# 4.15.60

Created: 2025-12-12 01:29:20 +0000 UTC

Image Digest: `sha256:39236e073ff4b62406a472178263fd2220b0f544c3fd26036120b470596fa255`


## Changes from 4.15.28

### Components

* Kubernetes upgraded from 1.28.12 to 1.28.15
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202408100433-0 to 415.92.202512100122-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:afca3c3bc2cd97d93b2179230abb1309301287a2c57a0e50177ec2637bb8cd17`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [abf4fa96](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/abf4fa96550caf09e788b66fc06f1df802768397) `sha256:ad6d5a790fda54201e63ab88baec9afcee83e2a542835c0dd27eae86716140f9`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [be4888d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/be4888d3dc176b9801364981fbb34d831f6d6ffe) `sha256:19e57a16f15062b2c9a19e7c3c6e4235cc21088f77196b28cb181b2e31c9efcc`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:cda017428da27942641237ba19aa4b4df9a841ac65e0c5c9796bf2f4abacd724`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [7043c1cc](https://github.com/openshift/aws-ebs-csi-driver/commit/7043c1cca6e17dd3c90006140f6361cf0e776d69) `sha256:ddefb9d11e49cfc8d45453ce2cf081cd738067c7bd62bd4f334e2839bafd6ac2`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [2a2b9dd1](https://github.com/openshift/csi-operator/commit/2a2b9dd109ba9d4abce11411c96787b21887f929) `sha256:4cbdc38b262d66f3e73ebaba44469ab4043f19a43486cfc4534e1b7b560b74a8`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [13385034](https://github.com/openshift/aws-pod-identity-webhook/commit/13385034ec9a843a6b40f8b3aec9966ada785115) `sha256:8f5f788a02afbc810ac2d85a1fb4e499264795e2b4e42e1dc51c13d41776bdd2`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [0d799a26](https://github.com/openshift/cloud-provider-azure/commit/0d799a261f70bbdf546d911f5f8b59e2c324bd16) `sha256:40f1bfea39f1cc235acf617ba02b549ae90d16e0521137fc4c8eeb9457b23e54`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [0d799a26](https://github.com/openshift/cloud-provider-azure/commit/0d799a261f70bbdf546d911f5f8b59e2c324bd16) `sha256:b9a6a712f4c342e838a4f7d8f855c4f79d6c5de5b81e358f8cd1b40ffb439cf3`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [44832d2d](https://github.com/openshift/cluster-api-provider-azure/commit/44832d2da09778d7ff4d2413c9e10852f330a55d) `sha256:3445b718fdf44ecc0384681510aa0a1ca66601bd98a35a6c7ce3e03ad4d67e99`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [dcb7e1c7](https://github.com/openshift/azure-disk-csi-driver/commit/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) `sha256:47b9ad92d900e984544e892f541fedabf25d74148fb2a66b44b0f5c186d3e43a`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [160cf624](https://github.com/openshift/azure-disk-csi-driver-operator/commit/160cf624a88f500de7a1f79e6dd9384bb7d17842) `sha256:6b77f3ba052589de5723cf6b3f2dd0995a6fbf32d8c60229823159c083fb8941`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [6864da06](https://github.com/openshift/cloud-network-config-controller/commit/6864da0642026d6004df171539fa9fd5bcb6c2df) `sha256:b79df44694e3040d9dd6062cfaf438a6299a03e4260ad5f34f9796d15a79601e`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [7aaa40eb](https://github.com/openshift/cluster-authentication-operator/commit/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) `sha256:fa4ccaf5cde8f7c41446e32cc993d8ee2fae5dfb5f0a661ce68d8d77fbdc5400`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0849c462](https://github.com/openshift/cluster-bootstrap/commit/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) `sha256:ccbba925732864f6e94d573aed5bdcd0640f955225eb6233e9e46d7ed71f8e35`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [2053e13c](https://github.com/openshift/cluster-api/commit/2053e13cb0fda9188e9b685db83c1e1f492e6efa) `sha256:0dfd6f84e38deffaa18b93a003d2f5d78e13a7e233e4fb05dbf00fabbb515aca`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [203435ef](https://github.com/openshift/cluster-capi-operator/commit/203435ef87a2bed13fc43db893deb8bee1dff97f) `sha256:32dc0b85d94687442bf4bc36359a5a7aaf6fca0563eef9c8aa4649a19be3c84d`
* [cluster-config-api](https://github.com/openshift/api) git [0a58f8c3](https://github.com/openshift/api/commit/0a58f8c30a8c309baaa4aecd05580039b4d3888b) `sha256:b5838003b8feb4c95d3aa8b87f7a95d87a206606468462a9aa0d87f6a125a9b4`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0b4c69fd](https://github.com/openshift/cluster-config-operator/commit/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818) `sha256:d5454885645c7ab02c79e8bb5830c72eacf17ea6b6d80520a87a7a0f0043f6d9`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [65dbb12b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/65dbb12b710b7126f662f5f7f2d8272f9f6868cc) `sha256:15b672bf2c2690e9450c728e675504c0606e1bf28311f5efc6389b39941eda79`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [128d8e08](https://github.com/openshift/cluster-api-operator/commit/128d8e08c48e2002c416e84d0dec816bf5999c7e) `sha256:11af37d47ec91d377f2cfd50a0aa1ece1febe4aa58f06a2a9b639df0b97789f6`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [ee8cf525](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) `sha256:a7631bcae88e311f2851bbb37d5d7a76321538e1707b580d106780f1d3456c43`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [f054dfaf](https://github.com/openshift/cluster-kube-scheduler-operator/commit/f054dfaf189b43b262c11ef7f97038c79592c796) `sha256:afe5c9de660b59392a33fe135476fdbb42af91b2b3311f89c60123d26c1a3e30`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [e76cea5f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/e76cea5f52bd5a125d051c6a0da4127a4dae6700) `sha256:e94ff2b2bc5660ddac1aca805a8b164d65760ab5d6453a399efec5b53e58e563`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a7ba8987](https://github.com/openshift/cluster-olm-operator/commit/a7ba89874970cd10765e1d0753405e32fb357d84) `sha256:db9232a826f484d6d2ef47b5224a6e12b06b8d71beed9e35ec46d24b5ec7d926`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [078c81f6](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/078c81f6e3e39675e8b1edd864e1ddf72472bb73) `sha256:602809845fd880f28888ec0ad2d328586a8fd7787f1a76df4207a70b51ade167`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:7d43be3dc9396b276eaa72135711c3ff9e7d98b30cde8222537ce0cfcdc31546`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc48f315](https://github.com/openshift/cluster-policy-controller/commit/cc48f3152213bfe6e42fdd82f760246e862d208f) `sha256:9f2b44341c38de149a1e5b84cf94f8955743f3167d38a3017d6ee7e36353da2b`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [4c2b89d6](https://github.com/openshift/cluster-storage-operator/commit/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98) `sha256:c2d5c4bb75f3f61ecbf4d622b7136123589af21e0dbe34513c48a94a13aa1528`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [617398f5](https://github.com/openshift/configmap-reload/commit/617398f581faadbad2c7ded993bfa3169a87b6ab) `sha256:208b703c8823fae87b9464abdf890564dc8be348a82b82b1cc6edbc1534de270`
* [coredns](https://github.com/openshift/coredns) git [1326282c](https://github.com/openshift/coredns/commit/1326282c9e158078634be4261b75ded247d233d7) `sha256:2ba41cbed9b06a9582d9f54291786a2fdad4a3c473aae97d43edc2924f953607`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d032dc10](https://github.com/openshift/csi-driver-nfs/commit/d032dc1050b58a965e6bb9f923baef6d3c95538e) `sha256:2cdd15b3d4ea667c4c32decc73623515ec0f9d87c6da65122af0c6e469e8acfb`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:fb6d3bca1673d072fb6005395297ea28c9d3ef9321ddd87ae52972c7ca76188d`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [8d017b7f](https://github.com/openshift/csi-driver-shared-resource-operator/commit/8d017b7f19f0226dfd4fc7933271939c550d180f) `sha256:f5f972a7c6576a8cbf9ddf3855b530a8b3f7ae34c4a49009e5e4ee6df25b507e`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:d0c8569aa993744634f26329b3c935f9b87bde80dbb5b26f8fa5a01b21b79921`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f806f266](https://github.com/openshift/csi-external-attacher/commit/f806f266600fbc0db4d072e4d041fc80e28deee7) `sha256:89d9e925e7f3022c6bd9f6356fb92f95002bc9475e3e03015293820decb6fb06`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [ce5a1a33](https://github.com/openshift/csi-external-provisioner/commit/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) `sha256:ea613e132f20bc75f6eb37c530076c31f00498bba30dc9f821daf59bb57dbcd8`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [3b4236d3](https://github.com/openshift/csi-external-resizer/commit/3b4236d382e4593ca41ecc6f394775be467b1a0d) `sha256:ae17501e06ebff2d587416f102e71bece65fcdb5734c38c4bdb2fc059a992209`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:f8381dd6a8c0f2c3da72a7b7cfbf3460e64d03de41cffa36e3fe3cea31c6e210`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [240bb8c0](https://github.com/openshift/csi-livenessprobe/commit/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) `sha256:9ae6e464bf0c58d60d8fc927612c16f34db35a747fe40e1f8f3bd596cc2f79a8`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9005584e](https://github.com/openshift/csi-node-driver-registrar/commit/9005584ee45c4d3158e383870aafa5d78a03b141) `sha256:47300a0ffaa852a6227b417ac6a4358b762e24a964e3ef9d7fdc81881edd5089`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:32ad7e402295096ecd9691bd8976fecefe8caae055b7aca6866e17d67fb62e0c`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [4f2955c7](https://github.com/openshift/csi-external-snapshotter/commit/4f2955c7c90cd150f9dfae782148d0fa8eba7342) `sha256:624a5060696b74e3f7e822c3dfe0d40a6016a8b344b89c36621b4c25d25d45fa`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7a448c2e](https://github.com/openshift/driver-toolkit/commit/7a448c2ee026c772e293dd344da587493c859f82) `sha256:abb86e7366497e59604744be9b5017675014ecc4c24a7d411111f45326ac93e4`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [f8ec690b](https://github.com/openshift/egress-router-cni/commit/f8ec690bc12a13ec7c9c45f0e3696ad02e143581) `sha256:65afa697b863b17c32747b8c3dcb5910389e374d52b25182b15de1072b3b2117`
* [etcd](https://github.com/openshift/etcd) git [a7005ef1](https://github.com/openshift/etcd/commit/a7005ef1eae85eec6c59411860538169cea182fd) `sha256:b7ff7835d1e00495f1c2398f626c4a7be4b13fa7ee742dddb4f87a39f680ef31`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [fc50272a](https://github.com/openshift/cloud-provider-gcp/commit/fc50272ac32348a96455688c470bf256b1042825) `sha256:79260b063ec631a388a1e728935654e94f0069e521d462a1d0829eabedca085e`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [bad54034](https://github.com/openshift/cluster-api-provider-gcp/commit/bad54034ed075b24ee8962661e78cfbd84a7dd0a) `sha256:aaa6cedfbcfa3bd64b73d2ff1e93e81be16249cf80bdaac51664166c696b54e9`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [856ee3e2](https://github.com/openshift/gcp-pd-csi-driver/commit/856ee3e23802cd341619cc4fc3181cf6ebbbd548) `sha256:9ebed6077b74b4357a9d5eb0095e497a4989b95da904e1d58adf544015791adb`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [3b91ee31](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/3b91ee310c8a7394ceb2d4de6a51dd18a3800312) `sha256:7e01e77762c436c3e7858a342c3985e3c2c2236e038cf77a1c89e60b632abace`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:88c4a3631333b8fca55422f45fcd782b7e09e2b9965dc0972a8f32c987242d4a`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:cbf3171128784107851d00d3f9bf6fa646f02e31e375db3113b385eb132b4250`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [037b59c2](https://github.com/openshift/kube-state-metrics/commit/037b59c265454c599dfb0829a856e14b1ab07896) `sha256:fde46b18a7b8eada707609c319b2b4437c4d3559536850a3d24bb68496699dd3`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [dbaf9ea1](https://github.com/openshift/cloud-provider-kubevirt/commit/dbaf9ea1edd5a953606a80cb45f723c934a73ded) `sha256:facd338649277af35e765561297b14867d915ee4015722549fe0980e01178af7`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [97d87657](https://github.com/openshift/image-customization-controller/commit/97d87657caab4323f82f9d0958e6d30fc8fd1846) `sha256:3fd460121064d61e435761cbe82630fb2790b90a4f757e5994c30af2f32d0899`
* machine-os-content `sha256:fab6d5f8318a9a45d3e987d81616e9c51eee1fc95cfa83003126557a3ec8b81f`
* [multus-cni](https://github.com/openshift/multus-cni) git [05497ad1](https://github.com/openshift/multus-cni/commit/05497ad135c629de9b4ffb0a13fb91d58a335d25) `sha256:3dea9006b94960694cad0ff5e4155935b0f84718de82aea3209f48195c7b8aea`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:74d477bdfa196ec9bdddb5158194c9acb5754bc7af557b7df2611b3035ae70d7`
* [network-tools](https://github.com/openshift/network-tools) git [17536c8d](https://github.com/openshift/network-tools/commit/17536c8dff76d50efb604187ba763020bd084771) `sha256:89c03e910b0ac7bc4fae213f1de356d2e1aff3f2779bf1226667c87ff2d9947d`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [0e158441](https://github.com/openshift/oauth-apiserver/commit/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb) `sha256:833b81debd3bd639fd04493144c3adc40a047517e242b9524c1012780136c3c0`
* [oauth-server](https://github.com/openshift/oauth-server) git [c055dbb9](https://github.com/openshift/oauth-server/commit/c055dbb9a84e04575ade106e9a43cc638a8aeaef) `sha256:5bf405a0014fd1706962b3455c90117decf75e97909c90f2eb3ce135a652901a`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [035d3835](https://github.com/openshift/operator-framework-catalogd/commit/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd) `sha256:94c9d814e85e6bc950d4691548c834bc2192b96efac796a4bfc062a00c104847`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [303b954f](https://github.com/openshift/operator-framework-operator-controller/commit/303b954fa5a92e810aebbe55ab8fafe8dbc06c58) `sha256:c6b226b8618bfbae5505c0389a833973fbda4a8ab081038e5dddd2607dbd2272`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [5b09cd44](https://github.com/openshift/operator-framework-rukpak/commit/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) `sha256:db86098b575077f0eb4c6c98fcf7aa002ae9bdf1bb491da7d8f9c0842c27c860`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1915f645](https://github.com/openshift/openshift-state-metrics/commit/1915f64591a18c11138d10c00c50b3f5cff632ce) `sha256:6f88ceea81d7aaefbbad50605bdd1a365c3eefe7d055d45503214ce5fad0b697`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [d0c24077](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/d0c24077b4e4ac1e00a6a529a814066cd9b5521c) `sha256:f55e189b76ed319e75c1c2440a0716c99f74aca68cfb57c7104d854883fc1abb`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:701fab7a9512d08e910436e1ec2a2174c2f5eccd414e5d50ec2d4740a4b11364`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [396a09ff](https://github.com/openshift/machine-api-provider-openstack/commit/396a09fffe401679f18e8a7db56c77bbf2dee246) `sha256:8d0924bf3735b4d997fa6e01a092e9517dabe2e9ede9f7d271d78b9def4ae9c7`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [b8d25ad6](https://github.com/openshift/ovirt-csi-driver/commit/b8d25ad6d140a198e96527b46a9dbde65aae41ce) `sha256:857571ce7065e83c89e6b3d91090f582268601679e86c7f803b07d1112e544ff`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [e9b0fa23](https://github.com/openshift/ovirt-csi-driver-operator/commit/e9b0fa233d75a97e6d29106265938b42bc16d677) `sha256:7791f6002702e308b5c0fb1ff94a6cb3538b2316104e1c54aaa1eb2d8186a9cf`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [38bee567](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5) `sha256:472ea645fbb9bcf2c15639b4b662fd55dc6d618d6b5365c3df3714fb89c4763e`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [a3729dcb](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) `sha256:1f0d165c2f07a433b89c64264670b6b49a3bdc090de5690c960788eb7fbbaf3e`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f3f1f5d1](https://github.com/openshift/prom-label-proxy/commit/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) `sha256:9cd8f38b6e868069cbfc059513388ccccc76bbd72b8feb46e5edc3f529c0dedd`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [870ade52](https://github.com/openshift/prometheus-alertmanager/commit/870ade52a6097bc55cec29c1a9cc028967c5d23c) `sha256:57d32c74b617c6f872ceaf3bd4c9480812d860f7ac926537e070e60c2d8825ee`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [aed837c3](https://github.com/openshift/node_exporter/commit/aed837c322b6eb54d88956acada07b5b390b5c25) `sha256:d01899433e8b749274708812820cfa645fe3d8554b333cbf3a71fa75210c1fa2`
* rhel-coreos `sha256:a1d7d1aa1b9f85c1c7071ed0ff6cecda8f913583005a8894ff2d882f50f7049b`
* rhel-coreos-extensions `sha256:44aa7754412b7e8f16c64d81b00a14c7cd86108b2ce8784f46066feab6a61315`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [c5cc7a73](https://github.com/openshift/route-controller-manager/commit/c5cc7a73705e4086759e2a36811b055b7716def4) `sha256:5333b53bca637e961f06dce8908c54557edecae71b42b876e32053eeeeaa2331`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [19f312e9](https://github.com/openshift/service-ca-operator/commit/19f312e96bb4e5b7da9f61ea4cab202b227a60c6) `sha256:dfdc3a2701cd777cb767166e4080a2e685c68cd9c267f9f131551841d7cccc00`
* [telemeter](https://github.com/openshift/telemeter) git [14489f7d](https://github.com/openshift/telemeter/commit/14489f7dc656175e11a3ef962fcbcd113b3651a9) `sha256:e1e2efabf4c194a4ce3e1246272ffe6286fa9be097886a0d3349a196ac4d82ff`
* [thanos](https://github.com/openshift/thanos) git [66161ad4](https://github.com/openshift/thanos/commit/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) `sha256:05f844d1bd69d0c24bbd3f9486c900ffc26641575c122184b72f256f61c5fe6b`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [4b15e93b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4b15e93bd578484c4bfb1c124fa655c451bbd1ca) `sha256:10cc13d434ae8621ff9c3005701141e41b8de77f6a36282cd096cdc3d1847aeb`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e0d46570](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e0d46570a06caff3439b410b9c9f75cb383a3d2d) `sha256:ba52faff05bcc0ca16c8b9b4345413589f785291e5446da5c9a7da6516271551`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [4b15e93b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4b15e93bd578484c4bfb1c124fa655c451bbd1ca) `sha256:72a2afb321811014d7ddbbb9279b6859c47c7501fb05b53fc35828ea5d9a8828`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [15ed0ae1](https://github.com/openshift/vsphere-problem-detector/commit/15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be) `sha256:36cb25b24ec1e089334d2a87eea59481b17fe18a6f50e767bf887b2be55f9216`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)

