com/browse/OCPBUGS-38496): Fix password set to Secret created through Start Pipeline form [#14152](https://github.com/openshift/console/pull/14152)
* [OCPBUGS-37399](https://issues.redhat.com/browse/OCPBUGS-37399): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#14079](https://github.com/openshift/console/pull/14079)
* [OCPBUGS-37099](https://issues.redhat.com/browse/OCPBUGS-37099): fix BMH restart annotation [#14071](https://github.com/openshift/console/pull/14071)
* [OCPBUGS-37458](https://issues.redhat.com/browse/OCPBUGS-37458): one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource [#14085](https://github.com/openshift/console/pull/14085)
* [OCPBUGS-34477](https://issues.redhat.com/browse/OCPBUGS-34477): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13897](https://github.com/openshift/console/pull/13897)
* [OCPBUGS-36971](https://issues.redhat.com/browse/OCPBUGS-36971): ensure correct API version for OperandDetails [#14058](https://github.com/openshift/console/pull/14058)
* [OCPBUGS-34912](https://issues.redhat.com/browse/OCPBUGS-34912): Improve Pipeline list page performance [#13929](https://github.com/openshift/console/pull/13929)
* [OCPBUGS-33642](https://issues.redhat.com/browse/OCPBUGS-33642): Patch PF dynamic module parser to exclude 'next' modules [#13849](https://github.com/openshift/console/pull/13849)
* [OCPBUGS-32501](https://issues.redhat.com/browse/OCPBUGS-32501): Pipeline details page Metrics tab crashed due to no custom data [#13781](https://github.com/openshift/console/pull/13781)
* [OCPBUGS-34478](https://issues.redhat.com/browse/OCPBUGS-34478): UI inconsistency in topology when application grouping is collapsed [#13898](https://github.com/openshift/console/pull/13898)
* [OCPBUGS-34350](https://issues.redhat.com/browse/OCPBUGS-34350): Create Serverless form does not create BuildConfig [#13891](https://github.com/openshift/console/pull/13891)
* [OCPBUGS-32029](https://issues.redhat.com/browse/OCPBUGS-32029): Use UserInfo username field when logging out as kubeadmin [#13748](https://github.com/openshift/console/pull/13748)
* [OCPBUGS-30208](https://issues.redhat.com/browse/OCPBUGS-30208): Fix asynccache bugs [#13807](https://github.com/openshift/console/pull/13807)
* [OCPBUGS-33838](https://issues.redhat.com/browse/OCPBUGS-33838): TaskRuns should not be fetched for Failed PLR's [#13863](https://github.com/openshift/console/pull/13863)
* [OCPBUGS-34703](https://issues.redhat.com/browse/OCPBUGS-34703): fix bug where textarea is not resizable [#13913](https://github.com/openshift/console/pull/13913)
* Revert "OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters" [#13905](https://github.com/openshift/console/pull/13905)
* [OCPBUGS-33263](https://issues.redhat.com/browse/OCPBUGS-33263): Pipeline list page is crashed when navigating from Search page [#13819](https://github.com/openshift/console/pull/13819)
* [OCPBUGS-33166](https://issues.redhat.com/browse/OCPBUGS-33166): Fix NAD always on default namespace [#13865](https://github.com/openshift/console/pull/13865)
* [OCPBUGS-31863](https://issues.redhat.com/browse/OCPBUGS-31863): make sure folder is encapsulated with quotas [#13737](https://github.com/openshift/console/pull/13737)
* [OCPBUGS-33506](https://issues.redhat.com/browse/OCPBUGS-33506): Fix Pipeline details page with when expression using CEL expression [#13835](https://github.com/openshift/console/pull/13835)
* [OCPBUGS-32505](https://issues.redhat.com/browse/OCPBUGS-32505): Add visual connector between VMs and non VMs workloads [#13782](https://github.com/openshift/console/pull/13782)
* [OCPBUGS-33548](https://issues.redhat.com/browse/OCPBUGS-33548): restrict Masthead logo to max-height [#13839](https://github.com/openshift/console/pull/13839)
* [OCPBUGS-32497](https://issues.redhat.com/browse/OCPBUGS-32497): Improve Create serverless function error message [#13778](https://github.com/openshift/console/pull/13778)
* [OCPBUGS-33191](https://issues.redhat.com/browse/OCPBUGS-33191): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13810](https://github.com/openshift/console/pull/13810)
* [OCPBUGS-33058](https://issues.redhat.com/browse/OCPBUGS-33058): fix issues with Edit Route form [#13800](https://github.com/openshift/console/pull/13800)
* [OCPBUGS-32187](https://issues.redhat.com/browse/OCPBUGS-32187): Add flag to hide Output tab contributed by pipelines-plugin [#13756](https://github.com/openshift/console/pull/13756)
* [OCPBUGS-32716](https://issues.redhat.com/browse/OCPBUGS-32716): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13788](https://github.com/openshift/console/pull/13788)
* [OCPBUGS-32506](https://issues.redhat.com/browse/OCPBUGS-32506): setting correct image trigger annotation [#13783](https://github.com/openshift/console/pull/13783)
* [OCPBUGS-32933](https://issues.redhat.com/browse/OCPBUGS-32933): change OperatorHub filter FIPS Mode to Designed for FIPS [#13796](https://github.com/openshift/console/pull/13796)
* [OCPBUGS-31799](https://issues.redhat.com/browse/OCPBUGS-31799): Improve PipelineRun list view performance [#13731](https://github.com/openshift/console/pull/13731)
* [OCPBUGS-32796](https://issues.redhat.com/browse/OCPBUGS-32796): auth: fix OIDC logging out [#13793](https://github.com/openshift/console/pull/13793)
* [OCPBUGS-31445](https://issues.redhat.com/browse/OCPBUGS-31445): Upgrade Pipeline trigger resources to v1beta1 [#13704](https://github.com/openshift/console/pull/13704)
* [OCPBUGS-31045](https://issues.redhat.com/browse/OCPBUGS-31045): fix for execute inline markdown syntax issue [#13681](https://github.com/openshift/console/pull/13681)
* [OCPBUGS-32518](https://issues.redhat.com/browse/OCPBUGS-32518): Add warning about service binding operator will not be supported from 4.15 [#13784](https://github.com/openshift/console/pull/13784)
* [OCPBUGS-32391](https://issues.redhat.com/browse/OCPBUGS-32391): Routes created by devfiles do not always use HTTPS [#13771](https://github.com/openshift/console/pull/13771)
* [OCPBUGS-32340](https://issues.redhat.com/browse/OCPBUGS-32340): Increased max nodes limit to 200 in topology page [#13767](https://github.com/openshift/console/pull/13767)
* [OCPBUGS-32399](https://issues.redhat.com/browse/OCPBUGS-32399): Update devfile library to v2.2.2 [#13762](https://github.com/openshift/console/pull/13762)
* [OCPBUGS-32156](https://issues.redhat.com/browse/OCPBUGS-32156): TaskRun status is not displayed near the name [#13752](https://github.com/openshift/console/pull/13752)
* [OCPBUGS-31806](https://issues.redhat.com/browse/OCPBUGS-31806): Use bearer-token for local dev with auth [#13732](https://github.com/openshift/console/pull/13732)
* [OCPBUGS-31839](https://issues.redhat.com/browse/OCPBUGS-31839): fix bug where paused MCPs were incorrectly unpausing w… [#13735](https://github.com/openshift/console/pull/13735)
* [OCPBUGS-31105](https://issues.redhat.com/browse/OCPBUGS-31105): Update to pf5.2 to fix quick starts [#13686](https://github.com/openshift/console/pull/13686)
* [OCPBUGS-31476](https://issues.redhat.com/browse/OCPBUGS-31476): Requesting for country codes in localization of openshift - webconsole [#13707](https://github.com/openshift/console/pull/13707)
* [OCPBUGS-31046](https://issues.redhat.com/browse/OCPBUGS-31046): Application creation fail when manually entering input scaling value in local setup [#13682](https://github.com/openshift/console/pull/13682)
* [OCPBUGS-30916](https://issues.redhat.com/browse/OCPBUGS-30916), [OCPBUGS-30917](https://issues.redhat.com/browse/OCPBUGS-30917): PipelineRuns in Console show wrong status or load indefinitely [#13672](https://github.com/openshift/console/pull/13672)
* [OCPBUGS-30869](https://issues.redhat.com/browse/OCPBUGS-30869): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13668](https://github.com/openshift/console/pull/13668)
* [OCPBUGS-31107](https://issues.redhat.com/browse/OCPBUGS-31107): Upload Jar form's Clear button is not functioning [#13688](https://github.com/openshift/console/pull/13688)
* [OCPBUGS-30759](https://issues.redhat.com/browse/OCPBUGS-30759): Fix bugs in Console dynamic plugin SDK webpack code [#13678](https://github.com/openshift/console/pull/13678)
* [OCPBUGS-30871](https://issues.redhat.com/browse/OCPBUGS-30871): fix Configure link in AlertmanagerReceiversNotConfigur… [#13669](https://github.com/openshift/console/pull/13669)
* [OCPBUGS-29963](https://issues.redhat.com/browse/OCPBUGS-29963): i18n upload/download routine task - chore(i18n): update translations [#13670](https://github.com/openshift/console/pull/13670)
* [OCPBUGS-30801](https://issues.redhat.com/browse/OCPBUGS-30801): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13663](https://github.com/openshift/console/pull/13663)
* [OCPBUGS-30275](https://issues.redhat.com/browse/OCPBUGS-30275): adjusting documentation links for 4.15 [#13648](https://github.com/openshift/console/pull/13648)
* [OCPBUGS-30870](https://issues.redhat.com/browse/OCPBUGS-30870): chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13641](https://github.com/openshift/console/pull/13641)
* [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467)
* [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582)
* [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633)
* [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638)
* [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627)
* [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC >  VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570)
* [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526)
* [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490)
* [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475)
* [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629)
* [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631)
* [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630)
* [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628)
* [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618)
* [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615)
* [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545)
* chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594)
* [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498)
* [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636)
* [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599)
* [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584)
* [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590)
* [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486)
* [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548)
* [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595)
* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [OCPBUGS-26439](https://issues.redhat.com/browse/OCPBUGS-26439): Add support for custom segment domains (to load JS and make API calls) [#13489](https://github.com/openshift/console/pull/13489)
* [OCPBUGS-27177](https://issues.redhat.com/browse/OCPBUGS-27177): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13508](https://github.com/openshift/console/pull/13508)
* [OCPBUGS-27306](https://issues.redhat.com/browse/OCPBUGS-27306): Copy response code from proxied plugin requests [#13518](https://github.com/openshift/console/pull/13518)
* [OCPBUGS-26591](https://issues.redhat.com/browse/OCPBUGS-26591): add additional check to determine if file is binary [#13499](https://github.com/openshift/console/pull/13499)
* [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433)
* [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465)
* [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479)
* [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484)
* [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463)
* [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461)
* [OCPBUGS-25707](https://issues.redhat.com/browse/OCPBUGS-25707): fix Observe tab in Topology overview [#13462](https://github.com/openshift/console/pull/13462)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13447](https://github.com/openshift/console/pull/13447)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Only show VPAs that are associated with the selected namespace [#13426](https://github.com/openshift/console/pull/13426)
* [OCPBUGS-25324](https://issues.redhat.com/browse/OCPBUGS-25324): fix preferredTab selection on Pipelines page [#13443](https://github.com/openshift/console/pull/13443)
* [OCPBUGS-24680](https://issues.redhat.com/browse/OCPBUGS-24680): Backport Add support for Azure Workload Identity / Federated Identity [#13428](https://github.com/openshift/console/pull/13428)
* [OCPBUGS-25140](https://issues.redhat.com/browse/OCPBUGS-25140): fix runtime error on Node details Overview when Machin… [#13435](https://github.com/openshift/console/pull/13435)
* [OCPBUGS-24678](https://issues.redhat.com/browse/OCPBUGS-24678): Strip 'Server' header from proxy response [#13427](https://github.com/openshift/console/pull/13427)
* [OCPBUGS-25210](https://issues.redhat.com/browse/OCPBUGS-25210), [OCPBUGS-25211](https://issues.redhat.com/browse/OCPBUGS-25211): Fix pipelineRuns loading on repository details page [#13439](https://github.com/openshift/console/pull/13439)
* [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Update OpenShift favicons as well [#13420](https://github.com/openshift/console/pull/13420)
* [OCPBUGS-24582](https://issues.redhat.com/browse/OCPBUGS-24582): Updated functions list page to use new hook useParams [#13419](https://github.com/openshift/console/pull/13419)
* [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): add type and text filters to Events integration test [#13407](https://github.com/openshift/console/pull/13407)
* [OCPBUGS-13206](https://issues.redhat.com/browse/OCPBUGS-13206): Fix customPythonDeploymentConfig YAML script to create a Pipeline wasn't working [#13149](https://github.com/openshift/console/pull/13149)
* [OCPBUGS-13204](https://issues.redhat.com/browse/OCPBUGS-13204): Fix that customNodeDeployment pipeline YAML script wasn't working [#13148](https://github.com/openshift/console/pull/13148)
* [OCPBUGS-24252](https://issues.redhat.com/browse/OCPBUGS-24252): fix subscription page fields [#13416](https://github.com/openshift/console/pull/13416)
* [OCPBUGS-23764](https://issues.redhat.com/browse/OCPBUGS-23764): bump PF dependencies to the latest patch fix [#13380](https://github.com/openshift/console/pull/13380)
* [OU-286](https://issues.redhat.com/browse/OU-286): add test-id to panel charts to ease e2e tests when titles change [#13340](https://github.com/openshift/console/pull/13340)
* [OCPBUGS-23554](https://issues.redhat.com/browse/OCPBUGS-23554): Fix for monaco editor that happens with yaml is being edited [#13414](https://github.com/openshift/console/pull/13414)
* [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Set min-width for PF popovers that are being overridden by an inline style [#13390](https://github.com/openshift/console/pull/13390)
* [OCPBUGS-23347](https://issues.redhat.com/browse/OCPBUGS-23347): fix vCenter cluster being empty [#13209](https://github.com/openshift/console/pull/13209)
* [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Do not depend on a global installed lint-staged [#13409](https://github.com/openshift/console/pull/13409)
* [OCPBUGS-24399](https://issues.redhat.com/browse/OCPBUGS-24399): Update our overrides css rule to remove list bullet from PF4 ui elements [#13406](https://github.com/openshift/console/pull/13406)
* [OCPBUGS-23761](https://issues.redhat.com/browse/OCPBUGS-23761): PatternFly5 update: Fix quick search input background color in dark mode [#13398](https://github.com/openshift/console/pull/13398)
* [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): fix filtering issues on Events [#13395](https://github.com/openshift/console/pull/13395)
* [OCPBUGS-23263](https://issues.redhat.com/browse/OCPBUGS-23263): Update i18next-parser dev dependency in console [#13330](https://github.com/openshift/console/pull/13330)
* [OCPBUGS-24267](https://issues.redhat.com/browse/OCPBUGS-24267): Cluster configuration fields are not visible [#13386](https://github.com/openshift/console/pull/13386)
* [OCPBUGS-22976](https://issues.redhat.com/browse/OCPBUGS-22976): S2I Build Wizard should check for Containerfile in addition to Dockerfile [#13378](https://github.com/openshift/console/pull/13378)
* [OCPBUGS-24001](https://issues.redhat.com/browse/OCPBUGS-24001): Fix crash when ArtifactHub Task has no version [#13379](https://github.com/openshift/console/pull/13379)
* [OCPBUGS-18371](https://issues.redhat.com/browse/OCPBUGS-18371): Searching for items in quick search is confusing [#13381](https://github.com/openshift/console/pull/13381)
* [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): view sbom link redirection should be based on taskrun annotation [#13387](https://github.com/openshift/console/pull/13387)
* [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Add note about git hooks and PATH env var to README [#13396](https://github.com/openshift/console/pull/13396)
* [OCPBUGS-18542](https://issues.redhat.com/browse/OCPBUGS-18542): Fixed topology package e2e tests [#13136](https://github.com/openshift/console/pull/13136)
* [CONSOLE-3852](https://issues.redhat.com/browse/CONSOLE-3852): remove PatternFly classnames from integration tests [#13337](https://github.com/openshift/console/pull/13337)
* [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#13383](https://github.com/openshift/console/pull/13383)
* [CONSOLE-3732](https://issues.redhat.com/browse/CONSOLE-3732): Add option to enable/disable tailing to Pod log viewer [#13298](https://github.com/openshift/console/pull/13298)
* [CONSOLE-3705](https://issues.redhat.com/browse/CONSOLE-3705): Phase 1 of using OpenShift Dynamic Plugin SDK [#13188](https://github.com/openshift/console/pull/13188)
* [OCPBUGS-23779](https://issues.redhat.com/browse/OCPBUGS-23779): Fix crash when user clicks on Show tooltips [#13382](https://github.com/openshift/console/pull/13382)
* [OCPBUGS-19426](https://issues.redhat.com/browse/OCPBUGS-19426): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#13333](https://github.com/openshift/console/pull/13333)
* [CONSOLE-3764](https://issues.redhat.com/browse/CONSOLE-3764): Update husky to v8.0.3 [#13320](https://github.com/openshift/console/pull/13320)
* [OCPBUGS-23125](https://issues.redhat.com/browse/OCPBUGS-23125): add access review for impersonate [#13345](https://github.com/openshift/console/pull/13345)
* [OCPBUGS-23780](https://issues.redhat.com/browse/OCPBUGS-23780), [OCPBUGS-23783](https://issues.redhat.com/browse/OCPBUGS-23783), [OCPBUGS-23794](https://issues.redhat.com/browse/OCPBUGS-23794), [OCPBUGS-23977](https://issues.redhat.com/browse/OCPBUGS-23977): Bring back the Decorators and Pod Rings around resources in Topology [#13376](https://github.com/openshift/console/pull/13376)
* [OCPBUGS-23956](https://issues.redhat.com/browse/OCPBUGS-23956): PatternFly5 update: Remove text decoration for task node on hover [#13371](https://github.com/openshift/console/pull/13371)
* [OCPBUGS-23786](https://issues.redhat.com/browse/OCPBUGS-23786): PatternFly5 update: fix code snippet color in quick start in dark mode [#13366](https://github.com/openshift/console/pull/13366)
* [OCPBUGS-23770](https://issues.redhat.com/browse/OCPBUGS-23770): After PatternFly5 update: Typology sidebar layout issue [#13363](https://github.com/openshift/console/pull/13363)
* [OCPBUGS-23248](https://issues.redhat.com/browse/OCPBUGS-23248): change Alertmanager form to create using matchers inst… [#13358](https://github.com/openshift/console/pull/13358)
* [OCPBUGS-23980](https://issues.redhat.com/browse/OCPBUGS-23980): Fix logs streaming auto scroll issue [#13377](https://github.com/openshift/console/pull/13377)
* [OCPBUGS-23778](https://issues.redhat.com/browse/OCPBUGS-23778): Apply the correct font-family for the page header action button and menu items. [#13375](https://github.com/openshift/console/pull/13375)
* [OCPBUGS-23756](https://issues.redhat.com/browse/OCPBUGS-23756): fix layout of Show tooltips in YAML editor [#13374](https://github.com/openshift/console/pull/13374)
* [OCPBUGS-23971](https://issues.redhat.com/browse/OCPBUGS-23971): remove pf-m-grid-md from tables so table headers appea… [#13373](https://github.com/openshift/console/pull/13373)
* [OCPBUGS-23927](https://issues.redhat.com/browse/OCPBUGS-23927): fix table layout issue with Identity providers table [#13372](https://github.com/openshift/console/pull/13372)
* [OCPBUGS-23769](https://issues.redhat.com/browse/OCPBUGS-23769): PatternFly5 update: fix Topologylist view hover effect [#13368](https://github.com/openshift/console/pull/13368)
* [CONSOLE-3793](https://issues.redhat.com/browse/CONSOLE-3793): add uptime to Node pages [#13312](https://github.com/openshift/console/pull/13312)
* [OCPBUGS-23559](https://issues.redhat.com/browse/OCPBUGS-23559): Styling issue in functions list page after PatternFly upgrade [#13356](https://github.com/openshift/console/pull/13356)
* chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 [#13253](https://github.com/openshift/console/pull/13253)
* [OCPBUGS-23923](https://issues.redhat.com/browse/OCPBUGS-23923): fix PipelineRun task logs switcher [#13369](https://github.com/openshift/console/pull/13369)
* [OCPBUGS-23775](https://issues.redhat.com/browse/OCPBUGS-23775): After PatternFly5 update: Form error is missing when import a container image [#13365](https://github.com/openshift/console/pull/13365)
* [OCPBUGS-23765](https://issues.redhat.com/browse/OCPBUGS-23765): fix dark theme issue for helm release readme modal [#13370](https://github.com/openshift/console/pull/13370)
* [ODC-7359](https://issues.redhat.com/browse/ODC-7359): Fix shipwright build e2e tests [#13296](https://github.com/openshift/console/pull/13296)
* [OCPBUGS-23787](https://issues.redhat.com/browse/OCPBUGS-23787): PatternFly5 update: fix Quickstarts catalog item count alignment [#13367](https://github.com/openshift/console/pull/13367)
* [OCPBUGS-23776](https://issues.redhat.com/browse/OCPBUGS-23776): After PatternFly5 update: Add page > more button dropdown is too wide [#13361](https://github.com/openshift/console/pull/13361)
* [OCPBUGS-23768](https://issues.redhat.com/browse/OCPBUGS-23768): After PatternFly5 update: Navigation: Extra space after divider [#13362](https://github.com/openshift/console/pull/13362)
* [OCPBUGS-23912](https://issues.redhat.com/browse/OCPBUGS-23912), [OCPBUGS-23918](https://issues.redhat.com/browse/OCPBUGS-23918): Add Vulnerabilities column and signed icon in PAC repository PLR list [#13364](https://github.com/openshift/console/pull/13364)
* [ODC-7426](https://issues.redhat.com/browse/ODC-7426): Deletion of pipeline run after tekton result installation should be user-friendly [#13353](https://github.com/openshift/console/pull/13353)
* [OCPBUGS-23388](https://issues.redhat.com/browse/OCPBUGS-23388): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13344](https://github.com/openshift/console/pull/13344)
* [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Replace topology graphic with new version for openshift v4.15 [#13350](https://github.com/openshift/console/pull/13350)
* [OCPBUGS-23543](https://issues.redhat.com/browse/OCPBUGS-23543): Deployment option is missing in 'Deploy Image' [#13354](https://github.com/openshift/console/pull/13354)
* [ODC-7428](https://issues.redhat.com/browse/ODC-7428): Update quick start name and document links for getting started section [#13348](https://github.com/openshift/console/pull/13348)
* [OCPBUGS-22778](https://issues.redhat.com/browse/OCPBUGS-22778): Fix for yaml editor that crashes with MCE and ACM plugins enabled [#13346](https://github.com/openshift/console/pull/13346)
* [GITOPS-3575](https://issues.redhat.com/browse/GITOPS-3575): Added disallowed flag to gitops static plugin [#13307](https://github.com/openshift/console/pull/13307)
* [ODC-7419](https://issues.redhat.com/browse/ODC-7419): Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) [#13303](https://github.com/openshift/console/pull/13303)
* [CONSOLE-3693](https://issues.redhat.com/browse/CONSOLE-3693): Upgrade to PFv5 versions [#12983](https://github.com/openshift/console/pull/12983)
* [ODC-7425](https://issues.redhat.com/browse/ODC-7425): Add serverless function icon in Add page group header [#13338](https://github.com/openshift/console/pull/13338)
* [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): account for `useK8sWatchResource` returning `{}` like it does f… [#13347](https://github.com/openshift/console/pull/13347)
* [ODC-7383](https://issues.redhat.com/browse/ODC-7383), [ODC-7384](https://issues.redhat.com/browse/ODC-7384), [ODC-7385](https://issues.redhat.com/browse/ODC-7385): Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info [#13328](https://github.com/openshift/console/pull/13328)
* [ODC-7424](https://issues.redhat.com/browse/ODC-7424): Add e2e tests for vulnerabilities column in pipelinerun list and details page [#13335](https://github.com/openshift/console/pull/13335)
* [OCPBUGS-23164](https://issues.redhat.com/browse/OCPBUGS-23164): Cannot Edit Shipwright Build [#13341](https://github.com/openshift/console/pull/13341)
* [ODC-7382](https://issues.redhat.com/browse/ODC-7382), [ODC-7395](https://issues.redhat.com/browse/ODC-7395): add support for tektonresult api to load PipelineRuns [#13311](https://github.com/openshift/console/pull/13311)
* [ODC-7421](https://issues.redhat.com/browse/ODC-7421): Show vulnerability column in the pipelinerun list page [#13329](https://github.com/openshift/console/pull/13329)
* [ODC-7424](https://issues.redhat.com/browse/ODC-7424): add e2e tests for SBOM section and output tab [#13325](https://github.com/openshift/console/pull/13325)
* [OCPBUGS-23292](https://issues.redhat.com/browse/OCPBUGS-23292): Webpack-DevServer Hot-Reload Not Working [#13331](https://github.com/openshift/console/pull/13331)
* [CONSOLE-3823](https://issues.redhat.com/browse/CONSOLE-3823): Split auth config to its own module [#13261](https://github.com/openshift/console/pull/13261)
* [ODC-7423](https://issues.redhat.com/browse/ODC-7423): move pipelinerun results to output tab [#13323](https://github.com/openshift/console/pull/13323)
* [ODC-7399](https://issues.redhat.com/browse/ODC-7399): Create getting started content in functions list page [#13289](https://github.com/openshift/console/pull/13289)
* [ODC-7422](https://issues.redhat.com/browse/ODC-7422): Add SBOM link and signed badge in PLR details page [#13314](https://github.com/openshift/console/pull/13314)
* [CONSOLE-3618](https://issues.redhat.com/browse/CONSOLE-3618): Remove frontend multicluster code [#13245](https://github.com/openshift/console/pull/13245)
* [CONSOLE-3777](https://issues.redhat.com/browse/CONSOLE-3777): Update NodeJS v14 to v18 [#13213](https://github.com/openshift/console/pull/13213)
* [ODC-7414](https://issues.redhat.com/browse/ODC-7414): Update Shipwright API from v1alpha1 to v1beta1 [#13304](https://github.com/openshift/console/pull/13304)
* [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): improve labels and annotations modal display and editi… [#13295](https://github.com/openshift/console/pull/13295)
* [CONSOLE-3695](https://issues.redhat.com/browse/CONSOLE-3695): Add details item extension to console dynamic plugin SDK [#13240](https://github.com/openshift/console/pull/13240)
* [CONSOLE-3814](https://issues.redhat.com/browse/CONSOLE-3814): Conditionally render "Users" and "Groups" nav items [#13287](https://github.com/openshift/console/pull/13287)
* [OCPBUGS-23110](https://issues.redhat.com/browse/OCPBUGS-23110): Disable Pipelines E2E Tests [#13318](https://github.com/openshift/console/pull/13318)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Address memory issues in CI [#13309](https://github.com/openshift/console/pull/13309)
* [CONSOLE-3614](https://issues.redhat.com/browse/CONSOLE-3614): Remove multicluster code from Bridge [#13244](https://github.com/openshift/console/pull/13244)
* [CONSOLE-3822](https://issues.redhat.com/browse/CONSOLE-3822): Update obsolete deps [#13294](https://github.com/openshift/console/pull/13294)
* [OCPBUGS-22930](https://issues.redhat.com/browse/OCPBUGS-22930): remove expandable toggle for conditional update risk d… [#13306](https://github.com/openshift/console/pull/13306)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name by using unique-names-generator [#13263](https://github.com/openshift/console/pull/13263)
* [CONSOLE-3781](https://issues.redhat.com/browse/CONSOLE-3781): remove cypress.config comments [#13301](https://github.com/openshift/console/pull/13301)
* [CONSOLE-3819](https://issues.redhat.com/browse/CONSOLE-3819): change Cypress' default browser to Electron [#13300](https://github.com/openshift/console/pull/13300)
* [OCPBUGS-19916](https://issues.redhat.com/browse/OCPBUGS-19916): Fix MachineSetList capacity logic [#13259](https://github.com/openshift/console/pull/13259)
* [CNV-30298](https://issues.redhat.com/browse/CNV-30298): Add UI for OVN Secondary Localnet Network [#13293](https://github.com/openshift/console/pull/13293)
* [OCPBUGS-19875](https://issues.redhat.com/browse/OCPBUGS-19875): Fix plugin proxy handler [#13272](https://github.com/openshift/console/pull/13272)
* [CONSOLE-3808](https://issues.redhat.com/browse/CONSOLE-3808): Remove Protactor from console-plugin-sdk [#13283](https://github.com/openshift/console/pull/13283)
* [OCPBUGS-22747](https://issues.redhat.com/browse/OCPBUGS-22747): Display "With Data upload form" in Create PVC drop down once [#13292](https://github.com/openshift/console/pull/13292)
* [CONSOLE-3811](https://issues.redhat.com/browse/CONSOLE-3811): remove shared Protractor files [#13282](https://github.com/openshift/console/pull/13282)
* [ODC-7409](https://issues.redhat.com/browse/ODC-7409): Use @kubernetes-models/shipwright types in shipwright-plugin [#13267](https://github.com/openshift/console/pull/13267)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove local-storage-operator-plugin Protractor tests [#13291](https://github.com/openshift/console/pull/13291)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove network-attachment-definition-plugin Protractor … [#13286](https://github.com/openshift/console/pull/13286)
* [ODC-7386](https://issues.redhat.com/browse/ODC-7386): Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed [#13145](https://github.com/openshift/console/pull/13145)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): migrate console Protractor tests to Cypress [#13257](https://github.com/openshift/console/pull/13257)
* [OCPBUGS-22419](https://issues.redhat.com/browse/OCPBUGS-22419): Fix the forms when BC is not installed in the cluster [#13241](https://github.com/openshift/console/pull/13241)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove cnv console tests [#13280](https://github.com/openshift/console/pull/13280)
* [OCPBUGS-10562](https://issues.redhat.com/browse/OCPBUGS-10562): fix operator uninstall test [#13214](https://github.com/openshift/console/pull/13214)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): remove references to removed packages [#13281](https://github.com/openshift/console/pull/13281)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13274](https://github.com/openshift/console/pull/13274)
* [CONSOLE-3816](https://issues.redhat.com/browse/CONSOLE-3816): Goodbye! [#13255](https://github.com/openshift/console/pull/13255)
* [OCPBUGS-19458](https://issues.redhat.com/browse/OCPBUGS-19458), [OU-241](https://issues.redhat.com/browse/OU-241): Remove unused Observe > Metrics page code [#13114](https://github.com/openshift/console/pull/13114)
* [OCPBUGS-20295](https://issues.redhat.com/browse/OCPBUGS-20295): clarify Operator installMode error message [#13232](https://github.com/openshift/console/pull/13232)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): fix bug where renamed tests weren't updated [#13275](https://github.com/openshift/console/pull/13275)
* [OCPBUGS-22284](https://issues.redhat.com/browse/OCPBUGS-22284): updating doc links for 4.14 GA [#13266](https://github.com/openshift/console/pull/13266)
* [OCPBUGS-22199](https://issues.redhat.com/browse/OCPBUGS-22199): Save also the location.search and .hash values in localStorage to restore them after login [#13268](https://github.com/openshift/console/pull/13268)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13265](https://github.com/openshift/console/pull/13265)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Workloads-AddPage: upload JAR file's i18n misses [#13264](https://github.com/openshift/console/pull/13264)
* [OCPBUGS-16756](https://issues.redhat.com/browse/OCPBUGS-16756): Cluster dropdown items are not marked for i18n when ACM/MCE installed [#13238](https://github.com/openshift/console/pull/13238)
* [OCPBUGS-20362](https://issues.redhat.com/browse/OCPBUGS-20362): Delete results.tekton.dev annotations before rerun the pipelineRun [#13230](https://github.com/openshift/console/pull/13230)
* [OCPBUGS-9422](https://issues.redhat.com/browse/OCPBUGS-9422): Telemetry- Current page was sometimes not tracked when reloading the current page [#13088](https://github.com/openshift/console/pull/13088)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): check that user dropdown is present to verify logged in [#13260](https://github.com/openshift/console/pull/13260)
* [CONSOLE-3812](https://issues.redhat.com/browse/CONSOLE-3812): remove packages/ceph-storage-plugin/integration-tests [#13249](https://github.com/openshift/console/pull/13249)
* [CONSOLE-3809](https://issues.redhat.com/browse/CONSOLE-3809): remove orphaned OLM Protractor views [#13248](https://github.com/openshift/console/pull/13248)
* [OCPBUGS-19783](https://issues.redhat.com/browse/OCPBUGS-19783): Channel page shows "Required" message for the default name when navigate to create channel page [#13222](https://github.com/openshift/console/pull/13222)
* [OCPBUGS-20229](https://issues.redhat.com/browse/OCPBUGS-20229): Service details page shows revisions and routes from other service also [#13221](https://github.com/openshift/console/pull/13221)
* [CONSOLE-3766](https://issues.redhat.com/browse/CONSOLE-3766): Update i18next-parser dev dependency in console [#13197](https://github.com/openshift/console/pull/13197)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): follow-on fixes and cleanup for Cypress upgrade [#13242](https://github.com/openshift/console/pull/13242)
* [OCPBUGS-20305](https://issues.redhat.com/browse/OCPBUGS-20305): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13236](https://github.com/openshift/console/pull/13236)
* [OCPBUGS-19714](https://issues.redhat.com/browse/OCPBUGS-19714): hide page-specific doc links for ROSA and OSD [#13229](https://github.com/openshift/console/pull/13229)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 [#13201](https://github.com/openshift/console/pull/13201)
* [OCPBUGS-21616](https://issues.redhat.com/browse/OCPBUGS-21616): Fix empty editor error [#13176](https://github.com/openshift/console/pull/13176)
* [ODC-7401](https://issues.redhat.com/browse/ODC-7401): Remove protractor from dev-console and knative plugins [#13247](https://github.com/openshift/console/pull/13247)
* [ODC-7400](https://issues.redhat.com/browse/ODC-7400): Fix e2e for dev-console, knative, topology, helm and pipeline packages [#13231](https://github.com/openshift/console/pull/13231)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Upgrade Cypress [#13070](https://github.com/openshift/console/pull/13070)
* [CONSOLE-3758](https://issues.redhat.com/browse/CONSOLE-3758): add support for new features annotations while preserv… [#13183](https://github.com/openshift/console/pull/13183)
* [ODC-7396](https://issues.redhat.com/browse/ODC-7396): Add Pipeline metrics tab using plugin [#13225](https://github.com/openshift/console/pull/13225)
* [CONSOLE-3084](https://issues.redhat.com/browse/CONSOLE-3084): frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA [#13184](https://github.com/openshift/console/pull/13184)
* [CONSOLE-3675](https://issues.redhat.com/browse/CONSOLE-3675): Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component [#13105](https://github.com/openshift/console/pull/13105)
* [OCPBUGS-20270](https://issues.redhat.com/browse/OCPBUGS-20270): Add instructions to the README for running the monitoring plugin locally [#13226](https://github.com/openshift/console/pull/13226)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): use setTimeout to allow model to be created [#13195](https://github.com/openshift/console/pull/13195)
* [OCPBUGS-4242](https://issues.redhat.com/browse/OCPBUGS-4242): Fix CSV list and details page managed namespaces for copied CSVs. [#13194](https://github.com/openshift/console/pull/13194)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Home-Projects-Default-workloads-AddPage: upload JAR file's i18n misses [#13208](https://github.com/openshift/console/pull/13208)
* [OCPBUGS-19966](https://issues.redhat.com/browse/OCPBUGS-19966): Builds - BuildConfigs : i18n misses [#13211](https://github.com/openshift/console/pull/13211)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue (additional fixes) [#13198](https://github.com/openshift/console/pull/13198)
* [ODC-7377](https://issues.redhat.com/browse/ODC-7377), [ODC-7378](https://issues.redhat.com/browse/ODC-7378): Add Revisions, Routes and Pods tab for service details page [#13174](https://github.com/openshift/console/pull/13174)
* [CONSOLE-3763](https://issues.redhat.com/browse/CONSOLE-3763): Update null-loader dev dependency in console [#13154](https://github.com/openshift/console/pull/13154)
* [OCPBUGS-7893](https://issues.redhat.com/browse/OCPBUGS-7893): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13077](https://github.com/openshift/console/pull/13077)
* [OCPBUGS-14322](https://issues.redhat.com/browse/OCPBUGS-14322): fix ResourceLog permissions when impersonating [#13196](https://github.com/openshift/console/pull/13196)
* [ODC-7391](https://issues.redhat.com/browse/ODC-7391): Add a new allowInsecure option to the internet proxy API [#13175](https://github.com/openshift/console/pull/13175)
* [OCPBUGS-19743](https://issues.redhat.com/browse/OCPBUGS-19743): Fix Invalid URL crash [#13192](https://github.com/openshift/console/pull/13192)
* [OCPBUGS-18267](https://issues.redhat.com/browse/OCPBUGS-18267): 404 - not found will show on Knative-serving Details page [#13156](https://github.com/openshift/console/pull/13156)
* [OCPBUGS-17676](https://issues.redhat.com/browse/OCPBUGS-17676): Enable white space retain in resource logs [#13101](https://github.com/openshift/console/pull/13101)
* [OCPBUGS-4426](https://issues.redhat.com/browse/OCPBUGS-4426): All Projects' dropdown": Roles and RoleBindings "before all" hook for "test Roles detail page breadcrumbs to list page restores [#13190](https://github.com/openshift/console/pull/13190)
* [OCPBUGS-8777](https://issues.redhat.com/browse/OCPBUGS-8777): Don't redirect after logout from login error route [#13102](https://github.com/openshift/console/pull/13102)
* [OCPBUGS-9157](https://issues.redhat.com/browse/OCPBUGS-9157): ‘Create Pod’ button should be disabled for normal user … [#13040](https://github.com/openshift/console/pull/13040)
* [OCPBUGS-19640](https://issues.redhat.com/browse/OCPBUGS-19640): Dont render ARN mode role field and warning for HyperShift clusters [#13191](https://github.com/openshift/console/pull/13191)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue [#13180](https://github.com/openshift/console/pull/13180)
* [OCPBUGS-19546](https://issues.redhat.com/browse/OCPBUGS-19546): Set unlimited line width in YAML editor [#13182](https://github.com/openshift/console/pull/13182)
* [OCPBUGS-19413](https://issues.redhat.com/browse/OCPBUGS-19413): Fix demo dynamic plugin dev mode cypress tests [#13172](https://github.com/openshift/console/pull/13172)
* [OCPBUGS-19367](https://issues.redhat.com/browse/OCPBUGS-19367): Console should not panic when no response is retrieved for plugin assets [#13166](https://github.com/openshift/console/pull/13166)
* [OCPBUGS-19394](https://issues.redhat.com/browse/OCPBUGS-19394): document kebab menu cell props [#13177](https://github.com/openshift/console/pull/13177)
* [OCPBUGS-13152](https://issues.redhat.com/browse/OCPBUGS-13152): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13065](https://github.com/openshift/console/pull/13065)
* [OCPBUGS-9719](https://issues.redhat.com/browse/OCPBUGS-9719): Correct logout process [#10177](https://github.com/openshift/console/pull/10177)
* [OCPBUGS-18832](https://issues.redhat.com/browse/OCPBUGS-18832): change resource icon for FenceAgentRemediationTemplate… [#13162](https://github.com/openshift/console/pull/13162)
* [OCPBUGS-18996](https://issues.redhat.com/browse/OCPBUGS-18996): fix issues with refactored "Create StorageClass" form [#13153](https://github.com/openshift/console/pull/13153)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console images to be consistent with ART [#13157](https://github.com/openshift/console/pull/13157)
* [OCPBUGS-11286](https://issues.redhat.com/browse/OCPBUGS-11286): Check if filtered object contains name property [#12810](https://github.com/openshift/console/pull/12810)
* [OCPBUGS-18464](https://issues.redhat.com/browse/OCPBUGS-18464): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13141](https://github.com/openshift/console/pull/13141)
* [OCPBUGS-18494](https://issues.redhat.com/browse/OCPBUGS-18494): Upgrade DomainMapping apiVersion to v1beta1 [#13133](https://github.com/openshift/console/pull/13133)
* [OCPBUGS-19314](https://issues.redhat.com/browse/OCPBUGS-19314): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13130](https://github.com/openshift/console/pull/13130)
* [OCPBUGS-6515](https://issues.redhat.com/browse/OCPBUGS-6515): address ConsoleExternalLogLink test flake [#13110](https://github.com/openshift/console/pull/13110)
* [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Remove redundant break line [#13109](https://github.com/openshift/console/pull/13109)
* [OCPBUGS-5571](https://issues.redhat.com/browse/OCPBUGS-5571): Update API docs content based on docs review [#13108](https://github.com/openshift/console/pull/13108)
* [OCPBUGS-3403](https://issues.redhat.com/browse/OCPBUGS-3403): Fix resource table sorting crash [#13103](https://github.com/openshift/console/pull/13103)
* [OCPBUGS-17203](https://issues.redhat.com/browse/OCPBUGS-17203): mock apis for git repo in test serverless function tests [#13064](https://github.com/openshift/console/pull/13064)
* [OCPBUGS-19313](https://issues.redhat.com/browse/OCPBUGS-19313): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13129](https://github.com/openshift/console/pull/13129)
* [OCPBUGS-19311](https://issues.redhat.com/browse/OCPBUGS-19311): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13128](https://github.com/openshift/console/pull/13128)
* [OCPBUGS-18188](https://issues.redhat.com/browse/OCPBUGS-18188): Added React Icon [#13111](https://github.com/openshift/console/pull/13111)
* [OCPBUGS-18485](https://issues.redhat.com/browse/OCPBUGS-18485): Monitoring: Fix display of silenced alerts in dev console [#13151](https://github.com/openshift/console/pull/13151)
* [OCPBUGS-6513](https://issues.redhat.com/browse/OCPBUGS-6513): Fixed Edit Application form for Knative Services [#12832](https://github.com/openshift/console/pull/12832)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13092](https://github.com/openshift/console/pull/13092)
* [OCPBUGS-18439](https://issues.redhat.com/browse/OCPBUGS-18439): use active namespace in Create cta href of create action for operator backed [#13132](https://github.com/openshift/console/pull/13132)
* [Full changelog](https://github.com/openshift/console/compare/995c4dc987f44f6b7d72ba0da3df6eaaf8f92162...51f940e2be787ce72159922c310ddace10730992)


