# 4.16.0-rc.0

Created: 2024-05-06 20:34:08 +0000 UTC

Image Digest: `sha256:c56b01191de4cbb4b97c6eeaf61c5c122fcd465d1d0d671db640d877638ed790`


## Changes from 4.15.5

### Components

* Kubectl 1.29.1
* Kubernetes upgraded from 1.28.7 to 1.29.4
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403191241-0 to 416.94.202405010033-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| DisableKubeletCloudCredentialProviders <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| AdminNetworkPolicy <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled| Enabled |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled| Enabled |
| VSphereControlPlaneMachineSet <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled| Enabled |
| VSphereStaticIPs <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled| Enabled |
| BareMetalLoadBalancer <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| KMSv1 <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ExternalOIDC <br/> (0 tests)| Enabled<br/>(New)|  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClusterAPIInstallAWS <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallAzure <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallGCP <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallIBMCloud <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallNutanix <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallOpenStack <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallPowerVS <br/> (0 tests)|  |  |  |  |  |   |
| ClusterAPIInstallVSphere <br/> (0 tests)|  |  |  |  |  |   |
| Example <br/> (1 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ExternalRouteCertificate <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| HardwareSpeed <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ImagePolicy <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| InsightsConfig <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| InsightsOnDemandDataGather <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| MetricsCollectionProfiles <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| NetworkDiagnosticsConfig <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| NewOLM <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| NodeDisruptionPolicy <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| PinnedImages <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| PlatformOperators <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenNodeBinding <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenNodeBindingValidation <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenPodNodeInfo <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| TranslateStreamCloseWebsocketRequests <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| UpgradeStatus <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| VSphereDriverConfiguration <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| VolumeGroupSnapshot <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* alibaba-cloud-csi-driver
* alibaba-disk-csi-driver-operator
* ibm-vpc-node-label-updater
* machine-os-content


### Rebuilt images without code change

* rhel-coreos `sha256:e9c72525316931ee965e017b7a974c85c588e2abe31dd135ad358f40dc2b8fff`
* rhel-coreos-extensions `sha256:b06563f7355bae1a3bc2b44d7b1ebe48f3ba33479ca32ce7c3e37810e90845f9`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6a70f7090423993b0b7e360fd45e791466fbe7ce)