* [OCPBUGS-58633](https://issues.redhat.com/browse/OCPBUGS-58633), [OCPBUGS-58638](https://issues.redhat.com/browse/OCPBUGS-58638): Bump glog to v1.2.5 in release-4.15 (#7905) [#7905](https://github.com/openshift/assisted-service/pull/7905)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) [#7487](https://github.com/openshift/assisted-service/pull/7487)
* [OCPBUGS-46940](https://issues.redhat.com/browse/OCPBUGS-46940): OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) [#7199](https://github.com/openshift/assisted-service/pull/7199)
* [OCPBUGS-22539](https://issues.redhat.com/browse/OCPBUGS-22539): Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) [#6858](https://github.com/openshift/assisted-service/pull/6858)
* [OCPBUGS-43022](https://issues.redhat.com/browse/OCPBUGS-43022): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) [#6894](https://github.com/openshift/assisted-service/pull/6894)
* [OCPBUGS-42571](https://issues.redhat.com/browse/OCPBUGS-42571): Libraries bump to mitigate CVE-2024-27289 (#6834) [#6834](https://github.com/openshift/assisted-service/pull/6834)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) [#6753](https://github.com/openshift/assisted-service/pull/6753)
* [Full changelog](https://github.com/openshift/assisted-service/compare/833fd90a6dc4d0707f5ffca18e9b288e260346c1...b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/f0b1275e58633382222af71a6cac527e6f8cec24)

* [OCPBUGS-58643](https://issues.redhat.com/browse/OCPBUGS-58643): Bump github.com/golang/glog pkg version to 1.2.4 (#1189) [#1189](https://github.com/openshift/assisted-installer/pull/1189)
* [OCPBUGS-53714](https://issues.redhat.com/browse/OCPBUGS-53714): Bump jwt to 4.5.2 in release-4.15 (#1092) [#1092](https://github.com/openshift/assisted-installer/pull/1092)
* Bump golang.org/x/net to 0.33.0 (#1011) [#1011](https://github.com/openshift/assisted-installer/pull/1011)
* [OCPBUGS-43026](https://issues.redhat.com/browse/OCPBUGS-43026): Pick up latest CVE changes by bumping service (#921) [#921](https://github.com/openshift/assisted-installer/pull/921)
* [OCPBUGS-42301](https://issues.redhat.com/browse/OCPBUGS-42301): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) [#907](https://github.com/openshift/assisted-installer/pull/907)
* [OCPBUGS-36779](https://issues.redhat.com/browse/OCPBUGS-36779): Reload host inventory on conflict (#891) [#891](https://github.com/openshift/assisted-installer/pull/891)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/1b61dd77ff111b546f786365dccb70d1714cb9b5...f0b1275e58633382222af71a6cac527e6f8cec24)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/051696d004b70c305a2feb80fe6ea4f35f7a1b09)

* run go mod tidy / vendor [#1020](https://github.com/openshift/assisted-installer-agent/pull/1020)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af...051696d004b70c305a2feb80fe6ea4f35f7a1b09)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)

* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#57](https://github.com/openshift/cluster-api-provider-alibaba/pull/57)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/d3ba04c35e77e4e937aa9b7b4d069753cd514335...f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/adccbd5c16daecfe861fa530acdcbba5ec682a3a)

* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#60](https://github.com/openshift/apiserver-network-proxy/pull/60)
* Update golang Docker tag to v1.23.1 [#58](https://github.com/openshift/apiserver-network-proxy/pull/58)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/698a4035d9e6fad1478db37c3156fdd56c00f65e...adccbd5c16daecfe861fa530acdcbba5ec682a3a)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)

* [OCPBUGS-38577](https://issues.redhat.com/browse/OCPBUGS-38577): Ensure that addresses are added in network device index order [#92](https://github.com/openshift/cloud-provider-aws/pull/92)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/1e5e25da5ea2a115b84f6ec2ba695d5a244149de...fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/ee896d4ec871cefe1cecf0982cd4f4d4c0cd0ad4)

* [OCPBUGS-61943](https://issues.redhat.com/browse/OCPBUGS-61943): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#573](https://github.com/openshift/cluster-api-provider-aws/pull/573)
* [OCPBUGS-58668](https://issues.redhat.com/browse/OCPBUGS-58668), [OCPBUGS-58673](https://issues.redhat.com/browse/OCPBUGS-58673): bump github.com/golang/glog to v1.2.5 [#562](https://github.com/openshift/cluster-api-provider-aws/pull/562)
* [OCPBUGS-44294](https://issues.redhat.com/browse/OCPBUGS-44294): [release-4.15] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#532](https://github.com/openshift/cluster-api-provider-aws/pull/532)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/51e7a81c40ab6d384e9b643dd6d2c97a417d1634...ee896d4ec871cefe1cecf0982cd4f4d4c0cd0ad4)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/fb9a59a0f7636ffece8cc585f5ab8844e67cd198)

* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#153](https://github.com/openshift/machine-api-provider-aws/pull/153)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): revert: client: re-use a single file for building the session instead of randomly named files [#150](https://github.com/openshift/machine-api-provider-aws/pull/150)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#143](https://github.com/openshift/machine-api-provider-aws/pull/143)
* [OCPBUGS-47680](https://issues.redhat.com/browse/OCPBUGS-47680): fix Associate*IpAddress flag on launch EC2 [#122](https://github.com/openshift/machine-api-provider-aws/pull/122)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382...fb9a59a0f7636ffece8cc585f5ab8844e67cd198)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/491c4df6880bf450a854b8e003e10d880d7e8550)

* [ART-13080](https://issues.redhat.com/browse/ART-13080): Regenerate go.mod to fix build failure [#94](https://github.com/openshift/azure-file-csi-driver/pull/94)
* [OCPBUGS-39444](https://issues.redhat.com/browse/OCPBUGS-39444): bump mount-utils to treat ENODEV error as corrupted mount [#78](https://github.com/openshift/azure-file-csi-driver/pull/78)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/dc463da48b275ba9a6fd7afc22a555f2b12c9ae4...491c4df6880bf450a854b8e003e10d880d7e8550)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/e1a7a2ed694937574cd72a4786ae62cb255aa8ad)

* [OCPBUGS-60544](https://issues.redhat.com/browse/OCPBUGS-60544): add tag matching to Azure File storage class [#110](https://github.com/openshift/azure-file-csi-driver-operator/pull/110)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/367c4e45899033f7fb7494c0004b83157b6723aa...e1a7a2ed694937574cd72a4786ae62cb255aa8ad)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/9f1015edb8cb141cd6aaff2de7894f32336719c8)

* [OCPBUGS-56657](https://issues.redhat.com/browse/OCPBUGS-56657): Fix failure when attempting to modify immutable availabilitySet [#150](https://github.com/openshift/machine-api-provider-azure/pull/150)
* [OCPBUGS-53226](https://issues.redhat.com/browse/OCPBUGS-53226): dynamically setting the amount of fault domains [#134](https://github.com/openshift/machine-api-provider-azure/pull/134)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/615b457bcfa1a40e7900585154952aac8194bed4...9f1015edb8cb141cd6aaff2de7894f32336719c8)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/5db478a9876556666b10f135487a2fd9f82e8653)

* [OCPBUGS-53794](https://issues.redhat.com/browse/OCPBUGS-53794): github.com/golang-jwt/jwt/v4 v4.5.2 [#34](https://github.com/openshift/azure-workload-identity/pull/34)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1...5db478a9876556666b10f135487a2fd9f82e8653)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/4a2d8a6028536c9b23680c0e6a9db82e6c12e019)

* [OCPBUGS-42554](https://issues.redhat.com/browse/OCPBUGS-42554): only allow a single network in failure domain topology [#9060](https://github.com/openshift/installer/pull/9060)
* [OCPBUGS-62849](https://issues.redhat.com/browse/OCPBUGS-62849): Release 4.15 bump terraform provider azurerm [#10007](https://github.com/openshift/installer/pull/10007)
* [OCPBUGS-62410](https://issues.redhat.com/browse/OCPBUGS-62410): Make swift containers removal not fatal for UPI. [#9978](https://github.com/openshift/installer/pull/9978)
* [OCPBUGS-60497](https://issues.redhat.com/browse/OCPBUGS-60497): update resolv.conf every time on bootstrap node [#9885](https://github.com/openshift/installer/pull/9885)
* [OCPBUGS-39416](https://issues.redhat.com/browse/OCPBUGS-39416): OpenStack: Install CI dependencies from rpm [#9103](https://github.com/openshift/installer/pull/9103)
* [OCPBUGS-54353](https://issues.redhat.com/browse/OCPBUGS-54353): aws/edge/byovpc: tag edge subnets with shared value [#9612](https://github.com/openshift/installer/pull/9612)
* [OCPBUGS-54367](https://issues.redhat.com/browse/OCPBUGS-54367): IBMCloud: Move to IBM TF openshift fork [#9614](https://github.com/openshift/installer/pull/9614)
* [OCPBUGS-45961](https://issues.redhat.com/browse/OCPBUGS-45961): Update upi references to api-internal [#9298](https://github.com/openshift/installer/pull/9298)
* [OCPBUGS-50994](https://issues.redhat.com/browse/OCPBUGS-50994): Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation [#9509](https://github.com/openshift/installer/pull/9509)
* [OCPBUGS-41815](https://issues.redhat.com/browse/OCPBUGS-41815): Validate MTU for custom network [#9294](https://github.com/openshift/installer/pull/9294)
* [OCPBUGS-28706](https://issues.redhat.com/browse/OCPBUGS-28706): [azure] update tested x86 instance type on 4.15 [#7966](https://github.com/openshift/installer/pull/7966)
* [OCPBUGS-47716](https://issues.redhat.com/browse/OCPBUGS-47716): [release-4.15] Power VS: Create region-zone-sysType hierarchy [#9340](https://github.com/openshift/installer/pull/9340)
* [OCPBUGS-44259](https://issues.redhat.com/browse/OCPBUGS-44259): IBMCloud: Ignore failed VPC regions [#9183](https://github.com/openshift/installer/pull/9183)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9260](https://github.com/openshift/installer/pull/9260)
* [OCPBUGS-45207](https://issues.redhat.com/browse/OCPBUGS-45207): add chrony.conf file when additional NTP sources are configured [#9251](https://github.com/openshift/installer/pull/9251)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9221](https://github.com/openshift/installer/pull/9221)
* [OCPBUGS-44035](https://issues.redhat.com/browse/OCPBUGS-44035): IBMCloud: Handle pagination for subnets [#9160](https://github.com/openshift/installer/pull/9160)
* [OCPBUGS-43760](https://issues.redhat.com/browse/OCPBUGS-43760): azure: use filter when listing SKUs [#9135](https://github.com/openshift/installer/pull/9135)
* [OCPBUGS-42139](https://issues.redhat.com/browse/OCPBUGS-42139): add tested instance type for IBMCloud [#9032](https://github.com/openshift/installer/pull/9032)
* [OCPBUGS-42335](https://issues.redhat.com/browse/OCPBUGS-42335): Bump extract-machine-os timout to 20m [#9051](https://github.com/openshift/installer/pull/9051)
* [OCPBUGS-42180](https://issues.redhat.com/browse/OCPBUGS-42180): Add AWS r8g to arm tested instance types [#9040](https://github.com/openshift/installer/pull/9040)
* [OCPBUGS-39288](https://issues.redhat.com/browse/OCPBUGS-39288), [OCPBUGS-42011](https://issues.redhat.com/browse/OCPBUGS-42011): Openstack UPI - Reintroduce unique resource names [#9047](https://github.com/openshift/installer/pull/9047)
* [OCPBUGS-38198](https://issues.redhat.com/browse/OCPBUGS-38198): Remove timed context for gcp client [#8824](https://github.com/openshift/installer/pull/8824)
* [OCPBUGS-29591](https://issues.redhat.com/browse/OCPBUGS-29591): vsphere-fix convert if only provided name [#8034](https://github.com/openshift/installer/pull/8034)
* [OCPBUGS-32179](https://issues.redhat.com/browse/OCPBUGS-32179): Fix task for attaching IPv6 subnet to router. [#8262](https://github.com/openshift/installer/pull/8262)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/950491feacc89bc639a92329f3326e60d4fe8759...4a2d8a6028536c9b23680c0e6a9db82e6c12e019)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/ec953728a15f32d551ee34233192324c8a276172)