### [console-operator](https://github.com/openshift/console-operator/tree/5d7ebcddf5a58d44ba37d63b149b06d6fc5ae1d8)

* [OCPBUGS-37408](https://issues.redhat.com/browse/OCPBUGS-37408): set required-scc for openshift workloads [#924](https://github.com/openshift/console-operator/pull/924)
* [OCPBUGS-31520](https://issues.redhat.com/browse/OCPBUGS-31520): oidc: synchronize the CM with a CA to trust the issuer, if configured [#881](https://github.com/openshift/console-operator/pull/881)
* [OCPBUGS-33720](https://issues.redhat.com/browse/OCPBUGS-33720): Add missing return statement to fix crash in healthcheck controller [#903](https://github.com/openshift/console-operator/pull/903)
* [OCPBUGS-31499](https://issues.redhat.com/browse/OCPBUGS-31499): Update RHDH QuickStarts and add CR examples [#880](https://github.com/openshift/console-operator/pull/880)
* [OCPBUGS-31619](https://issues.redhat.com/browse/OCPBUGS-31619): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#882](https://github.com/openshift/console-operator/pull/882)
* [OCPBUGS-29332](https://issues.redhat.com/browse/OCPBUGS-29332): Remove Janus IDP and update RHDH quickstarts [#863](https://github.com/openshift/console-operator/pull/863)
* [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835)
* [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870)
* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [OCPBUGS-27221](https://issues.redhat.com/browse/OCPBUGS-27221): Bump library-go to deal with GET conflict [#837](https://github.com/openshift/console-operator/pull/837)
* [OCPBUGS-24104](https://issues.redhat.com/browse/OCPBUGS-24104): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#818](https://github.com/openshift/console-operator/pull/818)
* [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): Reapply separation of the oauthclients controller [#814](https://github.com/openshift/console-operator/pull/814)
* [CONSOLE-3652](https://issues.redhat.com/browse/CONSOLE-3652): Create StorageVersionMigration for ConsolePlugin CRD v1 migration [#816](https://github.com/openshift/console-operator/pull/816)
* [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#819](https://github.com/openshift/console-operator/pull/819)
* [CONSOLE-3791](https://issues.redhat.com/browse/CONSOLE-3791): Add "readOnlyRootFilesystem" to all console conta… [#809](https://github.com/openshift/console-operator/pull/809)
* [OCPBUGS-23300](https://issues.redhat.com/browse/OCPBUGS-23300): Disable route controller health check for NLB setup [#815](https://github.com/openshift/console-operator/pull/815)
* [ODC-7418](https://issues.redhat.com/browse/ODC-7418): Add Janus IDP and RHDH Quick starts [#806](https://github.com/openshift/console-operator/pull/806)
* [TRT-1361](https://issues.redhat.com/browse/TRT-1361): Revert #808 "CONSOLE-3804: split oauthclient controller from the common logic" [#813](https://github.com/openshift/console-operator/pull/813)
* [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): split oauthclient controller from the common logic [#808](https://github.com/openshift/console-operator/pull/808)
* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Update vendor bundle after removing multicluster code [#810](https://github.com/openshift/console-operator/pull/810)
* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Remove multicluster code from console operator [#799](https://github.com/openshift/console-operator/pull/799)
* [OCPBUGS-21972](https://issues.redhat.com/browse/OCPBUGS-21972): Disable HTTP/2 for webhook [#802](https://github.com/openshift/console-operator/pull/802)
* [OCPVE-719](https://issues.redhat.com/browse/OCPVE-719): feat: add support for olm capability [#795](https://github.com/openshift/console-operator/pull/795)
* [HOSTEDCP-1250](https://issues.redhat.com/browse/HOSTEDCP-1250): remove redundant cert check [#801](https://github.com/openshift/console-operator/pull/801)
* [CONSOLE-3717](https://issues.redhat.com/browse/CONSOLE-3717): Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests [#782](https://github.com/openshift/console-operator/pull/782)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console-operator images to be consistent with ART [#794](https://github.com/openshift/console-operator/pull/794)
* [OCPBUGS-19080](https://issues.redhat.com/browse/OCPBUGS-19080): Reset console operator's conditions [#796](https://github.com/openshift/console-operator/pull/796)
* [Full changelog](https://github.com/openshift/console-operator/compare/e5d3f29136a89a273ed48023ce3a89c27980cf4f...5d7ebcddf5a58d44ba37d63b149b06d6fc5ae1d8)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/401d35070f2d1d4db3f08ffe183b8262754b7287)

* [OCPBUGS-30045](https://issues.redhat.com/browse/OCPBUGS-30045): [4.15] cherry-pick containernetworking/plugins#997 [#155](https://github.com/openshift/containernetworking-plugins/pull/155)
* [NP-807](https://issues.redhat.com/browse/NP-807): Upstream sync Nov 2023 [#139](https://github.com/openshift/containernetworking-plugins/pull/139)
* [OCPBUGS-21906](https://issues.redhat.com/browse/OCPBUGS-21906): Bumps x/net + upstream sync november 2023 [#128](https://github.com/openshift/containernetworking-plugins/pull/128)
* [OCPBUGS-19127](https://issues.redhat.com/browse/OCPBUGS-19127): Updating ose-containernetworking-plugins images to be consistent with ART [#122](https://github.com/openshift/containernetworking-plugins/pull/122)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407...401d35070f2d1d4db3f08ffe183b8262754b7287)


### [coredns](https://github.com/openshift/coredns/tree/1326282c9e158078634be4261b75ded247d233d7)

* [OCPBUGS-37158](https://issues.redhat.com/browse/OCPBUGS-37158): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#125](https://github.com/openshift/coredns/pull/125)
* [OCPBUGS-27904](https://issues.redhat.com/browse/OCPBUGS-27904): UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 [#110](https://github.com/openshift/coredns/pull/110)
* [OCPBUGS-24133](https://issues.redhat.com/browse/OCPBUGS-24133): Updating coredns-container image to be consistent with ART [#106](https://github.com/openshift/coredns/pull/106)
* [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101)
* [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94)
* [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95)
* [Full changelog](https://github.com/openshift/coredns/compare/fdd6037bf7380a48358b269d78bc8c61c311342c...1326282c9e158078634be4261b75ded247d233d7)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/6ab1226a552376801e1f5712e3189a27729a23ed)

* [OCPBUGS-38170](https://issues.redhat.com/browse/OCPBUGS-38170): rebase CPO on 4.15 [#274](https://github.com/openshift/cloud-provider-openstack/pull/274)
* [OCPBUGS-32246](https://issues.redhat.com/browse/OCPBUGS-32246): Remove enforcement of IPv6 LB as internal [#277](https://github.com/openshift/cloud-provider-openstack/pull/277)
* update tags [#2204](https://github.com/openshift/cloud-provider-openstack/pull/2204)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/697083a8e5e1f68978458a0a00c426e094665271...6ab1226a552376801e1f5712e3189a27729a23ed)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/9bcf382eb68d3dd13a553dce41822d24da3870d0)

* [OCPBUGS-38023](https://issues.redhat.com/browse/OCPBUGS-38023): Set required-scc for openshift workloads [#236](https://github.com/openshift/csi-driver-manila-operator/pull/236)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#221](https://github.com/openshift/csi-driver-manila-operator/pull/221)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#216](https://github.com/openshift/csi-driver-manila-operator/pull/216)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#212](https://github.com/openshift/csi-driver-manila-operator/pull/212)
* [OCPBUGS-9331](https://issues.redhat.com/browse/OCPBUGS-9331): Fix selector for manila-csi-driver-controller-metrics service [#210](https://github.com/openshift/csi-driver-manila-operator/pull/210)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#207](https://github.com/openshift/csi-driver-manila-operator/pull/207)
* [OCPBUGS-21940](https://issues.redhat.com/browse/OCPBUGS-21940): Update k8s.io/apimachinery and k8s.io/apiserver [#206](https://github.com/openshift/csi-driver-manila-operator/pull/206)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#205](https://github.com/openshift/csi-driver-manila-operator/pull/205)
* [OCPBUGS-19166](https://issues.redhat.com/browse/OCPBUGS-19166): Updating csi-driver-manila-operator images to be consistent with ART [#204](https://github.com/openshift/csi-driver-manila-operator/pull/204)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/d93a218ff323960eb1dea529f0173f069ccfab42...9bcf382eb68d3dd13a553dce41822d24da3870d0)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/d032dc1050b58a965e6bb9f923baef6d3c95538e)

* [OCPBUGS-24131](https://issues.redhat.com/browse/OCPBUGS-24131): Updating csi-driver-nfs-container image to be consistent with ART [#135](https://github.com/openshift/csi-driver-nfs/pull/135)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): Merge upstream [#133](https://github.com/openshift/csi-driver-nfs/pull/133)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/csi-driver-nfs/pull/131)
* [OCPBUGS-19212](https://issues.redhat.com/browse/OCPBUGS-19212): Updating csi-driver-nfs images to be consistent with ART [#129](https://github.com/openshift/csi-driver-nfs/pull/129)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#128](https://github.com/openshift/csi-driver-nfs/pull/128)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...d032dc1050b58a965e6bb9f923baef6d3c95538e)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)

* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [OCPBUGS-26758](https://issues.redhat.com/browse/OCPBUGS-26758), [OCPBUGS-26759](https://issues.redhat.com/browse/OCPBUGS-26759): add snyk config file for SAST scan [#162](https://github.com/openshift/csi-driver-shared-resource/pull/162)
* [OCPBUGS-24310](https://issues.redhat.com/browse/OCPBUGS-24310): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#157](https://github.com/openshift/csi-driver-shared-resource/pull/157)
* [OCPBUGS-24096](https://issues.redhat.com/browse/OCPBUGS-24096): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#156](https://github.com/openshift/csi-driver-shared-resource/pull/156)
* [OCPBUGS-23108](https://issues.redhat.com/browse/OCPBUGS-23108): Should reference configmaps instead of secrets [#151](https://github.com/openshift/csi-driver-shared-resource/pull/151)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource images to be consistent with ART [#143](https://github.com/openshift/csi-driver-shared-resource/pull/143)
* [OCPBUGS-21730](https://issues.redhat.com/browse/OCPBUGS-21730): bump golang.org/x/net to v0.17.0 [#145](https://github.com/openshift/csi-driver-shared-resource/pull/145)
* [OCPBUGS-19291](https://issues.redhat.com/browse/OCPBUGS-19291): Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#144](https://github.com/openshift/csi-driver-shared-resource/pull/144)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#142](https://github.com/openshift/csi-driver-shared-resource/pull/142)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/9232c1ff48df333dadc9f7dc275649866e55ced0...260a085ae25606bba7a94cdfed88f67265905ba9)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)

* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [OCPBUGS-27035](https://issues.redhat.com/browse/OCPBUGS-27035): add snyk config file for SAST scan [#96](https://github.com/openshift/csi-driver-shared-resource-operator/pull/96)
* [OCPBUGS-23855](https://issues.redhat.com/browse/OCPBUGS-23855): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#93](https://github.com/openshift/csi-driver-shared-resource-operator/pull/93)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/csi-driver-shared-resource-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90)
* [OCPBUGS-21724](https://issues.redhat.com/browse/OCPBUGS-21724): bump golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/csi-driver-shared-resource-operator/pull/85)
* [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c273cd52b791e69da41ac23fafb6d926c0530276...8d017b7f19f0226dfd4fc7933271939c550d180f)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/f806f266600fbc0db4d072e4d041fc80e28deee7)

* [OCPBUGS-24139](https://issues.redhat.com/browse/OCPBUGS-24139): Updating csi-attacher-container image to be consistent with ART [#65](https://github.com/openshift/csi-external-attacher/pull/65)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-external-attacher/pull/59)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-attacher` to v4.4.0 for OCP 4.15 [#58](https://github.com/openshift/csi-external-attacher/pull/58)
* [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/06e8ce0d36f7c23f0906327cd66ec6bd15165366...f806f266600fbc0db4d072e4d041fc80e28deee7)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87)

* [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-25232](https://issues.redhat.com/browse/OCPBUGS-25232): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#82](https://github.com/openshift/csi-external-provisioner/pull/82)
* [OCPBUGS-23062](https://issues.redhat.com/browse/OCPBUGS-23062): UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#78](https://github.com/openshift/csi-external-provisioner/pull/78)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528): UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#77](https://github.com/openshift/csi-external-provisioner/pull/77)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#71](https://github.com/openshift/csi-external-provisioner/pull/71)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-provisioner` to v3.6.0 for OCP 4.15 [#70](https://github.com/openshift/csi-external-provisioner/pull/70)
* [OCPBUGS-19114](https://issues.redhat.com/browse/OCPBUGS-19114): Updating csi-provisioner images to be consistent with ART [#69](https://github.com/openshift/csi-external-provisioner/pull/69)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7...ce5a1a33fadf10bba0c90510c09dfc879dcfec87)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/3b4236d382e4593ca41ecc6f394775be467b1a0d)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#146](https://github.com/openshift/csi-external-resizer/pull/146)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-resizer` to v1.9.0 for OCP 4.15 [#145](https://github.com/openshift/csi-external-resizer/pull/145)
* [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/59a701a4c8cd3105e272b12afdb1e62e411b2772...3b4236d382e4593ca41ecc6f394775be467b1a0d)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/4f2955c7c90cd150f9dfae782148d0fa8eba7342)

* [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): add cmdline args to enable group snapshot webhooks [#147](https://github.com/openshift/csi-external-snapshotter/pull/147)
* [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143)
* [OCPBUGS-25521](https://issues.redhat.com/browse/OCPBUGS-25521): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#134](https://github.com/openshift/csi-external-snapshotter/pull/134)
* [OCPBUGS-24330](https://issues.redhat.com/browse/OCPBUGS-24330): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#124](https://github.com/openshift/csi-external-snapshotter/pull/124)
* [OCPBUGS-24338](https://issues.redhat.com/browse/OCPBUGS-24338): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#123](https://github.com/openshift/csi-external-snapshotter/pull/123)
* [OCPBUGS-24329](https://issues.redhat.com/browse/OCPBUGS-24329): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#121](https://github.com/openshift/csi-external-snapshotter/pull/121)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#118](https://github.com/openshift/csi-external-snapshotter/pull/118)
* [OCPBUGS-24160](https://issues.redhat.com/browse/OCPBUGS-24160): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#116](https://github.com/openshift/csi-external-snapshotter/pull/116)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#117](https://github.com/openshift/csi-external-snapshotter/pull/117)
* [OCPBUGS-24071](https://issues.redhat.com/browse/OCPBUGS-24071): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#115](https://github.com/openshift/csi-external-snapshotter/pull/115)
* [OCPBUGS-23010](https://issues.redhat.com/browse/OCPBUGS-23010): UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false [#114](https://github.com/openshift/csi-external-snapshotter/pull/114)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#108](https://github.com/openshift/csi-external-snapshotter/pull/108)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-snapshotter` to v6.3.0 for OCP 4.15 [#107](https://github.com/openshift/csi-external-snapshotter/pull/107)
* [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106)
* [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105)
* [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/a6834536936b16dcd9ee81a8753a2ef6dc208541...4f2955c7c90cd150f9dfae782148d0fa8eba7342)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/csi-livenessprobe/pull/49)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `livenessprobe` to v2.11.0 for OCP 4.15 [#48](https://github.com/openshift/csi-livenessprobe/pull/48)
* [OCPBUGS-19132](https://issues.redhat.com/browse/OCPBUGS-19132): Updating csi-livenessprobe images to be consistent with ART [#47](https://github.com/openshift/csi-livenessprobe/pull/47)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/a9bcbde134a17d3335f68a49aaad4befa8d7cc08...240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/9005584ee45c4d3158e383870aafa5d78a03b141)

* [OCPBUGS-25231](https://issues.redhat.com/browse/OCPBUGS-25231): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#60](https://github.com/openshift/csi-node-driver-registrar/pull/60)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-node-driver-registrar/pull/51)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `node-driver-registrar` to v2.9.0 for OCP 4.15 [#50](https://github.com/openshift/csi-node-driver-registrar/pull/50)
* [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9dcaa7f5b7573e7ef9dbec1439abc32171003799...9005584ee45c4d3158e383870aafa5d78a03b141)


### [docker-builder](https://github.com/openshift/builder/tree/160e7cacc7ab7a6664e4c574b78139a29ace9cd3)

* [OCPBUGS-32845](https://issues.redhat.com/browse/OCPBUGS-32845): bump go-jose to fix CVE-2024-28180 [#396](https://github.com/openshift/builder/pull/396)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#381](https://github.com/openshift/builder/pull/381)
* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [OCPBUGS-23128](https://issues.redhat.com/browse/OCPBUGS-23128): bump github.com/containers/buildah to fix transient mounting in chroot isolation [#358](https://github.com/openshift/builder/pull/358)
* [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369)
* [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361)
* [OCPBUGS-20407](https://issues.redhat.com/browse/OCPBUGS-20407): drop the Overlay setting from transient mounts [#359](https://github.com/openshift/builder/pull/359)
* [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357)
* [Full changelog](https://github.com/openshift/builder/compare/2845ad95e1d2f592e895e3d26de49a1fbd387cb9...160e7cacc7ab7a6664e4c574b78139a29ace9cd3)


### [docker-registry](https://github.com/openshift/image-registry/tree/b9de67d83c9f850ed42317495b7b340109b3c9ac)

* [OCPBUGS-36287](https://issues.redhat.com/browse/OCPBUGS-36287): use SelfSubjectReview to obtain user info #406 [#406](https://github.com/openshift/image-registry/pull/406)
* [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): vendor: bump aws-sdk-go to support ca-west-1 [#396](https://github.com/openshift/image-registry/pull/396)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393)
* [OCPBUGS-24095](https://issues.redhat.com/browse/OCPBUGS-24095): Updating openshift-enterprise-registry-container image to be consistent with ART [#387](https://github.com/openshift/image-registry/pull/387)
* [CORS-2985](https://issues.redhat.com/browse/CORS-2985): Add support for il-central-1 region in AWS [#386](https://github.com/openshift/image-registry/pull/386)
* [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378)
* [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377)
* [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379)
* [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380)
* [Full changelog](https://github.com/openshift/image-registry/compare/f03c24040cea924f846aca8b4e02bf802159a238...b9de67d83c9f850ed42317495b7b340109b3c9ac)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/7a448c2ee026c772e293dd344da587493c859f82)

* Add support for 64k pages with ARM64 (#141) [#141](https://github.com/openshift/driver-toolkit/pull/141)
* [MGMT-16313](https://issues.redhat.com/browse/MGMT-16313): Add support for C++ build (#137) [#137](https://github.com/openshift/driver-toolkit/pull/137)
* Revert "Start using `rhel-coreos` image rather than `machine-os-content` (#135)" (#136) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Start using `rhel-coreos` image rather than `machine-os-content` (#135) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Updating driver-toolkit images to be consistent with ART (#134) [#134](https://github.com/openshift/driver-toolkit/pull/134)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/cafed17b0c2b4cf8d8310304888787ed7adf7474...7a448c2ee026c772e293dd344da587493c859f82)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/f8ec690bc12a13ec7c9c45f0e3696ad02e143581)

* [OCPBUGS-35524](https://issues.redhat.com/browse/OCPBUGS-35524): update to go 1.20 and k8s.io mods to v0.28.3 [#86](https://github.com/openshift/egress-router-cni/pull/86)
* [OCPBUGS-18003](https://issues.redhat.com/browse/OCPBUGS-18003): Ensure that IP forwarding is enabled [#77](https://github.com/openshift/egress-router-cni/pull/77)
* [OCPBUGS-19258](https://issues.redhat.com/browse/OCPBUGS-19258): Updating egress-router-cni images to be consistent with ART [#76](https://github.com/openshift/egress-router-cni/pull/76)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f...f8ec690bc12a13ec7c9c45f0e3696ad02e143581)


### [etcd](https://github.com/openshift/etcd/tree/a7005ef1eae85eec6c59411860538169cea182fd)

* [OCPBUGS-32768](https://issues.redhat.com/browse/OCPBUGS-32768): Revert "OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15" [#264](https://github.com/openshift/etcd/pull/264)
* [OCPBUGS-31644](https://issues.redhat.com/browse/OCPBUGS-31644): Rebase etcd 3.5.13 openshift 4.15 [#260](https://github.com/openshift/etcd/pull/260)
* [OCPBUGS-28731](https://issues.redhat.com/browse/OCPBUGS-28731): Rebase etcd 3.5.12 openshift 4.15 [#243](https://github.com/openshift/etcd/pull/243)
* [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232)
* [OCPBUGS-19279](https://issues.redhat.com/browse/OCPBUGS-19279): Updating ose-etcd images to be consistent with ART [#215](https://github.com/openshift/etcd/pull/215)
* [OCPBUGS-20560](https://issues.redhat.com/browse/OCPBUGS-20560): [4.15] Rebase openshift/etcd to 3.5.10 [#224](https://github.com/openshift/etcd/pull/224)
* [Full changelog](https://github.com/openshift/etcd/compare/5ed5044c5661c55d297ab0348056b50969af9627...a7005ef1eae85eec6c59411860538169cea182fd)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/fc50272ac32348a96455688c470bf256b1042825)

* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update gcr-credential-provider.spec [#60](https://github.com/openshift/cloud-provider-gcp/pull/60)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds auth-provider-gcp .spec file and build script [#59](https://github.com/openshift/cloud-provider-gcp/pull/59)
* [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56)
* [OCPBUGS-25808](https://issues.redhat.com/browse/OCPBUGS-25808): Add Snyk file to exclude vendor directory on scan [#55](https://github.com/openshift/cloud-provider-gcp/pull/55)
* [OCPBUGS-24152](https://issues.redhat.com/browse/OCPBUGS-24152): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#47](https://github.com/openshift/cloud-provider-gcp/pull/47)
* [OCPBUGS-22043](https://issues.redhat.com/browse/OCPBUGS-22043): Bump golang.org/x/net to v0.18.0 [#46](https://github.com/openshift/cloud-provider-gcp/pull/46)
* [OCPBUGS-23094](https://issues.redhat.com/browse/OCPBUGS-23094): Fix commit label for commits [#41](https://github.com/openshift/cloud-provider-gcp/pull/41)
* [OCPCLOUD-2185](https://issues.redhat.com/browse/OCPCLOUD-2185): Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master [#36](https://github.com/openshift/cloud-provider-gcp/pull/36)
* Update OWNERS [#39](https://github.com/openshift/cloud-provider-gcp/pull/39)
* [OCPBUGS-19243](https://issues.redhat.com/browse/OCPBUGS-19243): Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#38](https://github.com/openshift/cloud-provider-gcp/pull/38)
* [OCPBUGS-5755](https://issues.redhat.com/browse/OCPBUGS-5755): Reuse instance-groups for internal load balancers [#35](https://github.com/openshift/cloud-provider-gcp/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c...fc50272ac32348a96455688c470bf256b1042825)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/bad54034ed075b24ee8962661e78cfbd84a7dd0a)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#225](https://github.com/openshift/cluster-api-provider-gcp/pull/225)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#223](https://github.com/openshift/cluster-api-provider-gcp/pull/223)
* [OCPBUGS-23650](https://issues.redhat.com/browse/OCPBUGS-23650): Add Snyk file to exclude vendor directory on scan [#217](https://github.com/openshift/cluster-api-provider-gcp/pull/217)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#214](https://github.com/openshift/cluster-api-provider-gcp/pull/214)
* [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): No-op change to trigger image rebuild [#211](https://github.com/openshift/cluster-api-provider-gcp/pull/211)
* Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#210](https://github.com/openshift/cluster-api-provider-gcp/pull/210)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#209](https://github.com/openshift/cluster-api-provider-gcp/pull/209)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases [#208](https://github.com/openshift/cluster-api-provider-gcp/pull/208)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master [#207](https://github.com/openshift/cluster-api-provider-gcp/pull/207)
* Update OWNERS [#201](https://github.com/openshift/cluster-api-provider-gcp/pull/201)
* [OCPBUGS-19116](https://issues.redhat.com/browse/OCPBUGS-19116): Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#200](https://github.com/openshift/cluster-api-provider-gcp/pull/200)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d99fb31aa7280f6b5da00880a64b4774600817a2...bad54034ed075b24ee8962661e78cfbd84a7dd0a)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b15daaf5836910277b7154a006800505f018aa5a)

* [OCPBUGS-24143](https://issues.redhat.com/browse/OCPBUGS-24143): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#72](https://github.com/openshift/machine-api-provider-gcp/pull/72)
* [OCPBUGS-2117](https://issues.redhat.com/browse/OCPBUGS-2117): Add extra check to termination handler [#71](https://github.com/openshift/machine-api-provider-gcp/pull/71)
* [MIXEDARCH-258](https://issues.redhat.com/browse/MIXEDARCH-258): Set the capacity annotation for arch-aware autoscale from zero [#60](https://github.com/openshift/machine-api-provider-gcp/pull/60)
* Update OWNERS [#63](https://github.com/openshift/machine-api-provider-gcp/pull/63)
* [OCPBUGS-21792](https://issues.redhat.com/browse/OCPBUGS-21792): Bump x/net package to v0.17.0 [#62](https://github.com/openshift/machine-api-provider-gcp/pull/62)
* [OCPCLOUD-2191](https://issues.redhat.com/browse/OCPCLOUD-2191): Update to Kube 1.28 [#59](https://github.com/openshift/machine-api-provider-gcp/pull/59)
* [OCPBUGS-20267](https://issues.redhat.com/browse/OCPBUGS-20267): update bad url endpoint termination handler test [#61](https://github.com/openshift/machine-api-provider-gcp/pull/61)
* [OCPBUGS-19228](https://issues.redhat.com/browse/OCPBUGS-19228): Updating ose-machine-api-provider-gcp images to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-gcp/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125...b15daaf5836910277b7154a006800505f018aa5a)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/856ee3e23802cd341619cc4fc3181cf6ebbbd548)

* [OCPBUGS-24084](https://issues.redhat.com/browse/OCPBUGS-24084): Move builder and base image to RHEL 9 [#52](https://github.com/openshift/gcp-pd-csi-driver/pull/52)
* [STOR-1392](https://issues.redhat.com/browse/STOR-1392): Rebase to v1.12.2 for OCP 4.15 [#50](https://github.com/openshift/gcp-pd-csi-driver/pull/50)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#43](https://github.com/openshift/gcp-pd-csi-driver/pull/43)
* [OCPBUGS-19134](https://issues.redhat.com/browse/OCPBUGS-19134): Updating ose-gcp-pd-csi-driver images to be consistent with ART [#42](https://github.com/openshift/gcp-pd-csi-driver/pull/42)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03...856ee3e23802cd341619cc4fc3181cf6ebbbd548)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3b91ee310c8a7394ceb2d4de6a51dd18a3800312)

* [OCPBUGS-26993](https://issues.redhat.com/browse/OCPBUGS-26993): Increase data source provision timeout [#114](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/114)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#108](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/108)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#102](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/102)
* [OCPBUGS-25242](https://issues.redhat.com/browse/OCPBUGS-25242): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#103](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/103)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#97](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/97)
* [OCPBUGS-22600](https://issues.redhat.com/browse/OCPBUGS-22600): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#94](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/94)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#81](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/81)
* Add clone test for gcp-pd-csi-driver [#92](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#93](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/93)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/86)
* [OCPBUGS-19229](https://issues.redhat.com/browse/OCPBUGS-19229): Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART [#85](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/85)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/95d55a043a60b584a9fe28d37825761282305840...3b91ee310c8a7394ceb2d4de6a51dd18a3800312)


### [haproxy-router](https://github.com/openshift/router/tree/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3)

* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Upgrade Validation plugin for SHA1 certs [#585](https://github.com/openshift/router/pull/585)
* [OCPBUGS-32977](https://issues.redhat.com/browse/OCPBUGS-32977): Count active services before setting weight to 1 [#586](https://github.com/openshift/router/pull/586)
* [OCPBUGS-32693](https://issues.redhat.com/browse/OCPBUGS-32693): Reject routes with MD5 certs [#584](https://github.com/openshift/router/pull/584)
* [OCPBUGS-32435](https://issues.redhat.com/browse/OCPBUGS-32435): Introduce 'idle-close-on-response' option for frontends [#579](https://github.com/openshift/router/pull/579)
* [OCPBUGS-31544](https://issues.redhat.com/browse/OCPBUGS-31544): Properly handle rewrite-target annotation [#569](https://github.com/openshift/router/pull/569)
* [OCPBUGS-23743](https://issues.redhat.com/browse/OCPBUGS-23743): Bump k8s.io/* packages to v0.28.3 [#542](https://github.com/openshift/router/pull/542)
* [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527)
* [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513)
* [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512)
* [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508)
* [Full changelog](https://github.com/openshift/router/compare/c3a2430c09ccea623bb8a599ce56a6e267009620...dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/502c5ce31170c64d2cb97884b450aea9b63eb2e8)

* [OCPBUGS-42169](https://issues.redhat.com/browse/OCPBUGS-42169): Bump k8s api to 1.28.14 [#2091](https://github.com/openshift/kubernetes/pull/2091)
* [OCPBUGS-39016](https://issues.redhat.com/browse/OCPBUGS-39016): Update to Kubernetes v1.28.13 [#2063](https://github.com/openshift/kubernetes/pull/2063)
* [OCPBUGS-31467](https://issues.redhat.com/browse/OCPBUGS-31467): Return from EnsureHostInPool on all NIC errors [#1964](https://github.com/openshift/kubernetes/pull/1964)
* : OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated [#2058](https://github.com/openshift/kubernetes/pull/2058)
* NO-JIRA: update downstream owners [#2050](https://github.com/openshift/kubernetes/pull/2050)
* [OCPBUGS-37622](https://issues.redhat.com/browse/OCPBUGS-37622): Bump to Kubernetes v1.28.12 [#2037](https://github.com/openshift/kubernetes/pull/2037)
* [OCPBUGS-35552](https://issues.redhat.com/browse/OCPBUGS-35552): Bump to Kubernetes v1.28.11 [#1994](https://github.com/openshift/kubernetes/pull/1994)
* [OCPBUGS-33711](https://issues.redhat.com/browse/OCPBUGS-33711): Bump to Kubernetes v1.28.10 [#1969](https://github.com/openshift/kubernetes/pull/1969)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#1962](https://github.com/openshift/kubernetes/pull/1962)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): UPSTREAM: <carry>: bump structured-merge-diff [#1893](https://github.com/openshift/kubernetes/pull/1893)
* [OCPBUGS-32299](https://issues.redhat.com/browse/OCPBUGS-32299): Bump  to k8s 1.28.9 [#1946](https://github.com/openshift/kubernetes/pull/1946)
* [OCPBUGS-29922](https://issues.redhat.com/browse/OCPBUGS-29922): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1897](https://github.com/openshift/kubernetes/pull/1897)
* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): UPSTREAM: <carry>: allow type mutation for specific secrets [#1939](https://github.com/openshift/kubernetes/pull/1939)
* UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check [#1915](https://github.com/openshift/kubernetes/pull/1915)
* [OCPBUGS-31740](https://issues.redhat.com/browse/OCPBUGS-31740): 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes [#1935](https://github.com/openshift/kubernetes/pull/1935)
* [OCPBUGS-31503](https://issues.redhat.com/browse/OCPBUGS-31503): Bump to 1.28.8 [#1926](https://github.com/openshift/kubernetes/pull/1926)
* Address CVE [#11](https://github.com/openshift/kubernetes/pull/11)
* [OCPBUGS-30963](https://issues.redhat.com/browse/OCPBUGS-30963): Set up CEL IP/CIDR library from 4.14 onwards [#1912](https://github.com/openshift/kubernetes/pull/1912)
* [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884)
* [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854)
* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [OCPBUGS-27368](https://issues.redhat.com/browse/OCPBUGS-27368): Update to kubernetes 1.28.6 [#1857](https://github.com/openshift/kubernetes/pull/1857)
* [OCPBUGS-25812](https://issues.redhat.com/browse/OCPBUGS-25812): Fix device uncertain errors on reboot - 4.15 [#1832](https://github.com/openshift/kubernetes/pull/1832)
* [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843)
* [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837)
* [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799)
* [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795)
* [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806)
* [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794)
* [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800)
* [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790)
* Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788)
* [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771)
* Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769)
* UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685)
* [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757)
* Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735)
* [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734)
* Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732)
* Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731)
* Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703)
* UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726)
* [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724)
* [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711)
* UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714)
* [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716)
* Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646)
* [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638)
* UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698)
* <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686)
* [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665)
* [Full changelog](https://github.com/openshift/kubernetes/compare/03a907c6d182353a0e9b83a224a6f0398406f6d5...502c5ce31170c64d2cb97884b450aea9b63eb2e8)


### [hypershift](https://github.com/openshift/hypershift/tree/5647c86533a4a2e370be77f663d03738cbc48d38)

* [OCPBUGS-43635](https://issues.redhat.com/browse/OCPBUGS-43635): label routes only when HCP router used [#4961](https://github.com/openshift/hypershift/pull/4961)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4957](https://github.com/openshift/hypershift/pull/4957)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) [#4949](https://github.com/openshift/hypershift/pull/4949)
* [OCPBUGS-43468](https://issues.redhat.com/browse/OCPBUGS-43468): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4929](https://github.com/openshift/hypershift/pull/4929)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4932](https://github.com/openshift/hypershift/pull/4932)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) [#4916](https://github.com/openshift/hypershift/pull/4916)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4922](https://github.com/openshift/hypershift/pull/4922)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) [#4909](https://github.com/openshift/hypershift/pull/4909)
* [OCPBUGS-42881](https://issues.redhat.com/browse/OCPBUGS-42881): Let payload generation pick the release for the NodePool [#4867](https://github.com/openshift/hypershift/pull/4867)
* [OCPBUGS-42992](https://issues.redhat.com/browse/OCPBUGS-42992): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4876](https://github.com/openshift/hypershift/pull/4876)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4897](https://github.com/openshift/hypershift/pull/4897)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) [#4881](https://github.com/openshift/hypershift/pull/4881)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) [#4850](https://github.com/openshift/hypershift/pull/4850)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) [#4807](https://github.com/openshift/hypershift/pull/4807)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4815](https://github.com/openshift/hypershift/pull/4815)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) [#4793](https://github.com/openshift/hypershift/pull/4793)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4777](https://github.com/openshift/hypershift/pull/4777)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) [#4766](https://github.com/openshift/hypershift/pull/4766)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) [#4770](https://github.com/openshift/hypershift/pull/4770)
* chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) [#4769](https://github.com/openshift/hypershift/pull/4769)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) [#4767](https://github.com/openshift/hypershift/pull/4767)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4762](https://github.com/openshift/hypershift/pull/4762)
* [OCPBUGS-41373](https://issues.redhat.com/browse/OCPBUGS-41373): CPO oauth idp converter: resolve names before dialing [#4746](https://github.com/openshift/hypershift/pull/4746)
* NO-JIRA: Security fixes for openshift-ci-security job [#4751](https://github.com/openshift/hypershift/pull/4751)
* [OCPBUGS-42214](https://issues.redhat.com/browse/OCPBUGS-42214): Make guest cluster components use the correct KAS port [#4749](https://github.com/openshift/hypershift/pull/4749)
* [OCPBUGS-38059](https://issues.redhat.com/browse/OCPBUGS-38059): Add HTTP konnectivity proxy to OAuth server [#4497](https://github.com/openshift/hypershift/pull/4497)
* [HOSTEDCP-1956](https://issues.redhat.com/browse/HOSTEDCP-1956): bump CCO and go-jose version [#4697](https://github.com/openshift/hypershift/pull/4697)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4719](https://github.com/openshift/hypershift/pull/4719)
* [OCPBUGS-41701](https://issues.redhat.com/browse/OCPBUGS-41701): cmd: report server version, supported OCP [#4702](https://github.com/openshift/hypershift/pull/4702)
* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): [release-4.15] Use HTTP proxy for ingress controller [#4699](https://github.com/openshift/hypershift/pull/4699)
* [OCPBUGS-41809](https://issues.redhat.com/browse/OCPBUGS-41809): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4706](https://github.com/openshift/hypershift/pull/4706)
* [HOSTEDCP-1896](https://issues.redhat.com/browse/HOSTEDCP-1896): [release-4.15] Allow setting Kube APIServer maximum requests in flight [#4552](https://github.com/openshift/hypershift/pull/4552)
* [OCPBUGS-39463](https://issues.redhat.com/browse/OCPBUGS-39463): handle version skewed NodePools that do not have rhel9 binaries [#4666](https://github.com/openshift/hypershift/pull/4666)
* [OCPBUGS-39077](https://issues.redhat.com/browse/OCPBUGS-39077): Set KCM node monitor grace period [#4628](https://github.com/openshift/hypershift/pull/4628)
* [OCPBUGS-30465](https://issues.redhat.com/browse/OCPBUGS-30465): fix: bump google.golang.org/protobuf [#4616](https://github.com/openshift/hypershift/pull/4616)
* [OCPBUGS-39171](https://issues.redhat.com/browse/OCPBUGS-39171): fix: bump github.com/IBM/go-sdk-core/v5 [#4625](https://github.com/openshift/hypershift/pull/4625)
* [OCPBUGS-35815](https://issues.redhat.com/browse/OCPBUGS-35815): Add hypershift-cluster-version-operator image to release providers [#4243](https://github.com/openshift/hypershift/pull/4243)
* NO-JIRA: test: relax mgmt KAS egress check [#4631](https://github.com/openshift/hypershift/pull/4631)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#4200](https://github.com/openshift/hypershift/pull/4200)
* NO-JIRA: Flaky cert validation test [#4630](https://github.com/openshift/hypershift/pull/4630)
* [OCPBUGS-38943](https://issues.redhat.com/browse/OCPBUGS-38943): copy oapi ca-trust recursively when building trust anchor [#4613](https://github.com/openshift/hypershift/pull/4613)
* [OCPBUGS-39041](https://issues.redhat.com/browse/OCPBUGS-39041): set proxy envvars on aws and azure CCMs [#4624](https://github.com/openshift/hypershift/pull/4624)
* [OCPBUGS-38613](https://issues.redhat.com/browse/OCPBUGS-38613): hcco: reconcile apiserver config into hosted cluster [#4567](https://github.com/openshift/hypershift/pull/4567)
* [OCPBUGS-38561](https://issues.redhat.com/browse/OCPBUGS-38561): Let the CPO oidc check resolve through data plane [#4564](https://github.com/openshift/hypershift/pull/4564)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak ciphers from security profile [#4547](https://github.com/openshift/hypershift/pull/4547)
* [OCPBUGS-37171](https://issues.redhat.com/browse/OCPBUGS-37171): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4489](https://github.com/openshift/hypershift/pull/4489)
* NO-JIRA: Update Konflux 4.15 and perform migration [#4487](https://github.com/openshift/hypershift/pull/4487)
* NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 [#4469](https://github.com/openshift/hypershift/pull/4469)
* [OCPBUGS-36938](https://issues.redhat.com/browse/OCPBUGS-36938): [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4358](https://github.com/openshift/hypershift/pull/4358)
* [OCPBUGS-37174](https://issues.redhat.com/browse/OCPBUGS-37174): Delete IDMS in dataplane once HCP ICS field is removed [#4457](https://github.com/openshift/hypershift/pull/4457)
* NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4279](https://github.com/openshift/hypershift/pull/4279)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4444](https://github.com/openshift/hypershift/pull/4444)
* [OCPBUGS-36916](https://issues.redhat.com/browse/OCPBUGS-36916): Add newline after TLS certs referenced by image.config [#4443](https://github.com/openshift/hypershift/pull/4443)
* [OCPBUGS-37695](https://issues.redhat.com/browse/OCPBUGS-37695): Set right endpointSlice port [#4441](https://github.com/openshift/hypershift/pull/4441)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#4433](https://github.com/openshift/hypershift/pull/4433)
* NO-JIRA: [release-4.15] test/e2e: remove api budget checks [#4413](https://github.com/openshift/hypershift/pull/4413)
* [OCPBUGS-37266](https://issues.redhat.com/browse/OCPBUGS-37266): extract rhel9 MCO binaries for rhel8 based MCO images [#4385](https://github.com/openshift/hypershift/pull/4385)
* [OCPBUGS-36606](https://issues.redhat.com/browse/OCPBUGS-36606): enable audit log for oauth-openshift [#4320](https://github.com/openshift/hypershift/pull/4320)
* [HOSTEDCP-1714](https://issues.redhat.com/browse/HOSTEDCP-1714): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 [#4178](https://github.com/openshift/hypershift/pull/4178)
* [OCPBUGS-35736](https://issues.redhat.com/browse/OCPBUGS-35736): Complete KAS migration to none endpoint reconciler type [#4228](https://github.com/openshift/hypershift/pull/4228)
* [OCPBUGS-35935](https://issues.redhat.com/browse/OCPBUGS-35935): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4265](https://github.com/openshift/hypershift/pull/4265)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4259](https://github.com/openshift/hypershift/pull/4259)
* [OCPBUGS-35714](https://issues.redhat.com/browse/OCPBUGS-35714): Generate default worker security group rules based on machineCIDR [#4266](https://github.com/openshift/hypershift/pull/4266)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4252](https://github.com/openshift/hypershift/pull/4252)
* [OCPBUGS-32404](https://issues.redhat.com/browse/OCPBUGS-32404): Fix failure to create a second hostedcluster in the same namespace [#3907](https://github.com/openshift/hypershift/pull/3907)
* NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) [#4246](https://github.com/openshift/hypershift/pull/4246)
* NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4231](https://github.com/openshift/hypershift/pull/4231)
* chore(deps): update konflux references to 2be7c9c (release-4.15) [#4224](https://github.com/openshift/hypershift/pull/4224)
* [OCPBUGS-34580](https://issues.redhat.com/browse/OCPBUGS-34580): Add TrustedBundles to OAS container [#4211](https://github.com/openshift/hypershift/pull/4211)
* NO-JIRA: hack: make the e2e script generic [#4199](https://github.com/openshift/hypershift/pull/4199)
* [OCPBUGS-33627](https://issues.redhat.com/browse/OCPBUGS-33627): Restrict image registry overrides to control plane components [#4131](https://github.com/openshift/hypershift/pull/4131)
* [OCPBUGS-34156](https://issues.redhat.com/browse/OCPBUGS-34156): fix router on 4.14 y-stream upgrade [#4077](https://github.com/openshift/hypershift/pull/4077)
* [OCPBUGS-35002](https://issues.redhat.com/browse/OCPBUGS-35002): [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller [#4162](https://github.com/openshift/hypershift/pull/4162)
* NO-JIRA: Update Konflux references to 1025001 (release-4.15) [#4180](https://github.com/openshift/hypershift/pull/4180)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4167](https://github.com/openshift/hypershift/pull/4167)
* [OCPBUGS-34997](https://issues.redhat.com/browse/OCPBUGS-34997): add AWS STS URL to OIDC provider audiences [#4157](https://github.com/openshift/hypershift/pull/4157)
* [OCPBUGS-35074](https://issues.redhat.com/browse/OCPBUGS-35074): Fix disconnected metadata inspection for nodepool [#4175](https://github.com/openshift/hypershift/pull/4175)
* [HOSTEDCP-1708](https://issues.redhat.com/browse/HOSTEDCP-1708): remove liveness and readiness probes that use the metrics [#4128](https://github.com/openshift/hypershift/pull/4128)
* [OCPBUGS-34423](https://issues.redhat.com/browse/OCPBUGS-34423): Fixed audit-logs sigterm failing to terminate gracefully [#4089](https://github.com/openshift/hypershift/pull/4089)
* [OCPBUGS-33526](https://issues.redhat.com/browse/OCPBUGS-33526): Disable DNS resolving for CNO [#4148](https://github.com/openshift/hypershift/pull/4148)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak cipher [#4156](https://github.com/openshift/hypershift/pull/4156)
* [OCPBUGS-34510](https://issues.redhat.com/browse/OCPBUGS-34510): Reconcile KAS endpoints and endpoint slice [#4097](https://github.com/openshift/hypershift/pull/4097)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4151](https://github.com/openshift/hypershift/pull/4151)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4120](https://github.com/openshift/hypershift/pull/4120)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4072](https://github.com/openshift/hypershift/pull/4072)
* [OCPBUGS-33510](https://issues.redhat.com/browse/OCPBUGS-33510): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4014](https://github.com/openshift/hypershift/pull/4014)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) [#4064](https://github.com/openshift/hypershift/pull/4064)
* NO-JIRA: Remove CLI inspection of release image [#4056](https://github.com/openshift/hypershift/pull/4056)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#4032](https://github.com/openshift/hypershift/pull/4032)
* NO-JIRA: Update RHTAP references (release-4.15) [#4041](https://github.com/openshift/hypershift/pull/4041)
* [OCPBUGS-33118](https://issues.redhat.com/browse/OCPBUGS-33118): Recycler-pod image now points to the OCP Payload reference [#3963](https://github.com/openshift/hypershift/pull/3963)
* [OCPBUGS-32220](https://issues.redhat.com/browse/OCPBUGS-32220): Fix disconnected metadata inspection [#3881](https://github.com/openshift/hypershift/pull/3881)
* NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) [#4030](https://github.com/openshift/hypershift/pull/4030)
* [OCPBUGS-33117](https://issues.redhat.com/browse/OCPBUGS-33117): Reconcile over ICSP/IDMS [#3962](https://github.com/openshift/hypershift/pull/3962)
* NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) [#4022](https://github.com/openshift/hypershift/pull/4022)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4017](https://github.com/openshift/hypershift/pull/4017)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support hypershift-operator scoping for hostedclusters [#3998](https://github.com/openshift/hypershift/pull/3998)
* Revert "[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable" [#3939](https://github.com/openshift/hypershift/pull/3939)
* [OCPBUGS-33207](https://issues.redhat.com/browse/OCPBUGS-33207): Remove kube-scheduler readiness probe [#3955](https://github.com/openshift/hypershift/pull/3955)
* NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) [#3989](https://github.com/openshift/hypershift/pull/3989)
* [OCPBUGS-25858](https://issues.redhat.com/browse/OCPBUGS-25858): Improve description for agent APIServerAddress CLI flag [#3977](https://github.com/openshift/hypershift/pull/3977)
* [OCPBUGS-33224](https://issues.redhat.com/browse/OCPBUGS-33224): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3976](https://github.com/openshift/hypershift/pull/3976)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3982](https://github.com/openshift/hypershift/pull/3982)
* [OCPBUGS-31747](https://issues.redhat.com/browse/OCPBUGS-31747): update desired image even when HCP doesn't exist yet [#3839](https://github.com/openshift/hypershift/pull/3839)
* NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) [#3974](https://github.com/openshift/hypershift/pull/3974)
* [OCPBUGS-32229](https://issues.redhat.com/browse/OCPBUGS-32229): disable autoscaler when no nodepool require it [#3884](https://github.com/openshift/hypershift/pull/3884)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3967](https://github.com/openshift/hypershift/pull/3967)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3957](https://github.com/openshift/hypershift/pull/3957)
* [OCPBUGS-31826](https://issues.redhat.com/browse/OCPBUGS-31826): use dnsPolicy: Default for konnectivity-agent in data plane [#3845](https://github.com/openshift/hypershift/pull/3845)
* NO-JIRA: Update RHTAP references (release-4.15) [#3935](https://github.com/openshift/hypershift/pull/3935)
* [OCPBUGS-32715](https://issues.redhat.com/browse/OCPBUGS-32715): Fix OLM intilization args [#3923](https://github.com/openshift/hypershift/pull/3923)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation [#3908](https://github.com/openshift/hypershift/pull/3908)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3921](https://github.com/openshift/hypershift/pull/3921)
* [OCPBUGS-32164](https://issues.redhat.com/browse/OCPBUGS-32164): Fix ICSP and IDMS inclusion as registriesOverrides [#3870](https://github.com/openshift/hypershift/pull/3870)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3904](https://github.com/openshift/hypershift/pull/3904)
* [OCPBUGS-30280](https://issues.redhat.com/browse/OCPBUGS-30280): Switch to use service endpoint for Konnectivity [#3692](https://github.com/openshift/hypershift/pull/3692)
* [OCPBUGS-32191](https://issues.redhat.com/browse/OCPBUGS-32191): Kas disable audit cherry pick release 4.15 [#3875](https://github.com/openshift/hypershift/pull/3875)
* [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): Add new permission required in CAPA [#3861](https://github.com/openshift/hypershift/pull/3861)
* NO-JIRA: Update RHTAP references (release-4.15) [#3887](https://github.com/openshift/hypershift/pull/3887)
* NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster [#3893](https://github.com/openshift/hypershift/pull/3893)
* [HOSTEDCP-1524](https://issues.redhat.com/browse/HOSTEDCP-1524): [release-4.15] Support additional node selectors for request serving nodes [#3883](https://github.com/openshift/hypershift/pull/3883)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3873](https://github.com/openshift/hypershift/pull/3873)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3868](https://github.com/openshift/hypershift/pull/3868)
* [OCPBUGS-32013](https://issues.redhat.com/browse/OCPBUGS-32013): Set OPERATOR_IMAGE environment variable [#3853](https://github.com/openshift/hypershift/pull/3853)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3857](https://github.com/openshift/hypershift/pull/3857)
* NO-JIRA: Update RHTAP references (release-4.15) [#3835](https://github.com/openshift/hypershift/pull/3835)
* [OCPBUGS-31766](https://issues.redhat.com/browse/OCPBUGS-31766): include hostnetwork SCC CPO role for 4.13 and earlier [#3840](https://github.com/openshift/hypershift/pull/3840)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): [release-4.15] Preserve container resources for more hosted control plane components [#3828](https://github.com/openshift/hypershift/pull/3828)
* [OCPBUGS-31324](https://issues.redhat.com/browse/OCPBUGS-31324): Add missing PodSecurityViolation alert [#3798](https://github.com/openshift/hypershift/pull/3798)
* NO-JIRA: Increase stability in autoscaled environments [#3777](https://github.com/openshift/hypershift/pull/3777)
* [OCPBUGS-31471](https://issues.redhat.com/browse/OCPBUGS-31471): Reduce log file size for hypershift apiservers [#3816](https://github.com/openshift/hypershift/pull/3816)
* [OCPBUGS-31604](https://issues.redhat.com/browse/OCPBUGS-31604): disable http2 for ignition server and proxy [#3825](https://github.com/openshift/hypershift/pull/3825)
* [OCPBUGS-31426](https://issues.redhat.com/browse/OCPBUGS-31426): copy issuerCertificateAuthority configmap into HC openshift-config [#3808](https://github.com/openshift/hypershift/pull/3808)
* [OCPBUGS-31265](https://issues.redhat.com/browse/OCPBUGS-31265): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3802](https://github.com/openshift/hypershift/pull/3802)
* NO-JIRA: Update RHTAP references (release-4.15) [#3812](https://github.com/openshift/hypershift/pull/3812)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3796](https://github.com/openshift/hypershift/pull/3796)
* [OCPBUGS-31064](https://issues.redhat.com/browse/OCPBUGS-31064): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3774](https://github.com/openshift/hypershift/pull/3774)
* [OCPBUGS-31377](https://issues.redhat.com/browse/OCPBUGS-31377): Manually cherry pick #3782 to 4.15 [#3803](https://github.com/openshift/hypershift/pull/3803)
* [OCPBUGS-31326](https://issues.redhat.com/browse/OCPBUGS-31326): fix(ignition): Fix priority class override [#3800](https://github.com/openshift/hypershift/pull/3800)
* [OCPBUGS-30804](https://issues.redhat.com/browse/OCPBUGS-30804): honor HC image configuration [#3730](https://github.com/openshift/hypershift/pull/3730)
* "[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used" [#3677](https://github.com/openshift/hypershift/pull/3677)
* [OCPBUGS-31116](https://issues.redhat.com/browse/OCPBUGS-31116): external OIDC: fix certificateAuthority field in structured auth config [#3783](https://github.com/openshift/hypershift/pull/3783)
* [OCPBUGS-30862](https://issues.redhat.com/browse/OCPBUGS-30862): Manual cherry pick 3685&3727 to release 4.15 [#3740](https://github.com/openshift/hypershift/pull/3740)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3791](https://github.com/openshift/hypershift/pull/3791)
* NO-JIRA: Update RHTAP references (release-4.15) [#3785](https://github.com/openshift/hypershift/pull/3785)
* [OCPBUGS-29881](https://issues.redhat.com/browse/OCPBUGS-29881): feat(ho): Add flag for dedicated request serving isolation [#3633](https://github.com/openshift/hypershift/pull/3633)
* [OCPBUGS-30742](https://issues.redhat.com/browse/OCPBUGS-30742): [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group [#3726](https://github.com/openshift/hypershift/pull/3726)
* [OCPBUGS-30650](https://issues.redhat.com/browse/OCPBUGS-30650): Set KAS config pod security Enforce to privileged [#3719](https://github.com/openshift/hypershift/pull/3719)
* NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget [#3741](https://github.com/openshift/hypershift/pull/3741)
* [OCPBUGS-30651](https://issues.redhat.com/browse/OCPBUGS-30651): Remove EnsurePSANotPrivileged [#3744](https://github.com/openshift/hypershift/pull/3744)
* NO-JIRA: Update RHTAP references (release-4.15) [#3754](https://github.com/openshift/hypershift/pull/3754)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3747](https://github.com/openshift/hypershift/pull/3747)
* NO-JIRA: Update RHTAP references (release-4.15) [#3738](https://github.com/openshift/hypershift/pull/3738)
* [OCPBUGS-30581](https://issues.redhat.com/browse/OCPBUGS-30581): [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP [#3684](https://github.com/openshift/hypershift/pull/3684)
* [OCPBUGS-30572](https://issues.redhat.com/browse/OCPBUGS-30572): [release-4.15] Update OLM Default Catalog Sources to 4.15 [#3696](https://github.com/openshift/hypershift/pull/3696)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705)
* [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673)
* "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549)
* [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694)
* [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675)
* Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645)
* [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648)
* [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653)
* NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646)
* [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632)
* [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522)
* [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606)
* [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626)
* NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628)
* [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607)
* [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480)
* [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529)
* NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579)
* [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421)
* [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565)
* [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566)
* [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533)
* [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558)
* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [OCPBUGS-27432](https://issues.redhat.com/browse/OCPBUGS-27432): consider HCP upgradeable if CVO has no upgradable condition [#3444](https://github.com/openshift/hypershift/pull/3444)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3393](https://github.com/openshift/hypershift/pull/3393)
* [OCPBUGS-27076](https://issues.redhat.com/browse/OCPBUGS-27076): availability-prober: wait for infrastructure name to be set [#3419](https://github.com/openshift/hypershift/pull/3419)
* [OCPBUGS-27155](https://issues.redhat.com/browse/OCPBUGS-27155): Change KAS bootstrap image to cluster-config-api [#3423](https://github.com/openshift/hypershift/pull/3423)
* [OCPBUGS-27071](https://issues.redhat.com/browse/OCPBUGS-27071): Apply Scheduling Configuration for kCCM [#3417](https://github.com/openshift/hypershift/pull/3417)
* [OCPBUGS-26600](https://issues.redhat.com/browse/OCPBUGS-26600): set KAS runtime-config in alignment with feature gates [#3399](https://github.com/openshift/hypershift/pull/3399)
* [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379)
* [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376)
* [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321)
* [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336)
* NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 [#3338](https://github.com/openshift/hypershift/pull/3338)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3324](https://github.com/openshift/hypershift/pull/3324)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3311](https://github.com/openshift/hypershift/pull/3311)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating ose-hypershift-container image to be consistent with ART [#3247](https://github.com/openshift/hypershift/pull/3247)
* [HOSTEDCP-1336](https://issues.redhat.com/browse/HOSTEDCP-1336): bump openshift/api [#3282](https://github.com/openshift/hypershift/pull/3282)
* NO-JIRA: Fix wrong annotation on cluster deletion [#3289](https://github.com/openshift/hypershift/pull/3289)
* [OTA-855](https://issues.redhat.com/browse/OTA-855): Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift [#2807](https://github.com/openshift/hypershift/pull/2807)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): correct typo for OAS internal-oauth-disabled flag [#3278](https://github.com/openshift/hypershift/pull/3278)
* NO-JIRA: Bump the golang-dependencies group with 3 updates [#3254](https://github.com/openshift/hypershift/pull/3254)
* [OCPBUGS-23126](https://issues.redhat.com/browse/OCPBUGS-23126): Fix a bug on deletion of a hostedcluster [#3234](https://github.com/openshift/hypershift/pull/3234)
* [CNV-35774](https://issues.redhat.com/browse/CNV-35774): Improve CRD defaulting for HostedCluster and NodePool [#3116](https://github.com/openshift/hypershift/pull/3116)
* [HOSTEDCP-1322](https://issues.redhat.com/browse/HOSTEDCP-1322): NodeUpgradeType defaulted by provider via CLI [#3273](https://github.com/openshift/hypershift/pull/3273)
* NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too [#3263](https://github.com/openshift/hypershift/pull/3263)
* [CNV-34093](https://issues.redhat.com/browse/CNV-34093): kubevirt: verify release image falls within supported release window [#3184](https://github.com/openshift/hypershift/pull/3184)
* [CNV-29003](https://issues.redhat.com/browse/CNV-29003): Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) [#3189](https://github.com/openshift/hypershift/pull/3189)
* [OCPBUGS-22459](https://issues.redhat.com/browse/OCPBUGS-22459): Add prestop to konnectiviy server [#3250](https://github.com/openshift/hypershift/pull/3250)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC [#3244](https://github.com/openshift/hypershift/pull/3244)
* [OCPBUGS-23397](https://issues.redhat.com/browse/OCPBUGS-23397): Set shutdown-delay-duration to 15s [#3204](https://github.com/openshift/hypershift/pull/3204)
* [HOSTEDCP-1234](https://issues.redhat.com/browse/HOSTEDCP-1234): Add KMS support on Azure clusters using Azure Key Vault [#3183](https://github.com/openshift/hypershift/pull/3183)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): set respondWithChallenges false on CLI OAuth client [#3249](https://github.com/openshift/hypershift/pull/3249)
* [WRKLDS-925](https://issues.redhat.com/browse/WRKLDS-925): remove duplicate passing of kubeconfig into route-controller-manager [#3220](https://github.com/openshift/hypershift/pull/3220)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): control-plane-pki-operator: add an operator for managing PKI [#3193](https://github.com/openshift/hypershift/pull/3193)
* [HOSTEDCP-1319](https://issues.redhat.com/browse/HOSTEDCP-1319): Fix Dependabot & Group Dependency Updates [#3246](https://github.com/openshift/hypershift/pull/3246)
* [OCPBUGS-24062](https://issues.redhat.com/browse/OCPBUGS-24062): fix(cpo): Set restart annotation on network-node-identity [#3245](https://github.com/openshift/hypershift/pull/3245)
* kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs [#3235](https://github.com/openshift/hypershift/pull/3235)
* [HOSTEDCP-1312](https://issues.redhat.com/browse/HOSTEDCP-1312): Fixed update-codegen.sh to work locally [#3214](https://github.com/openshift/hypershift/pull/3214)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): add CLI oauthclient [#3238](https://github.com/openshift/hypershift/pull/3238)
* [HOSTEDCP-1300](https://issues.redhat.com/browse/HOSTEDCP-1300): Bump k8s.io/client-go to v0.28.3 [#3191](https://github.com/openshift/hypershift/pull/3191)
* [OCPBUGS-19834](https://issues.redhat.com/browse/OCPBUGS-19834): add watch for HCP pullsecret to HCCO [#3237](https://github.com/openshift/hypershift/pull/3237)
* Update RHTAP references (main) [#3230](https://github.com/openshift/hypershift/pull/3230)
* [HOSTEDCP-1236](https://issues.redhat.com/browse/HOSTEDCP-1236): Enable public router+external DNS for azure [#3233](https://github.com/openshift/hypershift/pull/3233)
* [OCPBUGS-23921](https://issues.redhat.com/browse/OCPBUGS-23921): Use correct kubeconfig in CCM and remove CCMs access t… [#3222](https://github.com/openshift/hypershift/pull/3222)
* [OCPBUGS-22473](https://issues.redhat.com/browse/OCPBUGS-22473): Added OLMCatalogPlacement option to the CLI [#3206](https://github.com/openshift/hypershift/pull/3206)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): New hypershift_cluster_cores metric giving the total number of worker cores [#3089](https://github.com/openshift/hypershift/pull/3089)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to IPv6 KAS address on kubeconfig [#3207](https://github.com/openshift/hypershift/pull/3207)
* [OCPBUGS-23737](https://issues.redhat.com/browse/OCPBUGS-23737): remove machine-approver probes [#3227](https://github.com/openshift/hypershift/pull/3227)
* [OCPBUGS-23350](https://issues.redhat.com/browse/OCPBUGS-23350): Added IPFamilyPolicy to services exposed at the HCP in DualStack mode [#3210](https://github.com/openshift/hypershift/pull/3210)
* [OCPBUGS-23466](https://issues.redhat.com/browse/OCPBUGS-23466): Let router use svc ips [#3218](https://github.com/openshift/hypershift/pull/3218)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/hypershift: mark more conditions with list key types [#3212](https://github.com/openshift/hypershift/pull/3212)
* [OCPBUGS-23472](https://issues.redhat.com/browse/OCPBUGS-23472): unset ServiceAccount on ignition-server-proxy [#3209](https://github.com/openshift/hypershift/pull/3209)
* [OCPBUGS-23528](https://issues.redhat.com/browse/OCPBUGS-23528): Fix error when removing finalizer on cluster destroy [#3219](https://github.com/openshift/hypershift/pull/3219)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/v1beta1: annotate hostedcontrolplane conditions [#3211](https://github.com/openshift/hypershift/pull/3211)
* [OCPBUGS-23398](https://issues.redhat.com/browse/OCPBUGS-23398): Fixed AWS KMS Backup container args [#3216](https://github.com/openshift/hypershift/pull/3216)
* [HOSTEDCP-1311](https://issues.redhat.com/browse/HOSTEDCP-1311): kubevirt, Add support for secondary networks [#3066](https://github.com/openshift/hypershift/pull/3066)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): expose cert rotation scale parameter [#3208](https://github.com/openshift/hypershift/pull/3208)
* [OCPBUGS-23314](https://issues.redhat.com/browse/OCPBUGS-23314): SetLogger for CLI [#3199](https://github.com/openshift/hypershift/pull/3199)
* [HOSTEDCP-1237](https://issues.redhat.com/browse/HOSTEDCP-1237): Retrieve RHCOS VHD image from release image [#3177](https://github.com/openshift/hypershift/pull/3177)
* [HOSTEDCP-1284](https://issues.redhat.com/browse/HOSTEDCP-1284): Bumps k8s.io/pod-security-admission to v0.28.3 [#3181](https://github.com/openshift/hypershift/pull/3181)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): Validate jsonpatch annotation + add condition on wrong patch [#3197](https://github.com/openshift/hypershift/pull/3197)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Kas port svc cleanup [#3186](https://github.com/openshift/hypershift/pull/3186)
* [HOSTEDCP-1254](https://issues.redhat.com/browse/HOSTEDCP-1254): disable deployment of integrated oauth when authentication type is OIDC and set KAS flags [#3151](https://github.com/openshift/hypershift/pull/3151)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): fix the jsonpath annotation implemetation [#3201](https://github.com/openshift/hypershift/pull/3201)
* [HOSTEDCP-1305](https://issues.redhat.com/browse/HOSTEDCP-1305): Simplify HostedControlPlaneNamespace().Name [#2619](https://github.com/openshift/hypershift/pull/2619)
* [OCPBUGS-22912](https://issues.redhat.com/browse/OCPBUGS-22912): Set value of elb tag to 1 instead of true [#3198](https://github.com/openshift/hypershift/pull/3198)
* [CNV-30444](https://issues.redhat.com/browse/CNV-30444): Document recommended MTU settings for KubeVirt HCP [#3129](https://github.com/openshift/hypershift/pull/3129)
* [HOSTEDCP-1306](https://issues.redhat.com/browse/HOSTEDCP-1306): Bump Golang builder to 1.20 for RHTAP dockerfile [#3196](https://github.com/openshift/hypershift/pull/3196)
* NO-JIRA: chore(deps): update rhtap references [#3192](https://github.com/openshift/hypershift/pull/3192)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): unsupported escape hatch mechanism custom HS/KV vms [#3187](https://github.com/openshift/hypershift/pull/3187)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): generate typed clients for apis [#3179](https://github.com/openshift/hypershift/pull/3179)
* NO-JIRA: *: Fix "succesfully" -> "successfully" typos [#3188](https://github.com/openshift/hypershift/pull/3188)
* [OCPBUGS-20179](https://issues.redhat.com/browse/OCPBUGS-20179): Stop defining time series for hosted clusters or node pools which do not exist anymore. [#2671](https://github.com/openshift/hypershift/pull/2671)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Consume kas Pod port by name [#3185](https://github.com/openshift/hypershift/pull/3185)
* [OCPBUGS-23083](https://issues.redhat.com/browse/OCPBUGS-23083): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3172](https://github.com/openshift/hypershift/pull/3172)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): Update Dependencies [#3154](https://github.com/openshift/hypershift/pull/3154)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Fixed Azure nodes not joining [#3174](https://github.com/openshift/hypershift/pull/3174)
* [HOSTEDCP-1227](https://issues.redhat.com/browse/HOSTEDCP-1227): Retrieve CAPZ image from OCP release image [#3074](https://github.com/openshift/hypershift/pull/3074)
* NO-JIRA: fix formatting for releaseImage log [#3156](https://github.com/openshift/hypershift/pull/3156)
* [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150)
* [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088)
* [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164)
* [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148)
* [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141)
* [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149)
* [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067)
* [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157)
* [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132)
* Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147)
* Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134)
* [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081)
* Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136)
* [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113)
* [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072)
* [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135)
* [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086)
* contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140)
* [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138)
* run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137)
* [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115)
* [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097)
* Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092)
* [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108)
* Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093)
* Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062)
* [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103)
* OCPBUGS-19419 change trusted bundle volume mount for CPO [#3099](https://github.com/openshift/hypershift/pull/3099)
* Disabling unused monitoring services [#2730](https://github.com/openshift/hypershift/pull/2730)
* [OCPBUGS-18341](https://issues.redhat.com/browse/OCPBUGS-18341): change required pod anti-affinity rule to preferred rule [#3095](https://github.com/openshift/hypershift/pull/3095)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase upgrade rollout timers" [#3090](https://github.com/openshift/hypershift/pull/3090)
* [CNV-31891](https://issues.redhat.com/browse/CNV-31891): Document port 80 is not supported with default ingress for KubeVirt [#3079](https://github.com/openshift/hypershift/pull/3079)
* [MULTIARCH-3760](https://issues.redhat.com/browse/MULTIARCH-3760): Rename depricated flag for PowerVS capi deployment [#3028](https://github.com/openshift/hypershift/pull/3028)
* HOSTEDCP-1051 addition of grace period for aws infra destruction [#2967](https://github.com/openshift/hypershift/pull/2967)
* [HOSTEDCP-1232](https://issues.redhat.com/browse/HOSTEDCP-1232): Add clusterName label to CAPI kubeconfig secret [#3087](https://github.com/openshift/hypershift/pull/3087)
* [OCPBUGS-19957](https://issues.redhat.com/browse/OCPBUGS-19957): Reconcile CNCC secret to CPO namespace [#3065](https://github.com/openshift/hypershift/pull/3065)
* [OCPBUGS-20105](https://issues.redhat.com/browse/OCPBUGS-20105): OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes [#3077](https://github.com/openshift/hypershift/pull/3077)
* [OCPBUGS-16189](https://issues.redhat.com/browse/OCPBUGS-16189), [OCPBUGS-19746](https://issues.redhat.com/browse/OCPBUGS-19746): Added network validations [#3047](https://github.com/openshift/hypershift/pull/3047)
* [CNV-30697](https://issues.redhat.com/browse/CNV-30697): Dedicated CPU for KubeVirt node pool [#3048](https://github.com/openshift/hypershift/pull/3048)
* Add record rules for kas qps [#2858](https://github.com/openshift/hypershift/pull/2858)
* Fix a typo in KubeVirt troubleshooting script [#3073](https://github.com/openshift/hypershift/pull/3073)
* [HOSTEDCP-1184](https://issues.redhat.com/browse/HOSTEDCP-1184): Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal [#3008](https://github.com/openshift/hypershift/pull/3008)
* Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… [#3076](https://github.com/openshift/hypershift/pull/3076)
* Upate azure docs [#3075](https://github.com/openshift/hypershift/pull/3075)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working (part2). [#3014](https://github.com/openshift/hypershift/pull/3014)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939), [OCPBUGS-18128](https://issues.redhat.com/browse/OCPBUGS-18128), [OCPBUGS-18460](https://issues.redhat.com/browse/OCPBUGS-18460), [OCPBUGS-18602](https://issues.redhat.com/browse/OCPBUGS-18602), [OCPBUGS-18879](https://issues.redhat.com/browse/OCPBUGS-18879): Support Disconnected HCP [#2950](https://github.com/openshift/hypershift/pull/2950)
* Add private link perms to docs and clarify log message [#3063](https://github.com/openshift/hypershift/pull/3063)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): Add konnectivity-proxy container to CNO [#2974](https://github.com/openshift/hypershift/pull/2974)
* [OCPBUGS-19784](https://issues.redhat.com/browse/OCPBUGS-19784): Update capi agent version for CRD label [#3050](https://github.com/openshift/hypershift/pull/3050)
* KubeVirt platform troubleshooting documentation [#3055](https://github.com/openshift/hypershift/pull/3055)
* Remove EgressFirewall Creation in HCP namespace [#3049](https://github.com/openshift/hypershift/pull/3049)
* [HOSTEDCP-1212](https://issues.redhat.com/browse/HOSTEDCP-1212): Bump Golang to v1.20 [#3038](https://github.com/openshift/hypershift/pull/3038)
* Update RHTAP references (main) [#3054](https://github.com/openshift/hypershift/pull/3054)
* [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041)
* Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017)
* Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044)
* [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022)
* [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976)
* [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025)
* [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039)
* Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036)
* KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031)
* Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033)
* [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024)
* [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013)
* [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011)
* Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020)
* Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000)
* Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995)
* [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012)
* Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948)
* [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001)
* [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009)
* feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991)
* [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955)
* [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004)
* [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003)
* [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997)
* e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987)
* bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952)
* [Full changelog](https://github.com/openshift/hypershift/compare/531aa0f4f73122e935a8b8cdd91e4a29d099b32c...5647c86533a4a2e370be77f663d03738cbc48d38)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/cc0d54159c5d626aaa91eef94a92a80b3d1a3870)