* Move to rhel9, decouple from cli image (#5792) [#5792](https://github.com/openshift/assisted-service/pull/5792)
* [MGMT-17413](https://issues.redhat.com/browse/MGMT-17413): Change pull secret validation on register/update cluster/infraenv to run only against the required images (#6158) [#6158](https://github.com/openshift/assisted-service/pull/6158)
* NO-ISSUE: Update OKD images to 4.16 (#6231) [#6231](https://github.com/openshift/assisted-service/pull/6231)
* Update RHTAP references (#6181) [#6181](https://github.com/openshift/assisted-service/pull/6181)
* [MGMT-17620](https://issues.redhat.com/browse/MGMT-17620): Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) [#6227](https://github.com/openshift/assisted-service/pull/6227)
* OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) [#6212](https://github.com/openshift/assisted-service/pull/6212)
* NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) [#6209](https://github.com/openshift/assisted-service/pull/6209)
* [MGMT-17558](https://issues.redhat.com/browse/MGMT-17558): Allow installation on iSCSI volume (#6218) [#6218](https://github.com/openshift/assisted-service/pull/6218)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* [MGMT-17503](https://issues.redhat.com/browse/MGMT-17503): Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) [#6184](https://github.com/openshift/assisted-service/pull/6184)
* [MGMT-17365](https://issues.redhat.com/browse/MGMT-17365): Add support for setting agent labels in BMH as annotations (#6124) [#6124](https://github.com/openshift/assisted-service/pull/6124)
* [MGMT-17313](https://issues.redhat.com/browse/MGMT-17313): Create day 2 BMH and Machine for control plane nodes (#6142) [#6142](https://github.com/openshift/assisted-service/pull/6142)
* [MGMT-17513](https://issues.redhat.com/browse/MGMT-17513): Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) [#6185](https://github.com/openshift/assisted-service/pull/6185)
* [MGMT-17468](https://issues.redhat.com/browse/MGMT-17468): Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) [#6190](https://github.com/openshift/assisted-service/pull/6190)
* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) [#6176](https://github.com/openshift/assisted-service/pull/6176)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) [#6199](https://github.com/openshift/assisted-service/pull/6199)
* [MGMT-17414](https://issues.redhat.com/browse/MGMT-17414): Adding new requirements for LVM on 4.16 (#6165) [#6165](https://github.com/openshift/assisted-service/pull/6165)
* [MGMT-17181](https://issues.redhat.com/browse/MGMT-17181): Add a LocalClusterImportController (#6079) [#6079](https://github.com/openshift/assisted-service/pull/6079)
* NO-ISSUE: Prevent false positive host connectivity (#6162) [#6162](https://github.com/openshift/assisted-service/pull/6162)
* [MGMT-17489](https://issues.redhat.com/browse/MGMT-17489): Fix disconnected capi tests (#6163) [#6163](https://github.com/openshift/assisted-service/pull/6163)
* Update RHTAP references (#6148) [#6148](https://github.com/openshift/assisted-service/pull/6148)
* [MGMT-17412](https://issues.redhat.com/browse/MGMT-17412): Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) [#6145](https://github.com/openshift/assisted-service/pull/6145)
* NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) [#6157](https://github.com/openshift/assisted-service/pull/6157)
* [MGMT-17438](https://issues.redhat.com/browse/MGMT-17438): bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) [#6150](https://github.com/openshift/assisted-service/pull/6150)
* NO-ISSUE: replace minio quay.io image repository (#6151) [#6151](https://github.com/openshift/assisted-service/pull/6151)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) [#6149](https://github.com/openshift/assisted-service/pull/6149)
* NO-ISSUE: Add doc for iPXE HTTP (#6146) [#6146](https://github.com/openshift/assisted-service/pull/6146)
* Revert "MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)" (#6139) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* [MGMT-17369](https://issues.redhat.com/browse/MGMT-17369): Add multi-arch release images to as well when setting only_latest=true in .../openshift-versions (#6119) [#6119](https://github.com/openshift/assisted-service/pull/6119)
* [MGMT-17361](https://issues.redhat.com/browse/MGMT-17361): Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) [#6115](https://github.com/openshift/assisted-service/pull/6115)
* [MGMT-17367](https://issues.redhat.com/browse/MGMT-17367): Use ICSP in install-config for older OCP releases (#6125) [#6125](https://github.com/openshift/assisted-service/pull/6125)
* Update RHTAP references (#6117) [#6117](https://github.com/openshift/assisted-service/pull/6117)
* NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) [#6118](https://github.com/openshift/assisted-service/pull/6118)
* [MGMT-17354](https://issues.redhat.com/browse/MGMT-17354): Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) [#6113](https://github.com/openshift/assisted-service/pull/6113)
* NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) [#6116](https://github.com/openshift/assisted-service/pull/6116)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) [#6114](https://github.com/openshift/assisted-service/pull/6114)
* NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) [#6111](https://github.com/openshift/assisted-service/pull/6111)
* [MGMT-17328](https://issues.redhat.com/browse/MGMT-17328): OCI should be tech preview for OCP 4.14 (#6104) [#6104](https://github.com/openshift/assisted-service/pull/6104)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 (#6054) [#6054](https://github.com/openshift/assisted-service/pull/6054)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) [#6109](https://github.com/openshift/assisted-service/pull/6109)
* NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) [#6110](https://github.com/openshift/assisted-service/pull/6110)
* [MGMT-16263](https://issues.redhat.com/browse/MGMT-16263): Enable usage of custom OCP release images when we create cluster (#6025) [#6025](https://github.com/openshift/assisted-service/pull/6025)
* [MGMT-17241](https://issues.redhat.com/browse/MGMT-17241): [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) [#6092](https://github.com/openshift/assisted-service/pull/6092)
* Update RHTAP references (#6103) [#6103](https://github.com/openshift/assisted-service/pull/6103)
* [MGMT-16002](https://issues.redhat.com/browse/MGMT-16002): Accept *yml.patch* and *yaml.patch* extensions (#6070) [#6070](https://github.com/openshift/assisted-service/pull/6070)
* [MGMT-17080](https://issues.redhat.com/browse/MGMT-17080): enable infrastructure operator when MCE and storage operators are selected (#6037) [#6037](https://github.com/openshift/assisted-service/pull/6037)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#6099) [#6099](https://github.com/openshift/assisted-service/pull/6099)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) [#6098](https://github.com/openshift/assisted-service/pull/6098)
* Update RHTAP references (#6086) [#6086](https://github.com/openshift/assisted-service/pull/6086)
* Allow in-progress clusters to be deleted in more cases (#6061) [#6061](https://github.com/openshift/assisted-service/pull/6061)
* [MGMT-17266](https://issues.redhat.com/browse/MGMT-17266): Add OCP 4.16 images (#6091) [#6091](https://github.com/openshift/assisted-service/pull/6091)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) [#6090](https://github.com/openshift/assisted-service/pull/6090)
* [MGMT-17196](https://issues.redhat.com/browse/MGMT-17196): Fix none existens of static MAC adr. in case of (#6087) [#6087](https://github.com/openshift/assisted-service/pull/6087)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Update configure command to handle multiple HostConfigs (#6062) [#6062](https://github.com/openshift/assisted-service/pull/6062)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) [#6085](https://github.com/openshift/assisted-service/pull/6085)
* [MGMT-16813](https://issues.redhat.com/browse/MGMT-16813): Prioritize finding release image with exact CPU architecture (#6066) [#6066](https://github.com/openshift/assisted-service/pull/6066)
* NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) [#6083](https://github.com/openshift/assisted-service/pull/6083)
* Update RHTAP references (#6020) [#6020](https://github.com/openshift/assisted-service/pull/6020)
* Use `client_id` instead of `clientId` (#6076) [#6076](https://github.com/openshift/assisted-service/pull/6076)
* Protect must gather versions cache with mutex (#6078) [#6078](https://github.com/openshift/assisted-service/pull/6078)
* NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) [#6060](https://github.com/openshift/assisted-service/pull/6060)
* [MGMT-16759](https://issues.redhat.com/browse/MGMT-16759): Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) [#6051](https://github.com/openshift/assisted-service/pull/6051)
* use multi payload with ABI (#6000) [#6000](https://github.com/openshift/assisted-service/pull/6000)