* [OCPBUGS-46641](https://issues.redhat.com/browse/OCPBUGS-46641): Bump x/net to 0.33.0 [#227](https://github.com/openshift/cluster-api-provider-baremetal/pull/227)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/73a72cc821224eb7ad0fad25d3bcc8272658238b...ec953728a15f32d551ee34233192324c8a276172)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)

* [OCPBUGS-53336](https://issues.redhat.com/browse/OCPBUGS-53336): BMO can expose any secret via BMCEventSubscription CRD [#408](https://github.com/openshift/baremetal-operator/pull/408)
* [OCPBUGS-38939](https://issues.redhat.com/browse/OCPBUGS-38939): [OCP] Ability to disable agent power off after deployment [#373](https://github.com/openshift/baremetal-operator/pull/373)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/226e1df22266320dc9dafb89820c024aa910e6ea...880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)

* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Change mechanism of debug flag [#325](https://github.com/openshift/baremetal-runtimecfg/pull/325)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7721f292c375687612e1575111c064e59fcffa8b...1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/82316376e25f6453b58258df6bf1e11ec4abb670)

* [OCPBUGS-42726](https://issues.redhat.com/browse/OCPBUGS-42726): Check cast result in adm prune deployments to prevent panic [#1893](https://github.com/openshift/oc/pull/1893)
* [OCPBUGS-39426](https://issues.redhat.com/browse/OCPBUGS-39426): Ignore pruning when deployment points to replicationcontroller [#1865](https://github.com/openshift/oc/pull/1865)
* [Full changelog](https://github.com/openshift/oc/compare/1e41aa3e007fc60af9edfc77be1c610205943f4a...82316376e25f6453b58258df6bf1e11ec4abb670)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/cffd42537ac64a3936a12de001db938d0904126e)

* [OCPBUGS-60974](https://issues.redhat.com/browse/OCPBUGS-60974): ccoctl: aws to use proper issuer url on subsequent runs [#910](https://github.com/openshift/cloud-credential-operator/pull/910)
* [OCPBUGS-58678](https://issues.redhat.com/browse/OCPBUGS-58678): github.com/golang/glog v1.2.5 [#894](https://github.com/openshift/cloud-credential-operator/pull/894)
* [OCPBUGS-53417](https://issues.redhat.com/browse/OCPBUGS-53417): github.com/golang/glog v1.2.4 [#844](https://github.com/openshift/cloud-credential-operator/pull/844)
* [OCPBUGS-53818](https://issues.redhat.com/browse/OCPBUGS-53818): update github.com/golang-jwt/jwt [#840](https://github.com/openshift/cloud-credential-operator/pull/840)
* [OCPBUGS-51540](https://issues.redhat.com/browse/OCPBUGS-51540): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#833](https://github.com/openshift/cloud-credential-operator/pull/833)
* [OCPBUGS-47068](https://issues.redhat.com/browse/OCPBUGS-47068): golang.org/x/net v0.33.0 [#806](https://github.com/openshift/cloud-credential-operator/pull/806)
* [OCPBUGS-45940](https://issues.redhat.com/browse/OCPBUGS-45940): Add AWS region to aws-pod-identity-webhook [#802](https://github.com/openshift/cloud-credential-operator/pull/802)
* [OCPBUGS-45008](https://issues.redhat.com/browse/OCPBUGS-45008): Add retry to ccoctl gcp create functions [#795](https://github.com/openshift/cloud-credential-operator/pull/795)
* [OCPBUGS-45003](https://issues.redhat.com/browse/OCPBUGS-45003): github.com/golang-jwt/jwt/v4 v4.5.1 [#784](https://github.com/openshift/cloud-credential-operator/pull/784)
* [OCPBUGS-43646](https://issues.redhat.com/browse/OCPBUGS-43646): Only attempt timed token credentials on supported platforms. [#774](https://github.com/openshift/cloud-credential-operator/pull/774)
* [OCPBUGS-43338](https://issues.redhat.com/browse/OCPBUGS-43338): Update github.com/sirupsen/logrus v1.9.3 [#768](https://github.com/openshift/cloud-credential-operator/pull/768)
* [OCPBUGS-41235](https://issues.redhat.com/browse/OCPBUGS-41235): List secrets in batches to avoid api timeout [#754](https://github.com/openshift/cloud-credential-operator/pull/754)
* [OCPBUGS-38377](https://issues.redhat.com/browse/OCPBUGS-38377): Update google.golang.org/grpc v1.65.0 [#749](https://github.com/openshift/cloud-credential-operator/pull/749)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/05c031082ba3685f3729b4ac9e96a1df8ffdb4a7...cffd42537ac64a3936a12de001db938d0904126e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/89149896bc6a3d02ebf117c61d5e9ea50ad73129)

* [OCPBUGS-45149](https://issues.redhat.com/browse/OCPBUGS-45149): [release-4.15] VPA: Update OWNERS file [#326](https://github.com/openshift/kubernetes-autoscaler/pull/326)
* [OCPBUGS-40930](https://issues.redhat.com/browse/OCPBUGS-40930): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#315](https://github.com/openshift/kubernetes-autoscaler/pull/315)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/387453a02dcaf134f7bf499071548ca970de0e50...89149896bc6a3d02ebf117c61d5e9ea50ad73129)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8425d88b5bedd5d22acfb0f6c0edf929ec401288)

* [OCPBUGS-41798](https://issues.redhat.com/browse/OCPBUGS-41798): set required-scc for openshift workloads [#332](https://github.com/openshift/cluster-autoscaler-operator/pull/332)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/1ba1af3d6df9a0805baa126ee0abb98ee47bb2e4...8425d88b5bedd5d22acfb0f6c0edf929ec401288)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/6e850eedbb24f90b67a08ed29af62f353a621d9d)

* [OCPBUGS-44046](https://issues.redhat.com/browse/OCPBUGS-44046): SCC-pinning for metal3-baremetal-operator [#454](https://github.com/openshift/cluster-baremetal-operator/pull/454)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#443](https://github.com/openshift/cluster-baremetal-operator/pull/443)
* [OCPBUGS-31948](https://issues.redhat.com/browse/OCPBUGS-31948): bump x/net to 0.23.0 [#437](https://github.com/openshift/cluster-baremetal-operator/pull/437)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fdce2d0892e255240ff760e91fa8a738ae4a7556...6e850eedbb24f90b67a08ed29af62f353a621d9d)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/445ccbfe8aba60c99931701d7728ae7ee012eba8)

* [OCPBUGS-63169](https://issues.redhat.com/browse/OCPBUGS-63169): ccm: disable unused secure-serving port and webhook [#424](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/424)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/56181136d91dff7bac4aa5acb2c1461381ac6e34...445ccbfe8aba60c99931701d7728ae7ee012eba8)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/e1b692b1e9552db95c17f6a03b41d258237ab480)

* [OCPBUGS-45839](https://issues.redhat.com/browse/OCPBUGS-45839): relax validation on delete and if failureDomains not configured [#336](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/336)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#326](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/326)
* [OCPBUGS-24632](https://issues.redhat.com/browse/OCPBUGS-24632): Prevent rollout due to irrelevant path artifacts [#317](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/317)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/4414f2cd870628ff0a022c3f5904a23f7777d238...e1b692b1e9552db95c17f6a03b41d258237ab480)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/73aa60d1fd4e86aed93d67ddac62586ecbb70644)

* [OCPBUGS-52499](https://issues.redhat.com/browse/OCPBUGS-52499): [release-4.15] Add runbook_url for CoreDNSErrorsHigh [#432](https://github.com/openshift/cluster-dns-operator/pull/432)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/49290d7db2194df73dfaeb1e719580dabf166690...73aa60d1fd4e86aed93d67ddac62586ecbb70644)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4ed903605714300684acb5baf8d4d84c708a3d8a)

* [OCPBUGS-53506](https://issues.redhat.com/browse/OCPBUGS-53506): fix CVE-2025-30204 [#1404](https://github.com/openshift/cluster-etcd-operator/pull/1404)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b72a596d1f588da8eca821f28f286dfd609691d1...4ed903605714300684acb5baf8d4d84c708a3d8a)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3a8a3ceb4c76e9ac894405d69acbc4cf699c4d80)

* [OCPBUGS-53866](https://issues.redhat.com/browse/OCPBUGS-53866): bump github.com/golang-jwt/jwt [#1220](https://github.com/openshift/cluster-image-registry-operator/pull/1220)
* [OCPBUGS-51596](https://issues.redhat.com/browse/OCPBUGS-51596): bump golang.org/x/oauth2 [#1211](https://github.com/openshift/cluster-image-registry-operator/pull/1211)
* [OCPBUGS-51264](https://issues.redhat.com/browse/OCPBUGS-51264): ensure that storage names don't end in dashes [#1183](https://github.com/openshift/cluster-image-registry-operator/pull/1183)
* [OCPBUGS-43918](https://issues.redhat.com/browse/OCPBUGS-43918): fix proxy config and leader election test flakes [#1150](https://github.com/openshift/cluster-image-registry-operator/pull/1150)
* [OCPBUGS-42930](https://issues.redhat.com/browse/OCPBUGS-42930): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1136](https://github.com/openshift/cluster-image-registry-operator/pull/1136)
* [OCPBUGS-43656](https://issues.redhat.com/browse/OCPBUGS-43656): pkg/storage/azure: also check for auth failure error code on deletion [#1146](https://github.com/openshift/cluster-image-registry-operator/pull/1146)
* [OCPBUGS-42934](https://issues.redhat.com/browse/OCPBUGS-42934): azureclient: stop validating credentials when creating the client [#1135](https://github.com/openshift/cluster-image-registry-operator/pull/1135)
* [OCPBUGS-39099](https://issues.redhat.com/browse/OCPBUGS-39099): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1111](https://github.com/openshift/cluster-image-registry-operator/pull/1111)
* [OCPBUGS-38895](https://issues.redhat.com/browse/OCPBUGS-38895): pkg/resource: invoke update-ca-trust extract with --output [#1105](https://github.com/openshift/cluster-image-registry-operator/pull/1105)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/6105ec769a3923cb3f02c61e8043632754b4b139...3a8a3ceb4c76e9ac894405d69acbc4cf699c4d80)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/815632b1ddb29f55ddc7a8fdba63292b4797b3ae)

* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 [#1172](https://github.com/openshift/cluster-ingress-operator/pull/1172)
* [OCPBUGS-42480](https://issues.redhat.com/browse/OCPBUGS-42480): Limit SHA-1 check to the leaf cert in default cert chain [#1154](https://github.com/openshift/cluster-ingress-operator/pull/1154)
* [OCPBUGS-41635](https://issues.redhat.com/browse/OCPBUGS-41635): Refine logging for accurate infra CR status updates [#1141](https://github.com/openshift/cluster-ingress-operator/pull/1141)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/0928822bf67774af6798b218bff54ff5d14594cd...815632b1ddb29f55ddc7a8fdba63292b4797b3ae)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/b5b212e5cecf729bb15248d26edbd55dbe7253a9)

* [OCPBUGS-50661](https://issues.redhat.com/browse/OCPBUGS-50661): Increase waitForFallbackDegradedConditionTimeout [#1806](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1806)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/aabc7863cdbd76f8909a10fbc1be53b032e4ec31...b5b212e5cecf729bb15248d26edbd55dbe7253a9)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/863813ecd7b4c1416e76120896add365c492a59e)

* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Ensure trailing dots on DNS names do not block serving cert auth [#258](https://github.com/openshift/cluster-machine-approver/pull/258)
* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Client internal DNS checks should ignore trailing dot [#252](https://github.com/openshift/cluster-machine-approver/pull/252)
* [OCPBUGS-44705](https://issues.redhat.com/browse/OCPBUGS-44705): Client internal DNS checks should be case insensitive [#245](https://github.com/openshift/cluster-machine-approver/pull/245)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba...863813ecd7b4c1416e76120896add365c492a59e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/93b9d9424899b6215c1915c21ffe4bece71f7ebf)

* [OCPBUGS-66047](https://issues.redhat.com/browse/OCPBUGS-66047): test: remove image registry e2e tests [#2757](https://github.com/openshift/cluster-monitoring-operator/pull/2757)
* [OCPBUGS-46570](https://issues.redhat.com/browse/OCPBUGS-46570): Add new metrics for OpenShift logging telemetry [#2541](https://github.com/openshift/cluster-monitoring-operator/pull/2541)
* [OCPBUGS-44006](https://issues.redhat.com/browse/OCPBUGS-44006): fix(monitoring-plugin): disable emitting nginx version on error pages [#2519](https://github.com/openshift/cluster-monitoring-operator/pull/2519)
* [OCPBUGS-43876](https://issues.redhat.com/browse/OCPBUGS-43876): Add runbook url for TelemeterClientFail… [#2509](https://github.com/openshift/cluster-monitoring-operator/pull/2509)
* [OCPBUGS-42586](https://issues.redhat.com/browse/OCPBUGS-42586): Exclude windows nodes from kubelet servicemonitor [#2487](https://github.com/openshift/cluster-monitoring-operator/pull/2487)
* [OCPBUGS-41913](https://issues.redhat.com/browse/OCPBUGS-41913): filter alerts sent to Telemeter [#2472](https://github.com/openshift/cluster-monitoring-operator/pull/2472)
* [OCPBUGS-39172](https://issues.redhat.com/browse/OCPBUGS-39172): Backport #2441 for 4.15 [#2448](https://github.com/openshift/cluster-monitoring-operator/pull/2448)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/bc352b58552c9198da2124eeab339edc6852642c...93b9d9424899b6215c1915c21ffe4bece71f7ebf)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fa9184fd3c9053760c7cde923cc9ce2a6a83de55)