* : OCPBUGS-37311: Bump otelgrpc to v0.49.0 [#74](https://github.com/openshift/cloud-provider-ibm/pull/74)
* [OCPBUGS-23610](https://issues.redhat.com/browse/OCPBUGS-23610): Add Snyk file to exclude vendor directory on scan [#64](https://github.com/openshift/cloud-provider-ibm/pull/64)
* [OCPBUGS-24109](https://issues.redhat.com/browse/OCPBUGS-24109): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-ibm/pull/60)
* [OCPCLOUD-2183](https://issues.redhat.com/browse/OCPCLOUD-2183): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.28 (1584359) into master [#47](https://github.com/openshift/cloud-provider-ibm/pull/47)
* Update OWNERS [#54](https://github.com/openshift/cloud-provider-ibm/pull/54)
* [OCPBUGS-19180](https://issues.redhat.com/browse/OCPBUGS-19180): Updating ose-ibm-cloud-controller-manager images to be consistent with ART [#53](https://github.com/openshift/cloud-provider-ibm/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/f39488c53ab5151cebf11e8f82510a255a8005d3...cc0d54159c5d626aaa91eef94a92a80b3d1a3870)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d)

* [OCPBUGS-36066](https://issues.redhat.com/browse/OCPBUGS-36066): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#72](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/72)
* [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update OWNERS_ALIASES [#59](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/59)
* Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#58](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/58)
* [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update ibm-vpc-block-csi-driver to the latest release [#55](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/55)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#48](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/48)
* [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#43](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/43)
* [OCPBUGS-16920](https://issues.redhat.com/browse/OCPBUGS-16920): UPSTREAM: 164: Disable UUID check on xfs (#164) [#45](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/45)
* [OCPBUGS-19188](https://issues.redhat.com/browse/OCPBUGS-19188): Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#44](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ea2bc158887427c5278fb6a4c8c7a49d8e89c494...81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/1c5b0f9fd714a3df22f6f0273aa8479bd37bbe18)

* [OCPBUGS-42438](https://issues.redhat.com/browse/OCPBUGS-42438): Reorder static resources to create RBAC first [#130](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/130)
* [OCPBUGS-36072](https://issues.redhat.com/browse/OCPBUGS-36072): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#121](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/121)
* [OCPBUGS-33641](https://issues.redhat.com/browse/OCPBUGS-33641): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#116](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/116)
* [OCPBUGS-25604](https://issues.redhat.com/browse/OCPBUGS-25604): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#103](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/103)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#99](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/99)
* [STOR-1487](https://issues.redhat.com/browse/STOR-1487): Provide BYOK encryption support for OpenShift on IBM Cloud VPC [#93](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/93)
* [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): OCPBUGS-22603: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#88](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/88)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/92)
* [STOR-1485](https://issues.redhat.com/browse/STOR-1485): Support for endpoint override from config [#89](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/89)
* [OCPBUGS-22924](https://issues.redhat.com/browse/OCPBUGS-22924): Removing unncessary imagePullSecrets [#87](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/87)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#77](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/77)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#86](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/86)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#80](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/80)
* [OCPBUGS-19215](https://issues.redhat.com/browse/OCPBUGS-19215): Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#78](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/78)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/620220eae119f1fc51f0657563e96655d16a726d...1c5b0f9fd714a3df22f6f0273aa8479bd37bbe18)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/5d72ced58e4ff3c4d4ad02f181578755dfa0312a)

* [OCPBUGS-36012](https://issues.redhat.com/browse/OCPBUGS-36012): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#41](https://github.com/openshift/ibm-vpc-node-label-updater/pull/41)
* Updating ibm-vpc-node-label-updater-container image to be consistent with ART [#33](https://github.com/openshift/ibm-vpc-node-label-updater/pull/33)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#26](https://github.com/openshift/ibm-vpc-node-label-updater/pull/26)
* [OCPBUGS-19217](https://issues.redhat.com/browse/OCPBUGS-19217): Updating ibm-vpc-node-label-updater images to be consistent with ART [#25](https://github.com/openshift/ibm-vpc-node-label-updater/pull/25)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/da6823b06c120347d64216a04e37543aec515dec...5d72ced58e4ff3c4d4ad02f181578755dfa0312a)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65)

* [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78)
* [OCPBUGS-23685](https://issues.redhat.com/browse/OCPBUGS-23685): Add Snyk file to exclude vendor directory on scan [#72](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/72)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#68](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/68)
* Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#65](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/65)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#64](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/64)
* [OCPBUGS-22054](https://issues.redhat.com/browse/OCPBUGS-22054): Bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/62)
* [OCPBUGS-22107](https://issues.redhat.com/browse/OCPBUGS-22107): Bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/61)
* Update OWNERS [#60](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/60)
* [OCPCLOUD-2220](https://issues.redhat.com/browse/OCPCLOUD-2220): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.6.0 (02aa85f) into main [#59](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/59)
* [OCPBUGS-19181](https://issues.redhat.com/browse/OCPBUGS-19181): Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART [#58](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/004ecde5e7e5394abdb9fe62b3063fd20300bb9c...34fb625247f6743637b0ef0c5767e000e0ec1e65)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1)

* [OCPCLOUD-2264](https://issues.redhat.com/browse/OCPCLOUD-2264): IBMCloud: Add boot volume key support [#27](https://github.com/openshift/machine-api-provider-ibmcloud/pull/27)
* Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#30](https://github.com/openshift/machine-api-provider-ibmcloud/pull/30)
* [OCPCLOUD-2227](https://issues.redhat.com/browse/OCPCLOUD-2227): IBMCloud: Fix version for binary [#29](https://github.com/openshift/machine-api-provider-ibmcloud/pull/29)
* [OCPCLOUD-2266](https://issues.redhat.com/browse/OCPCLOUD-2266): IBMCloud: MAPI Service Endpoint overrides [#28](https://github.com/openshift/machine-api-provider-ibmcloud/pull/28)
* Update OWNERS [#26](https://github.com/openshift/machine-api-provider-ibmcloud/pull/26)
* [OCPBUGS-17293](https://issues.redhat.com/browse/OCPBUGS-17293), [OCPCLOUD-2190](https://issues.redhat.com/browse/OCPCLOUD-2190): update k8s dependencies to release 1.28 [#25](https://github.com/openshift/machine-api-provider-ibmcloud/pull/25)
* [OCPBUGS-19221](https://issues.redhat.com/browse/OCPBUGS-19221): Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#24](https://github.com/openshift/machine-api-provider-ibmcloud/pull/24)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/48d48697bed830afc28836c9a72388c2e1bda0de)

* Fix typo in link to gathers.json [#876](https://github.com/openshift/insights-operator/pull/876)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8c2ae5821123ae7902a4e2c709a0adf18a4f280f...48d48697bed830afc28836c9a72388c2e1bda0de)


### [ironic](https://github.com/openshift/ironic-image/tree/09fdf1a51394f3a6cdc492818999fbdd26125f46)

* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#570](https://github.com/openshift/ironic-image/pull/570)
* [OCPBUGS-38798](https://issues.redhat.com/browse/OCPBUGS-38798): redfish-virtualmedia fails on XFusion nodes [#565](https://github.com/openshift/ironic-image/pull/565)
* [OCPBUGS-37761](https://issues.redhat.com/browse/OCPBUGS-37761), [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#583](https://github.com/openshift/ironic-image/pull/583)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set min version for python3-webob [#554](https://github.com/openshift/ironic-image/pull/554)
* [OCPBUGS-33332](https://issues.redhat.com/browse/OCPBUGS-33332): bump werkzeug [#536](https://github.com/openshift/ironic-image/pull/536)
* [OCPBUGS-37407](https://issues.redhat.com/browse/OCPBUGS-37407): bump jinja2 [#529](https://github.com/openshift/ironic-image/pull/529)
* [OCPBUGS-37113](https://issues.redhat.com/browse/OCPBUGS-37113): Update eventlet version [#523](https://github.com/openshift/ironic-image/pull/523)
* Bug OCPBUGS-33736: Disable installation of .pyc files through pip [#511](https://github.com/openshift/ironic-image/pull/511)
* [OCPBUGS-32365](https://issues.redhat.com/browse/OCPBUGS-32365): [4.15] Remove unused prometheus exporter [#485](https://github.com/openshift/ironic-image/pull/485)
* [OCPBUGS-32351](https://issues.redhat.com/browse/OCPBUGS-32351): [4.15] Update to include fixes for ironic servicing feature [#479](https://github.com/openshift/ironic-image/pull/479)
* [OCPBUGS-32389](https://issues.redhat.com/browse/OCPBUGS-32389): Use unix sockets by default for reverse proxy communication [#474](https://github.com/openshift/ironic-image/pull/474)
* [OCPBUGS-31686](https://issues.redhat.com/browse/OCPBUGS-31686), [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802), [OCPBUGS-31830](https://issues.redhat.com/browse/OCPBUGS-31830): [4.15] install ironic projects from source [#470](https://github.com/openshift/ironic-image/pull/470)
* [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802): [4.15] Add requirements placeholders for cachito [#467](https://github.com/openshift/ironic-image/pull/467)
* [OCPBUGS-27772](https://issues.redhat.com/browse/OCPBUGS-27772): Update packages to include most recent bug fixes [#450](https://github.com/openshift/ironic-image/pull/450)
* [OCPBUGS-27060](https://issues.redhat.com/browse/OCPBUGS-27060): Fix Inspector iPXE config for IPv6 addresses [#447](https://github.com/openshift/ironic-image/pull/447)
* [OCPBUGS-24648](https://issues.redhat.com/browse/OCPBUGS-24648): Stuck deployment [#439](https://github.com/openshift/ironic-image/pull/439)
* [OCPBUGS-25606](https://issues.redhat.com/browse/OCPBUGS-25606): Relax packages requirements [#442](https://github.com/openshift/ironic-image/pull/442)
* [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): include the secure boot retry [#435](https://github.com/openshift/ironic-image/pull/435)
* NO-ISSUE: Update ironic packages version [#434](https://github.com/openshift/ironic-image/pull/434)
* [OCPBUGS-23759](https://issues.redhat.com/browse/OCPBUGS-23759): Ironic side of external_http_url (METAL-163) is not wired in correctly [#432](https://github.com/openshift/ironic-image/pull/432)
* [OCPBUGS-23939](https://issues.redhat.com/browse/OCPBUGS-23939): Firmware interface [#428](https://github.com/openshift/ironic-image/pull/428)
* [OCPBUGS-23485](https://issues.redhat.com/browse/OCPBUGS-23485): Uplift eventlet version [#425](https://github.com/openshift/ironic-image/pull/425)
* [OCPBUGS-22425](https://issues.redhat.com/browse/OCPBUGS-22425): Upgrade markupsafe and werkzeug dependencies [#420](https://github.com/openshift/ironic-image/pull/420)
* [METAL-726](https://issues.redhat.com/browse/METAL-726): Update packages for OCP 4.15 and pin ironic versions [#412](https://github.com/openshift/ironic-image/pull/412)
* [METAL-730](https://issues.redhat.com/browse/METAL-730): Sync202310 [#407](https://github.com/openshift/ironic-image/pull/407)
* [OCPBUGS-21876](https://issues.redhat.com/browse/OCPBUGS-21876): Use bash process substitution instead of pipe [#408](https://github.com/openshift/ironic-image/pull/408)
* Revert #395 "Sync20230829" [#405](https://github.com/openshift/ironic-image/pull/405)
* Sync20230829 [#395](https://github.com/openshift/ironic-image/pull/395)
* [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): update Ironic to include secure boot fixes [#403](https://github.com/openshift/ironic-image/pull/403)
* [OCPBUGS-18963](https://issues.redhat.com/browse/OCPBUGS-18963): update ironic to include SQLite fixes [#401](https://github.com/openshift/ironic-image/pull/401)
* [OCPBUGS-18859](https://issues.redhat.com/browse/OCPBUGS-18859): Updating ironic images to be consistent with ART [#397](https://github.com/openshift/ironic-image/pull/397)
* [OCPBUGS-19019](https://issues.redhat.com/browse/OCPBUGS-19019): Switch from current-tripleo to puppet-passed-ci [#398](https://github.com/openshift/ironic-image/pull/398)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0b1212c6acca609cdc751ce5652b8f91987c8b71...09fdf1a51394f3a6cdc492818999fbdd26125f46)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d339f3ffb3bbf9879037c1f3d88303880dcb3068)

* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#157](https://github.com/openshift/ironic-agent-image/pull/157)
* [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#162](https://github.com/openshift/ironic-agent-image/pull/162)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set webob and bump werkzeug [#150](https://github.com/openshift/ironic-agent-image/pull/150)
* [OCPBUGS-33133](https://issues.redhat.com/browse/OCPBUGS-33133): update ironic-lib with latest fixes [#131](https://github.com/openshift/ironic-agent-image/pull/131)
* [OCPBUGS-32173](https://issues.redhat.com/browse/OCPBUGS-32173): [4.15] Fix name in setup.cfg [#123](https://github.com/openshift/ironic-agent-image/pull/123)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add makefile [#126](https://github.com/openshift/ironic-agent-image/pull/126)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Install ironic-python-agent from source [#125](https://github.com/openshift/ironic-agent-image/pull/125)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add requirements placeholders for cachito [#121](https://github.com/openshift/ironic-agent-image/pull/121)
* [OCPBUGS-30078](https://issues.redhat.com/browse/OCPBUGS-30078): [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config [#115](https://github.com/openshift/ironic-agent-image/pull/115)
* [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108)
* [OCPBUGS-27781](https://issues.redhat.com/browse/OCPBUGS-27781): Update ironic-python-agent with latest bug fixes [#105](https://github.com/openshift/ironic-agent-image/pull/105)
* [OCPBUGS-25351](https://issues.redhat.com/browse/OCPBUGS-25351): 502 proxy error [#99](https://github.com/openshift/ironic-agent-image/pull/99)
* [OCPBUGS-25684](https://issues.redhat.com/browse/OCPBUGS-25684): Relax packages requirements [#102](https://github.com/openshift/ironic-agent-image/pull/102)
* [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#95](https://github.com/openshift/ironic-agent-image/pull/95)
* [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#94](https://github.com/openshift/ironic-agent-image/pull/94)
* [OCPBUGS-18862](https://issues.redhat.com/browse/OCPBUGS-18862): Updating ironic-agent images to be consistent with ART [#88](https://github.com/openshift/ironic-agent-image/pull/88)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e839a4e87eb09b78e562a3bab8f23f1c767742a4...d339f3ffb3bbf9879037c1f3d88303880dcb3068)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/bcbcd95b6209afc8248b34c55294686dbd3831a3)

* [OCPBUGS-18863](https://issues.redhat.com/browse/OCPBUGS-18863): Updating ironic-rhcos-downloader images to be consistent with ART [#93](https://github.com/openshift/ironic-rhcos-downloader/pull/93)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...bcbcd95b6209afc8248b34c55294686dbd3831a3)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/472000211344be4a5e9581820e94895144cf2bfc)

* [OCPBUGS-18864](https://issues.redhat.com/browse/OCPBUGS-18864): Updating ironic-static-ip-manager images to be consistent with ART [#40](https://github.com/openshift/ironic-static-ip-manager/pull/40)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...472000211344be4a5e9581820e94895144cf2bfc)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/34e201936898455995cd60c6699c6329a696f288)