* [MGMT-14380](https://issues.redhat.com/browse/MGMT-14380): ODF explicit type of disk error (#6072) [#6072](https://github.com/openshift/assisted-service/pull/6072)
* NO-ISSUE: Bump OCP versions: 4.14 (#6069) [#6069](https://github.com/openshift/assisted-service/pull/6069)
* NO-ISSUE: Bump OCP versions: 4.13 (#6063) [#6063](https://github.com/openshift/assisted-service/pull/6063)
* [MGMT-17106](https://issues.redhat.com/browse/MGMT-17106): Disable ironic vlan creation when static networking config is present (#6055) [#6055](https://github.com/openshift/assisted-service/pull/6055)
* NO-ISSUE: Bump OCP versions: 4.12 (#6056) [#6056](https://github.com/openshift/assisted-service/pull/6056)
* Use all cluster networks to determine IP family for ironic (#6048) [#6048](https://github.com/openshift/assisted-service/pull/6048)
* NO-ISSUE: Bump OCP versions: 4.14 (#6050) [#6050](https://github.com/openshift/assisted-service/pull/6050)
* NO-ISSUE: Bump OCP versions: 4.15 (#6043) [#6043](https://github.com/openshift/assisted-service/pull/6043)
* [MGMT-17095](https://issues.redhat.com/browse/MGMT-17095): Disable local cluster import (#6040) [#6040](https://github.com/openshift/assisted-service/pull/6040)
* [MGMT-16620](https://issues.redhat.com/browse/MGMT-16620): Update OCP 4.15 release images to GA (#6035) [#6035](https://github.com/openshift/assisted-service/pull/6035)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13 (#6038) [#6038](https://github.com/openshift/assisted-service/pull/6038)
* [MGMT-17008](https://issues.redhat.com/browse/MGMT-17008): fix lvm host requirement (#6021) [#6021](https://github.com/openshift/assisted-service/pull/6021)
* NO-ISSUE: Bump OCP versions: 4.14 (#6032) [#6032](https://github.com/openshift/assisted-service/pull/6032)
* [MGMT-16882](https://issues.redhat.com/browse/MGMT-16882): Update operator bundle channel to 2.11 (#6023) [#6023](https://github.com/openshift/assisted-service/pull/6023)
* NO-ISSUE: Halt OpenShift release syncer in SaaS until actual usage of this release images will be merged (#6027) [#6027](https://github.com/openshift/assisted-service/pull/6027)
* [MGMT-16262](https://issues.redhat.com/browse/MGMT-16262): Create a utility that fetches current OCP releases from OpenShift API and updates DB (#5916) [#5916](https://github.com/openshift/assisted-service/pull/5916)
* NO-ISSUE: Bump OCP versions: 4.15 (#6019) [#6019](https://github.com/openshift/assisted-service/pull/6019)
* [OCPBUGS-29772](https://issues.redhat.com/browse/OCPBUGS-29772): All nodes fail to become managed when installConfigOverrides defined (#6010) [#6010](https://github.com/openshift/assisted-service/pull/6010)
* NO-ISSUE: fixing lvm requirement message (#6009) [#6009](https://github.com/openshift/assisted-service/pull/6009)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* Update RHTAP references (#6014) [#6014](https://github.com/openshift/assisted-service/pull/6014)
* Update RHTAP references (#6012) [#6012](https://github.com/openshift/assisted-service/pull/6012)
* NO-ISSUE: Add environment variable ENABLE_SKIP_MCO_REBOOT to openshift/template.yaml (#6013) [#6013](https://github.com/openshift/assisted-service/pull/6013)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Add command to import cluster for agent-based-installer (#6004) [#6004](https://github.com/openshift/assisted-service/pull/6004)
* Update RHTAP references (#5999) [#5999](https://github.com/openshift/assisted-service/pull/5999)
* NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14 (#6006) [#6006](https://github.com/openshift/assisted-service/pull/6006)
* [MGMT-16926](https://issues.redhat.com/browse/MGMT-16926): fix validation bug + allow CNV and LVM multi node (#5998) [#5998](https://github.com/openshift/assisted-service/pull/5998)
* [MGMT-4458](https://issues.redhat.com/browse/MGMT-4458): Remove status change from old CompleteInstallation API (#5981) [#5981](https://github.com/openshift/assisted-service/pull/5981)
* [MGMT-16716](https://issues.redhat.com/browse/MGMT-16716): (Also MGMT-16737), Operators CNV, MCE should be disabled when platform Nutanix is selected, operator CNV should be disabled when platform VSphere is selected (#5991) [#5991](https://github.com/openshift/assisted-service/pull/5991)
* NO-ISSUE: Bump OCP versions: 4.15 (#5995) [#5995](https://github.com/openshift/assisted-service/pull/5995)
* Update RHTAP references (#5993) [#5993](https://github.com/openshift/assisted-service/pull/5993)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13 (#5990) [#5990](https://github.com/openshift/assisted-service/pull/5990)
* NO-ISSUE: Fix subsystem test for invalid nmstate config error message (#5988) [#5988](https://github.com/openshift/assisted-service/pull/5988)
* Update RHTAP references (#5980) [#5980](https://github.com/openshift/assisted-service/pull/5980)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix validation for LVM multinode (#5898) [#5898](https://github.com/openshift/assisted-service/pull/5898)
* [MGMT-16690](https://issues.redhat.com/browse/MGMT-16690): Add API to AgentServiceConfig CRD to allow pass of headers and query params to image service (#5933) [#5933](https://github.com/openshift/assisted-service/pull/5933)
* [MGMT-16588](https://issues.redhat.com/browse/MGMT-16588): Adding host with incompatible platform to day2 cluster should fail (#5946) [#5946](https://github.com/openshift/assisted-service/pull/5946)
* [MGMT-16625](https://issues.redhat.com/browse/MGMT-16625): Make host connection timeout soft (#5911) [#5911](https://github.com/openshift/assisted-service/pull/5911)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Use new ignition endpoint HTTP headers when requesting Ignition (#5934) [#5934](https://github.com/openshift/assisted-service/pull/5934)
* NO-ISSUE: Bump OCP versions: 4.12, 4.11 (#5971) [#5971](https://github.com/openshift/assisted-service/pull/5971)
* [MGMT-16523](https://issues.redhat.com/browse/MGMT-16523): Set ABI deployment type for on-prem data collection (#5967) [#5967](https://github.com/openshift/assisted-service/pull/5967)
* NO-ISSUE: Change bare metal host CRD name to a non-uuid format as it is forbidden (#5972) [#5972](https://github.com/openshift/assisted-service/pull/5972)
* [MGMT-16704](https://issues.redhat.com/browse/MGMT-16704): Add organization capability to control soft timeouts (#5935) [#5935](https://github.com/openshift/assisted-service/pull/5935)
* [MGMT-16684](https://issues.redhat.com/browse/MGMT-16684): Make OLM finalizing stages behave as soft timeouts even if soft timeouts are not enabled (#5928) [#5928](https://github.com/openshift/assisted-service/pull/5928)
* [MGMT-16791](https://issues.redhat.com/browse/MGMT-16791): disable VipAUtoAllocation for 4.15 and above (#5959) [#5959](https://github.com/openshift/assisted-service/pull/5959)
* Update RHTAP references (#5965) [#5965](https://github.com/openshift/assisted-service/pull/5965)
* NO-ISSUE: fix for subsystem HTTP registry (#5964) [#5964](https://github.com/openshift/assisted-service/pull/5964)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5963) [#5963](https://github.com/openshift/assisted-service/pull/5963)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#5951) [#5951](https://github.com/openshift/assisted-service/pull/5951)
* [MGMT-16721](https://issues.redhat.com/browse/MGMT-16721): Handle luks == nil and luks.Clevis == nil (#5940) [#5940](https://github.com/openshift/assisted-service/pull/5940)
* Update RHTAP references (#5956) [#5956](https://github.com/openshift/assisted-service/pull/5956)
* Update RHTAP references (#5950) [#5950](https://github.com/openshift/assisted-service/pull/5950)
* [MGMT-16649](https://issues.redhat.com/browse/MGMT-16649): Add Ignition Endpoint Headers to Host and Agent APIs (#5931) [#5931](https://github.com/openshift/assisted-service/pull/5931)
* NO-ISSUE: Bump gorm.io/gorm from 1.25.5 to 1.25.7 (#5954) [#5954](https://github.com/openshift/assisted-service/pull/5954)
* Update RHTAP references (#5949) [#5949](https://github.com/openshift/assisted-service/pull/5949)
* NO-ISSUE: Bump OCP versions: 4.15 (#5947) [#5947](https://github.com/openshift/assisted-service/pull/5947)
* [MGMT-16757](https://issues.redhat.com/browse/MGMT-16757): CNV should be disabled when select platform vSphere (#5945) [#5945](https://github.com/openshift/assisted-service/pull/5945)
* NO-ISSUE: Fix CI gather script for baremetal operator (#5932) [#5932](https://github.com/openshift/assisted-service/pull/5932)
* NO-ISSUE: Bump OCP versions: 4.13 (#5944) [#5944](https://github.com/openshift/assisted-service/pull/5944)
* [MGMT-16739](https://issues.redhat.com/browse/MGMT-16739): CNV and MCE should be disabled when select platform Nutanix (#5941) [#5941](https://github.com/openshift/assisted-service/pull/5941)
* Update RHTAP references (#5943) [#5943](https://github.com/openshift/assisted-service/pull/5943)
* NO-ISSUE: Bump OCP versions: 4.12 (#5939) [#5939](https://github.com/openshift/assisted-service/pull/5939)
* [MGMT-16603](https://issues.redhat.com/browse/MGMT-16603): Allow setting agent cluster reference via BHM (#5893) [#5893](https://github.com/openshift/assisted-service/pull/5893)