* [OCPBUGS-62980](https://issues.redhat.com/browse/OCPBUGS-62980): Update CNO reviewers/approvers [#2817](https://github.com/openshift/cluster-network-operator/pull/2817)
* [OCPBUGS-56649](https://issues.redhat.com/browse/OCPBUGS-56649): Fix live migration with feature migration configured explicitly [#2715](https://github.com/openshift/cluster-network-operator/pull/2715)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688), [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2658](https://github.com/openshift/cluster-network-operator/pull/2658)
* [OCPBUGS-53282](https://issues.redhat.com/browse/OCPBUGS-53282): Not update status.migration of the network.config CR to empty [#2669](https://github.com/openshift/cluster-network-operator/pull/2669)
* [Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status [#2653](https://github.com/openshift/cluster-network-operator/pull/2653)
* [OCPBUGS-47633](https://issues.redhat.com/browse/OCPBUGS-47633): Prevent live migration process from flapping between step-2 and step-3 [#2609](https://github.com/openshift/cluster-network-operator/pull/2609)
* [OCPBUGS-45890](https://issues.redhat.com/browse/OCPBUGS-45890): Pass transit_switch_subnet options in ovnkube-node pod [#2587](https://github.com/openshift/cluster-network-operator/pull/2587)
* [OCPBUGS-43716](https://issues.redhat.com/browse/OCPBUGS-43716): Skip including default crypto policies to avoid authby issue [#2599](https://github.com/openshift/cluster-network-operator/pull/2599)
* [OCPBUGS-46149](https://issues.redhat.com/browse/OCPBUGS-46149): Remove ip xfrm state when IPsec is disabled [#2596](https://github.com/openshift/cluster-network-operator/pull/2596)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2539](https://github.com/openshift/cluster-network-operator/pull/2539)
* [OCPBUGS-44973](https://issues.redhat.com/browse/OCPBUGS-44973), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2576](https://github.com/openshift/cluster-network-operator/pull/2576)
* [OCPBUGS-42753](https://issues.redhat.com/browse/OCPBUGS-42753): Set mount propagation to HostToContainer for /var/lib/kubelet [#2520](https://github.com/openshift/cluster-network-operator/pull/2520)
* [OCPBUGS-42865](https://issues.redhat.com/browse/OCPBUGS-42865): Add configurable subnets while running hybrid-overlay-node binary [#2523](https://github.com/openshift/cluster-network-operator/pull/2523)
* [OCPBUGS-43268](https://issues.redhat.com/browse/OCPBUGS-43268): Update network operator status for IPsec [#2530](https://github.com/openshift/cluster-network-operator/pull/2530)
* [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Configure narrowing=yes for IPsec connections [#2529](https://github.com/openshift/cluster-network-operator/pull/2529)
* [OCPBUGS-42020](https://issues.redhat.com/browse/OCPBUGS-42020): HyperShift: do not use antiaffinity on single replica control planes [#2504](https://github.com/openshift/cluster-network-operator/pull/2504)
* [OCPBUGS-41947](https://issues.redhat.com/browse/OCPBUGS-41947): Add proxy env vars to onvkube-node [#2503](https://github.com/openshift/cluster-network-operator/pull/2503)
* [OCPBUGS-31447](https://issues.redhat.com/browse/OCPBUGS-31447): Tighten the permissions on whereabouts.conf [#2324](https://github.com/openshift/cluster-network-operator/pull/2324)
* [NP-1064](https://issues.redhat.com/browse/NP-1064), [OCPBUGS-39336](https://issues.redhat.com/browse/OCPBUGS-39336): Remove managed cluster checking for live migration [#2485](https://github.com/openshift/cluster-network-operator/pull/2485)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0a77d135421a5893c0d85bf9c57369f54e924cfb...fa9184fd3c9053760c7cde923cc9ce2a6a83de55)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/e828bd93defc0cc9c3fcf799d9715b95b2c03f79)

* e2e:performance: decode to valid kubeletconfig object (#1275) [#1275](https://github.com/openshift/cluster-node-tuning-operator/pull/1275)
* Fix context deadlines in ExecCommandOnPod() (#1265) [#1265](https://github.com/openshift/cluster-node-tuning-operator/pull/1265)
* [OCPBUGS-44275](https://issues.redhat.com/browse/OCPBUGS-44275): Drop sched_migration_cost_ns setting (#1207) [#1207](https://github.com/openshift/cluster-node-tuning-operator/pull/1207)
* [OCPBUGS-44283](https://issues.redhat.com/browse/OCPBUGS-44283): right-hand-side profile_dirs take precedence (#1208) [#1208](https://github.com/openshift/cluster-node-tuning-operator/pull/1208)
* [OCPBUGS-42284](https://issues.redhat.com/browse/OCPBUGS-42284): Add cluster-wide proxy env file (#1171) [#1171](https://github.com/openshift/cluster-node-tuning-operator/pull/1171)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/1fdd5b0c30d71f4d478e473d08b7cb08019291e8...e828bd93defc0cc9c3fcf799d9715b95b2c03f79)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1ae0ba75cfdb910990437ab2898690b9e3f8f94a)

* [OCPBUGS-48832](https://issues.redhat.com/browse/OCPBUGS-48832): Add new team members to the OWNERS file [#379](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/379)
* [OCPBUGS-35922](https://issues.redhat.com/browse/OCPBUGS-35922): lots of churn during image registry managed/removed transition [#358](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/358)
* [OCPBUGS-35869](https://issues.redhat.com/browse/OCPBUGS-35869): nil pointer reference in ocm-operator [#357](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/357)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/45d342cb8ecde4e2fe51ceb613827fb3d219b8a0...1ae0ba75cfdb910990437ab2898690b9e3f8f94a)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)

* [OCPBUGS-63517](https://issues.redhat.com/browse/OCPBUGS-63517): references to github.com/sclorg/django-ex.git now also refer to the branch [#660](https://github.com/openshift/cluster-samples-operator/pull/660)
* [OCPBUGS-55475](https://issues.redhat.com/browse/OCPBUGS-55475): Adding mutex to func createSamples on handler.go [#634](https://github.com/openshift/cluster-samples-operator/pull/634)
* [OCPBUGS-54481](https://issues.redhat.com/browse/OCPBUGS-54481): add rhdmalone to owners [#623](https://github.com/openshift/cluster-samples-operator/pull/623)
* [OCPBUGS-49369](https://issues.redhat.com/browse/OCPBUGS-49369): add shannon and aroyoredhat as owners [#597](https://github.com/openshift/cluster-samples-operator/pull/597)
* [OCPBUGS-37464](https://issues.redhat.com/browse/OCPBUGS-37464): Set required-scc for openshift workloads [#548](https://github.com/openshift/cluster-samples-operator/pull/548)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/05acb0071bc0662cab2b4a2cec1eb9a3326177a6...a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/802233d84243d3eeceef50a29579501e94ebbf26)

* [OCPBUGS-43626](https://issues.redhat.com/browse/OCPBUGS-43626): keys: Update Red Hat keys to use SHA256 signatures [#65](https://github.com/openshift/cluster-update-keys/pull/65)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/be6ba5b0acee8970345b5259025506a04562ad37...802233d84243d3eeceef50a29579501e94ebbf26)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)

* [OCPBUGS-50591](https://issues.redhat.com/browse/OCPBUGS-50591): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1152](https://github.com/openshift/cluster-version-operator/pull/1152)
* [OCPBUGS-45330](https://issues.redhat.com/browse/OCPBUGS-45330): deps: bump golang.org/x/net to 0.31.0 [#1119](https://github.com/openshift/cluster-version-operator/pull/1119)
* [OCPBUGS-44328](https://issues.redhat.com/browse/OCPBUGS-44328): Fix desired before sync_worker's work is initialized [#1104](https://github.com/openshift/cluster-version-operator/pull/1104)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/cb586f43f568a6d156933fcda4486fc310a25806...2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)


### [console](https://github.com/openshift/console/tree/b4255e43cb8f39897daebbb8c6179b073185d269)

* [OCPBUGS-65822](https://issues.redhat.com/browse/OCPBUGS-65822): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15749](https://github.com/openshift/console/pull/15749)
* [OCPBUGS-65601](https://issues.redhat.com/browse/OCPBUGS-65601): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15727](https://github.com/openshift/console/pull/15727)
* [OCPBUGS-44159](https://issues.redhat.com/browse/OCPBUGS-44159): bump dompurify to latest [#15592](https://github.com/openshift/console/pull/15592)
* [OCPBUGS-60672](https://issues.redhat.com/browse/OCPBUGS-60672): Secret key with binary file changes when edited via Console [#15422](https://github.com/openshift/console/pull/15422)
* [OCPBUGS-59997](https://issues.redhat.com/browse/OCPBUGS-59997): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15359](https://github.com/openshift/console/pull/15359)
* [OCPBUGS-59564](https://issues.redhat.com/browse/OCPBUGS-59564): Add flags in console static plugin for all the components of this epic [#15306](https://github.com/openshift/console/pull/15306)
* [OCPBUGS-60029](https://issues.redhat.com/browse/OCPBUGS-60029): fix bug where / in console.tab/horizontalNav href brea… [#15353](https://github.com/openshift/console/pull/15353)
* [OCPBUGS-57521](https://issues.redhat.com/browse/OCPBUGS-57521): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15181](https://github.com/openshift/console/pull/15181)
* [OCPBUGS-58223](https://issues.redhat.com/browse/OCPBUGS-58223): Fix TypeError Cannot read properties of null (reading 'metadata') [#15221](https://github.com/openshift/console/pull/15221)
* [OCPBUGS-57097](https://issues.redhat.com/browse/OCPBUGS-57097): Add all files to `vendor` regardless of gitignore [#15134](https://github.com/openshift/console/pull/15134)
* [OCPBUGS-45257](https://issues.redhat.com/browse/OCPBUGS-45257): Enabling topology e2e tests on CI [#14721](https://github.com/openshift/console/pull/14721)
* [OCPBUGS-55733](https://issues.redhat.com/browse/OCPBUGS-55733): fix bug where operator appears twice [#15021](https://github.com/openshift/console/pull/15021)
* [OCPBUGS-55174](https://issues.redhat.com/browse/OCPBUGS-55174): Add missing pipelines plugin name to known plugins [#14982](https://github.com/openshift/console/pull/14982)
* [OCPBUGS-54673](https://issues.redhat.com/browse/OCPBUGS-54673): Added token to proxy header [#14943](https://github.com/openshift/console/pull/14943)
* [OCPBUGS-54252](https://issues.redhat.com/browse/OCPBUGS-54252): Update the monitoring topic used by the console team [#14904](https://github.com/openshift/console/pull/14904)
* [OCPBUGS-53138](https://issues.redhat.com/browse/OCPBUGS-53138): fix run time error when no completed version exists [#14879](https://github.com/openshift/console/pull/14879)
* [OCPBUGS-53055](https://issues.redhat.com/browse/OCPBUGS-53055): Show Observe section without PROMETHEUS and MONITORING flags [#14867](https://github.com/openshift/console/pull/14867)
* [OCPBUGS-52344](https://issues.redhat.com/browse/OCPBUGS-52344): fix alert rule link [#14828](https://github.com/openshift/console/pull/14828)
* [OCPBUGS-51332](https://issues.redhat.com/browse/OCPBUGS-51332): Do not pass CSV name to operand list page when an exen… [#14800](https://github.com/openshift/console/pull/14800)
* [OCPBUGS-49849](https://issues.redhat.com/browse/OCPBUGS-49849): include external labels so silenced alerts not displayed in notifications [#14718](https://github.com/openshift/console/pull/14718)
* [OCPBUGS-48593](https://issues.redhat.com/browse/OCPBUGS-48593): ReRun of Resolver based PipelineRuns fails from UI [#14689](https://github.com/openshift/console/pull/14689)
* [OCPBUGS-48592](https://issues.redhat.com/browse/OCPBUGS-48592): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14688](https://github.com/openshift/console/pull/14688)
* [OCPBUGS-48048](https://issues.redhat.com/browse/OCPBUGS-48048): Update vendor imports to include all PatternFly components [#14662](https://github.com/openshift/console/pull/14662)
* [OCPBUGS-47646](https://issues.redhat.com/browse/OCPBUGS-47646): fix table combination [#14649](https://github.com/openshift/console/pull/14649)
* [OCPBUGS-46430](https://issues.redhat.com/browse/OCPBUGS-46430): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14626](https://github.com/openshift/console/pull/14626)
* [OCPBUGS-45950](https://issues.redhat.com/browse/OCPBUGS-45950): Unable to remove finally tasks in pipeline builder mode [#14606](https://github.com/openshift/console/pull/14606)
* [OCPBUGS-46389](https://issues.redhat.com/browse/OCPBUGS-46389): use TaskRuns results.tekton.dev/record annotation to get the logs [#14622](https://github.com/openshift/console/pull/14622)
* [OCPBUGS-45248](https://issues.redhat.com/browse/OCPBUGS-45248): Remove ClusterTask dependency in console from Pipelines 1.17 [#14564](https://github.com/openshift/console/pull/14564)
* [OCPBUGS-44979](https://issues.redhat.com/browse/OCPBUGS-44979): Don't request user settings configmap if no user has been loaded. [#14534](https://github.com/openshift/console/pull/14534)
* [OCPBUGS-37397](https://issues.redhat.com/browse/OCPBUGS-37397): RWOP accessMode is not available on OpenShift console UI [#14078](https://github.com/openshift/console/pull/14078)
* [OCPBUGS-44998](https://issues.redhat.com/browse/OCPBUGS-44998): Add IBM Block Storage CSI driver support for RWX [#14536](https://github.com/openshift/console/pull/14536)
* [OCPBUGS-44738](https://issues.redhat.com/browse/OCPBUGS-44738): Add flag to hide the pipelines-plugin pipeline builder extensions [#14513](https://github.com/openshift/console/pull/14513)
* [OCPBUGS-44355](https://issues.redhat.com/browse/OCPBUGS-44355): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14476](https://github.com/openshift/console/pull/14476)
* [OCPBUGS-42355](https://issues.redhat.com/browse/OCPBUGS-42355): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14319](https://github.com/openshift/console/pull/14319)
* [OCPBUGS-43414](https://issues.redhat.com/browse/OCPBUGS-43414): Console crashes when ssh is selected in add secret for starting a pipeline run [#14401](https://github.com/openshift/console/pull/14401)
* [OCPBUGS-36559](https://issues.redhat.com/browse/OCPBUGS-36559): Increase login flow state paramater length/entropy [#14422](https://github.com/openshift/console/pull/14422)
* [OCPBUGS-37202](https://issues.redhat.com/browse/OCPBUGS-37202): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#14073](https://github.com/openshift/console/pull/14073)
* [OCPBUGS-42470](https://issues.redhat.com/browse/OCPBUGS-42470): List of default Camel K event sources disappears when adding a custom event source [#14331](https://github.com/openshift/console/pull/14331)
* [OCPBUGS-42471](https://issues.redhat.com/browse/OCPBUGS-42471): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14332](https://github.com/openshift/console/pull/14332)
* [OCPBUGS-33283](https://issues.redhat.com/browse/OCPBUGS-33283): Adjust NAD name to "network-xxx-xxx" when creating [#14020](https://github.com/openshift/console/pull/14020)
* [OCPBUGS-42611](https://issues.redhat.com/browse/OCPBUGS-42611): Topology screen crashes when completed pod is selected [#14353](https://github.com/openshift/console/pull/14353)
* [OCPBUGS-42648](https://issues.redhat.com/browse/OCPBUGS-42648): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14358](https://github.com/openshift/console/pull/14358)
* [OCPBUGS-38764](https://issues.redhat.com/browse/OCPBUGS-38764): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14177](https://github.com/openshift/console/pull/14177)
* [OCPBUGS-41991](https://issues.redhat.com/browse/OCPBUGS-41991): Values entered into the Instantiate Template form are automatically cleared [#14294](https://github.com/openshift/console/pull/14294)
* [OCPBUGS-42384](https://issues.redhat.com/browse/OCPBUGS-42384): Fix updating the "Until" field on the Silence > Edit page [#14322](https://github.com/openshift/console/pull/14322)
* [OCPBUGS-39343](https://issues.redhat.com/browse/OCPBUGS-39343): The filepath including leading slash makes error during parsing devfile using Gitlab [#14227](https://github.com/openshift/console/pull/14227)
* [OCPBUGS-42144](https://issues.redhat.com/browse/OCPBUGS-42144): Use vCenterCluster value from CM as primary resource [#14307](https://github.com/openshift/console/pull/14307)
* [OCPBUGS-38537](https://issues.redhat.com/browse/OCPBUGS-38537): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14158](https://github.com/openshift/console/pull/14158)
* [OCPBUGS-38108](https://issues.redhat.com/browse/OCPBUGS-38108): Revert - terminal: use username if uid is not present [#14114](https://github.com/openshift/console/pull/14114)
* [OCPBUGS-32793](https://issues.redhat.com/browse/OCPBUGS-32793): Fix that telemetry events didn't incl. an userId anymore [#13792](https://github.com/openshift/console/pull/13792)
* [OCPBUGS-38970](https://issues.redhat.com/browse/OCPBUGS-38970): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14195](https://github.com/openshift/console/pull/14195)
* [OCPBUGS-38969](https://issues.redhat.com/browse/OCPBUGS-38969): Tooltip on Pipeline when expression is not shows [#14194](https://github.com/openshift/console/pull/14194)
* [OCPBUGS-39085](https://issues.redhat.com/browse/OCPBUGS-39085): Fix utilization card limits/total display [#14209](https://github.com/openshift/console/pull/14209)
* [OCPBUGS-33938](https://issues.redhat.com/browse/OCPBUGS-33938): Add validation for vSphere fields Handle submit errors correctly [#14210](https://github.com/openshift/console/pull/14210)
* [OCPBUGS-39112](https://issues.redhat.com/browse/OCPBUGS-39112): Disable Knative e2e tests [#14197](https://github.com/openshift/console/pull/14197)
* [OCPBUGS-33076](https://issues.redhat.com/browse/OCPBUGS-33076): Remove deprecated resources from spec of the Pipeline [#13801](https://github.com/openshift/console/pull/13801)
* [OCPBUGS-35495](https://issues.redhat.com/browse/OCPBUGS-35495): fix crash if helm chart metadata is nil [#13977](https://github.com/openshift/console/pull/13977)
* [OCPBUGS-37452](https://issues.redhat.com/browse/OCPBUGS-37452): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14083](https://github.com/openshift/console/pull/14083)
* [OCPBUGS-38496](https://issues.redhat.com/browse/OCPBUGS-38496): Fix password set to Secret created through Start Pipeline form [#14152](https://github.com/openshift/console/pull/14152)
* [OCPBUGS-37399](https://issues.redhat.com/browse/OCPBUGS-37399): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#14079](https://github.com/openshift/console/pull/14079)
* [Full changelog](https://github.com/openshift/console/compare/1aae435d36e791297423facd98eadc41fa1ebbe1...b4255e43cb8f39897daebbb8c6179b073185d269)