* [OCPBUGS-35820](https://issues.redhat.com/browse/OCPBUGS-35820): Fix the podmetrics and nodemetrics command [#109](https://github.com/openshift/k8s-prometheus-adapter/pull/109)
* [OCPBUGS-32214](https://issues.redhat.com/browse/OCPBUGS-32214), [OCPBUGS-32215](https://issues.redhat.com/browse/OCPBUGS-32215): upgrade deps [#102](https://github.com/openshift/k8s-prometheus-adapter/pull/102)
* [OCPBUGS-24155](https://issues.redhat.com/browse/OCPBUGS-24155): Updating ose-prometheus-adapter-container image to be consistent with ART [#95](https://github.com/openshift/k8s-prometheus-adapter/pull/95)
* [MON-3489](https://issues.redhat.com/browse/MON-3489): Bump openshift/k8s-prometheus-adapter to v0.11.2 [#94](https://github.com/openshift/k8s-prometheus-adapter/pull/94)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88)
* add `machine424` and `rexagod`  to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): upgrade golang.org/x/net to 0.17.0 to address CVE-2023… [#80](https://github.com/openshift/k8s-prometheus-adapter/pull/80)
* [OCPBUGS-18971](https://issues.redhat.com/browse/OCPBUGS-18971): limit number of simultaneous client requests [#76](https://github.com/openshift/k8s-prometheus-adapter/pull/76)
* [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74)
* Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/801a912b3a60d7e840fb1ff38b5ca992f47327fd...34e201936898455995cd60c6699c6329a696f288)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/87c23b5aa611556ff5013822c7779e6c7551a0f0)

* [OCPBUGS-19254](https://issues.redhat.com/browse/OCPBUGS-19254): Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#152](https://github.com/openshift/images/pull/152)
* [OCPBUGS-30413](https://issues.redhat.com/browse/OCPBUGS-30413): update unit tests in egress/dns-proxy [#168](https://github.com/openshift/images/pull/168)
* [OCPBUGS-19261](https://issues.redhat.com/browse/OCPBUGS-19261): Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#153](https://github.com/openshift/images/pull/153)
* [OCPBUGS-19107](https://issues.redhat.com/browse/OCPBUGS-19107): Updating ose-egress-http-proxy images to be consistent with ART [#150](https://github.com/openshift/images/pull/150)
* [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151)
* [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149)
* [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148)
* [Full changelog](https://github.com/openshift/images/compare/03e5f40783e1b573f3d07d7640619ad9592f9a77...87c23b5aa611556ff5013822c7779e6c7551a0f0)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/f371b5be76a71a7f55f2e0b674f09a7f2ec5f5bf)

* [OCPBUGS-42171](https://issues.redhat.com/browse/OCPBUGS-42171): fix redundant router-default iptables rule [4.15] [#634](https://github.com/openshift/sdn/pull/634)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [OCPBUGS-27459](https://issues.redhat.com/browse/OCPBUGS-27459): Metrics: Add metric for multicast enabled netnamespaces [#606](https://github.com/openshift/sdn/pull/606)
* [OCPBUGS-24172](https://issues.redhat.com/browse/OCPBUGS-24172): Updating kube-proxy-container image to be consistent with ART [#592](https://github.com/openshift/sdn/pull/592)
* [OCPBUGS-22077](https://issues.redhat.com/browse/OCPBUGS-22077): update x/net to v0.17.0 [#585](https://github.com/openshift/sdn/pull/585)
* [OCPBUGS-16788](https://issues.redhat.com/browse/OCPBUGS-16788): Create IPAM files with 0600 permissions [#584](https://github.com/openshift/sdn/pull/584)
* [SDN-4123](https://issues.redhat.com/browse/SDN-4123): rebase sdn to kube 1.28.3 [#580](https://github.com/openshift/sdn/pull/580)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): Controller: add flag for node name [#578](https://github.com/openshift/sdn/pull/578)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-proxy images to be consistent with ART [#575](https://github.com/openshift/sdn/pull/575)
* [OCPBUGS-19103](https://issues.redhat.com/browse/OCPBUGS-19103): Updating ose-sdn images to be consistent with ART [#574](https://github.com/openshift/sdn/pull/574)
* Collect pod operation latency metrics properly [#576](https://github.com/openshift/sdn/pull/576)
* Live migration: Add flows that allow openshift-sdn to connect to ovnkube [#569](https://github.com/openshift/sdn/pull/569)
* [Full changelog](https://github.com/openshift/sdn/compare/1a9befcb519d0b6c6a0907d514493f1d88aacf45...f371b5be76a71a7f55f2e0b674f09a7f2ec5f5bf)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)

* [OCPBUGS-31941](https://issues.redhat.com/browse/OCPBUGS-31941): bump golang.org/x/net [4.15] [#109](https://github.com/openshift/kube-rbac-proxy/pull/109)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-rbac-proxy images to be consistent with ART [#72](https://github.com/openshift/kube-rbac-proxy/pull/72)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b8b8259584046eabb7565f262c8105c2686107a4...9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/037b59c265454c599dfb0829a856e14b1ab07896)

* [OCPBUGS-24158](https://issues.redhat.com/browse/OCPBUGS-24158): Updating kube-state-metrics-container image to be consistent with ART [#105](https://github.com/openshift/kube-state-metrics/pull/105)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Bump openshift/kube-state-metrics to v2.10.1 [#107](https://github.com/openshift/kube-state-metrics/pull/107)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Merge tag v2.10.1 [#106](https://github.com/openshift/kube-state-metrics/pull/106)
* [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100)
* add `machine424` and `rexagod`  to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96)
* [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/db0c54994a6aad9155a94513eaa3480c1812f45e...037b59c265454c599dfb0829a856e14b1ab07896)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/e8749689edb8e7fea42eca5f2b67c3187192cdeb)

* [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201)
* [OCPBUGS-19227](https://issues.redhat.com/browse/OCPBUGS-19227): Updating ose-kube-storage-version-migrator images to be consistent with ART [#199](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/199)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...e8749689edb8e7fea42eca5f2b67c3187192cdeb)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/dbaf9ea1edd5a953606a80cb45f723c934a73ded)

* [OCPBUGS-31801](https://issues.redhat.com/browse/OCPBUGS-31801): Bump opentelemetry [#39](https://github.com/openshift/cloud-provider-kubevirt/pull/39)
* [OCPBUGS-24118](https://issues.redhat.com/browse/OCPBUGS-24118): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#28](https://github.com/openshift/cloud-provider-kubevirt/pull/28)
* [OCPBUGS-22061](https://issues.redhat.com/browse/OCPBUGS-22061): Bump golang.org/x/net to v0.18.0 [#34](https://github.com/openshift/cloud-provider-kubevirt/pull/34)
* [OCPBUGS-19193](https://issues.redhat.com/browse/OCPBUGS-19193): Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-kubevirt/pull/25)
* Auto sync upstream 2023 09 15 20 36 [#24](https://github.com/openshift/cloud-provider-kubevirt/pull/24)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/7d96f56d4bbc8449fdddbdbc630d9337097f0030...dbaf9ea1edd5a953606a80cb45f723c934a73ded)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3)

* [OCPBUGS-29793](https://issues.redhat.com/browse/OCPBUGS-29793): [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#33](https://github.com/openshift/kubevirt-csi-driver/pull/33)
* [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23)
* Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)

* [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272)
* [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278)
* Add workaround for SLOF regression [#263](https://github.com/openshift/cluster-api-provider-libvirt/pull/263)
* client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260)
* [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/3ab953de1bdc5c1977222011ebc31254d06c98d2)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#1288](https://github.com/openshift/machine-api-operator/pull/1288)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1261](https://github.com/openshift/machine-api-operator/pull/1261)
* [OCPBUGS-31949](https://issues.redhat.com/browse/OCPBUGS-31949): Update x/net to v0.24.0 [#1231](https://github.com/openshift/machine-api-operator/pull/1231)
* [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1222](https://github.com/openshift/machine-api-operator/pull/1222)
* [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Add AddWithActuatorOpts to allow overriding Machine controller options [#1209](https://github.com/openshift/machine-api-operator/pull/1209)
* [OCPBUGS-27405](https://issues.redhat.com/browse/OCPBUGS-27405): Add useExternalIp gcp permission [#1207](https://github.com/openshift/machine-api-operator/pull/1207)
* [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196)
* [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Update reference URL [#1184](https://github.com/openshift/machine-api-operator/pull/1184)
* [OCPVE-778](https://issues.redhat.com/browse/OCPVE-778): annotate cloud credentials request [#1174](https://github.com/openshift/machine-api-operator/pull/1174)
* [OCPBUGS-24151](https://issues.redhat.com/browse/OCPBUGS-24151): Updating ose-machine-api-operator-container image to be consistent with ART [#1179](https://github.com/openshift/machine-api-operator/pull/1179)
* NO-JIRA: Update OWNERS [#1183](https://github.com/openshift/machine-api-operator/pull/1183)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#1171](https://github.com/openshift/machine-api-operator/pull/1171)
* [OCPCLOUD-2138](https://issues.redhat.com/browse/OCPCLOUD-2138): Add module to work with scale from zero annotations for MachineSet [#1169](https://github.com/openshift/machine-api-operator/pull/1169)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Use docs URL instead of KCS article [#1172](https://github.com/openshift/machine-api-operator/pull/1172)
* [OCPBUGS-21815](https://issues.redhat.com/browse/OCPBUGS-21815): Bump golang.org/x/net to v0.17.0 [#1170](https://github.com/openshift/machine-api-operator/pull/1170)
* [OCPCLOUD-2194](https://issues.redhat.com/browse/OCPCLOUD-2194): Update k8s dependencies 1.28 [#1168](https://github.com/openshift/machine-api-operator/pull/1168)
* [MGMT-13425](https://issues.redhat.com/browse/MGMT-13425): Don't fail when workers not needed [#1165](https://github.com/openshift/machine-api-operator/pull/1165)
* [SPLAT-1172](https://issues.redhat.com/browse/SPLAT-1172): Enhance machine status relating to IPAddressClaimed [#1166](https://github.com/openshift/machine-api-operator/pull/1166)
* [OCPBUGS-19241](https://issues.redhat.com/browse/OCPBUGS-19241): Updating ose-machine-api-operator images to be consistent with ART [#1167](https://github.com/openshift/machine-api-operator/pull/1167)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/07c2c43676cfebb527a85b2cd01201b2f6065d18...3ab953de1bdc5c1977222011ebc31254d06c98d2)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b905c8a3dab2daf07939ca7b62aa4e56dbd890ae)

* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Make logging configurable for on-prem components [#4501](https://github.com/openshift/machine-config-operator/pull/4501)
* [OCPBUGS-32329](https://issues.redhat.com/browse/OCPBUGS-32329): Fix configure-ip-forwarding.sh [#4324](https://github.com/openshift/machine-config-operator/pull/4324)
* [OCPBUGS-37551](https://issues.redhat.com/browse/OCPBUGS-37551): On-Prem resolv prepender to watch for NM changes [#4499](https://github.com/openshift/machine-config-operator/pull/4499)
* [OCPBUGS-38712](https://issues.redhat.com/browse/OCPBUGS-38712): SCC-pinning for openshift workloads [#4540](https://github.com/openshift/machine-config-operator/pull/4540)
* [OCPBUGS-38370](https://issues.redhat.com/browse/OCPBUGS-38370): Revert "MCD-pull: run after network-online.target in Azure" [#4525](https://github.com/openshift/machine-config-operator/pull/4525)
* [OCPBUGS-37768](https://issues.redhat.com/browse/OCPBUGS-37768): Move StartLimitIntervalSec to Unit section [#4506](https://github.com/openshift/machine-config-operator/pull/4506)
* [OCPBUGS-37629](https://issues.redhat.com/browse/OCPBUGS-37629): Openshift uncordoned compute-node that was intentionally cordoned [#4495](https://github.com/openshift/machine-config-operator/pull/4495)
* [OCPBUGS-36863](https://issues.redhat.com/browse/OCPBUGS-36863): Copy RHEL9 binaries used in HCP [#4476](https://github.com/openshift/machine-config-operator/pull/4476)
* [OCPBUGS-35220](https://issues.redhat.com/browse/OCPBUGS-35220): Check both ready and health ingress endpoints [#4398](https://github.com/openshift/machine-config-operator/pull/4398)
* [OCPBUGS-30139](https://issues.redhat.com/browse/OCPBUGS-30139): [release-4.15] Use NM's dns-change event for resolv.conf [#4220](https://github.com/openshift/machine-config-operator/pull/4220)
* [OCPBUGS-36769](https://issues.redhat.com/browse/OCPBUGS-36769): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4461](https://github.com/openshift/machine-config-operator/pull/4461)
* [OCPBUGS-36550](https://issues.redhat.com/browse/OCPBUGS-36550): MCD-pull: run after network-online.target in Azure [#4454](https://github.com/openshift/machine-config-operator/pull/4454)
* [OCPBUGS-27436](https://issues.redhat.com/browse/OCPBUGS-27436): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4431](https://github.com/openshift/machine-config-operator/pull/4431)
* [OCPBUGS-36258](https://issues.redhat.com/browse/OCPBUGS-36258): daemon/update: disable systemd unit before overwriting [#4441](https://github.com/openshift/machine-config-operator/pull/4441)
* [OCPBUGS-32092](https://issues.redhat.com/browse/OCPBUGS-32092): Decrease logs of haproxy [#4313](https://github.com/openshift/machine-config-operator/pull/4313)
* [OCPBUGS-35010](https://issues.redhat.com/browse/OCPBUGS-35010): set required-scc for openshift workloads [#4393](https://github.com/openshift/machine-config-operator/pull/4393)
* [OCPBUGS-31461](https://issues.redhat.com/browse/OCPBUGS-31461): Remove weights from ingress check script [#4290](https://github.com/openshift/machine-config-operator/pull/4290)
* [OCPBUGS-33847](https://issues.redhat.com/browse/OCPBUGS-33847): If multiple hostnames are returned, use the first one for the Node name [#4373](https://github.com/openshift/machine-config-operator/pull/4373)
* [OCPBUGS-20152](https://issues.redhat.com/browse/OCPBUGS-20152): Don't error if the certs.d dir doesn't exist yet [#4358](https://github.com/openshift/machine-config-operator/pull/4358)
* [OCPBUGS-32922](https://issues.redhat.com/browse/OCPBUGS-32922): [release-4.15] add cluster fleet evaluation support to mco [#4334](https://github.com/openshift/machine-config-operator/pull/4334)
* [OCPBUGS-28926](https://issues.redhat.com/browse/OCPBUGS-28926): [4.15] crio: update pids limit to be -1 [#4163](https://github.com/openshift/machine-config-operator/pull/4163)
* [OCPBUGS-28545](https://issues.redhat.com/browse/OCPBUGS-28545): Delete state files on reboot only [#4311](https://github.com/openshift/machine-config-operator/pull/4311)
* [OCPBUGS-31820](https://issues.redhat.com/browse/OCPBUGS-31820): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4309](https://github.com/openshift/machine-config-operator/pull/4309)
* [OCPBUGS-27029](https://issues.redhat.com/browse/OCPBUGS-27029): Log network service output to console [#4113](https://github.com/openshift/machine-config-operator/pull/4113)
* [OCPBUGS-31646](https://issues.redhat.com/browse/OCPBUGS-31646): fix: resources were in the wrong indentation level [#4301](https://github.com/openshift/machine-config-operator/pull/4301)
* : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet's prestart [#4297](https://github.com/openshift/machine-config-operator/pull/4297)
* [OCPBUGS-30884](https://issues.redhat.com/browse/OCPBUGS-30884): Prevent OVS-configuration to run before kdump [#4259](https://github.com/openshift/machine-config-operator/pull/4259)
* [OCPBUGS-31383](https://issues.redhat.com/browse/OCPBUGS-31383): make verify should use MCO's kube version [#4282](https://github.com/openshift/machine-config-operator/pull/4282)
* [OCPBUGS-30971](https://issues.redhat.com/browse/OCPBUGS-30971): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4264](https://github.com/openshift/machine-config-operator/pull/4264)
* [OCPBUGS-29731](https://issues.redhat.com/browse/OCPBUGS-29731): Delete image openshift/openshift-proxy-pull-test [#4199](https://github.com/openshift/machine-config-operator/pull/4199)
* [OCPBUGS-30093](https://issues.redhat.com/browse/OCPBUGS-30093): Mount /run/nodeip-configuration into coredns containers [#4229](https://github.com/openshift/machine-config-operator/pull/4229)
* [OCPBUGS-30761](https://issues.redhat.com/browse/OCPBUGS-30761): add static pods for rbacproxy [#4252](https://github.com/openshift/machine-config-operator/pull/4252)
* [OCPBUGS-30017](https://issues.redhat.com/browse/OCPBUGS-30017): CRI-O: Add missing Devices annotation to CRI-O configuration [#4227](https://github.com/openshift/machine-config-operator/pull/4227)
* [OCPBUGS-29339](https://issues.redhat.com/browse/OCPBUGS-29339): annotate on-prem static pods for workload partitioning [#4179](https://github.com/openshift/machine-config-operator/pull/4179)
* [OCPBUGS-29797](https://issues.redhat.com/browse/OCPBUGS-29797): set nodeStatusReportFrequency [#4211](https://github.com/openshift/machine-config-operator/pull/4211)
* [OCPBUGS-29166](https://issues.redhat.com/browse/OCPBUGS-29166): ovs-configure: fix `vlan_parent` calculation [#4171](https://github.com/openshift/machine-config-operator/pull/4171)
* [OCPBUGS-29651](https://issues.redhat.com/browse/OCPBUGS-29651): nmstate, configure nmstate to keep service yamls [#4192](https://github.com/openshift/machine-config-operator/pull/4192)
* [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166)
* [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174)
* [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169)
* [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155)
* [OCPBUGS-28237](https://issues.redhat.com/browse/OCPBUGS-28237): daemon: allow the user to override drains on IR changes [#4148](https://github.com/openshift/machine-config-operator/pull/4148)
* [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Add Image Credential Provider flags for Kubelet on AWS [#4134](https://github.com/openshift/machine-config-operator/pull/4134)
* [OCPBUGS-27307](https://issues.redhat.com/browse/OCPBUGS-27307): Fix typo in AWS node env unit [#4130](https://github.com/openshift/machine-config-operator/pull/4130)
* [OCPBUGS-25424](https://issues.redhat.com/browse/OCPBUGS-25424): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4077](https://github.com/openshift/machine-config-operator/pull/4077)
* [OCPBUGS-26240](https://issues.redhat.com/browse/OCPBUGS-26240): Azure Run ovs-configuration.service before dnsmasq.service [#4101](https://github.com/openshift/machine-config-operator/pull/4101)
* [OCPBUGS-25948](https://issues.redhat.com/browse/OCPBUGS-25948): kubelet: fix kubelet labels [#4090](https://github.com/openshift/machine-config-operator/pull/4090)
* [OCPBUGS-25228](https://issues.redhat.com/browse/OCPBUGS-25228): crio: drop automatic image cleanup on upgrades [#4072](https://github.com/openshift/machine-config-operator/pull/4072)
* [OCPBUGS-17877](https://issues.redhat.com/browse/OCPBUGS-17877): daemon: Add support for new nmstate logic [#4020](https://github.com/openshift/machine-config-operator/pull/4020)
* [OCPBUGS-21597](https://issues.redhat.com/browse/OCPBUGS-21597): Alleviate confusion over mco_state [#4000](https://github.com/openshift/machine-config-operator/pull/4000)
* [OCPBUGS-24012](https://issues.redhat.com/browse/OCPBUGS-24012): Add templates for gc_thresh sysctls [#4048](https://github.com/openshift/machine-config-operator/pull/4048)
* [OCPBUGS-24035](https://issues.redhat.com/browse/OCPBUGS-24035): execute cert related processes to ensure proper rotation [#4050](https://github.com/openshift/machine-config-operator/pull/4050)
* [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#4052](https://github.com/openshift/machine-config-operator/pull/4052)
* [OCPBUGS-19352](https://issues.redhat.com/browse/OCPBUGS-19352): Fix bootstrap with NTO Operator and duplicate MachineConfigs [#3972](https://github.com/openshift/machine-config-operator/pull/3972)
* [COS-2526](https://issues.redhat.com/browse/COS-2526): CoreOS: Remove `imgid` field in coreos aleph [#4034](https://github.com/openshift/machine-config-operator/pull/4034)
* [TRT-1377](https://issues.redhat.com/browse/TRT-1377): Revert #4028 "OCPBUGS-22324: Wait for br-ex up event before node-valid-hostname" [#4053](https://github.com/openshift/machine-config-operator/pull/4053)
* [TRT-1375](https://issues.redhat.com/browse/TRT-1375): Revert #3965 "MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics" [#4051](https://github.com/openshift/machine-config-operator/pull/4051)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds on-cluster build dev preview docs [#3885](https://github.com/openshift/machine-config-operator/pull/3885)
* [OCPBUGS-24177](https://issues.redhat.com/browse/OCPBUGS-24177): fix race for MCN creation [#4049](https://github.com/openshift/machine-config-operator/pull/4049)
* [OCPBUGS-15934](https://issues.redhat.com/browse/OCPBUGS-15934): unit test ctrrcfg uses *resource.Quantity to use *resource.Quantity [#4044](https://github.com/openshift/machine-config-operator/pull/4044)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Wait for br-ex up event before node-valid-hostname [#4028](https://github.com/openshift/machine-config-operator/pull/4028)
* [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#3965](https://github.com/openshift/machine-config-operator/pull/3965)
* [OCPBUGS-24019](https://issues.redhat.com/browse/OCPBUGS-24019): Add ownership annotations to TLS artifacts [#4045](https://github.com/openshift/machine-config-operator/pull/4045)
* [MCO-795](https://issues.redhat.com/browse/MCO-795): MCO-813: MCO-473: Implement Upgrade-Monitor, FeatureGate, and MachineConfigNode types [#4012](https://github.com/openshift/machine-config-operator/pull/4012)
* [OCPBUGS-23255](https://issues.redhat.com/browse/OCPBUGS-23255): Add FIPS information to oldconfig when checking if reboot is needed [#4033](https://github.com/openshift/machine-config-operator/pull/4033)
* [OCPBUGS-23484](https://issues.redhat.com/browse/OCPBUGS-23484): kubevirt, Activate nodeip-configuration.service [#4039](https://github.com/openshift/machine-config-operator/pull/4039)
* [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#4040](https://github.com/openshift/machine-config-operator/pull/4040)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Fix syntax in vsphere-hostname.yaml for CAPI machines [#4037](https://github.com/openshift/machine-config-operator/pull/4037)
* [OCPBUGS-23209](https://issues.redhat.com/browse/OCPBUGS-23209): workaround nmstate bug by configuring ipv{4,6} addresses [#4026](https://github.com/openshift/machine-config-operator/pull/4026)
* [OCPBUGS-22200](https://issues.redhat.com/browse/OCPBUGS-22200): Retry fetching OpenStack hostname if it fails [#3990](https://github.com/openshift/machine-config-operator/pull/3990)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721): Don't retry node-ip show in resolv-prepender [#4017](https://github.com/openshift/machine-config-operator/pull/4017)
* [MCO-772](https://issues.redhat.com/browse/MCO-772): controller: allow custom pool configs to take priority [#4015](https://github.com/openshift/machine-config-operator/pull/4015)
* [OCPBUGS-18414](https://issues.redhat.com/browse/OCPBUGS-18414), [OCPBUGS-18456](https://issues.redhat.com/browse/OCPBUGS-18456), [OCPBUGS-18458](https://issues.redhat.com/browse/OCPBUGS-18458): Configures SSH Keys and Password for core, fixes config drift degradation [#3946](https://github.com/openshift/machine-config-operator/pull/3946)
* Use the bridge interface name for ofport request [#3998](https://github.com/openshift/machine-config-operator/pull/3998)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): typo s/iface_default_hint_file/default_bridge_file/ [#4004](https://github.com/openshift/machine-config-operator/pull/4004)
* [OCPBUGS-16871](https://issues.redhat.com/browse/OCPBUGS-16871): MCO - currentConfig missing on the filesystem [#3963](https://github.com/openshift/machine-config-operator/pull/3963)
* [OCPBUGS-20369](https://issues.redhat.com/browse/OCPBUGS-20369): Require a hostname override for AWS [#3979](https://github.com/openshift/machine-config-operator/pull/3979)
* [OCPBUGS-21814](https://issues.redhat.com/browse/OCPBUGS-21814): bump library-go and k8s dependencies to most recent version [#3988](https://github.com/openshift/machine-config-operator/pull/3988)
* [OCPBUGS-19736](https://issues.redhat.com/browse/OCPBUGS-19736): configure-ovs: handle SIGINT and SIGTERM [#3982](https://github.com/openshift/machine-config-operator/pull/3982)
* Add kernel-64k kernelType [#3903](https://github.com/openshift/machine-config-operator/pull/3903)
* [MCO-593](https://issues.redhat.com/browse/MCO-593): Consume MCO API and CRDs from openshift/api [#3747](https://github.com/openshift/machine-config-operator/pull/3747)
* Get the nmstate pinned package from kojihub when building on top of a CentOS base image [#3954](https://github.com/openshift/machine-config-operator/pull/3954)
* CRI-O: Use `127.0.0.1` for stream server with random port [#3853](https://github.com/openshift/machine-config-operator/pull/3853)
* [OCPBUGS-20499](https://issues.redhat.com/browse/OCPBUGS-20499): gcp-routes: don't exit on crictl failures [#3977](https://github.com/openshift/machine-config-operator/pull/3977)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): Allow specifying the interface for br-ex [#3696](https://github.com/openshift/machine-config-operator/pull/3696)
* [OCPBUGS-20338](https://issues.redhat.com/browse/OCPBUGS-20338): dashboard should detect unknown and not ready for not ready dashboard [#3964](https://github.com/openshift/machine-config-operator/pull/3964)
* [OCPBUGS-19722](https://issues.redhat.com/browse/OCPBUGS-19722): Informers are setup with incorrect namespace [#3955](https://github.com/openshift/machine-config-operator/pull/3955)
* [OCPBUGS-15087](https://issues.redhat.com/browse/OCPBUGS-15087): templates: Introduce kubelet-dependencies.target [#3865](https://github.com/openshift/machine-config-operator/pull/3865)
* [OCPBUGS-17841](https://issues.redhat.com/browse/OCPBUGS-17841): Ensure gcp-routes hack for internalLB hairpin traffic works for SGW [#3953](https://github.com/openshift/machine-config-operator/pull/3953)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Set guestinfo.hostname for CAPI VMs on vSphere [#3949](https://github.com/openshift/machine-config-operator/pull/3949)
* [OCPBUGS-19708](https://issues.redhat.com/browse/OCPBUGS-19708): Support to append the duplicate kernel arguments to the rendered MC [#3947](https://github.com/openshift/machine-config-operator/pull/3947)
* [OCPBUGS-18771](https://issues.redhat.com/browse/OCPBUGS-18771): Consider ingress VIPs when selecting node IP [#3943](https://github.com/openshift/machine-config-operator/pull/3943)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): Drop `machine-os-content` references [#3364](https://github.com/openshift/machine-config-operator/pull/3364)
* [OCPBUGS-19992](https://issues.redhat.com/browse/OCPBUGS-19992): Add v6-primary dual stack support to VSphere UPI [#3670](https://github.com/openshift/machine-config-operator/pull/3670)
* [OCPNODE-1799](https://issues.redhat.com/browse/OCPNODE-1799): support icsp and idms objects [#3898](https://github.com/openshift/machine-config-operator/pull/3898)
* Improve kubelet error log [#3914](https://github.com/openshift/machine-config-operator/pull/3914)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): Use image exists in resolv-prepender instead of wc -l [#3910](https://github.com/openshift/machine-config-operator/pull/3910)
* [MCO-707](https://issues.redhat.com/browse/MCO-707): Strip registry transport from os image URL for comparison [#3857](https://github.com/openshift/machine-config-operator/pull/3857)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): Revert "Revert "fix nodeStatusUpdateFrequency"" [#3890](https://github.com/openshift/machine-config-operator/pull/3890)
* [OCPBUGS-17811](https://issues.redhat.com/browse/OCPBUGS-17811): add certificate input to bootstrap mcs [#3876](https://github.com/openshift/machine-config-operator/pull/3876)
* [MCO-746](https://issues.redhat.com/browse/MCO-746): make buildcontroller tests less flaky [#3905](https://github.com/openshift/machine-config-operator/pull/3905)
* [OCPBUGS-18902](https://issues.redhat.com/browse/OCPBUGS-18902): Internal Registry Secrets merge causing excessive API calls [#3912](https://github.com/openshift/machine-config-operator/pull/3912)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds e2e for on-cluster build dev preview [#3807](https://github.com/openshift/machine-config-operator/pull/3807)
* Dockerfile: update local copy to OCP 4.15 image [#3922](https://github.com/openshift/machine-config-operator/pull/3922)
* [OCPBUGS-19365](https://issues.redhat.com/browse/OCPBUGS-19365): Ignore invoking nbctl calls if its SDN [#3926](https://github.com/openshift/machine-config-operator/pull/3926)
* [OCPBUGS-15910](https://issues.redhat.com/browse/OCPBUGS-15910): After dual-stack conversion reconcile IPFamilies [#3909](https://github.com/openshift/machine-config-operator/pull/3909)
* [OCPBUGS-18800](https://issues.redhat.com/browse/OCPBUGS-18800): fix merged image registry CA behavior [#3851](https://github.com/openshift/machine-config-operator/pull/3851)
* mod: Update rpmostree-client-go [#3916](https://github.com/openshift/machine-config-operator/pull/3916)
* [OCPBUGS-13044](https://issues.redhat.com/browse/OCPBUGS-13044): daemon: always use `podman cp` to copy extensions container content [#3921](https://github.com/openshift/machine-config-operator/pull/3921)
* [OCPBUGS-18906](https://issues.redhat.com/browse/OCPBUGS-18906): Remove dependency on k8s.io/kubernetes packages [#3913](https://github.com/openshift/machine-config-operator/pull/3913)
* [OCPBUGS-19097](https://issues.redhat.com/browse/OCPBUGS-19097): Updating openshift-proxy-pull-test images to be consistent with ART [#3918](https://github.com/openshift/machine-config-operator/pull/3918)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again [#3907](https://github.com/openshift/machine-config-operator/pull/3907)
* [OCPBUGS-19179](https://issues.redhat.com/browse/OCPBUGS-19179): Updating ose-machine-config-operator images to be consistent with ART [#3919](https://github.com/openshift/machine-config-operator/pull/3919)
* [OCPBUGS-16905](https://issues.redhat.com/browse/OCPBUGS-16905): install: Recreate and delayed default ServiceAccount deletion [#3895](https://github.com/openshift/machine-config-operator/pull/3895)
* [MCO-765](https://issues.redhat.com/browse/MCO-765): Examine/Remove memory limits on MCO pods [#3915](https://github.com/openshift/machine-config-operator/pull/3915)
* [MCO-731](https://issues.redhat.com/browse/MCO-731): Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service [#3858](https://github.com/openshift/machine-config-operator/pull/3858)
* [MCO-708](https://issues.redhat.com/browse/MCO-708): Extract and merge kernel arguments from /proc/cmdline [#3856](https://github.com/openshift/machine-config-operator/pull/3856)
* configure-ovs-network: Add tun device support [#3618](https://github.com/openshift/machine-config-operator/pull/3618)
* [OCPBUGS-11437](https://issues.redhat.com/browse/OCPBUGS-11437): MCO keeps the pull secret to .orig file once it replaced [#3759](https://github.com/openshift/machine-config-operator/pull/3759)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/dc45d313d876f6a60162bc220365b6dc21078cbe...b905c8a3dab2daf07939ca7b62aa4e56dbd890ae)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/97d87657caab4323f82f9d0958e6d30fc8fd1846)

* [OCPBUGS-15599](https://issues.redhat.com/browse/OCPBUGS-15599): configurable ironic agent vlan creation [#109](https://github.com/openshift/image-customization-controller/pull/109)
* [OCPBUGS-21789](https://issues.redhat.com/browse/OCPBUGS-21789): Uplift x/net to v0.17.0 [#103](https://github.com/openshift/image-customization-controller/pull/103)
* [OCPBUGS-19186](https://issues.redhat.com/browse/OCPBUGS-19186): Updating ose-image-customization-controller images to be consistent with ART [#99](https://github.com/openshift/image-customization-controller/pull/99)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/2a6627bafcbb00437ab97308fe1d7df9039104ad...97d87657caab4323f82f9d0958e6d30fc8fd1846)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/9e9c920f985a375536e8d4caafd2d7ed579e27f3)

* NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 [#33](https://github.com/openshift/machine-os-images/pull/33)
* NO-ISSUE: Force updating 4.15 CI images [#32](https://github.com/openshift/machine-os-images/pull/32)
* [OCPBUGS-19133](https://issues.redhat.com/browse/OCPBUGS-19133): Updating ose-machine-os-images images to be consistent with ART [#30](https://github.com/openshift/machine-os-images/pull/30)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...9e9c920f985a375536e8d4caafd2d7ed579e27f3)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/53c186206d94508b2aec4c5af5e112b79d5f67d1)

* [OU-417](https://issues.redhat.com/browse/OU-417): throw an error when a custom datasource is not found [#118](https://github.com/openshift/monitoring-plugin/pull/118)
* [OU-415](https://issues.redhat.com/browse/OU-415): Add datasource parameter to handle metrics from custom datasources [#116](https://github.com/openshift/monitoring-plugin/pull/116)
* [OCPBUGS-32097](https://issues.redhat.com/browse/OCPBUGS-32097): make createdBy mandatory and auto fill with the current user [#115](https://github.com/openshift/monitoring-plugin/pull/115)
* [OCPBUGS-31310](https://issues.redhat.com/browse/OCPBUGS-31310): upgrade sanitize-html vulnerable dependency [#107](https://github.com/openshift/monitoring-plugin/pull/107)
* [OCPBUGS-27202](https://issues.redhat.com/browse/OCPBUGS-27202): upgrade follow-redirects parent dependency [#94](https://github.com/openshift/monitoring-plugin/pull/94)
* [OU-318](https://issues.redhat.com/browse/OU-318): consider all metric keys to display all results on dashboards tables [#97](https://github.com/openshift/monitoring-plugin/pull/97)
* [OU-312](https://issues.redhat.com/browse/OU-312): Revert "fix default nginx path to look for static files" [#93](https://github.com/openshift/monitoring-plugin/pull/93)
* [OCPBUGS-25643](https://issues.redhat.com/browse/OCPBUGS-25643): On the alert details page, don't require all alert labels in URL [#89](https://github.com/openshift/monitoring-plugin/pull/89)
* [OCPBUGS-24658](https://issues.redhat.com/browse/OCPBUGS-24658): remove regex from console page route path so plugin pages are found [#85](https://github.com/openshift/monitoring-plugin/pull/85)
* [OU-298](https://issues.redhat.com/browse/OU-298): fix default nginx path to look for static files [#83](https://github.com/openshift/monitoring-plugin/pull/83)
* [OCPBUGS-22104](https://issues.redhat.com/browse/OCPBUGS-22104): disable query link for non metric-based alerts [#78](https://github.com/openshift/monitoring-plugin/pull/78)
* [OU-285](https://issues.redhat.com/browse/OU-285): add test-id to panel charts to ease e2e tests when titles change [#80](https://github.com/openshift/monitoring-plugin/pull/80)
* Upgrade Node.js from v16 to v18 in images [#79](https://github.com/openshift/monitoring-plugin/pull/79)
* [OU-261](https://issues.redhat.com/browse/OU-261): Fix "Overwriting current silence" info alert to have padding [#74](https://github.com/openshift/monitoring-plugin/pull/74)
* [OU-179](https://issues.redhat.com/browse/OU-179): Fix the root cause of externalLabels not present on alerts [#53](https://github.com/openshift/monitoring-plugin/pull/53)
* Revert "Fix i18n namespace for navigation menu entries" [#77](https://github.com/openshift/monitoring-plugin/pull/77)
* Fix i18n namespace for navigation menu entries [#73](https://github.com/openshift/monitoring-plugin/pull/73)
* add ipv6 nginx configuration [#76](https://github.com/openshift/monitoring-plugin/pull/76)
* [OCPBUGS-19233](https://issues.redhat.com/browse/OCPBUGS-19233): Updating monitoring-plugin images to be consistent with ART [#75](https://github.com/openshift/monitoring-plugin/pull/75)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6fb208108720b9a35782f7d4f6738010ec97ba85...53c186206d94508b2aec4c5af5e112b79d5f67d1)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9ea52de962dd644573c99b2f9554a6c4dfaacf62)

* [OCPBUGS-37727](https://issues.redhat.com/browse/OCPBUGS-37727): Update owners [#88](https://github.com/openshift/multus-admission-controller/pull/88)
* [OCPBUGS-24069](https://issues.redhat.com/browse/OCPBUGS-24069): Updating ose-multus-admission-controller-container image to be consistent with ART [#77](https://github.com/openshift/multus-admission-controller/pull/77)
* [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76)
* [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70)
* [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/68db19a47283e55e6eda1eb4f9e80dbf6d5e3077...9ea52de962dd644573c99b2f9554a6c4dfaacf62)


### [multus-cni](https://github.com/openshift/multus-cni/tree/05497ad135c629de9b4ffb0a13fb91d58a335d25)

* [OCPBUGS-35047](https://issues.redhat.com/browse/OCPBUGS-35047): Update owners file [#240](https://github.com/openshift/multus-cni/pull/240)
* [OCPBUGS-35258](https://issues.redhat.com/browse/OCPBUGS-35258): Thick plugin should not wait for API readiness on CNI DEL [#242](https://github.com/openshift/multus-cni/pull/242)
* [OCPBUGS-33477](https://issues.redhat.com/browse/OCPBUGS-33477): Fix CNI cache update function to prevent nil access [#234](https://github.com/openshift/multus-cni/pull/234)
* [OCPBUGS-30237](https://issues.redhat.com/browse/OCPBUGS-30237): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#223](https://github.com/openshift/multus-cni/pull/223)
* [OCPBUGS-28271](https://issues.redhat.com/browse/OCPBUGS-28271): Fix SAST scan issues for multus-cni-container [4.15] [#219](https://github.com/openshift/multus-cni/pull/219)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#210](https://github.com/openshift/multus-cni/pull/210)
* [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206)
* [OCPBUGS-23475](https://issues.redhat.com/browse/OCPBUGS-23475): Fix to use lumberjack only for logging files [#201](https://github.com/openshift/multus-cni/pull/201)
* [OCPBUGS-21915](https://issues.redhat.com/browse/OCPBUGS-21915): Upstream sync with go.mod update [#193](https://github.com/openshift/multus-cni/pull/193)
* [OCPBUGS-19859](https://issues.redhat.com/browse/OCPBUGS-19859): Multus annotation permissions: Certificate duration should be configurable [#191](https://github.com/openshift/multus-cni/pull/191)
* [OCPBUGS-18995](https://issues.redhat.com/browse/OCPBUGS-18995): Move chroot from multus main process to its child processes (#1161) [#186](https://github.com/openshift/multus-cni/pull/186)
* [OCPBUGS-19364](https://issues.redhat.com/browse/OCPBUGS-19364): Updating multus-cni images to be consistent with ART [#183](https://github.com/openshift/multus-cni/pull/183)
* Per node cert [#184](https://github.com/openshift/multus-cni/pull/184)
* [OCPBUGS-18307](https://issues.redhat.com/browse/OCPBUGS-18307): Performance and efficiency improvements in daemon/server mode [#180](https://github.com/openshift/multus-cni/pull/180)
* [Full changelog](https://github.com/openshift/multus-cni/compare/af796f2dbf470ef30390456aa9bc3aa3d951385e...05497ad135c629de9b4ffb0a13fb91d58a335d25)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)

* Revert art-bot PR#42 [#43](https://github.com/openshift/multus-networkpolicy/pull/43)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/f670647c0cb7b6f870f8176b26f83ce6614e209e...b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)

* [OCPBUGS-41804](https://issues.redhat.com/browse/OCPBUGS-41804): [release-4.15]Update owners [#59](https://github.com/openshift/route-override-cni/pull/59)
* [OCPBUGS-18848](https://issues.redhat.com/browse/OCPBUGS-18848): Updating ose-multus-route-override-cni images to be consistent with ART [#48](https://github.com/openshift/route-override-cni/pull/48)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/5965fed661f71112104ca6cef22aa883f542226d...1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d80fe46e1895698f3d1073ab965c859a89be2a47)

* [OCPBUGS-37729](https://issues.redhat.com/browse/OCPBUGS-37729): Update owners [#305](https://github.com/openshift/whereabouts-cni/pull/305)
* [OCPBUGS-37813](https://issues.redhat.com/browse/OCPBUGS-37813), [OCPBUGS-37816](https://issues.redhat.com/browse/OCPBUGS-37816): [release-4.15] align api calls timeout and skip pods marked for deletion [#308](https://github.com/openshift/whereabouts-cni/pull/308)
* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): [release-4.15] Return previous IP allocation for add cmd [#295](https://github.com/openshift/whereabouts-cni/pull/295)
* [OCPBUGS-35081](https://issues.redhat.com/browse/OCPBUGS-35081): [release-4.15] Use IP to identify orphaned allocation to be deleted [#288](https://github.com/openshift/whereabouts-cni/pull/288)
* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): Enable whereabouts-reconciler configuration 4.15 [#239](https://github.com/openshift/whereabouts-cni/pull/239)
* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Assignment error fix [#228](https://github.com/openshift/whereabouts-cni/pull/228)
* [OCPBUGS-22075](https://issues.redhat.com/browse/OCPBUGS-22075): update golang.org/x/net to v0.17.0 [#206](https://github.com/openshift/whereabouts-cni/pull/206)
* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Rechecking pending Pods (conflict resolved) [#196](https://github.com/openshift/whereabouts-cni/pull/196)
* [OCPBUGS-18847](https://issues.redhat.com/browse/OCPBUGS-18847): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#192](https://github.com/openshift/whereabouts-cni/pull/192)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7a6bc35369fe413ca190b3c680aa097c867d4f73...d80fe46e1895698f3d1073ab965c859a89be2a47)


### [must-gather](https://github.com/openshift/must-gather/tree/48de487eb38d1434440e4fb8164022b2b708332a)

* [OCPBUGS-43057](https://issues.redhat.com/browse/OCPBUGS-43057): [Relase-4.15] Multus is now a Pod and will be captured by normal [#450](https://github.com/openshift/must-gather/pull/450)
* [OSASINFRA-3290](https://issues.redhat.com/browse/OSASINFRA-3290): Remove Kuryr info gathering [#393](https://github.com/openshift/must-gather/pull/393)
* machineconfig: always gather MCS-served config [#380](https://github.com/openshift/must-gather/pull/380)
* [OCPBUGS-20391](https://issues.redhat.com/browse/OCPBUGS-20391): Revert "Add must gather script for network observability" [#390](https://github.com/openshift/must-gather/pull/390)
* gather_sriov: Fix typos and collect SRIOV cache at /var/lib/cni/sriov [#369](https://github.com/openshift/must-gather/pull/369)
* sriov: Clean up `ip netns` output [#387](https://github.com/openshift/must-gather/pull/387)
* [OCPBUGS-19280](https://issues.redhat.com/browse/OCPBUGS-19280): Updating ose-must-gather images to be consistent with ART [#381](https://github.com/openshift/must-gather/pull/381)
* ppc: explicitly add RuntimeClass to gathered resources [#386](https://github.com/openshift/must-gather/pull/386)
* [OCPBUGS-19761](https://issues.redhat.com/browse/OCPBUGS-19761): Removed workload partitioning annotation from ppc script [#385](https://github.com/openshift/must-gather/pull/385)
* [Full changelog](https://github.com/openshift/must-gather/compare/833e1de991e2319439fb48550c86d2d44d412501...48de487eb38d1434440e4fb8164022b2b708332a)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/f91decaa10cfa233c9e680c96ec7ae642e30a03c)

* [OCPBUGS-19192](https://issues.redhat.com/browse/OCPBUGS-19192): Updating ose-network-interface-bond-cni images to be consistent with ART [#59](https://github.com/openshift/bond-cni/pull/59)
* [Full changelog](https://github.com/openshift/bond-cni/compare/29f61f6b05d958c40e7213937064f26a63a8e6d9...f91decaa10cfa233c9e680c96ec7ae642e30a03c)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9e21740225af47318a9ed6d03c2eb9ee2aaea883)

* Correct 4.16 owners file (#99) [#99](https://github.com/openshift/network-metrics-daemon/pull/99)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) [#87](https://github.com/openshift/network-metrics-daemon/pull/87)
* Added METRIC_TEST_IMAGE var (#86) [#86](https://github.com/openshift/network-metrics-daemon/pull/86)
* Update the k8s dependencies to 1.28.3 (#81) [#81](https://github.com/openshift/network-metrics-daemon/pull/81)
* Updating ose-network-metrics-daemon images to be consistent with ART (#80) [#80](https://github.com/openshift/network-metrics-daemon/pull/80)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/d8a8c94e523242b441b3714ae31e4c7608c0c797...9e21740225af47318a9ed6d03c2eb9ee2aaea883)


### [network-tools](https://github.com/openshift/network-tools/tree/17536c8dff76d50efb604187ba763020bd084771)

* [OCPBUGS-31764](https://issues.redhat.com/browse/OCPBUGS-31764): replace wireshark with wireshark-cli [#118](https://github.com/openshift/network-tools/pull/118)
* NO-JIRA: Adding bcc to the container [#104](https://github.com/openshift/network-tools/pull/104)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Update OVS flows counter to work for cookies with leading 0. [#103](https://github.com/openshift/network-tools/pull/103)
* [OCPBUGS-24385](https://issues.redhat.com/browse/OCPBUGS-24385): Align status and assignee between jira and github [#100](https://github.com/openshift/network-tools/pull/100)
* [OCPBUGS-24276](https://issues.redhat.com/browse/OCPBUGS-24276): Add "networking / network-tools" to list of components [#102](https://github.com/openshift/network-tools/pull/102)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Fix error when nbdb and sbdb leader are located on different nodes [#99](https://github.com/openshift/network-tools/pull/99)
* [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Add flow counter script for ACLs [#98](https://github.com/openshift/network-tools/pull/98)
* [SDN-4182](https://issues.redhat.com/browse/SDN-4182): Script cleanup + track ovnk upstream issues in jira [#97](https://github.com/openshift/network-tools/pull/97)
* [OCPBUGS-22166](https://issues.redhat.com/browse/OCPBUGS-22166): Move commands to the function to avoid them being executed on -h. [#93](https://github.com/openshift/network-tools/pull/93)
* Update docs to use image-streams instead of quay image [#91](https://github.com/openshift/network-tools/pull/91)
* jira-scripts: Add Zenghui, remove Vic [#90](https://github.com/openshift/network-tools/pull/90)
* Add Flavio as approver [#89](https://github.com/openshift/network-tools/pull/89)
* [SDN-3904](https://issues.redhat.com/browse/SDN-3904): Update scripts in network-tools to reflect the changes in IC model [#86](https://github.com/openshift/network-tools/pull/86)
* [SDN-4047](https://issues.redhat.com/browse/SDN-4047): Migrate bug-dispath query scripts [#88](https://github.com/openshift/network-tools/pull/88)
* [OCPBUGS-19292](https://issues.redhat.com/browse/OCPBUGS-19292): Updating ose-network-tools images to be consistent with ART [#87](https://github.com/openshift/network-tools/pull/87)
* [Full changelog](https://github.com/openshift/network-tools/compare/e79d8173c5628065da85425bc7e4cb1d94f3c919...17536c8dff76d50efb604187ba763020bd084771)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d)

* [OCPBUGS-23652](https://issues.redhat.com/browse/OCPBUGS-23652): Add Snyk file to exclude vendor directory on scan [#27](https://github.com/openshift/cloud-provider-nutanix/pull/27)
* [OCPBUGS-24101](https://issues.redhat.com/browse/OCPBUGS-24101): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART [#23](https://github.com/openshift/cloud-provider-nutanix/pull/23)
* NO-JIRA: Add .ci-operator.yaml file [#24](https://github.com/openshift/cloud-provider-nutanix/pull/24)
* Update OWNERS [#22](https://github.com/openshift/cloud-provider-nutanix/pull/22)
* [OCPCLOUD-2182](https://issues.redhat.com/browse/OCPCLOUD-2182): Update to match K8s v1.28 dependencies [#20](https://github.com/openshift/cloud-provider-nutanix/pull/20)
* [OCPBUGS-19165](https://issues.redhat.com/browse/OCPBUGS-19165): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#19](https://github.com/openshift/cloud-provider-nutanix/pull/19)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...33fb22c182fa86d5de5bdc5c1b08a39b1278be3d)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/8de6f944d35b2fefaf926006aecf8445be4e6149)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#81](https://github.com/openshift/machine-api-provider-nutanix/pull/81)
* [OCPBUGS-29548](https://issues.redhat.com/browse/OCPBUGS-29548): IPI install fails on Nutanix when using DHCP [#69](https://github.com/openshift/machine-api-provider-nutanix/pull/69)
* Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-nutanix/pull/57)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains. [#56](https://github.com/openshift/machine-api-provider-nutanix/pull/56)
* Update OWNERS [#55](https://github.com/openshift/machine-api-provider-nutanix/pull/55)
* [OCPCLOUD-2189](https://issues.redhat.com/browse/OCPCLOUD-2189): Update to match K8s v1.28 dependencies [#54](https://github.com/openshift/machine-api-provider-nutanix/pull/54)
* [OCPBUGS-19208](https://issues.redhat.com/browse/OCPBUGS-19208): Updating ose-nutanix-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-nutanix/pull/51)
* [OCPBUGS-5969](https://issues.redhat.com/browse/OCPBUGS-5969): machine stuck in Provisioning and machineset scale/delete not work [#52](https://github.com/openshift/machine-api-provider-nutanix/pull/52)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/93a782e897c28724ae8cdf5251c2dc5502d83e6b...8de6f944d35b2fefaf926006aecf8445be4e6149)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb)

* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#114](https://github.com/openshift/oauth-apiserver/pull/114)
* [OCPBUGS-31951](https://issues.redhat.com/browse/OCPBUGS-31951): bump x/net to 0.24.0 [#109](https://github.com/openshift/oauth-apiserver/pull/109)
* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#96](https://github.com/openshift/oauth-apiserver/pull/96)
* [OCPBUGS-19214](https://issues.redhat.com/browse/OCPBUGS-19214): Updating ose-oauth-apiserver images to be consistent with ART [#90](https://github.com/openshift/oauth-apiserver/pull/90)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e1cd9d05b032fbe83df7f68c813309ad7df5d59e...0e158441dbfdf232d7fea50b7c4eae3023d2cdbb)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e)

* [OCPBUGS-24067](https://issues.redhat.com/browse/OCPBUGS-24067): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#269](https://github.com/openshift/oauth-proxy/pull/269)
* [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266)
* [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/a4a2f270a57af830508e8cef52d4c8d4f4dfba76...241a88c47cb01d0e61ff105ceff81ad14fd9ea6e)


### [oauth-server](https://github.com/openshift/oauth-server/tree/c055dbb9a84e04575ade106e9a43cc638a8aeaef)

* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#148](https://github.com/openshift/oauth-server/pull/148)
* [OCPBUGS-21671](https://issues.redhat.com/browse/OCPBUGS-21671): go.mod: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/oauth-server/pull/137)
* [Full changelog](https://github.com/openshift/oauth-server/compare/35f4739f342a5838fe6ceaf7a459c78f3777166d...c055dbb9a84e04575ade106e9a43cc638a8aeaef)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91f573c771182f7fd4a2d3513ed49562dee6b38)

* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#866) [#866](https://github.com/openshift/oc-mirror/pull/866)
* [OCPBUGS-33575](https://issues.redhat.com/browse/OCPBUGS-33575): Change default behavior to not rebuild catalogs for V1 (#849) [#849](https://github.com/openshift/oc-mirror/pull/849)
* [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#846) [#846](https://github.com/openshift/oc-mirror/pull/846)
* Bump version to include v5.11.0 of go-git (#819) [#819](https://github.com/openshift/oc-mirror/pull/819)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both oc-mirror binaries for rhel9 and rhel8 (#804) [#804](https://github.com/openshift/oc-mirror/pull/804)
* Fix to ensure operator not found error exits with correct status (#794) [#794](https://github.com/openshift/oc-mirror/pull/794)
* [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786)
* [OCPBUGS-27252](https://issues.redhat.com/browse/OCPBUGS-27252): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#780) [#780](https://github.com/openshift/oc-mirror/pull/780)
* [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#774) [#774](https://github.com/openshift/oc-mirror/pull/774)
* Updating oc-mirror-plugin-container image to be consistent with ART for 4.15 (#776) [#776](https://github.com/openshift/oc-mirror/pull/776)
* [OCPBUGS-25346](https://issues.redhat.com/browse/OCPBUGS-25346): - oc-mirror on RHEL9 Host with FIPS enabled (#764) [#764](https://github.com/openshift/oc-mirror/pull/764)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#762) [#762](https://github.com/openshift/oc-mirror/pull/762)
* Add generation of updateService.yaml (#759) [#759](https://github.com/openshift/oc-mirror/pull/759)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#757) [#757](https://github.com/openshift/oc-mirror/pull/757)
* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#756) [#756](https://github.com/openshift/oc-mirror/pull/756)
* Fix default port for V2 'prepare' subcommand (#747) [#747](https://github.com/openshift/oc-mirror/pull/747)
* Adding release payload signatures to graph-data container (#742) [#742](https://github.com/openshift/oc-mirror/pull/742)
* [OCPBUGS-23339](https://issues.redhat.com/browse/OCPBUGS-23339): fix IDMS custom resource name (#743) [#743](https://github.com/openshift/oc-mirror/pull/743)
* remove unnecessary print statement (#745) [#745](https://github.com/openshift/oc-mirror/pull/745)
* [OCPBUGS-23309](https://issues.redhat.com/browse/OCPBUGS-23309): Do not panic if port chosen to run local cache is already bound (#744) [#744](https://github.com/openshift/oc-mirror/pull/744)
* [CFE-994](https://issues.redhat.com/browse/CFE-994): cache location separate of working-dir (#741) [#741](https://github.com/openshift/oc-mirror/pull/741)
* Integrate Unarchive process to DiskToMirror workflow (#740) [#740](https://github.com/openshift/oc-mirror/pull/740)
* [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-991](https://issues.redhat.com/browse/CFE-991): archive generation at the end of MirrorToDisk workflow (#739) [#739](https://github.com/openshift/oc-mirror/pull/739)
* [CFE-981](https://issues.redhat.com/browse/CFE-981): Create UnArchiver interface and implementation (#738) [#738](https://github.com/openshift/oc-mirror/pull/738)
* [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-980](https://issues.redhat.com/browse/CFE-980): Introduce Archiver interface and its implementation MirrorArchiver (#734) [#734](https://github.com/openshift/oc-mirror/pull/734)
* feat: history file reader and writer (#736) [#736](https://github.com/openshift/oc-mirror/pull/736)
* skipping prune failure if manifest not found (#733) [#733](https://github.com/openshift/oc-mirror/pull/733)
* Package ioutil  is deprecated as of Go 1.16 (#731) [#731](https://github.com/openshift/oc-mirror/pull/731)
* [CFE-977](https://issues.redhat.com/browse/CFE-977): Implementation of a blob gatherer for images in the local cache (#732) [#732](https://github.com/openshift/oc-mirror/pull/732)
* refactorings (#728) [#728](https://github.com/openshift/oc-mirror/pull/728)
* Fix --from being set to default value in mirrorToDisk workflow (#727) [#727](https://github.com/openshift/oc-mirror/pull/727)
* [OCPBUGS-22947](https://issues.redhat.com/browse/OCPBUGS-22947): Should not generate graph with prepare subcommand (#725) [#725](https://github.com/openshift/oc-mirror/pull/725)
* Cancel community office hours: none for the moment (#726) [#726](https://github.com/openshift/oc-mirror/pull/726)
* [CFE-965](https://issues.redhat.com/browse/CFE-965): [V2] Enable signature verification (#709) [#709](https://github.com/openshift/oc-mirror/pull/709)
* [CFE-971](https://issues.redhat.com/browse/CFE-971): Generate OSUS graph image - uses go-containerregistry implementation (#722) [#722](https://github.com/openshift/oc-mirror/pull/722)
* Pr template change (#719) [#719](https://github.com/openshift/oc-mirror/pull/719)
* [CFE-899](https://issues.redhat.com/browse/CFE-899), [CFE-958](https://issues.redhat.com/browse/CFE-958): feat: removes the registry dns (#718) [#718](https://github.com/openshift/oc-mirror/pull/718)
* Remove Dockerfile.integration - not used - reduce confusion (#716) [#716](https://github.com/openshift/oc-mirror/pull/716)
* [OCPBUGS-21864](https://issues.redhat.com/browse/OCPBUGS-21864): fix: CVE-2023-39325 and CVE-2023-44487 (#712) [#712](https://github.com/openshift/oc-mirror/pull/712)
* Introduce subcommand `prepare` (#702) [#702](https://github.com/openshift/oc-mirror/pull/702)
* Initial implementation of IDMS generation (#707) [#707](https://github.com/openshift/oc-mirror/pull/707)
* Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) [#704](https://github.com/openshift/oc-mirror/pull/704)
* [CFE-935](https://issues.redhat.com/browse/CFE-935): [V2] Implement a release collector relying on local registry as storage (#690) [#690](https://github.com/openshift/oc-mirror/pull/690)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) [#697](https://github.com/openshift/oc-mirror/pull/697)
* [CFE-956](https://issues.redhat.com/browse/CFE-956): feat: adds tags on the related images (#695) [#695](https://github.com/openshift/oc-mirror/pull/695)
* Updating oc-mirror-plugin images to be consistent with ART (#698) [#698](https://github.com/openshift/oc-mirror/pull/698)
* Update list updates CLI documentation (#687) [#687](https://github.com/openshift/oc-mirror/pull/687)
* [CFE-906](https://issues.redhat.com/browse/CFE-906): [V2]Enclave support - Separate log file for local storage (#686) [#686](https://github.com/openshift/oc-mirror/pull/686)
* [CFE-955](https://issues.redhat.com/browse/CFE-955): changes owner file (#694) [#694](https://github.com/openshift/oc-mirror/pull/694)
* [CFE-897](https://issues.redhat.com/browse/CFE-897), [CFE-907](https://issues.redhat.com/browse/CFE-907): feat: add code to call v2 from v1 (#692) [#692](https://github.com/openshift/oc-mirror/pull/692)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a0733c17322f96d14f9158604fe74f1bfecc4a53...e91f573c771182f7fd4a2d3513ed49562dee6b38)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd)

* [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44)
* [OCPBUGS-27586](https://issues.redhat.com/browse/OCPBUGS-27586), [OCPBUGS-27671](https://issues.redhat.com/browse/OCPBUGS-27671): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#39](https://github.com/openshift/operator-framework-catalogd/pull/39)
* NO-ISSUE: Synchronize From Upstream Repositories [#33](https://github.com/openshift/operator-framework-catalogd/pull/33)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#35](https://github.com/openshift/operator-framework-catalogd/pull/35)
* [OPRUN-3079](https://issues.redhat.com/browse/OPRUN-3079): UPSTREAM: <carry>: Drop commitchecker [#32](https://github.com/openshift/operator-framework-catalogd/pull/32)
* Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-catalogd/pull/31)
* [OCPBUGS-20517](https://issues.redhat.com/browse/OCPBUGS-20517): UPSTREAM: <drop>: Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197) [#29](https://github.com/openshift/operator-framework-catalogd/pull/29)
* [OCPBUGS-19117](https://issues.redhat.com/browse/OCPBUGS-19117): UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART [#28](https://github.com/openshift/operator-framework-catalogd/pull/28)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/a333cb0b558abf8d9f8da0eccd5618d767629050...035d3835e581bee8ba59ec8919b43c8d7ce4ecfd)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/303b954fa5a92e810aebbe55ab8fafe8dbc06c58)

* [OCPBUGS-27591](https://issues.redhat.com/browse/OCPBUGS-27591), [OCPBUGS-27676](https://issues.redhat.com/browse/OCPBUGS-27676): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#68](https://github.com/openshift/operator-framework-operator-controller/pull/68)
* NO-ISSUE: Synchronize From Upstream Repositories [#50](https://github.com/openshift/operator-framework-operator-controller/pull/50)
* NO-ISSUE: Synchronize From Upstream Repositories [#49](https://github.com/openshift/operator-framework-operator-controller/pull/49)
* NO-ISSUE: Synchronize From Upstream Repositories [#48](https://github.com/openshift/operator-framework-operator-controller/pull/48)
* NO-ISSUE: Synchronize From Upstream Repositories [#47](https://github.com/openshift/operator-framework-operator-controller/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-operator-controller/pull/46)
* NO-ISSUE: Synchronize From Upstream Repositories [#41](https://github.com/openshift/operator-framework-operator-controller/pull/41)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#44](https://github.com/openshift/operator-framework-operator-controller/pull/44)
* [OPRUN-3081](https://issues.redhat.com/browse/OPRUN-3081): UPSTREAM: <carry>: Drop commitchecker [#37](https://github.com/openshift/operator-framework-operator-controller/pull/37)
* [OPRUN-3075](https://issues.redhat.com/browse/OPRUN-3075): Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-operator-controller/pull/31)
* [OCPBUGS-20505](https://issues.redhat.com/browse/OCPBUGS-20505): Bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/operator-framework-operator-controller/pull/28)
* [OCPBUGS-19096](https://issues.redhat.com/browse/OCPBUGS-19096): UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART [#27](https://github.com/openshift/operator-framework-operator-controller/pull/27)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/fb6fb278d987faacb4da17b96a109da261fbb962...303b954fa5a92e810aebbe55ab8fafe8dbc06c58)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)

* : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79)
* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-rukpak/pull/66)
* NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#57](https://github.com/openshift/operator-framework-rukpak/pull/57)
* [OPRUN-3080](https://issues.redhat.com/browse/OPRUN-3080): UPSTREAM: <carry>: Drop commitchecker [#51](https://github.com/openshift/operator-framework-rukpak/pull/51)
* [OPRUN-3078](https://issues.redhat.com/browse/OPRUN-3078): Update to Upstream v0.15.0 [#50](https://github.com/openshift/operator-framework-rukpak/pull/50)
* Update to Upstream v0.14.0 [#44](https://github.com/openshift/operator-framework-rukpak/pull/44)
* [OCPBUGS-20506](https://issues.redhat.com/browse/OCPBUGS-20506): Bump golang.org/x/net from 0.15.0 to 0.17.0 [#36](https://github.com/openshift/operator-framework-rukpak/pull/36)
* [OCPBUGS-19167](https://issues.redhat.com/browse/OCPBUGS-19167): UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART [#35](https://github.com/openshift/operator-framework-rukpak/pull/35)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/c9409c62cb6bc57cde167452f1da7f3eab8cff79...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/08f4c422eed5d9584799244c0d9755708686c0c8)

* [OCPBUGS-32444](https://issues.redhat.com/browse/OCPBUGS-32444): Bump golang/x/net to v0.23.0 [#428](https://github.com/openshift/openshift-apiserver/pull/428)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Bump openshift/api to get updated docs for UnservableInFutureVersions [#436](https://github.com/openshift/openshift-apiserver/pull/436)
* [OCPBUGS-31469](https://issues.redhat.com/browse/OCPBUGS-31469): vendor upgrade runtime-utils [#422](https://github.com/openshift/openshift-apiserver/pull/422)
* [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#413](https://github.com/openshift/openshift-apiserver/pull/413)
* [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406)
* [API-1644](https://issues.redhat.com/browse/API-1644): add serviceaccount/patch to pull secret controller role [#408](https://github.com/openshift/openshift-apiserver/pull/408)
* [OCPBUGS-21735](https://issues.redhat.com/browse/OCPBUGS-21735): Enable HTTP/2 CVE mitigation [#396](https://github.com/openshift/openshift-apiserver/pull/396)
* [OCPBUGS-19145](https://issues.redhat.com/browse/OCPBUGS-19145): Updating ose-openshift-apiserver images to be consistent with ART [#390](https://github.com/openshift/openshift-apiserver/pull/390)
* [API-1644](https://issues.redhat.com/browse/API-1644): add TokenRequest to pull-secret controller's cluster role [#403](https://github.com/openshift/openshift-apiserver/pull/403)
* Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled [#395](https://github.com/openshift/openshift-apiserver/pull/395)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): remove image pruner cluster role creation [#391](https://github.com/openshift/openshift-apiserver/pull/391)
* [OCPBUGS-16514](https://issues.redhat.com/browse/OCPBUGS-16514): use import mode to manifest cache key [#386](https://github.com/openshift/openshift-apiserver/pull/386)
* [OCPBUGS-17674](https://issues.redhat.com/browse/OCPBUGS-17674): pkg/image: avoid unnecessary service lookups when registry is removed [#387](https://github.com/openshift/openshift-apiserver/pull/387)
* [OCPBUGS-5823](https://issues.redhat.com/browse/OCPBUGS-5823): remove unused service-ca roles [#388](https://github.com/openshift/openshift-apiserver/pull/388)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/433fd32ed98ad482ecad9006e7765075a3beb7ae...08f4c422eed5d9584799244c0d9755708686c0c8)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f2afd434358966ccc09f55d4915d2689ed2cb1b6)