* [MGMT-16612](https://issues.redhat.com/browse/MGMT-16612): notify when host updates status (#5930) [#5930](https://github.com/openshift/assisted-service/pull/5930)
* [MGMT-16521](https://issues.redhat.com/browse/MGMT-16521): Identify Operator-based Deployment Data (#5906) [#5906](https://github.com/openshift/assisted-service/pull/5906)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var for On-Prem Data Deployment Type (#5874) [#5874](https://github.com/openshift/assisted-service/pull/5874)
* [MGMT-16508](https://issues.redhat.com/browse/MGMT-16508): Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. (#5884) [#5884](https://github.com/openshift/assisted-service/pull/5884)
* NO-ISSUE: Bump OCP versions: 4.15 (#5929) [#5929](https://github.com/openshift/assisted-service/pull/5929)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#5913) [#5913](https://github.com/openshift/assisted-service/pull/5913)
* NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) [#5919](https://github.com/openshift/assisted-service/pull/5919)
* [MGMT-16660](https://issues.redhat.com/browse/MGMT-16660): OCI is tech-preview from OCP 4.15 (#5920) [#5920](https://github.com/openshift/assisted-service/pull/5920)
* [OCPBUGS-27376](https://issues.redhat.com/browse/OCPBUGS-27376): Allow domain names starting with a number (#5914) [#5914](https://github.com/openshift/assisted-service/pull/5914)
* NO-ISSUE: Bump OCP versions: 4.14 (#5915) [#5915](https://github.com/openshift/assisted-service/pull/5915)
* Update RHTAP references (#5899) [#5899](https://github.com/openshift/assisted-service/pull/5899)
* NO-ISSUE: migrate rhtap init step to v0.2 (#5908) [#5908](https://github.com/openshift/assisted-service/pull/5908)
* [MGMT-16208](https://issues.redhat.com/browse/MGMT-16208): Add controller stages to assisted service (#5880) [#5880](https://github.com/openshift/assisted-service/pull/5880)
* NO-ISSUE: Bump OCP versions: 4.15 (#5907) [#5907](https://github.com/openshift/assisted-service/pull/5907)
* NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) [#5903](https://github.com/openshift/assisted-service/pull/5903)
* NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) [#5902](https://github.com/openshift/assisted-service/pull/5902)
* NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) [#5904](https://github.com/openshift/assisted-service/pull/5904)
* NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) [#5901](https://github.com/openshift/assisted-service/pull/5901)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) [#5897](https://github.com/openshift/assisted-service/pull/5897)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides (#5868) [#5868](https://github.com/openshift/assisted-service/pull/5868)
* NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) [#5896](https://github.com/openshift/assisted-service/pull/5896)
* NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) [#5895](https://github.com/openshift/assisted-service/pull/5895)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Add request headers to api_vip_connectivity check request (#5870) [#5870](https://github.com/openshift/assisted-service/pull/5870)
* NO-ISSUE: Use latest hypershift image in CI gather (#5886) [#5886](https://github.com/openshift/assisted-service/pull/5886)
* NO-ISSUE remove filanov from approves (#5888) [#5888](https://github.com/openshift/assisted-service/pull/5888)
* NO-ISSUE: Bump OCP versions: 4.15 (#5887) [#5887](https://github.com/openshift/assisted-service/pull/5887)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): allow lvms on multi node (#5871) [#5871](https://github.com/openshift/assisted-service/pull/5871)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) [#5875](https://github.com/openshift/assisted-service/pull/5875)
* NO-ISSUE: testing go1.20 in all packages (#5850) [#5850](https://github.com/openshift/assisted-service/pull/5850)
* [MGMT-16371](https://issues.redhat.com/browse/MGMT-16371): Fix additionial kargs in case of DHCP (#5818) [#5818](https://github.com/openshift/assisted-service/pull/5818)
* Removes unused assistedservice CRD (#5830) [#5830](https://github.com/openshift/assisted-service/pull/5830)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5861) [#5861](https://github.com/openshift/assisted-service/pull/5861)
* [MGMT-16505](https://issues.redhat.com/browse/MGMT-16505): Huge amount of "Cluster was updated with api-vip &lt;IP ADDRESS&gt;, ingress-vip &lt;IP ADDRESS&gt;" in cluster events (#5872) [#5872](https://github.com/openshift/assisted-service/pull/5872)
* [MGMT-16330](https://issues.redhat.com/browse/MGMT-16330): disable SDN for 4.15 and above (#5833) [#5833](https://github.com/openshift/assisted-service/pull/5833)
* NO-ISSUE: Bump OCP versions: 4.15, 4.12, 4.13 (#5867) [#5867](https://github.com/openshift/assisted-service/pull/5867)
* NO-ISSUE: Bump OCP versions: 4.14 (#5863) [#5863](https://github.com/openshift/assisted-service/pull/5863)
* [MGMT-16241](https://issues.redhat.com/browse/MGMT-16241): Ensure that LastInstallationPreparationStatus is reset on cluster install. (#5811) [#5811](https://github.com/openshift/assisted-service/pull/5811)
* wqNO-ISSUE: Fix for subsystem test that fails locally. (#5859) [#5859](https://github.com/openshift/assisted-service/pull/5859)
* [MGMT-16452](https://issues.redhat.com/browse/MGMT-16452): Change MCE subscription to use the default channel (#5843) [#5843](https://github.com/openshift/assisted-service/pull/5843)
* [OCPBUGS-25434](https://issues.redhat.com/browse/OCPBUGS-25434): handle NMStateConfig deletion (#5844) [#5844](https://github.com/openshift/assisted-service/pull/5844)
* [MGMT-16404](https://issues.redhat.com/browse/MGMT-16404): Add soft timeouts capability to host stage timeouts (#5817) [#5817](https://github.com/openshift/assisted-service/pull/5817)
* [MGMT-16216](https://issues.redhat.com/browse/MGMT-16216): Bump requests package (#5836) [#5836](https://github.com/openshift/assisted-service/pull/5836)
* [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix images used for disconnected CAPI test (#5832) [#5832](https://github.com/openshift/assisted-service/pull/5832)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): fix issue validating pre-release versions were failing (#5837) [#5837](https://github.com/openshift/assisted-service/pull/5837)
* [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5822) [#5822](https://github.com/openshift/assisted-service/pull/5822)
* [MGMT-16373](https://issues.redhat.com/browse/MGMT-16373): KubeAPI - Ensure that ISO type is full-iso when cpuarchitecture is S390x (#5825) [#5825](https://github.com/openshift/assisted-service/pull/5825)
* chore(deps): update rhtap references (#5782) [#5782](https://github.com/openshift/assisted-service/pull/5782)
* [MGMT-16428](https://issues.redhat.com/browse/MGMT-16428): create migration from oci to external platform type (#5829) [#5829](https://github.com/openshift/assisted-service/pull/5829)
* NO-ISSUE: enable lateset lso for 4.15 ztp (#5805) [#5805](https://github.com/openshift/assisted-service/pull/5805)
* NO-ISSUE: Bump OCP versions: 4.15 (#5824) [#5824](https://github.com/openshift/assisted-service/pull/5824)
* Compare normalized infraenv and preprov image architectures (#5816) [#5816](https://github.com/openshift/assisted-service/pull/5816)
* [MGMT-15886](https://issues.redhat.com/browse/MGMT-15886): Fix domain validation (#5801) [#5801](https://github.com/openshift/assisted-service/pull/5801)
* [MGMT-15691](https://issues.redhat.com/browse/MGMT-15691): Remove platform type oci (#5787) [#5787](https://github.com/openshift/assisted-service/pull/5787)
* [MGMT-14633](https://issues.redhat.com/browse/MGMT-14633): Include manifest information in the log download (#5777) [#5777](https://github.com/openshift/assisted-service/pull/5777)
* [MGMT-16355](https://issues.redhat.com/browse/MGMT-16355): API changes for soft timeouts (#5780) [#5780](https://github.com/openshift/assisted-service/pull/5780)
* NO-ISSUE: Bump OCP versions: 4.11 (#5813) [#5813](https://github.com/openshift/assisted-service/pull/5813)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5808) [#5808](https://github.com/openshift/assisted-service/pull/5808)
* [MGMT-14159](https://issues.redhat.com/browse/MGMT-14159): Use imageDigestSources in install-config instead of imageContentSources (#5799) [#5799](https://github.com/openshift/assisted-service/pull/5799)
* MGMT-16157 move db transactions to new format (#5806) [#5806](https://github.com/openshift/assisted-service/pull/5806)
* MGMT-16157 Remove recover usage from DB transactions (#5795) [#5795](https://github.com/openshift/assisted-service/pull/5795)
* NO-ISSUE: Bump OCP versions: 4.15 (#5796) [#5796](https://github.com/openshift/assisted-service/pull/5796)
* NO-ISSUE: fix golangci-lint failing to be pulled (#5790) [#5790](https://github.com/openshift/assisted-service/pull/5790)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d60e80f8658cf8a756ff4aa318983ddcf0e70bca...6a70f7090423993b0b7e360fd45e791466fbe7ce)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/27e1b0d2880ab06cd7165415fd6e1ebb7cf1db80)

* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) [#818](https://github.com/openshift/assisted-installer/pull/818)
* Move to rhel9, decouple from cli image (#760) [#760](https://github.com/openshift/assisted-installer/pull/760)
* NO-ISSUE: Decouple inventoryClient from ops (#811) [#811](https://github.com/openshift/assisted-installer/pull/811)
* NO-ISSUE: Decouple inventoryClient from ops (#810) [#810](https://github.com/openshift/assisted-installer/pull/810)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) [#809](https://github.com/openshift/assisted-installer/pull/809)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#806) [#806](https://github.com/openshift/assisted-installer/pull/806)
* [MGMT-17305](https://issues.redhat.com/browse/MGMT-17305): Wipe installation disk on IBI (#808) [#808](https://github.com/openshift/assisted-installer/pull/808)
* [MGMT-17384](https://issues.redhat.com/browse/MGMT-17384): Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) [#807](https://github.com/openshift/assisted-installer/pull/807)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#803) [#803](https://github.com/openshift/assisted-installer/pull/803)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#802) [#802](https://github.com/openshift/assisted-installer/pull/802)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) [#801](https://github.com/openshift/assisted-installer/pull/801)
* [OCPBUGS-30056](https://issues.redhat.com/browse/OCPBUGS-30056): RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) [#800](https://github.com/openshift/assisted-installer/pull/800)
* [MGMT-16993](https://issues.redhat.com/browse/MGMT-16993): [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) [#798](https://github.com/openshift/assisted-installer/pull/798)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) [#799](https://github.com/openshift/assisted-installer/pull/799)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) [#797](https://github.com/openshift/assisted-installer/pull/797)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#788) [#788](https://github.com/openshift/assisted-installer/pull/788)
* [MGMT-16966](https://issues.redhat.com/browse/MGMT-16966): Problem creating extra partition on main disk in 4.15+ (#787) [#787](https://github.com/openshift/assisted-installer/pull/787)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) [#786](https://github.com/openshift/assisted-installer/pull/786)
* [MGMT-16211](https://issues.redhat.com/browse/MGMT-16211): Remove all timeouts from controller (#779) [#779](https://github.com/openshift/assisted-installer/pull/779)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere credentials are provided. (#778) [#778](https://github.com/openshift/assisted-installer/pull/778)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) [#781](https://github.com/openshift/assisted-installer/pull/781)
* NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) [#780](https://github.com/openshift/assisted-installer/pull/780)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#776) [#776](https://github.com/openshift/assisted-installer/pull/776)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) [#772](https://github.com/openshift/assisted-installer/pull/772)
* NO-ISSUE remove filanov from approves (#773) [#773](https://github.com/openshift/assisted-installer/pull/773)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#770) [#770](https://github.com/openshift/assisted-installer/pull/770)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) [#769](https://github.com/openshift/assisted-installer/pull/769)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#768) [#768](https://github.com/openshift/assisted-installer/pull/768)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) [#766](https://github.com/openshift/assisted-installer/pull/766)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) [#762](https://github.com/openshift/assisted-installer/pull/762)
* [MGMT-16266](https://issues.redhat.com/browse/MGMT-16266): Indication event showing how often host has been rebooted missing on some nodes (#757) [#757](https://github.com/openshift/assisted-installer/pull/757)
* NO-ISSUE: fix golangci-lint failing to be pulled (#758) [#758](https://github.com/openshift/assisted-installer/pull/758)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/550f2a568d4b4a494b3637ebba725bdd9c26ecd9...27e1b0d2880ab06cd7165415fd6e1ebb7cf1db80)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/657a3c7874eb3f6d695aab33ce8ce751f7bf3a6c)