### [console-operator](https://github.com/openshift/console-operator/tree/91f5c97029199a96764f9af7b4f0f304b441f7bf)

* [OCPBUGS-46482](https://issues.redhat.com/browse/OCPBUGS-46482): Dont disable console when authConfig type is set to None [#953](https://github.com/openshift/console-operator/pull/953)
* [OCPBUGS-37408](https://issues.redhat.com/browse/OCPBUGS-37408): set required-scc for openshift workloads [#924](https://github.com/openshift/console-operator/pull/924)
* [Full changelog](https://github.com/openshift/console-operator/compare/94e41901dc8ee1578bf5f3dd6c74280bcae6c987...91f5c97029199a96764f9af7b4f0f304b441f7bf)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)

* [OCPBUGS-55948](https://issues.redhat.com/browse/OCPBUGS-55948): Check error returned by ipv6 SettleAddresses [#190](https://github.com/openshift/containernetworking-plugins/pull/190)
* [OCPBUGS-37732](https://issues.redhat.com/browse/OCPBUGS-37732): Update owners [#167](https://github.com/openshift/containernetworking-plugins/pull/167)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/401d35070f2d1d4db3f08ffe183b8262754b7287...bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3d9f6f8ba7dd95dcf43252fa2dbd93128f6973f2)

* [OCPBUGS-58885](https://issues.redhat.com/browse/OCPBUGS-58885): CARRY: don't ignore json files [#342](https://github.com/openshift/cloud-provider-openstack/pull/342)
* [OCPBUGS-43375](https://issues.redhat.com/browse/OCPBUGS-43375): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 [#297](https://github.com/openshift/cloud-provider-openstack/pull/297)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/6ab1226a552376801e1f5712e3189a27729a23ed...3d9f6f8ba7dd95dcf43252fa2dbd93128f6973f2)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/9bcf382eb68d3dd13a553dce41822d24da3870d0)

* [OCPBUGS-38023](https://issues.redhat.com/browse/OCPBUGS-38023): Set required-scc for openshift workloads [#236](https://github.com/openshift/csi-driver-manila-operator/pull/236)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7...9bcf382eb68d3dd13a553dce41822d24da3870d0)


### [docker-builder](https://github.com/openshift/builder/tree/5c5fbe01beb8eb7a82fde14efff6385fed88e72a)

* [OCPBUGS-65960](https://issues.redhat.com/browse/OCPBUGS-65960): BuildConfig inline Dockerfile fails with heredoc syntax [#491](https://github.com/openshift/builder/pull/491)
* [OCPBUGS-58141](https://issues.redhat.com/browse/OCPBUGS-58141): S2I build cpu limits observed by assemble are limited to 1 cpu [#477](https://github.com/openshift/builder/pull/477)
* [OCPBUGS-42917](https://issues.redhat.com/browse/OCPBUGS-42917), [OCPBUGS-43294](https://issues.redhat.com/browse/OCPBUGS-43294): Bump buildah to 1.33.12 [#442](https://github.com/openshift/builder/pull/442)
* [OCPBUGS-43188](https://issues.redhat.com/browse/OCPBUGS-43188): runc library bump to 1.1.12 [#436](https://github.com/openshift/builder/pull/436)
* [OCPBUGS-48298](https://issues.redhat.com/browse/OCPBUGS-48298): skipping some unit tests to avoid failures as they are duplicate [#428](https://github.com/openshift/builder/pull/428)
* [OCPBUGS-48281](https://issues.redhat.com/browse/OCPBUGS-48281): Add team members to the OWNERS file [#427](https://github.com/openshift/builder/pull/427)
* [Full changelog](https://github.com/openshift/builder/compare/b98fb65efa75a8fbd8eefe70dbbf9decd65395a5...5c5fbe01beb8eb7a82fde14efff6385fed88e72a)


### [docker-registry](https://github.com/openshift/image-registry/tree/89c03ea33937f22ce59a0b4faff51cff8c237176)

* [OCPBUGS-53650](https://issues.redhat.com/browse/OCPBUGS-53650): bump jwt and oauth dependencies [#433](https://github.com/openshift/image-registry/pull/433)
* [Full changelog](https://github.com/openshift/image-registry/compare/b9de67d83c9f850ed42317495b7b340109b3c9ac...89c03ea33937f22ce59a0b4faff51cff8c237176)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0af06c047e5f751d77056f4ba288edb17e8d92a1)

* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Disable shielded VMs for non-UEFI disks [#117](https://github.com/openshift/machine-api-provider-gcp/pull/117)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b15daaf5836910277b7154a006800505f018aa5a...0af06c047e5f751d77056f4ba288edb17e8d92a1)


### [haproxy-router](https://github.com/openshift/router/tree/61b6fc9f69a6f7f2baf0e6a980f5f469de8a0be7)

* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades for CA-Signed Certs Using SHA1 [#641](https://github.com/openshift/router/pull/641)
* [Full changelog](https://github.com/openshift/router/compare/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3...61b6fc9f69a6f7f2baf0e6a980f5f469de8a0be7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/d227d652fda9e7a56895a879ca225be9372d0a88)

* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2358](https://github.com/openshift/kubernetes/pull/2358)
* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2359](https://github.com/openshift/kubernetes/pull/2359)
* [OCPBUGS-52183](https://issues.redhat.com/browse/OCPBUGS-52183): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2227](https://github.com/openshift/kubernetes/pull/2227)
* [OCPBUGS-53139](https://issues.redhat.com/browse/OCPBUGS-53139): UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm [#2244](https://github.com/openshift/kubernetes/pull/2244)
* [OCPBUGS-44514](https://issues.redhat.com/browse/OCPBUGS-44514): Bump k8s api to 1.28.15 [#2132](https://github.com/openshift/kubernetes/pull/2132)
* [OCPBUGS-42169](https://issues.redhat.com/browse/OCPBUGS-42169): Bump k8s api to 1.28.14 [#2091](https://github.com/openshift/kubernetes/pull/2091)
* [OCPBUGS-39016](https://issues.redhat.com/browse/OCPBUGS-39016): Update to Kubernetes v1.28.13 [#2063](https://github.com/openshift/kubernetes/pull/2063)
* [OCPBUGS-31467](https://issues.redhat.com/browse/OCPBUGS-31467): Return from EnsureHostInPool on all NIC errors [#1964](https://github.com/openshift/kubernetes/pull/1964)
* : OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated [#2058](https://github.com/openshift/kubernetes/pull/2058)
* NO-JIRA: update downstream owners [#2050](https://github.com/openshift/kubernetes/pull/2050)
* [Full changelog](https://github.com/openshift/kubernetes/compare/396c8817940d592049f2fcfdeae4a264c953ea8e...d227d652fda9e7a56895a879ca225be9372d0a88)