* NO-JIRA: cleanup root and app OWNERS [#348](https://github.com/openshift/openshift-controller-manager/pull/348)
* [OCPBUGS-32871](https://issues.redhat.com/browse/OCPBUGS-32871): replaces deprecated square/go-jose wtih go-jose/go-jose [#333](https://github.com/openshift/openshift-controller-manager/pull/333)
* [OCPBUGS-41949](https://issues.redhat.com/browse/OCPBUGS-41949): Add adambkaplan as approver [#291](https://github.com/openshift/openshift-controller-manager/pull/291)
* [OCPBUGS-32807](https://issues.redhat.com/browse/OCPBUGS-32807), [OCPBUGS-33371](https://issues.redhat.com/browse/OCPBUGS-33371): Rollback state of managed image pull secrets after downgrade [#303](https://github.com/openshift/openshift-controller-manager/pull/303)
* [OCPBUGS-31490](https://issues.redhat.com/browse/OCPBUGS-31490): Bumps opentelemetry dependencies [#294](https://github.com/openshift/openshift-controller-manager/pull/294)
* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281)
* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [OCPBUGS-22471](https://issues.redhat.com/browse/OCPBUGS-22471): Mitigate CVE-2023-30551 (rekor) [#280](https://github.com/openshift/openshift-controller-manager/pull/280)
* [API-1651](https://issues.redhat.com/browse/API-1651): Create separate controllers for default service accounts [#272](https://github.com/openshift/openshift-controller-manager/pull/272)
* [API-1652](https://issues.redhat.com/browse/API-1652): bump go.mod go to 1.20 [#267](https://github.com/openshift/openshift-controller-manager/pull/267)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-openshift-controller-manager images to be consistent with ART [#273](https://github.com/openshift/openshift-controller-manager/pull/273)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable Build and DeploymentConfig Informers if their caps are disabled [#270](https://github.com/openshift/openshift-controller-manager/pull/270)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f4cf3310400625ac2cb40b3a4bf3d3ccbe3379d3...f2afd434358966ccc09f55d4915d2689ed2cb1b6)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/1915f64591a18c11138d10c00c50b3f5cff632ce)

* [OCPBUGS-24079](https://issues.redhat.com/browse/OCPBUGS-24079): Updating openshift-state-metrics-container image to be consistent with ART [#111](https://github.com/openshift/openshift-state-metrics/pull/111)
* [MON-3530](https://issues.redhat.com/browse/MON-3530): Update OWNERS [#110](https://github.com/openshift/openshift-state-metrics/pull/110)
* [OCPBUGS-23649](https://issues.redhat.com/browse/OCPBUGS-23649): bump dependencies [#109](https://github.com/openshift/openshift-state-metrics/pull/109)
* [OCPBUGS-21754](https://issues.redhat.com/browse/OCPBUGS-21754): bump `x/net` to v0.17.0 [#103](https://github.com/openshift/openshift-state-metrics/pull/103)
* Update Dockerfile to remove the maintainer tag [#98](https://github.com/openshift/openshift-state-metrics/pull/98)
* [OCPBUGS-19120](https://issues.redhat.com/browse/OCPBUGS-19120): Updating openshift-state-metrics images to be consistent with ART [#102](https://github.com/openshift/openshift-state-metrics/pull/102)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...1915f64591a18c11138d10c00c50b3f5cff632ce)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d0c24077b4e4ac1e00a6a529a814066cd9b5521c)

* [OCPBUGS-36586](https://issues.redhat.com/browse/OCPBUGS-36586): Add config map hooks [#175](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/175)
* [OCPBUGS-34927](https://issues.redhat.com/browse/OCPBUGS-34927): Correct out-of-bounds check [#172](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/172)
* [OCPBUGS-32744](https://issues.redhat.com/browse/OCPBUGS-32744): Relax requirement to enable topology [#165](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/165)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148)
* [STOR-1281](https://issues.redhat.com/browse/STOR-1281): Make Cinder CSI Driver Topology feature configurable [#127](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/127)
* [OCPBUGS-23878](https://issues.redhat.com/browse/OCPBUGS-23878): OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#141](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/141)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#143](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/143)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129)
* [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133)
* [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/1713e9716ce9efe64bc87c3203e0f991e72132d2...d0c24077b4e4ac1e00a6a529a814066cd9b5521c)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/396a09fffe401679f18e8a7db56c77bbf2dee246)

* [OCPBUGS-34665](https://issues.redhat.com/browse/OCPBUGS-34665): Failure to get bootstrap is non-fatal [#120](https://github.com/openshift/machine-api-provider-openstack/pull/120)
* [OCPBUGS-30857](https://issues.redhat.com/browse/OCPBUGS-30857): Ensure portSecurity is correctly set in the Port [#108](https://github.com/openshift/machine-api-provider-openstack/pull/108)
* [OCPBUGS-28326](https://issues.redhat.com/browse/OCPBUGS-28326): Add snyk configuration file [#105](https://github.com/openshift/machine-api-provider-openstack/pull/105)
* [OCPBUGS-24097](https://issues.redhat.com/browse/OCPBUGS-24097): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#99](https://github.com/openshift/machine-api-provider-openstack/pull/99)
* [OCPBUGS-23668](https://issues.redhat.com/browse/OCPBUGS-23668): Bump Kubernetes dependencies [#97](https://github.com/openshift/machine-api-provider-openstack/pull/97)
* [OCPBUGS-23913](https://issues.redhat.com/browse/OCPBUGS-23913): Fix nil pointer exception when deleting machines without a root volume [#98](https://github.com/openshift/machine-api-provider-openstack/pull/98)
* [OSASINFRA-3297](https://issues.redhat.com/browse/OSASINFRA-3297): Remove unnecessary retrieval of Network ID [#96](https://github.com/openshift/machine-api-provider-openstack/pull/96)
* [OCPBUGS-16597](https://issues.redhat.com/browse/OCPBUGS-16597): Don't build InstanceSpec during delete operations [#90](https://github.com/openshift/machine-api-provider-openstack/pull/90)
* NO-JIRA: Misc linter fixes [#94](https://github.com/openshift/machine-api-provider-openstack/pull/94)
* [OSASINFRA-3283](https://issues.redhat.com/browse/OSASINFRA-3283): convert: add missing port profile [#93](https://github.com/openshift/machine-api-provider-openstack/pull/93)
* [OSASINFRA-3243](https://issues.redhat.com/browse/OSASINFRA-3243): add ephemeral storage support [#88](https://github.com/openshift/machine-api-provider-openstack/pull/88)
* [OCPBUGS-22319](https://issues.redhat.com/browse/OCPBUGS-22319): fix MachineToInstanceSpec when SG are nil [#91](https://github.com/openshift/machine-api-provider-openstack/pull/91)
* [OSASINFRA-3272](https://issues.redhat.com/browse/OSASINFRA-3272): Move to CAPO v1alpha7 [#87](https://github.com/openshift/machine-api-provider-openstack/pull/87)
* [OCPBUGS-22069](https://issues.redhat.com/browse/OCPBUGS-22069): Update dependencies [#89](https://github.com/openshift/machine-api-provider-openstack/pull/89)
* [OCPBUGS-19156](https://issues.redhat.com/browse/OCPBUGS-19156): Updating ose-machine-api-provider-openstack images to be consistent with ART [#84](https://github.com/openshift/machine-api-provider-openstack/pull/84)
* Remove unnecessary print [#79](https://github.com/openshift/machine-api-provider-openstack/pull/79)
* Update OWNERS [#83](https://github.com/openshift/machine-api-provider-openstack/pull/83)
* make: Remove irrelevant/broken targets [#82](https://github.com/openshift/machine-api-provider-openstack/pull/82)
* Bug OCPBUGS-4629: Set controller's SyncPeriod to 1 hour [#59](https://github.com/openshift/machine-api-provider-openstack/pull/59)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/51f8e4d69014bfa7a8815662ab0117b6505a6e29...396a09fffe401679f18e8a7db56c77bbf2dee246)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2a0924f9655371f636d16b60e9ae7e49934c5640)

* [OCPBUGS-42114](https://issues.redhat.com/browse/OCPBUGS-42114): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata [#874](https://github.com/openshift/operator-framework-olm/pull/874)
* [OCPBUGS-41981](https://issues.redhat.com/browse/OCPBUGS-41981): (fix) registry pods do not come up again after node failure (#3366) [#868](https://github.com/openshift/operator-framework-olm/pull/868)
* [OCPBUGS-41819](https://issues.redhat.com/browse/OCPBUGS-41819): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#864](https://github.com/openshift/operator-framework-olm/pull/864)
* [OCPBUGS-41598](https://issues.redhat.com/browse/OCPBUGS-41598): Fix e2e flake: upgrade CRD with deprecated version [#862](https://github.com/openshift/operator-framework-olm/pull/862)
* [OCPBUGS-38383](https://issues.redhat.com/browse/OCPBUGS-38383): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#840](https://github.com/openshift/operator-framework-olm/pull/840)
* [OCPBUGS-38323](https://issues.redhat.com/browse/OCPBUGS-38323): Update junit report file name to show spec results on Test Grid [#839](https://github.com/openshift/operator-framework-olm/pull/839)
* [OCPBUGS-37677](https://issues.redhat.com/browse/OCPBUGS-37677): [release-4.15] Update e2e config and backport list of flakes [#829](https://github.com/openshift/operator-framework-olm/pull/829)
* [OCPBUGS-37554](https://issues.redhat.com/browse/OCPBUGS-37554): Set required-scc for openshift workloads [#828](https://github.com/openshift/operator-framework-olm/pull/828)
* [OCPBUGS-37017](https://issues.redhat.com/browse/OCPBUGS-37017): Bump github.com/containers/image/v5 [#823](https://github.com/openshift/operator-framework-olm/pull/823)
* [OCPBUGS-36812](https://issues.redhat.com/browse/OCPBUGS-36812): fix sorting unpack jobs [#817](https://github.com/openshift/operator-framework-olm/pull/817)
* [OCPBUGS-36451](https://issues.redhat.com/browse/OCPBUGS-36451): Can't install operator on 4.15 after uninstalling it on a prior version [#810](https://github.com/openshift/operator-framework-olm/pull/810)
* [OCPBUGS-36813](https://issues.redhat.com/browse/OCPBUGS-36813): [CARRY] perform operator apiService certificate validity checks directly [#819](https://github.com/openshift/operator-framework-olm/pull/819)
* [OCPBUGS-35305](https://issues.redhat.com/browse/OCPBUGS-35305): [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node [#779](https://github.com/openshift/operator-framework-olm/pull/779)
* [OCPBUGS-35720](https://issues.redhat.com/browse/OCPBUGS-35720): Warn and allow CRD upgrade if validation fails but webhook is specified [#789](https://github.com/openshift/operator-framework-olm/pull/789)
* [OCPBUGS-31939](https://issues.redhat.com/browse/OCPBUGS-31939), [OCPBUGS-31940](https://issues.redhat.com/browse/OCPBUGS-31940): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#747](https://github.com/openshift/operator-framework-olm/pull/747)
* [OCPBUGS-35229](https://issues.redhat.com/browse/OCPBUGS-35229): Unblock CI [#768](https://github.com/openshift/operator-framework-olm/pull/768)
* [OCPBUGS-32860](https://issues.redhat.com/browse/OCPBUGS-32860): UPSTREAM: <carry>: bump go-jose [#740](https://github.com/openshift/operator-framework-olm/pull/740)
* [OCPBUGS-32311](https://issues.redhat.com/browse/OCPBUGS-32311): [release-4.15]: Update if AlreadyExists [#736](https://github.com/openshift/operator-framework-olm/pull/736)
* [OCPBUGS-31842](https://issues.redhat.com/browse/OCPBUGS-31842): copy-content: delete destination dirs before copying (#3197) [#728](https://github.com/openshift/operator-framework-olm/pull/728)
* [OCPBUGS-31651](https://issues.redhat.com/browse/OCPBUGS-31651): [release-4.15] Correctly detect catalog image ID for extractContent catalog pods [#726](https://github.com/openshift/operator-framework-olm/pull/726)
* [OCPBUGS-30219](https://issues.redhat.com/browse/OCPBUGS-30219): bump otelgrpc to 0.46.0 [#712](https://github.com/openshift/operator-framework-olm/pull/712)
* [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711)
* [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707)
* [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710)
* NO-ISSUE:  [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694)
* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798): Fix snapshot failure, backport e2es [#670](https://github.com/openshift/operator-framework-olm/pull/670)
* [OCPBUGS-27435](https://issues.redhat.com/browse/OCPBUGS-27435): OCPBUGS-25989: operators/olm: filter RBAC lists by namespace [#664](https://github.com/openshift/operator-framework-olm/pull/664)
* [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648)
* [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643)
* NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642)
* [OCPBUGS-25367](https://issues.redhat.com/browse/OCPBUGS-25367): [CARRY] Fix panic issue when annotations map is nil [#636](https://github.com/openshift/operator-framework-olm/pull/636)
* [OCPBUGS-24121](https://issues.redhat.com/browse/OCPBUGS-24121): Updating operator-registry-container image to be consistent with ART [#621](https://github.com/openshift/operator-framework-olm/pull/621)
* [API-1674](https://issues.redhat.com/browse/API-1674): Add ownership annotations to new and existing olm-managed secrets [#626](https://github.com/openshift/operator-framework-olm/pull/626)
* NO-ISSUE: Synchronize From Upstream Repositories [#625](https://github.com/openshift/operator-framework-olm/pull/625)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests fixes [#622](https://github.com/openshift/operator-framework-olm/pull/622)
* NO-ISSUE: scripts: remove legacy bumping implementations [#613](https://github.com/openshift/operator-framework-olm/pull/613)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests remove collection-profiles cronjob from kustomization [#615](https://github.com/openshift/operator-framework-olm/pull/615)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests: Ignore "*.removed.yaml" files in kustomization.yaml [#610](https://github.com/openshift/operator-framework-olm/pull/610)
* [OPECO-3066](https://issues.redhat.com/browse/OPECO-3066): Synchronize From Upstream Repositories [#612](https://github.com/openshift/operator-framework-olm/pull/612)
* NO-ISSUE: Synchronize From Upstream Repositories [#609](https://github.com/openshift/operator-framework-olm/pull/609)
* Synchronize From Upstream Repositories [#606](https://github.com/openshift/operator-framework-olm/pull/606)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Generate OLM microshift manifests [#604](https://github.com/openshift/operator-framework-olm/pull/604)
* [OCPBUGS-17041](https://issues.redhat.com/browse/OCPBUGS-17041): Release Leader Election on Manager Exit [#556](https://github.com/openshift/operator-framework-olm/pull/556)
* [OPRUN-3106](https://issues.redhat.com/browse/OPRUN-3106): skuznets/bump vendor ii [#600](https://github.com/openshift/operator-framework-olm/pull/600)
* NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602)
* Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581)
* scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599)
* Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597)
* [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596)
* [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595)
* [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592)
* [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565)
* Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588)
* [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585)
* scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593)
* scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580)
* Sync script: handle multi commit merges [#578](https://github.com/openshift/operator-framework-olm/pull/578)
* Sync 2023 10 05 no steve [#579](https://github.com/openshift/operator-framework-olm/pull/579)
* scripts/bumper: exit when there's nothing to do [#569](https://github.com/openshift/operator-framework-olm/pull/569)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551)
* [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563)
* Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567)
* [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564)
* [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b18c1b3a87100e6a3b441041e7401f4e6042cd54...2a0924f9655371f636d16b60e9ae7e49934c5640)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/1f1bc1988527f01b7326f63953aacbd400fd8426)

* [OCPBUGS-24144](https://issues.redhat.com/browse/OCPBUGS-24144): Updating marketplace-operator-container image to be consistent with ART [4.15] [#553](https://github.com/operator-framework/operator-marketplace/pull/553)
* [OCPBUGS-37524](https://issues.redhat.com/browse/OCPBUGS-37524): Set required-scc for openshift workloads [#570](https://github.com/operator-framework/operator-marketplace/pull/570)
* [OCPBUGS-32060](https://issues.redhat.com/browse/OCPBUGS-32060): update golang.org/x/net for CVE-2023-45288 [#564](https://github.com/operator-framework/operator-marketplace/pull/564)
* [OPRUN-3130](https://issues.redhat.com/browse/OPRUN-3130): use content extraction in default catalog sources [#540](https://github.com/operator-framework/operator-marketplace/pull/540)
* [OCPBUGS-19710](https://issues.redhat.com/browse/OCPBUGS-19710): Update image tag to 4.15 for all but community operators [#541](https://github.com/operator-framework/operator-marketplace/pull/541)
* [OCPBUGS-21592](https://issues.redhat.com/browse/OCPBUGS-21592): [release-4.15] bump golang.org/x/net to 0.17.0 [#546](https://github.com/operator-framework/operator-marketplace/pull/546)
* Update image tag to 4.15 for community operators [#534](https://github.com/operator-framework/operator-marketplace/pull/534)
* [OCPBUGS-19230](https://issues.redhat.com/browse/OCPBUGS-19230): Updating marketplace-operator images to be consistent with ART [#539](https://github.com/operator-framework/operator-marketplace/pull/539)
* Dockerfile: Align OKD and OCP [#531](https://github.com/operator-framework/operator-marketplace/pull/531)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9...1f1bc1988527f01b7326f63953aacbd400fd8426)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/b8d25ad6d140a198e96527b46a9dbde65aae41ce)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...b8d25ad6d140a198e96527b46a9dbde65aae41ce)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e9b0fa233d75a97e6d29106265938b42bc16d677)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/ovirt-csi-driver-operator/pull/125)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/2fa33aa7f05da8640a8695372364f2367febd12a...e9b0fa233d75a97e6d29106265938b42bc16d677)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4b26ee518792233cb47f495064ac28789dcca2ba)

* [OCPBUGS-41838](https://issues.redhat.com/browse/OCPBUGS-41838): Use more exact name match when deleting static routes to HO nodes. [#2298](https://github.com/openshift/ovn-kubernetes/pull/2298)
* [OCPBUGS-42780](https://issues.redhat.com/browse/OCPBUGS-42780): Add subnet overlap check for transit switch subnet [#2313](https://github.com/openshift/ovn-kubernetes/pull/2313)
* [OCPBUGS-41340](https://issues.redhat.com/browse/OCPBUGS-41340): Delete EgressIP LRP stale nexthops when node is not found [#2288](https://github.com/openshift/ovn-kubernetes/pull/2288)
* [OCPBUGS-38262](https://issues.redhat.com/browse/OCPBUGS-38262): [release-4.15] Bump OVSDBTimeout and make it configurable. [#2252](https://github.com/openshift/ovn-kubernetes/pull/2252)
* [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix registering northd metrics on appropriate nodes [#2246](https://github.com/openshift/ovn-kubernetes/pull/2246)
* [OCPBUGS-37196](https://issues.redhat.com/browse/OCPBUGS-37196): [release-4.15] ovspinning: Set affinity of each thread [#2235](https://github.com/openshift/ovn-kubernetes/pull/2235)
* [OCPBUGS-35902](https://issues.redhat.com/browse/OCPBUGS-35902): Bump ovn to 23.09.4-16 [#2216](https://github.com/openshift/ovn-kubernetes/pull/2216)
* [OCPBUGS-36382](https://issues.redhat.com/browse/OCPBUGS-36382): Handle IP fragments in SGW mode [#2215](https://github.com/openshift/ovn-kubernetes/pull/2215)
* [OCPBUGS-33619](https://issues.redhat.com/browse/OCPBUGS-33619): EgressIP: Reload certificates for the grpc heatlhcheck server [#2167](https://github.com/openshift/ovn-kubernetes/pull/2167)
* [OCPBUGS-33623](https://issues.redhat.com/browse/OCPBUGS-33623), [OCPBUGS-33624](https://issues.redhat.com/browse/OCPBUGS-33624): Improve CI signal by removing/suppressing signals [#2168](https://github.com/openshift/ovn-kubernetes/pull/2168)
* [OCPBUGS-31814](https://issues.redhat.com/browse/OCPBUGS-31814): ipv6+all protocols conntrack flush [#2131](https://github.com/openshift/ovn-kubernetes/pull/2131)
* [OCPBUGS-34404](https://issues.redhat.com/browse/OCPBUGS-34404): [release-4.15] dns: fix deadlock in case of error [#2182](https://github.com/openshift/ovn-kubernetes/pull/2182)
* [OCPBUGS-33294](https://issues.redhat.com/browse/OCPBUGS-33294): Reuse node-subnet from cache if exists [#2163](https://github.com/openshift/ovn-kubernetes/pull/2163)
* [OCPBUGS-33960](https://issues.redhat.com/browse/OCPBUGS-33960): Egressip garp fix 4.15 [#2175](https://github.com/openshift/ovn-kubernetes/pull/2175)
* [OCPBUGS-30899](https://issues.redhat.com/browse/OCPBUGS-30899): use a forked version of j-keck/arping that fixes a threading issue [#2105](https://github.com/openshift/ovn-kubernetes/pull/2105)
* [OCPBUGS-32426](https://issues.redhat.com/browse/OCPBUGS-32426): [release-4.15] Improves service iptables efficiency on start up [#2156](https://github.com/openshift/ovn-kubernetes/pull/2156)
* [Release 4.15] OCPBUGS-32986: Bump OVS [#2147](https://github.com/openshift/ovn-kubernetes/pull/2147)
* [OCPBUGS-27852](https://issues.redhat.com/browse/OCPBUGS-27852): [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2025](https://github.com/openshift/ovn-kubernetes/pull/2025)
* [OCPBUGS-29316](https://issues.redhat.com/browse/OCPBUGS-29316): [release-4.15] Ignore missing live migratable pod annotation on AddNode [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065)
* [OCPBUGS-32202](https://issues.redhat.com/browse/OCPBUGS-32202): [release-4.15] Bump OVN to 23.09.0-139 [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121)
* [OCPBUGS-33020](https://issues.redhat.com/browse/OCPBUGS-33020): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2141](https://github.com/openshift/ovn-kubernetes/pull/2141)
* [OCPBUGS-32154](https://issues.redhat.com/browse/OCPBUGS-32154): Custom v4 and v6 transit switch subnets while creating kind cluster [#2094](https://github.com/openshift/ovn-kubernetes/pull/2094)
* [OCPBUGS-31081](https://issues.redhat.com/browse/OCPBUGS-31081): Periodically check the ovnkube-node certificate is not expired [#2099](https://github.com/openshift/ovn-kubernetes/pull/2099)
* [OCPBUGS-31033](https://issues.redhat.com/browse/OCPBUGS-31033): Remove OVN topology version reporting/detection [#2098](https://github.com/openshift/ovn-kubernetes/pull/2098)
* [OCPBUGS-31500](https://issues.redhat.com/browse/OCPBUGS-31500), [OCPBUGS-31501](https://issues.redhat.com/browse/OCPBUGS-31501): EIP multi NIC IPv6 support and default route with next hop [#2103](https://github.com/openshift/ovn-kubernetes/pull/2103)
* [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050)
* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [OCPBUGS-27255](https://issues.redhat.com/browse/OCPBUGS-27255): Ensure session affinity cleanup on backend removal [#2020](https://github.com/openshift/ovn-kubernetes/pull/2020)
* [OCPBUGS-25938](https://issues.redhat.com/browse/OCPBUGS-25938): CARRY: Updates owners and adds Surya [#2005](https://github.com/openshift/ovn-kubernetes/pull/2005)
* [OCPBUGS-25395](https://issues.redhat.com/browse/OCPBUGS-25395): [release-4.15] Update namespace-owned port group (that used to be managed by multicast) [#1998](https://github.com/openshift/ovn-kubernetes/pull/1998)
* [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* [OCPBUGS-25700](https://issues.redhat.com/browse/OCPBUGS-25700), [OCPBUGS-25701](https://issues.redhat.com/browse/OCPBUGS-25701): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1994](https://github.com/openshift/ovn-kubernetes/pull/1994)
* [OCPBUGS-24610](https://issues.redhat.com/browse/OCPBUGS-24610): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1963](https://github.com/openshift/ovn-kubernetes/pull/1963)
* [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976)
* [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965)
* [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962)
* [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958)
* [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952)
* [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702)
* [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884)
* [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931)
* [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923)
* [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919)
* [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917)
* [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911)
* [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907)
* [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887)
* [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895)
* Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897)
* [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883)
* [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/590797356c889f8c73a664b05ec9298219e00cfe...4b26ee518792233cb47f495064ac28789dcca2ba)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5)

* [OCPBUGS-36096](https://issues.redhat.com/browse/OCPBUGS-36096): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#89](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/89)
* [OCPBUGS-33622](https://issues.redhat.com/browse/OCPBUGS-33622): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 [#80](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/80)
* [OCPBUGS-25978](https://issues.redhat.com/browse/OCPBUGS-25978): Rebase with upstream: Fix snyk code issue: Path Traversal [#71](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/71)
* Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#66](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/66)
* [MULTIARCH-4027](https://issues.redhat.com/browse/MULTIARCH-4027): Rebase with upstream: Kubernetes Improper Input Validation vulnerability [#65](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/65)
* [MULTIARCH-4022](https://issues.redhat.com/browse/MULTIARCH-4022): Rebase with upstream: v0.5.1 changes [#63](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/63)
* [MULTIARCH-3987](https://issues.redhat.com/browse/MULTIARCH-3987): synk: ignore vendor dir [#57](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/57)
* Rebase with upstream: v0.5.0 changes [#56](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/56)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/49)
* Updating ose-powervs-block-csi-driver images to be consistent with ART [#47](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/47)
* cherry-pick: Improve delete device failure logs in driver node [#46](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/46)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/988f7109b4493f62cb13187bc190eae60c77d1e7...38bee567a703d3d5ab2ca6e1e047eea8e799c3c5)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951)

* [OCPBUGS-25714](https://issues.redhat.com/browse/OCPBUGS-25714): snyk: ignore vendor dir [#59](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/59)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#56](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/56)
* UPSTREAM <drop>: OCPBUGS-23628: SAST Scan detected vulnerability in go.uber.org/zap [#52](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/52)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#51](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/51)
* [OCPBUGS-22628](https://issues.redhat.com/browse/OCPBUGS-22628): Bump otelhttp to >= v0.44.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/49)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#47](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/47)
* Update OWNERS add yussufsh [#43](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/43)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/39)
* Updating ose-powervs-block-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/38)
* Update the powervs-csi-node to use nodeSelector for ppc64le [#37](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/37)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7436369afce33811e543b13fcbea8d1e1ff65502...a3729dcb75a7da8c9ee7466da5de07e2f1fe5951)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/1d6a7ed991427b1c8048b0b44b706228e5c2a001)

* [OCPBUGS-36106](https://issues.redhat.com/browse/OCPBUGS-36106): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 [#74](https://github.com/openshift/cloud-provider-powervs/pull/74)
* [OCPBUGS-22629](https://issues.redhat.com/browse/OCPBUGS-22629): Bump otelhttp to >= v0.44.0 [#58](https://github.com/openshift/cloud-provider-powervs/pull/58)
* [OCPBUGS-24170](https://issues.redhat.com/browse/OCPBUGS-24170): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-powervs/pull/61)
* [MULTIARCH-4036](https://issues.redhat.com/browse/MULTIARCH-4036): Manual rebase of upstream release 1.28 on 28-11-2023 [#60](https://github.com/openshift/cloud-provider-powervs/pull/60)
* [MULTIARCH-3989](https://issues.redhat.com/browse/MULTIARCH-3989): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#50](https://github.com/openshift/cloud-provider-powervs/pull/50)
* [MULTIARCH-3997](https://issues.redhat.com/browse/MULTIARCH-3997): Support to use service instance name in config [#49](https://github.com/openshift/cloud-provider-powervs/pull/49)
* [OCPBUGS-21763](https://issues.redhat.com/browse/OCPBUGS-21763): CVE-2023-39325 - Update net dependencies - 4.15 [#44](https://github.com/openshift/cloud-provider-powervs/pull/44)
* [OCPBUGS-19272](https://issues.redhat.com/browse/OCPBUGS-19272): Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-powervs/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/19cf1d3f4985a22e9777aad16531a382c4feed45...1d6a7ed991427b1c8048b0b44b706228e5c2a001)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/4121cfc4304dcbb698993a388368f4025ab9c24a)

* [OCPBUGS-41977](https://issues.redhat.com/browse/OCPBUGS-41977): Update go.mod to fix CVE - 4.15 [#85](https://github.com/openshift/machine-api-provider-powervs/pull/85)
* [OCPBUGS-26555](https://issues.redhat.com/browse/OCPBUGS-26555): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#72](https://github.com/openshift/machine-api-provider-powervs/pull/72)
* [OCPBUGS-24089](https://issues.redhat.com/browse/OCPBUGS-24089): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#66](https://github.com/openshift/machine-api-provider-powervs/pull/66)
* NO-ISSUE: snyk code scan exclude vendor directory [#60](https://github.com/openshift/machine-api-provider-powervs/pull/60)
* Fix nil nextURL [#59](https://github.com/openshift/machine-api-provider-powervs/pull/59)
* [OCPBUGS-21878](https://issues.redhat.com/browse/OCPBUGS-21878): CVE-2023-44487 - Bump golang.org/x/net to v0.17.0 - 4.15 [#53](https://github.com/openshift/machine-api-provider-powervs/pull/53)
* Update dependencies and use k8 1.28 [#52](https://github.com/openshift/machine-api-provider-powervs/pull/52)
* [OCPBUGS-19144](https://issues.redhat.com/browse/OCPBUGS-19144): Updating ose-powervs-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-powervs/pull/51)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/55b16c1553b9f08fa237cbd650102f440cdb0fbc...4121cfc4304dcbb698993a388368f4025ab9c24a)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)

* [OCPBUGS-18854](https://issues.redhat.com/browse/OCPBUGS-18854): Updating prom-label-proxy images to be consistent with ART [#357](https://github.com/openshift/prom-label-proxy/pull/357)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)


### [prometheus](https://github.com/openshift/prometheus/tree/6828e4464c45f239a89c7965233c2fef49c6b1fb)

* [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186)
* [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185)
* Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181)
* Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180)
* Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179)
* [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173)
* update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172)
* Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169)
* [Full changelog](https://github.com/openshift/prometheus/compare/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd...6828e4464c45f239a89c7965233c2fef49c6b1fb)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/870ade52a6097bc55cec29c1a9cc028967c5d23c)

* [OCPBUGS-21771](https://issues.redhat.com/browse/OCPBUGS-21771): Bump golang.org/x/net to v0.17.0 [#79](https://github.com/openshift/prometheus-alertmanager/pull/79)
* Bump openshift/prometheus-alertmanager to v0.26.0 [#78](https://github.com/openshift/prometheus-alertmanager/pull/78)
* update OWNERS file [#77](https://github.com/openshift/prometheus-alertmanager/pull/77)
* Bump v0.26.0 [#76](https://github.com/openshift/prometheus-alertmanager/pull/76)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-alertmanager images to be consistent with ART [#75](https://github.com/openshift/prometheus-alertmanager/pull/75)
* [OCPBUGS-18250](https://issues.redhat.com/browse/OCPBUGS-18250): Update alertmanager to 0.25.1 [#74](https://github.com/openshift/prometheus-alertmanager/pull/74)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...870ade52a6097bc55cec29c1a9cc028967c5d23c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/902436ac6a8eec8f2f3f8b91f519a3d319924833)