* [MGMT-17518](https://issues.redhat.com/browse/MGMT-17518): Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) [#690](https://github.com/openshift/assisted-installer-agent/pull/690)
* [OCPBUGS-31423](https://issues.redhat.com/browse/OCPBUGS-31423): Try to pull installer image before installing (#679) [#679](https://github.com/openshift/assisted-installer-agent/pull/679)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) [#683](https://github.com/openshift/assisted-installer-agent/pull/683)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Update to mitigate CVE-2024-21626 (#676) [#676](https://github.com/openshift/assisted-installer-agent/pull/676)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) [#678](https://github.com/openshift/assisted-installer-agent/pull/678)
* NO-ISSUE: subsystem test failing due image format version (#677) [#677](https://github.com/openshift/assisted-installer-agent/pull/677)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) [#672](https://github.com/openshift/assisted-installer-agent/pull/672)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#673) [#673](https://github.com/openshift/assisted-installer-agent/pull/673)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) [#670](https://github.com/openshift/assisted-installer-agent/pull/670)
* [MGMT-16459](https://issues.redhat.com/browse/MGMT-16459): [STG] Cluster 4.15.0-rc.0 with HTTP Proxy failed on timeout due the failed to StartContainer for etcd with CrashLoopBackOff (#664) [#664](https://github.com/openshift/assisted-installer-agent/pull/664)
* [MGMT-14226](https://issues.redhat.com/browse/MGMT-14226): Upgrade docker to 20.10.24 for CVE-2023-28842 (#656) [#656](https://github.com/openshift/assisted-installer-agent/pull/656)
* [CVE-2023](https://issues.redhat.com/browse/CVE-2023): 49568 and CVE-2023-49569 both detail vulnerabilities in versions of https://github.com/go-git/go-git less than version v5.11 Presently assisted-installer depends on this library due to the following dependency chain. (#655) [#655](https://github.com/openshift/assisted-installer-agent/pull/655)
* [MULTIARCH-4089](https://issues.redhat.com/browse/MULTIARCH-4089): Fix LPAR handling (#649) [#649](https://github.com/openshift/assisted-installer-agent/pull/649)
* NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) [#653](https://github.com/openshift/assisted-installer-agent/pull/653)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#652) [#652](https://github.com/openshift/assisted-installer-agent/pull/652)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Use updated api_vip connectivity check API (#648) [#648](https://github.com/openshift/assisted-installer-agent/pull/648)
* NO-ISSUE remove filanov from approves (#647) [#647](https://github.com/openshift/assisted-installer-agent/pull/647)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#644) [#644](https://github.com/openshift/assisted-installer-agent/pull/644)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#643) [#643](https://github.com/openshift/assisted-installer-agent/pull/643)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#642) [#642](https://github.com/openshift/assisted-installer-agent/pull/642)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#638) [#638](https://github.com/openshift/assisted-installer-agent/pull/638)
* NO-ISSUE: fix golangci-lint failing to be pulled (#636) [#636](https://github.com/openshift/assisted-installer-agent/pull/636)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b0beda7b7323ff17e5f13262f23ac01c35a56485...657a3c7874eb3f6d695aab33ce8ce751f7bf3a6c)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/6e6bb40d95bd966eb6b152e66c5b91794806c4bc)