### [hypershift](https://github.com/openshift/hypershift/tree/4c5aa5e56a13b61197da50f39c147f46868ffe38)

* [CNTRLPLANE-1266](https://issues.redhat.com/browse/CNTRLPLANE-1266): Drop extinct mce-2.5 pipeline [#6655](https://github.com/openshift/hypershift/pull/6655)
* [CNTRLPLANE-1232](https://issues.redhat.com/browse/CNTRLPLANE-1232): Move CPO pipeline to hermetic builds [#6601](https://github.com/openshift/hypershift/pull/6601)
* [OCPBUGS-58506](https://issues.redhat.com/browse/OCPBUGS-58506): [release-4.15] Add missing service network DNS entries to KAS cert [#6394](https://github.com/openshift/hypershift/pull/6394)
* [OCPBUGS-57553](https://issues.redhat.com/browse/OCPBUGS-57553): Add proxy variables for the MCD Pod [#6293](https://github.com/openshift/hypershift/pull/6293)
* [OCPBUGS-57121](https://issues.redhat.com/browse/OCPBUGS-57121): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6231](https://github.com/openshift/hypershift/pull/6231)
* [OCPBUGS-46467](https://issues.redhat.com/browse/OCPBUGS-46467): Consistently look up and dial cloud API hostnames [#5300](https://github.com/openshift/hypershift/pull/5300)
* [OCPBUGS-52590](https://issues.redhat.com/browse/OCPBUGS-52590): Honor proxy vars in the util insecure http client [#5791](https://github.com/openshift/hypershift/pull/5791)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6086](https://github.com/openshift/hypershift/pull/6086)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6081](https://github.com/openshift/hypershift/pull/6081)
* [OCPBUGS-55266](https://issues.redhat.com/browse/OCPBUGS-55266): [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6070](https://github.com/openshift/hypershift/pull/6070)
* [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Fix golang crypto dependency go.mod replacement [#5995](https://github.com/openshift/hypershift/pull/5995)
* [OCPBUGS-53898](https://issues.redhat.com/browse/OCPBUGS-53898): bump golang-jwt v4 and v5 [#5908](https://github.com/openshift/hypershift/pull/5908)
* Red Hat Konflux update control-plane-operator-4-15 [#5955](https://github.com/openshift/hypershift/pull/5955)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5923](https://github.com/openshift/hypershift/pull/5923)
* [OCPBUGS-51729](https://issues.redhat.com/browse/OCPBUGS-51729), [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Bump dependencies to OCP fork in backports [#5902](https://github.com/openshift/hypershift/pull/5902)
* [OCPBUGS-50867](https://issues.redhat.com/browse/OCPBUGS-50867): Prevent IgnitionServer from flooding the API server with patch requests [#5633](https://github.com/openshift/hypershift/pull/5633)
* [OCPBUGS-52992](https://issues.redhat.com/browse/OCPBUGS-52992): [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller [#5815](https://github.com/openshift/hypershift/pull/5815)
* [OCPBUGS-52896](https://issues.redhat.com/browse/OCPBUGS-52896): Make managed-trust-bundle optional [#5813](https://github.com/openshift/hypershift/pull/5813)
* [OCPBUGS-50699](https://issues.redhat.com/browse/OCPBUGS-50699): add region to AWS creds passed to operators managed by CPO [#5669](https://github.com/openshift/hypershift/pull/5669)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 [#5729](https://github.com/openshift/hypershift/pull/5729)
* [OCPBUGS-51253](https://issues.redhat.com/browse/OCPBUGS-51253): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5701](https://github.com/openshift/hypershift/pull/5701)
* [OCPBUGS-52172](https://issues.redhat.com/browse/OCPBUGS-52172): [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5722](https://github.com/openshift/hypershift/pull/5722)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5683](https://github.com/openshift/hypershift/pull/5683)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 [#5624](https://github.com/openshift/hypershift/pull/5624)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5642](https://github.com/openshift/hypershift/pull/5642)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 [#5576](https://github.com/openshift/hypershift/pull/5576)
* NO-JIRA: chore(deps): update konflux references [#5588](https://github.com/openshift/hypershift/pull/5588)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 [#5338](https://github.com/openshift/hypershift/pull/5338)
* NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 [#5589](https://github.com/openshift/hypershift/pull/5589)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5586](https://github.com/openshift/hypershift/pull/5586)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5577](https://github.com/openshift/hypershift/pull/5577)
* [OCPBUGS-49668](https://issues.redhat.com/browse/OCPBUGS-49668): fix overwriting PKI operator HCP conditions [#5512](https://github.com/openshift/hypershift/pull/5512)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 [#5486](https://github.com/openshift/hypershift/pull/5486)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5480](https://github.com/openshift/hypershift/pull/5480)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) [#5434](https://github.com/openshift/hypershift/pull/5434)
* NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) [#5429](https://github.com/openshift/hypershift/pull/5429)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5425](https://github.com/openshift/hypershift/pull/5425)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5386](https://github.com/openshift/hypershift/pull/5386)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned [#5380](https://github.com/openshift/hypershift/pull/5380)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) [#5379](https://github.com/openshift/hypershift/pull/5379)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) [#5385](https://github.com/openshift/hypershift/pull/5385)
* NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net [#5371](https://github.com/openshift/hypershift/pull/5371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned [#5344](https://github.com/openshift/hypershift/pull/5344)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) [#5343](https://github.com/openshift/hypershift/pull/5343)
* [OCPBUGS-46075](https://issues.redhat.com/browse/OCPBUGS-46075): Do not send traffic to local audit-webhook through konnectivity [#5274](https://github.com/openshift/hypershift/pull/5274)
* NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.15) [#5327](https://github.com/openshift/hypershift/pull/5327)
* NO-JIRA: Update Konflux references (release-4.15) [#5326](https://github.com/openshift/hypershift/pull/5326)
* [OCPBUGS-47545](https://issues.redhat.com/browse/OCPBUGS-47545): Separate CPO containerfiles [#5334](https://github.com/openshift/hypershift/pull/5334)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.15) [#5292](https://github.com/openshift/hypershift/pull/5292)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5291](https://github.com/openshift/hypershift/pull/5291)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5251](https://github.com/openshift/hypershift/pull/5251)
* [OCPBUGS-44522](https://issues.redhat.com/browse/OCPBUGS-44522): Add network policies for konnectivity server and ignition server proxy [#5120](https://github.com/openshift/hypershift/pull/5120)
* [OCPBUGS-43931](https://issues.redhat.com/browse/OCPBUGS-43931): Return the right tagReference on Catalogs ImageStream [#5187](https://github.com/openshift/hypershift/pull/5187)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) [#5210](https://github.com/openshift/hypershift/pull/5210)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5208](https://github.com/openshift/hypershift/pull/5208)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) [#5190](https://github.com/openshift/hypershift/pull/5190)
* NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) [#5182](https://github.com/openshift/hypershift/pull/5182)
* [OCPBUGS-44278](https://issues.redhat.com/browse/OCPBUGS-44278): Configure OAuth https proxy to dial cloud endpoints directly [#5068](https://github.com/openshift/hypershift/pull/5068)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5159](https://github.com/openshift/hypershift/pull/5159)
* chore(deps): update konflux references (release-4.15) [#5136](https://github.com/openshift/hypershift/pull/5136)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) [#5129](https://github.com/openshift/hypershift/pull/5129)
* chore(deps): update konflux references (release-4.15) [#5118](https://github.com/openshift/hypershift/pull/5118)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) [#5106](https://github.com/openshift/hypershift/pull/5106)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) [#5110](https://github.com/openshift/hypershift/pull/5110)
* NO-JIRA: Update Konflux references (release-4.15) [#5109](https://github.com/openshift/hypershift/pull/5109)
* NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) [#5101](https://github.com/openshift/hypershift/pull/5101)
* chore(deps): update konflux references (release-4.15) [#5077](https://github.com/openshift/hypershift/pull/5077)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5054](https://github.com/openshift/hypershift/pull/5054)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) [#5060](https://github.com/openshift/hypershift/pull/5060)
* [OCPBUGS-44201](https://issues.redhat.com/browse/OCPBUGS-44201): add ValidIDPConfiguration condition to report IDP config issues [#5037](https://github.com/openshift/hypershift/pull/5037)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) [#5040](https://github.com/openshift/hypershift/pull/5040)
* chore(deps): update konflux references (release-4.15) [#5025](https://github.com/openshift/hypershift/pull/5025)
* chore(deps): update konflux references to f53fe54 (release-4.15) [#5022](https://github.com/openshift/hypershift/pull/5022)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) [#5016](https://github.com/openshift/hypershift/pull/5016)
* NO-JIRA: Update Konflux references (release-4.15) [#5010](https://github.com/openshift/hypershift/pull/5010)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4974](https://github.com/openshift/hypershift/pull/4974)
* [OCPBUGS-43635](https://issues.redhat.com/browse/OCPBUGS-43635): label routes only when HCP router used [#4961](https://github.com/openshift/hypershift/pull/4961)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4957](https://github.com/openshift/hypershift/pull/4957)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) [#4949](https://github.com/openshift/hypershift/pull/4949)
* [OCPBUGS-43468](https://issues.redhat.com/browse/OCPBUGS-43468): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4929](https://github.com/openshift/hypershift/pull/4929)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4932](https://github.com/openshift/hypershift/pull/4932)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) [#4916](https://github.com/openshift/hypershift/pull/4916)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4922](https://github.com/openshift/hypershift/pull/4922)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) [#4909](https://github.com/openshift/hypershift/pull/4909)
* [OCPBUGS-42881](https://issues.redhat.com/browse/OCPBUGS-42881): Let payload generation pick the release for the NodePool [#4867](https://github.com/openshift/hypershift/pull/4867)
* [OCPBUGS-42992](https://issues.redhat.com/browse/OCPBUGS-42992): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4876](https://github.com/openshift/hypershift/pull/4876)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4897](https://github.com/openshift/hypershift/pull/4897)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) [#4881](https://github.com/openshift/hypershift/pull/4881)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) [#4850](https://github.com/openshift/hypershift/pull/4850)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) [#4807](https://github.com/openshift/hypershift/pull/4807)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4815](https://github.com/openshift/hypershift/pull/4815)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) [#4793](https://github.com/openshift/hypershift/pull/4793)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4777](https://github.com/openshift/hypershift/pull/4777)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) [#4766](https://github.com/openshift/hypershift/pull/4766)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) [#4770](https://github.com/openshift/hypershift/pull/4770)
* chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) [#4769](https://github.com/openshift/hypershift/pull/4769)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) [#4767](https://github.com/openshift/hypershift/pull/4767)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4762](https://github.com/openshift/hypershift/pull/4762)
* [OCPBUGS-41373](https://issues.redhat.com/browse/OCPBUGS-41373): CPO oauth idp converter: resolve names before dialing [#4746](https://github.com/openshift/hypershift/pull/4746)
* NO-JIRA: Security fixes for openshift-ci-security job [#4751](https://github.com/openshift/hypershift/pull/4751)
* [OCPBUGS-42214](https://issues.redhat.com/browse/OCPBUGS-42214): Make guest cluster components use the correct KAS port [#4749](https://github.com/openshift/hypershift/pull/4749)
* [OCPBUGS-38059](https://issues.redhat.com/browse/OCPBUGS-38059): Add HTTP konnectivity proxy to OAuth server [#4497](https://github.com/openshift/hypershift/pull/4497)
* [HOSTEDCP-1956](https://issues.redhat.com/browse/HOSTEDCP-1956): bump CCO and go-jose version [#4697](https://github.com/openshift/hypershift/pull/4697)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4719](https://github.com/openshift/hypershift/pull/4719)
* [OCPBUGS-41701](https://issues.redhat.com/browse/OCPBUGS-41701): cmd: report server version, supported OCP [#4702](https://github.com/openshift/hypershift/pull/4702)
* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): [release-4.15] Use HTTP proxy for ingress controller [#4699](https://github.com/openshift/hypershift/pull/4699)
* [OCPBUGS-41809](https://issues.redhat.com/browse/OCPBUGS-41809): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4706](https://github.com/openshift/hypershift/pull/4706)
* [HOSTEDCP-1896](https://issues.redhat.com/browse/HOSTEDCP-1896): [release-4.15] Allow setting Kube APIServer maximum requests in flight [#4552](https://github.com/openshift/hypershift/pull/4552)
* [OCPBUGS-39463](https://issues.redhat.com/browse/OCPBUGS-39463): handle version skewed NodePools that do not have rhel9 binaries [#4666](https://github.com/openshift/hypershift/pull/4666)
* [OCPBUGS-39077](https://issues.redhat.com/browse/OCPBUGS-39077): Set KCM node monitor grace period [#4628](https://github.com/openshift/hypershift/pull/4628)
* [OCPBUGS-30465](https://issues.redhat.com/browse/OCPBUGS-30465): fix: bump google.golang.org/protobuf [#4616](https://github.com/openshift/hypershift/pull/4616)
* [OCPBUGS-39171](https://issues.redhat.com/browse/OCPBUGS-39171): fix: bump github.com/IBM/go-sdk-core/v5 [#4625](https://github.com/openshift/hypershift/pull/4625)
* [OCPBUGS-35815](https://issues.redhat.com/browse/OCPBUGS-35815): Add hypershift-cluster-version-operator image to release providers [#4243](https://github.com/openshift/hypershift/pull/4243)
* NO-JIRA: test: relax mgmt KAS egress check [#4631](https://github.com/openshift/hypershift/pull/4631)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#4200](https://github.com/openshift/hypershift/pull/4200)
* NO-JIRA: Flaky cert validation test [#4630](https://github.com/openshift/hypershift/pull/4630)
* [OCPBUGS-38943](https://issues.redhat.com/browse/OCPBUGS-38943): copy oapi ca-trust recursively when building trust anchor [#4613](https://github.com/openshift/hypershift/pull/4613)
* [OCPBUGS-39041](https://issues.redhat.com/browse/OCPBUGS-39041): set proxy envvars on aws and azure CCMs [#4624](https://github.com/openshift/hypershift/pull/4624)
* [OCPBUGS-38613](https://issues.redhat.com/browse/OCPBUGS-38613): hcco: reconcile apiserver config into hosted cluster [#4567](https://github.com/openshift/hypershift/pull/4567)
* [OCPBUGS-38561](https://issues.redhat.com/browse/OCPBUGS-38561): Let the CPO oidc check resolve through data plane [#4564](https://github.com/openshift/hypershift/pull/4564)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak ciphers from security profile [#4547](https://github.com/openshift/hypershift/pull/4547)
* [Full changelog](https://github.com/openshift/hypershift/compare/f834cd544217aa9daf93c87e48649c8cb5111b32...4c5aa5e56a13b61197da50f39c147f46868ffe38)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/cc0d54159c5d626aaa91eef94a92a80b3d1a3870)

* : OCPBUGS-37311: Bump otelgrpc to v0.49.0 [#74](https://github.com/openshift/cloud-provider-ibm/pull/74)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/19e64d5c78656c7c91cbec310ca312cbe92f60f0...cc0d54159c5d626aaa91eef94a92a80b3d1a3870)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/714ed7d71423e46cdf178b3352729cd47e566cd2)

* [OCPBUGS-58739](https://issues.redhat.com/browse/OCPBUGS-58739): bump github.com/golang/glog to version v1.2.4 [#107](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/107)
* [OCPBUGS-56064](https://issues.redhat.com/browse/OCPBUGS-56064): tech debt: rework vendor patches [#92](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/92)
* [OCPBUGS-53906](https://issues.redhat.com/browse/OCPBUGS-53906): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#85](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/85)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d...714ed7d71423e46cdf178b3352729cd47e566cd2)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/9c64fe8a910b916c29f9eb32712df001d09ca3bf)

* [OCPBUGS-59775](https://issues.redhat.com/browse/OCPBUGS-59775): [IBM VPC] set offlineExpansion to false in e2e test manifest [#150](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/150)
* [OCPBUGS-42438](https://issues.redhat.com/browse/OCPBUGS-42438): Reorder static resources to create RBAC first [#130](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/df0f1f6443e23009afbafe88b22d9b3440dff4b8...9c64fe8a910b916c29f9eb32712df001d09ca3bf)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3)

* [OCPBUGS-56064](https://issues.redhat.com/browse/OCPBUGS-56064): tech debt: rework vendor patches [#49](https://github.com/openshift/ibm-vpc-node-label-updater/pull/49)
* [OCPBUGS-53538](https://issues.redhat.com/browse/OCPBUGS-53538): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#45](https://github.com/openshift/ibm-vpc-node-label-updater/pull/45)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/5d72ced58e4ff3c4d4ad02f181578755dfa0312a...9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/299435a5197062c1c2280d50a9e83ed95b037fb4)

* [OCPBUGS-51814](https://issues.redhat.com/browse/OCPBUGS-51814): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#122](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/122)
* [OCPBUGS-36078](https://issues.redhat.com/browse/OCPBUGS-36078): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.15 [#87](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/87)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/34fb625247f6743637b0ef0c5767e000e0ec1e65...299435a5197062c1c2280d50a9e83ed95b037fb4)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6846b9a79e2f2dfc39061fe7625202db30a9a6b4)

* [OCPBUGS-36084](https://issues.redhat.com/browse/OCPBUGS-36084): Bump dependency for CVE [#54](https://github.com/openshift/machine-api-provider-ibmcloud/pull/54)
* [OCPBUGS-43675](https://issues.redhat.com/browse/OCPBUGS-43675): IBMCloud: Handle pagination for subnets [#48](https://github.com/openshift/machine-api-provider-ibmcloud/pull/48)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1...6846b9a79e2f2dfc39061fe7625202db30a9a6b4)


### [insights-operator](https://github.com/openshift/insights-operator/tree/975bba9802ebd6c0f1e52117584b82c38831eda8)

* Ignore previous status when disabling alerts (#1060) [#1060](https://github.com/openshift/insights-operator/pull/1060)
* [OCPBUGS-45204](https://issues.redhat.com/browse/OCPBUGS-45204): LokiStack gatherer (#1057) [#1057](https://github.com/openshift/insights-operator/pull/1057)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1056) [#1056](https://github.com/openshift/insights-operator/pull/1056)
* gather selected clusterroles (#1024) [#1024](https://github.com/openshift/insights-operator/pull/1024)
* [OCPBUGS-39565](https://issues.redhat.com/browse/OCPBUGS-39565): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) [#1015](https://github.com/openshift/insights-operator/pull/1015)
* [OCPBUGS-39395](https://issues.redhat.com/browse/OCPBUGS-39395): collect some nmstate customresources (#986) (#989) (#995) (#1002) [#986](https://github.com/openshift/insights-operator/pull/986)
* Add haproxy metric (#983) [#983](https://github.com/openshift/insights-operator/pull/983)
* [Full changelog](https://github.com/openshift/insights-operator/compare/89ed9a3fbb5fe096d89d33164a37b217b48f6446...975bba9802ebd6c0f1e52117584b82c38831eda8)


### [ironic](https://github.com/openshift/ironic-image/tree/3bf0111ba3952bac33403a5adc3533c8f35d674c)

* [OCPBUGS-48148](https://issues.redhat.com/browse/OCPBUGS-48148), [OCPBUGS-48597](https://issues.redhat.com/browse/OCPBUGS-48597): Bump jinja2 to 3.0.1-6.el9.2 [#624](https://github.com/openshift/ironic-image/pull/624)
* [OCPBUGS-43953](https://issues.redhat.com/browse/OCPBUGS-43953), [OCPBUGS-43961](https://issues.redhat.com/browse/OCPBUGS-43961): Bump python-waitress [4.15] [#605](https://github.com/openshift/ironic-image/pull/605)
* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#570](https://github.com/openshift/ironic-image/pull/570)
* [OCPBUGS-38798](https://issues.redhat.com/browse/OCPBUGS-38798): redfish-virtualmedia fails on XFusion nodes [#565](https://github.com/openshift/ironic-image/pull/565)
* [OCPBUGS-37761](https://issues.redhat.com/browse/OCPBUGS-37761), [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#583](https://github.com/openshift/ironic-image/pull/583)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set min version for python3-webob [#554](https://github.com/openshift/ironic-image/pull/554)
* [Full changelog](https://github.com/openshift/ironic-image/compare/ecfc66474fcbc8fb0d2809b75c50e267d89953e1...3bf0111ba3952bac33403a5adc3533c8f35d674c)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d339f3ffb3bbf9879037c1f3d88303880dcb3068)

* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#157](https://github.com/openshift/ironic-agent-image/pull/157)
* [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#162](https://github.com/openshift/ironic-agent-image/pull/162)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set webob and bump werkzeug [#150](https://github.com/openshift/ironic-agent-image/pull/150)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/4f8c828af122ab56ba97ba02467e3c306e8bfd1d...d339f3ffb3bbf9879037c1f3d88303880dcb3068)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/989bcb4f50a98c741f3c9c02c2f0fb118be216c8)

* [OCPBUGS-49836](https://issues.redhat.com/browse/OCPBUGS-49836): Fix subnet validation [#49](https://github.com/openshift/ironic-static-ip-manager/pull/49)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/472000211344be4a5e9581820e94895144cf2bfc...989bcb4f50a98c741f3c9c02c2f0fb118be216c8)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/34e201936898455995cd60c6699c6329a696f288)