* [OCPBUGS-38400](https://issues.redhat.com/browse/OCPBUGS-38400): feat: sync proxy settings in Alertmanager configuration [#300](https://github.com/openshift/prometheus-operator/pull/300)
* [OCPBUGS-36719](https://issues.redhat.com/browse/OCPBUGS-36719): add proxyURL validation for smon,pmon and probe [#298](https://github.com/openshift/prometheus-operator/pull/298)
* [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276)
* [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263)
* [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260)
* [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258)
* [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259)
* [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256)
* [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255)
* [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246)
* update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245)
* [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242)
* [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244)
* [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243)
* : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a4b845a7ae4e1ffb62eae963406481f1c3456bfe...902436ac6a8eec8f2f3f8b91f519a3d319924833)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/aed837c322b6eb54d88956acada07b5b390b5c25)

* [MON-3502](https://issues.redhat.com/browse/MON-3502): [bot] Bump openshift/node_exporter to v1.7.0 [#139](https://github.com/openshift/node_exporter/pull/139)
* [OCPBUGS-21635](https://issues.redhat.com/browse/OCPBUGS-21635): upgrade golang.org/x/net v0.17.0 [#133](https://github.com/openshift/node_exporter/pull/133)
* update OWNERS file [#132](https://github.com/openshift/node_exporter/pull/132)
* [OCPBUGS-18850](https://issues.redhat.com/browse/OCPBUGS-18850): Updating golang-github-prometheus-node_exporter images to be consistent with ART [#131](https://github.com/openshift/node_exporter/pull/131)
* [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...aed837c322b6eb54d88956acada07b5b390b5c25)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c5cc7a73705e4086759e2a36811b055b7716def4)

* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include ingress's namespace in ingress without class metric [#35](https://github.com/openshift/route-controller-manager/pull/35)
* go.mod: remove replaces [#33](https://github.com/openshift/route-controller-manager/pull/33)
* [OCPBUGS-21823](https://issues.redhat.com/browse/OCPBUGS-21823): bump(k8s,openshift) to address CVE-2023-44487 [#32](https://github.com/openshift/route-controller-manager/pull/32)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#31](https://github.com/openshift/route-controller-manager/pull/31)
* [OCPBUGS-19202](https://issues.redhat.com/browse/OCPBUGS-19202): Updating ose-route-controller-manager images to be consistent with ART [#30](https://github.com/openshift/route-controller-manager/pull/30)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e...c5cc7a73705e4086759e2a36811b055b7716def4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/19f312e96bb4e5b7da9f61ea4cab202b227a60c6)

* [OCPBUGS-34797](https://issues.redhat.com/browse/OCPBUGS-34797): set required-scc for openshift workloads [#243](https://github.com/openshift/service-ca-operator/pull/243)
* [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226)
* [API-1673](https://issues.redhat.com/browse/API-1673): Add description annotations to service CA secret and configmap [#225](https://github.com/openshift/service-ca-operator/pull/225)
* add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220)
* [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223)
* [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221)
* [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/3c3f82f7112ee4b5656e5c554f9887acdf881175...19f312e96bb4e5b7da9f61ea4cab202b227a60c6)


### [telemeter](https://github.com/openshift/telemeter/tree/14489f7dc656175e11a3ef962fcbcd113b3651a9)

* [OCPBUGS-34831](https://issues.redhat.com/browse/OCPBUGS-34831): fix issuer check during JWT authentication for 4.15 [#538](https://github.com/openshift/telemeter/pull/538)
* : OCPBUGS-35076: Release Fix CVE go-jose [#542](https://github.com/openshift/telemeter/pull/542)
* [OCPBUGS-32890](https://issues.redhat.com/browse/OCPBUGS-32890): CVE-2024-28180 bump go-jose to v3.0.3 [#531](https://github.com/openshift/telemeter/pull/531)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515)
* [RHOBS-956](https://issues.redhat.com/browse/RHOBS-956): Rename subscription_labels to ocm_subscription [#495](https://github.com/openshift/telemeter/pull/495)
* [OCPBUGS-22744](https://issues.redhat.com/browse/OCPBUGS-22744): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#493](https://github.com/openshift/telemeter/pull/493)
* rhelemeter: Parse org and cn with regex [#492](https://github.com/openshift/telemeter/pull/492)
* rhelemeter: Validation of incoming metrics [#491](https://github.com/openshift/telemeter/pull/491)
* add `machine424` and `rexagod`  to OWNERS [#478](https://github.com/openshift/telemeter/pull/478)
* Bump golang 1.20 [#490](https://github.com/openshift/telemeter/pull/490)
* [OCPBUGS-21636](https://issues.redhat.com/browse/OCPBUGS-21636): Bump golang.org/x/net to v0.17.0 [#483](https://github.com/openshift/telemeter/pull/483)
* Server: Add support for shipping traces to an otel collector [#482](https://github.com/openshift/telemeter/pull/482)
* rhelemeter: support client info file in jsonnet [#481](https://github.com/openshift/telemeter/pull/481)
* [OCPBUGS-19248](https://issues.redhat.com/browse/OCPBUGS-19248): Updating telemeter images to be consistent with ART [#480](https://github.com/openshift/telemeter/pull/480)
* Fix: handle authorization server 403 responses [#479](https://github.com/openshift/telemeter/pull/479)
* [RHOBS-870](https://issues.redhat.com/browse/RHOBS-870): Improve logging [#477](https://github.com/openshift/telemeter/pull/477)
* [RHOBS-855](https://issues.redhat.com/browse/RHOBS-855): rhelemeter: Read client info/data from request [#476](https://github.com/openshift/telemeter/pull/476)
* [Full changelog](https://github.com/openshift/telemeter/compare/1f7268163afc74f9f3c1ff89d8c0149760694e6c...14489f7dc656175e11a3ef962fcbcd113b3651a9)


### [tests](https://github.com/openshift/origin/tree/7db90dc798988246923225f0af9e8b25fa01902d)

* [OCPBUGS-38086](https://issues.redhat.com/browse/OCPBUGS-38086): vertical scaling test should not rely on CPMS replicas [#28985](https://github.com/openshift/origin/pull/28985)
* [OCPBUGS-39136](https://issues.redhat.com/browse/OCPBUGS-39136): Bump timeout for the pod-network-service endpoints check [#29053](https://github.com/openshift/origin/pull/29053)
* [OCPBUGS-38787](https://issues.redhat.com/browse/OCPBUGS-38787): [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28994](https://github.com/openshift/origin/pull/28994)
* [OCPBUGS-36264](https://issues.redhat.com/browse/OCPBUGS-36264): add Proxy config [#28912](https://github.com/openshift/origin/pull/28912)
* [OCPBUGS-37630](https://issues.redhat.com/browse/OCPBUGS-37630): remove unused in-cluster monitoring code [#28956](https://github.com/openshift/origin/pull/28956)
* #28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary [#28898](https://github.com/openshift/origin/pull/28898)
* [OCPBUGS-36724](https://issues.redhat.com/browse/OCPBUGS-36724): Removes dependency on samples operator images [#28927](https://github.com/openshift/origin/pull/28927)
* [OCPBUGS-36319](https://issues.redhat.com/browse/OCPBUGS-36319): Only look for thanos connections to platform monitoring stack [#28915](https://github.com/openshift/origin/pull/28915)
* [OCPBUGS-34949](https://issues.redhat.com/browse/OCPBUGS-34949): test/extended: skip etcd leader change check on hypershift [#28919](https://github.com/openshift/origin/pull/28919)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add test for UpgradeValidation contention [#28820](https://github.com/openshift/origin/pull/28820)
* [OCPBUGS-33368](https://issues.redhat.com/browse/OCPBUGS-33368): [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs [#28821](https://github.com/openshift/origin/pull/28821)
* #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28791](https://github.com/openshift/origin/pull/28791)
* [OCPBUGS-26520](https://issues.redhat.com/browse/OCPBUGS-26520): Kuryr: Ignore Upgradeable=False on operators tests [#28512](https://github.com/openshift/origin/pull/28512)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#28780](https://github.com/openshift/origin/pull/28780)
* [OCPBUGS-33541](https://issues.redhat.com/browse/OCPBUGS-33541): Adjust the method of get the apiServer (release-4.15) [#28762](https://github.com/openshift/origin/pull/28762)
* [OCPBUGS-33473](https://issues.redhat.com/browse/OCPBUGS-33473): [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs [#28666](https://github.com/openshift/origin/pull/28666)
* : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test [#28724](https://github.com/openshift/origin/pull/28724)
* [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Use centos7 tag instead of latest for cmd images tests [#28688](https://github.com/openshift/origin/pull/28688)
* [OCPBUGS-30892](https://issues.redhat.com/browse/OCPBUGS-30892): fix panic on non-standard node-role labels [#28656](https://github.com/openshift/origin/pull/28656)
* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637)
* [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633)
* [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610)
* [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545)
* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28549](https://github.com/openshift/origin/pull/28549)
* [OCPBUGS-27348](https://issues.redhat.com/browse/OCPBUGS-27348): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28531](https://github.com/openshift/origin/pull/28531)
* fix jira components to match actual jira components [#28455](https://github.com/openshift/origin/pull/28455)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28533](https://github.com/openshift/origin/pull/28533)
* [OCPBUGS-27217](https://issues.redhat.com/browse/OCPBUGS-27217): [4.15] Live migration suite e2e [#28524](https://github.com/openshift/origin/pull/28524)
* [OCPBUGS-26043](https://issues.redhat.com/browse/OCPBUGS-26043): Adding test case for when exceed openshift.io/image-tags will ban to … [#28492](https://github.com/openshift/origin/pull/28492)
* [OCPBUGS-25724](https://issues.redhat.com/browse/OCPBUGS-25724): Cherrypick Ruby 3.0 ImageStream Fix [#28483](https://github.com/openshift/origin/pull/28483)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28520](https://github.com/openshift/origin/pull/28520)
* [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504)
* [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506)
* [OCPBUGS-24583](https://issues.redhat.com/browse/OCPBUGS-24583): push violation regression check into the default requirement result [#28433](https://github.com/openshift/origin/pull/28433)
* OWNER_ALIASES: update CoreOS team leads [#28447](https://github.com/openshift/origin/pull/28447)
* NOJIRA: collect certificate data: use SkipHashed option [#28443](https://github.com/openshift/origin/pull/28443)
* NO-JIRA: Increase cluster-capi-operator watch count take2 [#28424](https://github.com/openshift/origin/pull/28424)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28436](https://github.com/openshift/origin/pull/28436)
* NO-JIRA: Add test case for namespaced filename in oc process [#28440](https://github.com/openshift/origin/pull/28440)
* [API-1524](https://issues.redhat.com/browse/API-1524): ignore stale condition challenge events [#28438](https://github.com/openshift/origin/pull/28438)
* [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Ignore azure interaction errors since they are not fatal for our usage [#28420](https://github.com/openshift/origin/pull/28420)
* [TRT-1347](https://issues.redhat.com/browse/TRT-1347): Add ability to indicate a monitor test was skipped [#28425](https://github.com/openshift/origin/pull/28425)
* NO JIRA: update cert data [#28437](https://github.com/openshift/origin/pull/28437)
* [OTA-362](https://issues.redhat.com/browse/OTA-362): pkg/monitortests/clusterversionoperator: Fatal unless Available=False in allow-list [#27231](https://github.com/openshift/origin/pull/27231)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update ETCD storage data for k8s 1.29 [#28435](https://github.com/openshift/origin/pull/28435)
* [OCPBUGS-24290](https://issues.redhat.com/browse/OCPBUGS-24290): cert metadata: generate jsons and markdown for missing metadata viola [#28432](https://github.com/openshift/origin/pull/28432)
* NO-JIRA: test/e2e/upgrade/monitor: --abort-at=100 requires a complete update [#28402](https://github.com/openshift/origin/pull/28402)
* eliminate the closed channel race in pod_log_streamer [#28426](https://github.com/openshift/origin/pull/28426)
* [OSASINFRA-3291](https://issues.redhat.com/browse/OSASINFRA-3291): Remove Kuryr bits [#28397](https://github.com/openshift/origin/pull/28397)
* [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): Increase cluster-capi-operator watch count [#28422](https://github.com/openshift/origin/pull/28422)
* [TRT-1329](https://issues.redhat.com/browse/TRT-1329): Refactor pathological events framework [#28399](https://github.com/openshift/origin/pull/28399)
* [SO-117](https://issues.redhat.com/browse/SO-117): Removing Ruby 2.7 UBI7-8 tests [#28418](https://github.com/openshift/origin/pull/28418)
* trt-1367: Get JobType After Collection Ends [#28415](https://github.com/openshift/origin/pull/28415)
* [TRT-1235](https://issues.redhat.com/browse/TRT-1235): Add ability to specify alerts that should never fire [#28411](https://github.com/openshift/origin/pull/28411)
* [TRT-1362](https://issues.redhat.com/browse/TRT-1362): Update disruption/alert test data and fix unit test [#28409](https://github.com/openshift/origin/pull/28409)
* make it slightly easy to produce markdown with table of contents [#28407](https://github.com/openshift/origin/pull/28407)
* update the TLS ownership files [#28394](https://github.com/openshift/origin/pull/28394)
* update cert inspect to skip the rest of proxy-CAs [#28406](https://github.com/openshift/origin/pull/28406)
* [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): test: ignore deprecation warnings in command outputs [#28404](https://github.com/openshift/origin/pull/28404)
* collect certificate data: rewrite configmap/secret names [#28405](https://github.com/openshift/origin/pull/28405)
* Certs 11 fix certs after break [#28395](https://github.com/openshift/origin/pull/28395)
* ignore stale condition challenge events [#28204](https://github.com/openshift/origin/pull/28204)
* [TRT-1274](https://issues.redhat.com/browse/TRT-1274): get azure disk metrics and create relevant intervals [#28375](https://github.com/openshift/origin/pull/28375)
* Revert "TRT-1339: Revert #28233 "ignore repeated TopologyAwareHintsDisabled events"" [#28386](https://github.com/openshift/origin/pull/28386)
* [OCPBUGS-23079](https://issues.redhat.com/browse/OCPBUGS-23079): fix: increase watch count for KubeControllerManagerOperator [#28388](https://github.com/openshift/origin/pull/28388)
* [OCPBUGS-23102](https://issues.redhat.com/browse/OCPBUGS-23102): Revert "[sig-instrumentation] tests fail due to JSON parsing error." [#28389](https://github.com/openshift/origin/pull/28389)
* [OCPBUGS-23084](https://issues.redhat.com/browse/OCPBUGS-23084): expect to not see "git clone" and not just "clone" during a test [#28352](https://github.com/openshift/origin/pull/28352)
* [TRT-1354](https://issues.redhat.com/browse/TRT-1354): Add support for intervals to have row differentiators [#28376](https://github.com/openshift/origin/pull/28376)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): [sig-instrumentation] tests fail due to JSON parsing error. [#28320](https://github.com/openshift/origin/pull/28320)
* "TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest" [#28372](https://github.com/openshift/origin/pull/28372)
* trt-1340: update run-upgrade to use ginkgorunsuiteoptions [#28380](https://github.com/openshift/origin/pull/28380)
* [TRT-1339](https://issues.redhat.com/browse/TRT-1339): Revert #28233 "ignore repeated TopologyAwareHintsDisabled events" [#28381](https://github.com/openshift/origin/pull/28381)
* trt-1344: remove msg assertion [#28379](https://github.com/openshift/origin/pull/28379)
* Add test which verifies every certificate has necessary annotations [#28305](https://github.com/openshift/origin/pull/28305)
* [OCPBUGS-19527](https://issues.redhat.com/browse/OCPBUGS-19527): retry Prometheus client creation [#28323](https://github.com/openshift/origin/pull/28323)
* [OCPBUGS-20479](https://issues.redhat.com/browse/OCPBUGS-20479): Add pod sandbox failures to e2e charts [#28366](https://github.com/openshift/origin/pull/28366)
* skip revisioned certificates in raw info [#28370](https://github.com/openshift/origin/pull/28370)
* [TRT-1340](https://issues.redhat.com/browse/TRT-1340): Increase cmd support for ExactMonitorTests and DisableMonitorTests [#28371](https://github.com/openshift/origin/pull/28371)
* [OCPBUGS-22703](https://issues.redhat.com/browse/OCPBUGS-22703): tolerate AWS edge nodes on monitor tests [#28363](https://github.com/openshift/origin/pull/28363)
* Revert "OCPBUGS-22413: Use Centos 8 Stream mysql image in tests" [#28367](https://github.com/openshift/origin/pull/28367)
* Skip FailedScheduling intervals when masters are in NodeUpdate [#28358](https://github.com/openshift/origin/pull/28358)
* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Use Centos 8 Stream mysql image in tests [#28357](https://github.com/openshift/origin/pull/28357)
* Allow the unknown alerts test to fail as it looks stable [#28345](https://github.com/openshift/origin/pull/28345)
* add hack/update-tls-ownership.sh [#28359](https://github.com/openshift/origin/pull/28359)
* Drop not-used pulledInvalidImages method [#28330](https://github.com/openshift/origin/pull/28330)
* start adding raw tls info [#28334](https://github.com/openshift/origin/pull/28334)
* Restore APIServer graceful shutdown windows [#28354](https://github.com/openshift/origin/pull/28354)
* Fix intervals mistakenly showing mass node NotReady [#28351](https://github.com/openshift/origin/pull/28351)
* Remove timelines command reprocessing intervals [#28348](https://github.com/openshift/origin/pull/28348)
* [OCPBUGS-22358](https://issues.redhat.com/browse/OCPBUGS-22358): fix: increase upper bounds for samples operator [#28353](https://github.com/openshift/origin/pull/28353)
* put back previous Interval Slice algorithm [#28344](https://github.com/openshift/origin/pull/28344)
* [OCPBUGS-22276](https://issues.redhat.com/browse/OCPBUGS-22276): Remove all docker.io images due to access denied [#28347](https://github.com/openshift/origin/pull/28347)
* Restore Node NotReady intervals [#28349](https://github.com/openshift/origin/pull/28349)
* trt-1320: update trt approvers [#28343](https://github.com/openshift/origin/pull/28343)
* Port remaining clusteroperator monitor intervals to structured [#28341](https://github.com/openshift/origin/pull/28341)
* Improvements and Additions to Alert Testing Stack [#28332](https://github.com/openshift/origin/pull/28332)
* Automated - Update synthetic test data [#28237](https://github.com/openshift/origin/pull/28237)
* prune the system CAs from proxy-ca in rawTLSInfo json [#28336](https://github.com/openshift/origin/pull/28336)
* add test tracking raw cert data [#28321](https://github.com/openshift/origin/pull/28321)
* [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Require http 1.1 or earlier when using curl [#28301](https://github.com/openshift/origin/pull/28301)
* Port Node and Pod State to Structured Intervals [#28299](https://github.com/openshift/origin/pull/28299)
* Extract the cluster operator name from Down/Degraded Alerts [#28331](https://github.com/openshift/origin/pull/28331)
* fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities [#28329](https://github.com/openshift/origin/pull/28329)
* Remove some redundant monitor tests [#28326](https://github.com/openshift/origin/pull/28326)
* [OCPVE-723](https://issues.redhat.com/browse/OCPVE-723): Add optional olm fixes [#28302](https://github.com/openshift/origin/pull/28302)
* Add debug info for interval counts and times [#28311](https://github.com/openshift/origin/pull/28311)
* [OCPBUGS-20205](https://issues.redhat.com/browse/OCPBUGS-20205): feat: added support for ImageRegistry capability [#28307](https://github.com/openshift/origin/pull/28307)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "OCPBUGS-13366: ignore repeated TopologyAwareHintsDisabled events" [#28233](https://github.com/openshift/origin/pull/28233)
* pkg/monitortests/clusterversionoperator/legacycvomonitortests: Structured condition types [#28306](https://github.com/openshift/origin/pull/28306)
* Bump watch requests for cluster-baremetal-operator [#28324](https://github.com/openshift/origin/pull/28324)
* test/extended/images: update OWNERS [#28322](https://github.com/openshift/origin/pull/28322)
* hs, kubevirt: Wait node readiness before migration [#28312](https://github.com/openshift/origin/pull/28312)
* fix for OCP-11594 to skipped on disconnected env [#28316](https://github.com/openshift/origin/pull/28316)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase total upgrade time on OVN platforms" [#28315](https://github.com/openshift/origin/pull/28315)
* trt-1271: add risk analysis for monitor junit suites [#28309](https://github.com/openshift/origin/pull/28309)
* Revert #28295 "Automating test \"check the quota after import-image with --all option\" in upstrem" [#28313](https://github.com/openshift/origin/pull/28313)
* test/extended: Consolidate hard-coded local image registry dependencies [#28308](https://github.com/openshift/origin/pull/28308)
* Limit intervals to the current phase (addresses loki upload problems) [#28294](https://github.com/openshift/origin/pull/28294)
* Fix bug with disable-monitor [#28293](https://github.com/openshift/origin/pull/28293)
* Remove bug-related annotations [#28298](https://github.com/openshift/origin/pull/28298)
* [OPNET-330](https://issues.redhat.com/browse/OPNET-330): fix DualStackIPv6Primary [#28292](https://github.com/openshift/origin/pull/28292)
* Automating test "check the quota after import-image with --all option" in upstrem [#28295](https://github.com/openshift/origin/pull/28295)
* Properly default --from-repository in run-monitor [#28285](https://github.com/openshift/origin/pull/28285)
* [OCPBUGS-19909](https://issues.redhat.com/browse/OCPBUGS-19909): Updating parameters for build timing PushImage test [#28288](https://github.com/openshift/origin/pull/28288)
* make it possible to select which monitor tests to run [#28215](https://github.com/openshift/origin/pull/28215)
* Revert "Disable EgressIP test temporarily due to OVN-K bug" [#28283](https://github.com/openshift/origin/pull/28283)
* Port the clusteroperator intervals to new structured format [#28262](https://github.com/openshift/origin/pull/28262)
* Revert "Force using mirrored images in disruption tests" [#28286](https://github.com/openshift/origin/pull/28286)
* Bump openshift/kubernetes to get vSphere fix [#28278](https://github.com/openshift/origin/pull/28278)
* Force using mirrored images in disruption tests [#28258](https://github.com/openshift/origin/pull/28258)
* kubevirt: Add live migration tests [#27980](https://github.com/openshift/origin/pull/27980)
* some monitor tests only function on disruptive tests [#28251](https://github.com/openshift/origin/pull/28251)
* wait for the service to have endpoints before starting pollers [#28242](https://github.com/openshift/origin/pull/28242)
* fix PR 28224 [#28238](https://github.com/openshift/origin/pull/28238)
* [OCPBUGS-18141](https://issues.redhat.com/browse/OCPBUGS-18141): retry query on MetricsAvailableAfterUpgradeTest setup [#28228](https://github.com/openshift/origin/pull/28228)
* Revert "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28274](https://github.com/openshift/origin/pull/28274)
* [OCPBUGS-19293](https://issues.redhat.com/browse/OCPBUGS-19293): Updating openshift-enterprise-tests images to be consistent with ART [#28264](https://github.com/openshift/origin/pull/28264)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): rteval [#28261](https://github.com/openshift/origin/pull/28261)
* add pod log streaming to monitor for etcd so we see all intervals [#28243](https://github.com/openshift/origin/pull/28243)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28231](https://github.com/openshift/origin/pull/28231)
* [AUTH-365](https://issues.redhat.com/browse/AUTH-365): add PodSecurityViolation to watched alerts [#28226](https://github.com/openshift/origin/pull/28226)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): remove exception for MultipleDefaultStorageClasses [#28042](https://github.com/openshift/origin/pull/28042)
* remove unnecessary file from cmd folder [#27979](https://github.com/openshift/origin/pull/27979)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28 [#28097](https://github.com/openshift/origin/pull/28097)
* Revert "Improvements and fixes for Loki intervals uploader" [#28268](https://github.com/openshift/origin/pull/28268)
* Adding leader election information to timeline [#28225](https://github.com/openshift/origin/pull/28225)
* Improvements and fixes for Loki intervals uploader [#28053](https://github.com/openshift/origin/pull/28053)
* Bring in updates k8s to disable networking test [#28256](https://github.com/openshift/origin/pull/28256)
* When --from-repository use built-in tests only [#28253](https://github.com/openshift/origin/pull/28253)
* [HyperShift/KubeVirt] Raise wait time between pod exec attempts [#28249](https://github.com/openshift/origin/pull/28249)
* Revert fake image injections for k8s 1.28 [#28250](https://github.com/openshift/origin/pull/28250)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28248](https://github.com/openshift/origin/pull/28248)
* [OCP-66086](https://issues.redhat.com/browse/OCP-66086): Automate PSAP NTO Prevent from stalld continually restarting [#28157](https://github.com/openshift/origin/pull/28157)
* Bug OCPBUGS-18718 Remove duplicate connection type from disruption name [#28245](https://github.com/openshift/origin/pull/28245)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): fix: add rteval to the test image [#28220](https://github.com/openshift/origin/pull/28220)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28200](https://github.com/openshift/origin/pull/28200)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Disable NetworkPolicyStatus tests [#28177](https://github.com/openshift/origin/pull/28177)
* [Full changelog](https://github.com/openshift/origin/compare/c2c5a8e5706c61d0adfa613deaea3a3af2ed9cc0...7db90dc798988246923225f0af9e8b25fa01902d)


### [thanos](https://github.com/openshift/thanos/tree/66161ad4e03e5593f5a3a33aaaffbcd41555d62a)

* [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131)
* Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129)
* [OCPBUGS-21630](https://issues.redhat.com/browse/OCPBUGS-21630): Bump golang.org/x/net to v0.17.0 [#123](https://github.com/openshift/thanos/pull/123)
* Bump openshift/thanos to v0.32.4 [#121](https://github.com/openshift/thanos/pull/121)
* [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120)
* [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117)
* Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118)
* update OWNERS file [#119](https://github.com/openshift/thanos/pull/119)
* Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115)
* [Full changelog](https://github.com/openshift/thanos/compare/a26712509e3f9c511926ca9d8bba3e3ea8e95ada...66161ad4e03e5593f5a3a33aaaffbcd41555d62a)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/81ad52ad7bcf37b225bc50a6e6150ca0572057b7)

* [OCPBUGS-37659](https://issues.redhat.com/browse/OCPBUGS-37659): Bump otelgrpc to v0.49.0 [#71](https://github.com/openshift/cloud-provider-vsphere/pull/71)
* [OCPBUGS-24157](https://issues.redhat.com/browse/OCPBUGS-24157): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-vsphere/pull/58)
* [OCPCLOUD-2184](https://issues.redhat.com/browse/OCPCLOUD-2184): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master [#42](https://github.com/openshift/cloud-provider-vsphere/pull/42)
* Update OWNERS [#51](https://github.com/openshift/cloud-provider-vsphere/pull/51)
* [OCPBUGS-19255](https://issues.redhat.com/browse/OCPBUGS-19255): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-vsphere/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/efaed5cdb8c7d4b0b7fe38e203c545278ccfab4d...81ad52ad7bcf37b225bc50a6e6150ca0572057b7)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/5611168658586d68b5a92c77c07304694fc2cc64)

* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#38](https://github.com/openshift/cluster-api-provider-vsphere/pull/38)
* [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35)
* [OCPBUGS-24074](https://issues.redhat.com/browse/OCPBUGS-24074): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#26](https://github.com/openshift/cluster-api-provider-vsphere/pull/26)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#27](https://github.com/openshift/cluster-api-provider-vsphere/pull/27)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Add InternalDNS address to vSphereVM [#19](https://github.com/openshift/cluster-api-provider-vsphere/pull/19)
* [OCPBUGS-22152](https://issues.redhat.com/browse/OCPBUGS-22152): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.3 (ef8d014) into master [#22](https://github.com/openshift/cluster-api-provider-vsphere/pull/22)
* Update OWNERS [#21](https://github.com/openshift/cluster-api-provider-vsphere/pull/21)
* [OCPCLOUD-2219](https://issues.redhat.com/browse/OCPCLOUD-2219): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.1 (2b22dd7) into master [#18](https://github.com/openshift/cluster-api-provider-vsphere/pull/18)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-vsphere-cluster-api-controllers images to be consistent with ART [#17](https://github.com/openshift/cluster-api-provider-vsphere/pull/17)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b5346ad9d07fc212c58ad52cd757fa31da3c5f77...5611168658586d68b5a92c77c07304694fc2cc64)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b15e93bd578484c4bfb1c124fa655c451bbd1ca)

* [OCPBUGS-33604](https://issues.redhat.com/browse/OCPBUGS-33604): FailedPrecondition volume does not appear staged [#118](https://github.com/openshift/vmware-vsphere-csi-driver/pull/118)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [OCPBUGS-24136](https://issues.redhat.com/browse/OCPBUGS-24136): Updating vmware-vsphere-syncer-container image to be consistent with ART [#99](https://github.com/openshift/vmware-vsphere-csi-driver/pull/99)
* [OCPBUGS-24141](https://issues.redhat.com/browse/OCPBUGS-24141): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#100](https://github.com/openshift/vmware-vsphere-csi-driver/pull/100)
* [STOR-1396](https://issues.redhat.com/browse/STOR-1396): Rebase to v3.1.1 for OCP 4.15 [#97](https://github.com/openshift/vmware-vsphere-csi-driver/pull/97)
* [OCPBUGS-16550](https://issues.redhat.com/browse/OCPBUGS-16550): UPSTREAM: 2511: Bump github.com/elazarl/goproxy to fix CVE-2023-37788 [#95](https://github.com/openshift/vmware-vsphere-csi-driver/pull/95)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/vmware-vsphere-csi-driver/pull/89)
* [OCPBUGS-19220](https://issues.redhat.com/browse/OCPBUGS-19220): Updating vmware-vsphere-syncer images to be consistent with ART [#86](https://github.com/openshift/vmware-vsphere-csi-driver/pull/86)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver images to be consistent with ART [#87](https://github.com/openshift/vmware-vsphere-csi-driver/pull/87)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0181d4f650241bc399e071941a561344f182a31d...4b15e93bd578484c4bfb1c124fa655c451bbd1ca)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [OCPBUGS-23342](https://issues.redhat.com/browse/OCPBUGS-23342): Add dummy Progressing condition on blocked driver install [#191](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/191)
* [OCPBUGS-22476](https://issues.redhat.com/browse/OCPBUGS-22476): Explicitly degrade the cluster when conditions are not met [#183](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/183)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#190](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/190)
* [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Implement fallback to configmap when Infra object does not have vCenter [#189](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/189)
* [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Fix vsphere csi controller pods from getting constantly restarted [#187](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/187)
* [OCPBUGS-22639](https://issues.redhat.com/browse/OCPBUGS-22639): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#185](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/185)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#165](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/165)
* [OCPBUGS-22385](https://issues.redhat.com/browse/OCPBUGS-22385): disable http/2 server support in webhook [#179](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/179)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#181](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/181)
* [OCPBUGS-21826](https://issues.redhat.com/browse/OCPBUGS-21826): Warn when managment state is set to values other than Managed [#178](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/178)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#172](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/172)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART [#170](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/170)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5d5105f93e02ba0c4c07890b3db630b11d839abf...e0d46570a06caff3439b410b9c9f75cb383a3d2d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be)

* [OCPBUGS-37760](https://issues.redhat.com/browse/OCPBUGS-37760): Drop event when CheckDefaultDatastore fails [#170](https://github.com/openshift/vsphere-problem-detector/pull/170)
* [OCPBUGS-35732](https://issues.redhat.com/browse/OCPBUGS-35732): Fix missing failure-domains [#161](https://github.com/openshift/vsphere-problem-detector/pull/161)
* [OCPBUGS-25648](https://issues.redhat.com/browse/OCPBUGS-25648): Fix VPD crash when vm is not found [#149](https://github.com/openshift/vsphere-problem-detector/pull/149)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a9c08425f59d37495d655ee16d4fc7fa200a5ea8...15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be)