* [OCPBUGS-35820](https://issues.redhat.com/browse/OCPBUGS-35820): Fix the podmetrics and nodemetrics command [#109](https://github.com/openshift/k8s-prometheus-adapter/pull/109)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/da16e56001ae274021794aef7926d77ccd96dab5...34e201936898455995cd60c6699c6329a696f288)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/87c23b5aa611556ff5013822c7779e6c7551a0f0)

* [OCPBUGS-19254](https://issues.redhat.com/browse/OCPBUGS-19254): Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#152](https://github.com/openshift/images/pull/152)
* [Full changelog](https://github.com/openshift/images/compare/27f169500584b0909270d1775f5da295bc212e3e...87c23b5aa611556ff5013822c7779e6c7551a0f0)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53680a50f8ca7bbcfa6c258c557c765fa6f8471a)

* [OCPBUGS-54868](https://issues.redhat.com/browse/OCPBUGS-54868): Handle `openshift-host-network` namespace as special when it modifies [#654](https://github.com/openshift/sdn/pull/654)
* [OCPBUGS-46576](https://issues.redhat.com/browse/OCPBUGS-46576): Get rid of deps.diff so it doesn't keep causing problems [4.15] [#646](https://github.com/openshift/sdn/pull/646)
* [OCPBUGS-45955](https://issues.redhat.com/browse/OCPBUGS-45955): Stop checking ruleVersion [4.16] [#644](https://github.com/openshift/sdn/pull/644)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): backport fix for network policy during live migration [#642](https://github.com/openshift/sdn/pull/642)
* [OCPBUGS-42171](https://issues.redhat.com/browse/OCPBUGS-42171): fix redundant router-default iptables rule [4.15] [#634](https://github.com/openshift/sdn/pull/634)
* [Full changelog](https://github.com/openshift/sdn/compare/71a6f28d69f77953d104219cee344a70f7cbede1...53680a50f8ca7bbcfa6c258c557c765fa6f8471a)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)

* [OCPBUGS-31941](https://issues.redhat.com/browse/OCPBUGS-31941): bump golang.org/x/net [4.15] [#109](https://github.com/openshift/kube-rbac-proxy/pull/109)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/e8e8c84bcc6d4419970726f3028df4b178c0b1c9...9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). [#228](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/228)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/e8749689edb8e7fea42eca5f2b67c3187192cdeb...a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/23b66bfa19c2eae23dc9ef715f244e937dee9e64)

* fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver [#69](https://github.com/openshift/kubevirt-csi-driver/pull/69)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3...23b66bfa19c2eae23dc9ef715f244e937dee9e64)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/7dab74442333f91cd952091ab4ebf6aee7250cf2)

* [OCPBUGS-26506](https://issues.redhat.com/browse/OCPBUGS-26506): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 [#282](https://github.com/openshift/cluster-api-provider-libvirt/pull/282)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a...7dab74442333f91cd952091ab4ebf6aee7250cf2)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d74ba02d5cce71646094eb38432cc2036e76d24f)

* [OCPBUGS-59861](https://issues.redhat.com/browse/OCPBUGS-59861): Updates GCP CredentialsRequest [#1397](https://github.com/openshift/machine-api-operator/pull/1397)
* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Updates GCP credentials request [#1356](https://github.com/openshift/machine-api-operator/pull/1356)
* [OCPBUGS-53251](https://issues.redhat.com/browse/OCPBUGS-53251): add image/read permissions [#1349](https://github.com/openshift/machine-api-operator/pull/1349)
* [OCPBUGS-52481](https://issues.redhat.com/browse/OCPBUGS-52481): Drop oVirt support [#1340](https://github.com/openshift/machine-api-operator/pull/1340)
* [OCPBUGS-48105](https://issues.redhat.com/browse/OCPBUGS-48105): Vsphere: Handle cloned instance with lost taskID [#1321](https://github.com/openshift/machine-api-operator/pull/1321)
* [OCPBUGS-46080](https://issues.redhat.com/browse/OCPBUGS-46080): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1314](https://github.com/openshift/machine-api-operator/pull/1314)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#1288](https://github.com/openshift/machine-api-operator/pull/1288)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7dc0e85f87294f913ea69cdf9508d843a28084e1...d74ba02d5cce71646094eb38432cc2036e76d24f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/78cd08913cca349b783423d103fe234b56ba0a68)

* [OCPBUGS-60214](https://issues.redhat.com/browse/OCPBUGS-60214): [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host [#4988](https://github.com/openshift/machine-config-operator/pull/4988)
* [OCPBUGS-59737](https://issues.redhat.com/browse/OCPBUGS-59737): Remove MachineConfigNode CRD from manifests [#5188](https://github.com/openshift/machine-config-operator/pull/5188)
* [OCPBUGS-48284](https://issues.redhat.com/browse/OCPBUGS-48284): Do not run resolv-prepender from NM dispatcher [#4783](https://github.com/openshift/machine-config-operator/pull/4783)
* [OCPBUGS-57340](https://issues.redhat.com/browse/OCPBUGS-57340): Do not enable on-prem-resolv-prepender.path for UPI [#5115](https://github.com/openshift/machine-config-operator/pull/5115)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688): Add ipsec connect wait service [#4937](https://github.com/openshift/machine-config-operator/pull/4937)
* [OCPBUGS-54206](https://issues.redhat.com/browse/OCPBUGS-54206): Update format verbs for alert logs [#4943](https://github.com/openshift/machine-config-operator/pull/4943)
* [OCPBUGS-54176](https://issues.redhat.com/browse/OCPBUGS-54176): Update ObservedGeneration in KubeletConfig [#4944](https://github.com/openshift/machine-config-operator/pull/4944)
* [OCPBUGS-43742](https://issues.redhat.com/browse/OCPBUGS-43742): Soften haproxy timeout for kubeapi probe [#4663](https://github.com/openshift/machine-config-operator/pull/4663)
* [OCPBUGS-50526](https://issues.redhat.com/browse/OCPBUGS-50526): Add clarification to invalid maxUnavailable alert [#4842](https://github.com/openshift/machine-config-operator/pull/4842)
* [OCPBUGS-48583](https://issues.redhat.com/browse/OCPBUGS-48583): trying to wait for sub-contorllers [#4796](https://github.com/openshift/machine-config-operator/pull/4796)
* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Remove trailing periods from AWS provided hostnames [#4745](https://github.com/openshift/machine-config-operator/pull/4745)
* [OCPBUGS-44565](https://issues.redhat.com/browse/OCPBUGS-44565): Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously [#4702](https://github.com/openshift/machine-config-operator/pull/4702)
* [OCPBUGS-42137](https://issues.redhat.com/browse/OCPBUGS-42137): Removal of additionalTrustBundle CA  does not remove certificate from node backport [#4687](https://github.com/openshift/machine-config-operator/pull/4687)
* [OCPBUGS-44240](https://issues.redhat.com/browse/OCPBUGS-44240): Disable ESP offload for OVS attached interfaces [#4684](https://github.com/openshift/machine-config-operator/pull/4684)
* [MCO-1341](https://issues.redhat.com/browse/MCO-1341): Backport Telemetry to 4.15 [#4648](https://github.com/openshift/machine-config-operator/pull/4648)
* [OCPBUGS-42110](https://issues.redhat.com/browse/OCPBUGS-42110): Do not use 'restart' for 'oneshot' service [#4621](https://github.com/openshift/machine-config-operator/pull/4621)
* [OCPBUGS-43582](https://issues.redhat.com/browse/OCPBUGS-43582): Panic seen in CI job for MCC pod [#4653](https://github.com/openshift/machine-config-operator/pull/4653)
* [OCPBUGS-43575](https://issues.redhat.com/browse/OCPBUGS-43575): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4647](https://github.com/openshift/machine-config-operator/pull/4647)
* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Make logging configurable for on-prem components [#4501](https://github.com/openshift/machine-config-operator/pull/4501)
* [OCPBUGS-32329](https://issues.redhat.com/browse/OCPBUGS-32329): Fix configure-ip-forwarding.sh [#4324](https://github.com/openshift/machine-config-operator/pull/4324)
* [OCPBUGS-37551](https://issues.redhat.com/browse/OCPBUGS-37551): On-Prem resolv prepender to watch for NM changes [#4499](https://github.com/openshift/machine-config-operator/pull/4499)
* [OCPBUGS-38712](https://issues.redhat.com/browse/OCPBUGS-38712): SCC-pinning for openshift workloads [#4540](https://github.com/openshift/machine-config-operator/pull/4540)
* [OCPBUGS-38370](https://issues.redhat.com/browse/OCPBUGS-38370): Revert "MCD-pull: run after network-online.target in Azure" [#4525](https://github.com/openshift/machine-config-operator/pull/4525)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/39b19d5873b5d2423c3642bf7b94d2a9848b3d6e...78cd08913cca349b783423d103fe234b56ba0a68)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b7f83c7d1c2df17f824f4e427433973b848f44cb)

* [OCPBUGS-54170](https://issues.redhat.com/browse/OCPBUGS-54170): Change rhcos release browser url [#58](https://github.com/openshift/machine-os-images/pull/58)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e9c920f985a375536e8d4caafd2d7ed579e27f3...b7f83c7d1c2df17f824f4e427433973b848f44cb)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/1217bc1ead005c2232fa9f21da5b2174a9b25140)

* [OCPBUGS-44393](https://issues.redhat.com/browse/OCPBUGS-44393): Manual cherry pick cross spawn 4.15 [#277](https://github.com/openshift/monitoring-plugin/pull/277)
* [OCPBUGS-43242](https://issues.redhat.com/browse/OCPBUGS-43242): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.15 [#218](https://github.com/openshift/monitoring-plugin/pull/218)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/53c186206d94508b2aec4c5af5e112b79d5f67d1...1217bc1ead005c2232fa9f21da5b2174a9b25140)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)

* [OCPBUGS-58769](https://issues.redhat.com/browse/OCPBUGS-58769): Update the github.com/golang/glog module to v1.2.4 [#104](https://github.com/openshift/multus-admission-controller/pull/104)
* [OCPBUGS-37727](https://issues.redhat.com/browse/OCPBUGS-37727): Update owners [#88](https://github.com/openshift/multus-admission-controller/pull/88)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44...a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)

* Update owners (#58) [#58](https://github.com/openshift/multus-networkpolicy/pull/58)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6212406b49cbcc75a01da85a67469b4872754e1d...b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)

* [OCPBUGS-41804](https://issues.redhat.com/browse/OCPBUGS-41804): [release-4.15]Update owners [#59](https://github.com/openshift/route-override-cni/pull/59)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5...1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/cfa4f975508177d8daee9652ca75fe16f9e5dc27)

* [OCPBUGS-55619](https://issues.redhat.com/browse/OCPBUGS-55619): Fixes leftover podref issue [#366](https://github.com/openshift/whereabouts-cni/pull/366)
* [OCPBUGS-37729](https://issues.redhat.com/browse/OCPBUGS-37729): Update owners [#305](https://github.com/openshift/whereabouts-cni/pull/305)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/c9d4776f6b59be2ce2e9e382d8c53d9ee47cd434...cfa4f975508177d8daee9652ca75fe16f9e5dc27)


### [must-gather](https://github.com/openshift/must-gather/tree/0f70f31cc6a01d849fef5262e20f934bf87a91ee)

* [OCPBUGS-36371](https://issues.redhat.com/browse/OCPBUGS-36371): Run ppc node collection in parallel [#430](https://github.com/openshift/must-gather/pull/430)
* [OCPBUGS-42970](https://issues.redhat.com/browse/OCPBUGS-42970): Collect etcd object count [#456](https://github.com/openshift/must-gather/pull/456)
* [OCPBUGS-48083](https://issues.redhat.com/browse/OCPBUGS-48083): Update owners [#474](https://github.com/openshift/must-gather/pull/474)
* [OCPBUGS-46451](https://issues.redhat.com/browse/OCPBUGS-46451): Support gathering IPsec data [#471](https://github.com/openshift/must-gather/pull/471)
* [OCPBUGS-43057](https://issues.redhat.com/browse/OCPBUGS-43057): [Relase-4.15] Multus is now a Pod and will be captured by normal [#450](https://github.com/openshift/must-gather/pull/450)
* [Full changelog](https://github.com/openshift/must-gather/compare/47335065cc7137ec098567b06d21f742669b4200...0f70f31cc6a01d849fef5262e20f934bf87a91ee)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/1b188fa1f7efdda0dafbdd409deed32450017dfc)

* [OCPBUGS-58779](https://issues.redhat.com/browse/OCPBUGS-58779): Bump github.com/golang/glog to v1.2.4 (#114) [#114](https://github.com/openshift/network-metrics-daemon/pull/114)
* [OCPBUGS-60374](https://issues.redhat.com/browse/OCPBUGS-60374): Replace e2e test image (#126) [#126](https://github.com/openshift/network-metrics-daemon/pull/126)
* swtich golint install method (#124) [#124](https://github.com/openshift/network-metrics-daemon/pull/124)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9e21740225af47318a9ed6d03c2eb9ee2aaea883...1b188fa1f7efdda0dafbdd409deed32450017dfc)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/040d4e016058c188d2ba0a7575054ee44b94af9e)

* [OCPBUGS-22078](https://issues.redhat.com/browse/OCPBUGS-22078): bump golang.org/x/net to v0.17.0 [#40](https://github.com/openshift/cloud-provider-nutanix/pull/40)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d...040d4e016058c188d2ba0a7575054ee44b94af9e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/ec58a6114b305b91d9a476e5f29c98b1a059c2ad)

* [OCPBUGS-47264](https://issues.redhat.com/browse/OCPBUGS-47264): fixing CVE-2024-45338 [#117](https://github.com/openshift/machine-api-provider-nutanix/pull/117)
* [OCPBUGS-51850](https://issues.redhat.com/browse/OCPBUGS-51850): CVE-2025-22868 [#109](https://github.com/openshift/machine-api-provider-nutanix/pull/109)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#81](https://github.com/openshift/machine-api-provider-nutanix/pull/81)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f02b1a28d89ea69c614995163874ca1eff4f4aaf...ec58a6114b305b91d9a476e5f29c98b1a059c2ad)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2e0585db0922491e4ad26a969678df629c78c637)

* [OCPBUGS-61447](https://issues.redhat.com/browse/OCPBUGS-61447): Update x/crypto to v0.31.0 [#336](https://github.com/openshift/oauth-proxy/pull/336)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e...2e0585db0922491e4ad26a969678df629c78c637)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/553681632fb168ccf003b47b67e0f15350b1beaf)

* changes the owners file (#1014) [#1014](https://github.com/openshift/oc-mirror/pull/1014)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1022) [#1022](https://github.com/openshift/oc-mirror/pull/1022)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91f573c771182f7fd4a2d3513ed49562dee6b38...553681632fb168ccf003b47b67e0f15350b1beaf)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/65ff3cd489eb7749c5738ecb94ce813aed3042f7)

* [OCPBUGS-58822](https://issues.redhat.com/browse/OCPBUGS-58822): Fix image reference in TestImageStreamImportQuayIO [#517](https://github.com/openshift/openshift-apiserver/pull/517)
* [OCPBUGS-47766](https://issues.redhat.com/browse/OCPBUGS-47766): Pass expected type to deploymentconfig/scale object validation. [#466](https://github.com/openshift/openshift-apiserver/pull/466)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/08f4c422eed5d9584799244c0d9755708686c0c8...65ff3cd489eb7749c5738ecb94ce813aed3042f7)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/110a10ad9c720400f87e3428354ccff051b70af3)

* [OCPBUGS-57761](https://issues.redhat.com/browse/OCPBUGS-57761): Set node-pullsecrets volume to read-only to protect image pull credentials [#396](https://github.com/openshift/openshift-controller-manager/pull/396)
* [OCPBUGS-56474](https://issues.redhat.com/browse/OCPBUGS-56474): Empty proxy variables are causing issues during the build [#383](https://github.com/openshift/openshift-controller-manager/pull/383)
* [OCPBUGS-54344](https://issues.redhat.com/browse/OCPBUGS-54344): Unable to look up the service account secrets for build [#370](https://github.com/openshift/openshift-controller-manager/pull/370)
* [OCPBUGS-48280](https://issues.redhat.com/browse/OCPBUGS-48280): Add team members to the OWNERS file [#359](https://github.com/openshift/openshift-controller-manager/pull/359)
* NO-JIRA: cleanup root and app OWNERS [#348](https://github.com/openshift/openshift-controller-manager/pull/348)
* [OCPBUGS-32871](https://issues.redhat.com/browse/OCPBUGS-32871): replaces deprecated square/go-jose wtih go-jose/go-jose [#333](https://github.com/openshift/openshift-controller-manager/pull/333)
* [OCPBUGS-41949](https://issues.redhat.com/browse/OCPBUGS-41949): Add adambkaplan as approver [#291](https://github.com/openshift/openshift-controller-manager/pull/291)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/104b9ece0feb24da89fa6b87d90d60dd27fce813...110a10ad9c720400f87e3428354ccff051b70af3)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/38fcbe47376549c4a9de485200b3b968dbb6efc9)

* [OCPBUGS-61466](https://issues.redhat.com/browse/OCPBUGS-61466): [release-4.15] Add NetworkPolicy as a supported kind [#1051](https://github.com/openshift/operator-framework-olm/pull/1051)
* [OCPBUGS-61389](https://issues.redhat.com/browse/OCPBUGS-61389): [4.15] e2e stability fixes [#1084](https://github.com/openshift/operator-framework-olm/pull/1084)
* [OCPBUGS-57430](https://issues.redhat.com/browse/OCPBUGS-57430): reduce cache expiry frequency [release-4.19] [#1023](https://github.com/openshift/operator-framework-olm/pull/1023)
* [OCPBUGS-56463](https://issues.redhat.com/browse/OCPBUGS-56463): fix(olm): improve error logging for missing olm.managed label (#3558) [#1010](https://github.com/openshift/operator-framework-olm/pull/1010)
* [OCPBUGS-48662](https://issues.redhat.com/browse/OCPBUGS-48662): Fix concurrent namespace resolution [#948](https://github.com/openshift/operator-framework-olm/pull/948)
* [OCPBUGS-48697](https://issues.redhat.com/browse/OCPBUGS-48697): Fix excessive catalog source snapshots cause severe performance regression [#958](https://github.com/openshift/operator-framework-olm/pull/958)
* [OCPBUGS-46926](https://issues.redhat.com/browse/OCPBUGS-46926), [OCPBUGS-46933](https://issues.redhat.com/browse/OCPBUGS-46933), [OCPBUGS-47313](https://issues.redhat.com/browse/OCPBUGS-47313): x/net bump to v0.34.0 [release-4.15] [#940](https://github.com/openshift/operator-framework-olm/pull/940)
* [OCPBUGS-46479](https://issues.redhat.com/browse/OCPBUGS-46479): CRD upgrade existing CR validation fix [#917](https://github.com/openshift/operator-framework-olm/pull/917)
* [OCPBUGS-42114](https://issues.redhat.com/browse/OCPBUGS-42114): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata [#874](https://github.com/openshift/operator-framework-olm/pull/874)
* [OCPBUGS-41981](https://issues.redhat.com/browse/OCPBUGS-41981): (fix) registry pods do not come up again after node failure (#3366) [#868](https://github.com/openshift/operator-framework-olm/pull/868)
* [OCPBUGS-41819](https://issues.redhat.com/browse/OCPBUGS-41819): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#864](https://github.com/openshift/operator-framework-olm/pull/864)
* [OCPBUGS-41598](https://issues.redhat.com/browse/OCPBUGS-41598): Fix e2e flake: upgrade CRD with deprecated version [#862](https://github.com/openshift/operator-framework-olm/pull/862)
* [OCPBUGS-38383](https://issues.redhat.com/browse/OCPBUGS-38383): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#840](https://github.com/openshift/operator-framework-olm/pull/840)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/54c9bb9ffdf3206dcf415bb78d2d37ed5178d69b...38fcbe47376549c4a9de485200b3b968dbb6efc9)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/47c104b84bb2af0f589d8e06eccb6a8933b25e2f)

* [OCPBUGS-62221](https://issues.redhat.com/browse/OCPBUGS-62221): Remove Expect func so that the test case can use the retry logic [#672](https://github.com/operator-framework/operator-marketplace/pull/672)
* [OCPBUGS-62119](https://issues.redhat.com/browse/OCPBUGS-62119): Update memoryTarget on catalog source pods [#666](https://github.com/operator-framework/operator-marketplace/pull/666)
* [OCPBUGS-49428](https://issues.redhat.com/browse/OCPBUGS-49428): Upgrade golang.org/x/net [release-4.15] [#588](https://github.com/operator-framework/operator-marketplace/pull/588)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/1f1bc1988527f01b7326f63953aacbd400fd8426...47c104b84bb2af0f589d8e06eccb6a8933b25e2f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8fbb5635f96ed60cf0df5aabedfc6ee9698dbceb)

* [OCPBUGS-56660](https://issues.redhat.com/browse/OCPBUGS-56660), [OCPBUGS-58162](https://issues.redhat.com/browse/OCPBUGS-58162): Unpin OVS patch versions #2649 [#2649](https://github.com/openshift/ovn-kubernetes/pull/2649)
* [OCPBUGS-56419](https://issues.redhat.com/browse/OCPBUGS-56419): Update to FDP25.A.1 24.03.5-40. [#2573](https://github.com/openshift/ovn-kubernetes/pull/2573)
* [OCPBUGS-50583](https://issues.redhat.com/browse/OCPBUGS-50583): Bump OVN to 23.09.6-12 to consume fix for FDP-905 [#2454](https://github.com/openshift/ovn-kubernetes/pull/2454)
* [OCPBUGS-53384](https://issues.redhat.com/browse/OCPBUGS-53384): [release-4.15] Dockerfile.base: bump OVS version to 3.3 [#2492](https://github.com/openshift/ovn-kubernetes/pull/2492)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): Add SDN node subnet gateway IP to host-network address_set [#2419](https://github.com/openshift/ovn-kubernetes/pull/2419)
* [OCPBUGS-46403](https://issues.redhat.com/browse/OCPBUGS-46403): Add static route to the hairpin masquerade IPs to pod [#2396](https://github.com/openshift/ovn-kubernetes/pull/2396)
* [OCPBUGS-47799](https://issues.redhat.com/browse/OCPBUGS-47799): Let OVN-northd bind remote ports [#2407](https://github.com/openshift/ovn-kubernetes/pull/2407)
* [OCPBUGS-44708](https://issues.redhat.com/browse/OCPBUGS-44708): Add hybird overlay pod IPs to the namespace address_set [#2399](https://github.com/openshift/ovn-kubernetes/pull/2399)
* [OCPBUGS-45097](https://issues.redhat.com/browse/OCPBUGS-45097): pin libreswan to 4.6-3.el9_0.3 [#2374](https://github.com/openshift/ovn-kubernetes/pull/2374)
* [OCPBUGS-44782](https://issues.redhat.com/browse/OCPBUGS-44782): Bump ovs to 3.1.0-137 [#2359](https://github.com/openshift/ovn-kubernetes/pull/2359)
* [OCPBUGS-42943](https://issues.redhat.com/browse/OCPBUGS-42943): Fix egress gateway pod cleanup for remote zone pods. [#2342](https://github.com/openshift/ovn-kubernetes/pull/2342)
* [OCPBUGS-41838](https://issues.redhat.com/browse/OCPBUGS-41838): Use more exact name match when deleting static routes to HO nodes. [#2298](https://github.com/openshift/ovn-kubernetes/pull/2298)
* [OCPBUGS-42780](https://issues.redhat.com/browse/OCPBUGS-42780): Add subnet overlap check for transit switch subnet [#2313](https://github.com/openshift/ovn-kubernetes/pull/2313)
* [OCPBUGS-41340](https://issues.redhat.com/browse/OCPBUGS-41340): Delete EgressIP LRP stale nexthops when node is not found [#2288](https://github.com/openshift/ovn-kubernetes/pull/2288)
* [OCPBUGS-38262](https://issues.redhat.com/browse/OCPBUGS-38262): [release-4.15] Bump OVSDBTimeout and make it configurable. [#2252](https://github.com/openshift/ovn-kubernetes/pull/2252)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4b32e36356fcd35317f71b69bc20a27ddcd77fc1...8fbb5635f96ed60cf0df5aabedfc6ee9698dbceb)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/1d6a7ed991427b1c8048b0b44b706228e5c2a001)

* [OCPBUGS-36106](https://issues.redhat.com/browse/OCPBUGS-36106): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 [#74](https://github.com/openshift/cloud-provider-powervs/pull/74)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/521b80dfc284a1ca0c6e112ac7bf7b504c786d88...1d6a7ed991427b1c8048b0b44b706228e5c2a001)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/5c68b044b7fc3e70e39f6d67e4df440d8206d929)

* [OCPBUGS-61702](https://issues.redhat.com/browse/OCPBUGS-61702): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#128](https://github.com/openshift/machine-api-provider-powervs/pull/128)
* [OCPBUGS-54753](https://issues.redhat.com/browse/OCPBUGS-54753): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 [#115](https://github.com/openshift/machine-api-provider-powervs/pull/115)
* [OCPBUGS-41977](https://issues.redhat.com/browse/OCPBUGS-41977): Update go.mod to fix CVE - 4.15 [#85](https://github.com/openshift/machine-api-provider-powervs/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/07e8f8b81748d52cf596082b8102134e954137ba...5c68b044b7fc3e70e39f6d67e4df440d8206d929)


### [prometheus](https://github.com/openshift/prometheus/tree/79fa623a51580ca0cfc30609b27da0a56a4f2282)

* [OCPBUGS-56740](https://issues.redhat.com/browse/OCPBUGS-56740): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#256](https://github.com/openshift/prometheus/pull/256)
* [OCPBUGS-43669](https://issues.redhat.com/browse/OCPBUGS-43669): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#233](https://github.com/openshift/prometheus/pull/233)
* [Full changelog](https://github.com/openshift/prometheus/compare/6828e4464c45f239a89c7965233c2fef49c6b1fb...79fa623a51580ca0cfc30609b27da0a56a4f2282)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/902436ac6a8eec8f2f3f8b91f519a3d319924833)

* [OCPBUGS-38400](https://issues.redhat.com/browse/OCPBUGS-38400): feat: sync proxy settings in Alertmanager configuration [#300](https://github.com/openshift/prometheus-operator/pull/300)
* [OCPBUGS-36719](https://issues.redhat.com/browse/OCPBUGS-36719): add proxyURL validation for smon,pmon and probe [#298](https://github.com/openshift/prometheus-operator/pull/298)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/faad27f990b16a0806f92bf0362e45d777cec8e7...902436ac6a8eec8f2f3f8b91f519a3d319924833)


### [tests](https://github.com/openshift/origin/tree/c09e6f108b9756e10cf4a0dad49d47aec2908746)

* [OCPBUGS-57335](https://issues.redhat.com/browse/OCPBUGS-57335): Fix regex parser for censoring private key [#29913](https://github.com/openshift/origin/pull/29913)
* [OCPBUGS-61229](https://issues.redhat.com/browse/OCPBUGS-61229): images/tests: Remove rteval [#30207](https://github.com/openshift/origin/pull/30207)
* [OCPBUGS-57136](https://issues.redhat.com/browse/OCPBUGS-57136): aws/edge: prevent test using unschedulable nodes [#29897](https://github.com/openshift/origin/pull/29897)
* [OCPBUGS-55477](https://issues.redhat.com/browse/OCPBUGS-55477): support provider type external [#29739](https://github.com/openshift/origin/pull/29739)
* NO-JIRA: Sync OWNERS from main branch [#29856](https://github.com/openshift/origin/pull/29856)
* [OCPBUGS-55695](https://issues.redhat.com/browse/OCPBUGS-55695): [build] Ensure Git Clone Does Not Run Privileged [#29752](https://github.com/openshift/origin/pull/29752)
* [OCPBUGS-54769](https://issues.redhat.com/browse/OCPBUGS-54769): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29664](https://github.com/openshift/origin/pull/29664)
* [OCPBUGS-52582](https://issues.redhat.com/browse/OCPBUGS-52582): Use payload pullspec for image info test [#29590](https://github.com/openshift/origin/pull/29590)
* [OCPBUGS-41614](https://issues.redhat.com/browse/OCPBUGS-41614): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29502](https://github.com/openshift/origin/pull/29502)
* [OCPBUGS-49647](https://issues.redhat.com/browse/OCPBUGS-49647): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29503](https://github.com/openshift/origin/pull/29503)
* [OCPBUGS-48749](https://issues.redhat.com/browse/OCPBUGS-48749): Add/remove team members to the OWNERS file for Builds [#29551](https://github.com/openshift/origin/pull/29551)
* [OCPBUGS-44106](https://issues.redhat.com/browse/OCPBUGS-44106): Adjust createDNSPod() to support hypershift dual-stack test [#29257](https://github.com/openshift/origin/pull/29257)
* [OCPBUGS-38086](https://issues.redhat.com/browse/OCPBUGS-38086): vertical scaling test should not rely on CPMS replicas [#28985](https://github.com/openshift/origin/pull/28985)
* [OCPBUGS-39136](https://issues.redhat.com/browse/OCPBUGS-39136): Bump timeout for the pod-network-service endpoints check [#29053](https://github.com/openshift/origin/pull/29053)
* [OCPBUGS-38787](https://issues.redhat.com/browse/OCPBUGS-38787): [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28994](https://github.com/openshift/origin/pull/28994)
* [Full changelog](https://github.com/openshift/origin/compare/229db649bba5c8ee8deb4ff49c53d39727c53732...c09e6f108b9756e10cf4a0dad49d47aec2908746)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/81ad52ad7bcf37b225bc50a6e6150ca0572057b7)

* [OCPBUGS-37659](https://issues.redhat.com/browse/OCPBUGS-37659): Bump otelgrpc to v0.49.0 [#71](https://github.com/openshift/cloud-provider-vsphere/pull/71)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/d2af698277d7dbbd020f8b05b1c319e1bbb1eeae...81ad52ad7bcf37b225bc50a6e6150ca0572057b7)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/bb5a77146347de617e7bed2a0dd0c48b66399a7e)

* [OCPBUGS-61654](https://issues.redhat.com/browse/OCPBUGS-61654): Fix unit tests [#73](https://github.com/openshift/cluster-api-provider-vsphere/pull/73)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/5611168658586d68b5a92c77c07304694fc2cc64...bb5a77146347de617e7bed2a0dd0c48b66399a7e)