* [OCPBUGS-24960](https://issues.redhat.com/browse/OCPBUGS-24960): Updating ose-agent-installer-utils-container image to be consistent with ART [#32](https://github.com/openshift/agent-installer-utils/pull/32)
* NO-ISSUE: Tidy up Dockerfiles [#33](https://github.com/openshift/agent-installer-utils/pull/33)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/33b7d855fdebd24a972f32dafafd29e40b117e46...6e6bb40d95bd966eb6b152e66c5b91794806c4bc)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/97e8335e2f0bc9ee48fe04f2c19820b557035d37)

* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/abf4fa96550caf09e788b66fc06f1df802768397...97e8335e2f0bc9ee48fe04f2c19820b557035d37)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/a57f2023035a80c8799edf4e105f11cabe6180a4)

* [OCPBUGS-25571](https://issues.redhat.com/browse/OCPBUGS-25571): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#49](https://github.com/openshift/cluster-api-provider-alibaba/pull/49)
* [OCPBUGS-24945](https://issues.redhat.com/browse/OCPBUGS-24945): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#48](https://github.com/openshift/cluster-api-provider-alibaba/pull/48)
* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#46](https://github.com/openshift/cluster-api-provider-alibaba/pull/46)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/d3ba04c35e77e4e937aa9b7b4d069753cd514335...a57f2023035a80c8799edf4e105f11cabe6180a4)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/9a6028c48ae73bd8227f014635ce744452e70348)

* [OCPBUGS-31716](https://issues.redhat.com/browse/OCPBUGS-31716): Bump golang.org/x/net to v0.23.0 [#50](https://github.com/openshift/apiserver-network-proxy/pull/50)
* [OCPBUGS-27932](https://issues.redhat.com/browse/OCPBUGS-27932): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 [#47](https://github.com/openshift/apiserver-network-proxy/pull/47)
* [OCPBUGS-25004](https://issues.redhat.com/browse/OCPBUGS-25004): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#46](https://github.com/openshift/apiserver-network-proxy/pull/46)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/dc30b80c9931de88a841eb0677dadbd1d63c27a6...9a6028c48ae73bd8227f014635ce744452e70348)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/c18f7e773f1cde578af70a25f6bf597797289309)

* [OCPBUGS-30466](https://issues.redhat.com/browse/OCPBUGS-30466): Update google.golang.org/protobuf to v1.33.0 [#79](https://github.com/openshift/cloud-provider-aws/pull/79)
* [OCPBUGS-27879](https://issues.redhat.com/browse/OCPBUGS-27879): Add snyk exclusion file [#78](https://github.com/openshift/cloud-provider-aws/pull/78)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): Updates build-rpm.sh to set release to build time [#75](https://github.com/openshift/cloud-provider-aws/pull/75)
* [OCPBUGS-28548](https://issues.redhat.com/browse/OCPBUGS-28548): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#74](https://github.com/openshift/cloud-provider-aws/pull/74)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): UPSTREAM: &lt;carry&gt;: Removes escaping from `pwd` in rpm build script [#69](https://github.com/openshift/cloud-provider-aws/pull/69)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Updates rpm build script [#68](https://github.com/openshift/cloud-provider-aws/pull/68)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): ecr-credential-provider RPM CI builds [#65](https://github.com/openshift/cloud-provider-aws/pull/65)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Installs ecr-credential-provider to /usr/libexec [#66](https://github.com/openshift/cloud-provider-aws/pull/66)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Adds ecr-credential-provider specfile [#63](https://github.com/openshift/cloud-provider-aws/pull/63)
* [OCPBUGS-22542](https://issues.redhat.com/browse/OCPBUGS-22542), [OCPBUGS-26061](https://issues.redhat.com/browse/OCPBUGS-26061), [OCPCLOUD-2423](https://issues.redhat.com/browse/OCPCLOUD-2423): Merge https://github.com/kubernetes/cloud-provider-aws:master (65e4f1a) into master [#53](https://github.com/openshift/cloud-provider-aws/pull/53)
* [OCPBUGS-24959](https://issues.redhat.com/browse/OCPBUGS-24959): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-aws/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/2e3cca19638cae3066cba27608ed61c284b4d529...c18f7e773f1cde578af70a25f6bf597797289309)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/63025f8fdfc1a53d5d37354c49b210754873667d)

* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master [#507](https://github.com/openshift/cluster-api-provider-aws/pull/507)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master [#502](https://github.com/openshift/cluster-api-provider-aws/pull/502)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#503](https://github.com/openshift/cluster-api-provider-aws/pull/503)
* [OCPBUGS-25565](https://issues.redhat.com/browse/OCPBUGS-25565), [OCPCLOUD-2441](https://issues.redhat.com/browse/OCPCLOUD-2441): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master [#499](https://github.com/openshift/cluster-api-provider-aws/pull/499)
* [OCPBUGS-27871](https://issues.redhat.com/browse/OCPBUGS-27871): Update snyk exclusion file [#498](https://github.com/openshift/cluster-api-provider-aws/pull/498)
* [OCPBUGS-26181](https://issues.redhat.com/browse/OCPBUGS-26181): Add Snyk file to exclude vendor directory on scan [#495](https://github.com/openshift/cluster-api-provider-aws/pull/495)
* [OCPBUGS-24928](https://issues.redhat.com/browse/OCPBUGS-24928): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#488](https://github.com/openshift/cluster-api-provider-aws/pull/488)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master [#487](https://github.com/openshift/cluster-api-provider-aws/pull/487)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3e23a968b30cd41b648010ef3be053a0bfefab0c...63025f8fdfc1a53d5d37354c49b210754873667d)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/1d29a74ab7cde7424cac99261b90f23dc7a2fc21)

* [OCPBUGS-31101](https://issues.redhat.com/browse/OCPBUGS-31101): UPSTREAM: 1966: Add missing instances to instance store volumes table [#261](https://github.com/openshift/aws-ebs-csi-driver/pull/261)
* [OCPBUGS-30468](https://issues.redhat.com/browse/OCPBUGS-30468): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#259](https://github.com/openshift/aws-ebs-csi-driver/pull/259)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): UPSTREAM: 1919: Add reserved-volume-attachments [#260](https://github.com/openshift/aws-ebs-csi-driver/pull/260)
* [STOR-1575](https://issues.redhat.com/browse/STOR-1575): Rebase to v1.26.1 for OCP 4.16 [#257](https://github.com/openshift/aws-ebs-csi-driver/pull/257)
* [OCPBUGS-25500](https://issues.redhat.com/browse/OCPBUGS-25500): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#252](https://github.com/openshift/aws-ebs-csi-driver/pull/252)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#248](https://github.com/openshift/aws-ebs-csi-driver/pull/248)
* [OCPBUGS-25549](https://issues.redhat.com/browse/OCPBUGS-25549): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#250](https://github.com/openshift/aws-ebs-csi-driver/pull/250)
* [OCPBUGS-25197](https://issues.redhat.com/browse/OCPBUGS-25197): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#249](https://github.com/openshift/aws-ebs-csi-driver/pull/249)
* [OCPBUGS-25126](https://issues.redhat.com/browse/OCPBUGS-25126): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#247](https://github.com/openshift/aws-ebs-csi-driver/pull/247)
* [OCPBUGS-24867](https://issues.redhat.com/browse/OCPBUGS-24867): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#246](https://github.com/openshift/aws-ebs-csi-driver/pull/246)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b692edb1bcad959162c5c62969c13f85d0266fa2...1d29a74ab7cde7424cac99261b90f23dc7a2fc21)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0a77e596f573853126504c2159b67ac352275c83)

* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [Full changelog](https://github.com/openshift/csi-operator/compare/f258bd0bf4e0ed13d6f555962d594818bd756f2d...0a77e596f573853126504c2159b67ac352275c83)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/61d60f6ca20443df434456c2f3eeba859634e6a2)

* [OCPBUGS-28325](https://issues.redhat.com/browse/OCPBUGS-28325): add an extra vendor exclude to snyk config [#100](https://github.com/openshift/machine-api-provider-aws/pull/100)
* [OCPCLOUD-2429](https://issues.redhat.com/browse/OCPCLOUD-2429): Rebase k8s to 1.29 and update dependencies [#99](https://github.com/openshift/machine-api-provider-aws/pull/99)
* [OCPBUGS-26187](https://issues.redhat.com/browse/OCPBUGS-26187): Add Snyk file to exclude vendor directory on scan [#98](https://github.com/openshift/machine-api-provider-aws/pull/98)
* [OCPBUGS-24934](https://issues.redhat.com/browse/OCPBUGS-24934): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#94](https://github.com/openshift/machine-api-provider-aws/pull/94)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382...61d60f6ca20443df434456c2f3eeba859634e6a2)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/746491a64a4efc04132ceb641cee52c2ead3facd)

* [OCPBUGS-30711](https://issues.redhat.com/browse/OCPBUGS-30711): Upgrade go-jose module to 4.0.1 [#187](https://github.com/openshift/aws-pod-identity-webhook/pull/187)
* [OCPBUGS-25588](https://issues.redhat.com/browse/OCPBUGS-25588): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#183](https://github.com/openshift/aws-pod-identity-webhook/pull/183)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#181](https://github.com/openshift/aws-pod-identity-webhook/pull/181)
* [OCPBUGS-25002](https://issues.redhat.com/browse/OCPBUGS-25002): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#180](https://github.com/openshift/aws-pod-identity-webhook/pull/180)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a63743aff1004f4834b347812833834ba508c27b...746491a64a4efc04132ceb641cee52c2ead3facd)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0e9553295ecd02d6ef0aff19dfc1dfe680993112)

* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Improvements to client timeouts to prevent hangs [#116](https://github.com/openshift/cloud-provider-azure/pull/116)
* [OCPBUGS-28244](https://issues.redhat.com/browse/OCPBUGS-28244): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (de765cc) into master [#104](https://github.com/openshift/cloud-provider-azure/pull/104)
* [OCPBUGS-26124](https://issues.redhat.com/browse/OCPBUGS-26124), [OCPBUGS-27861](https://issues.redhat.com/browse/OCPBUGS-27861): update snyk file [#107](https://github.com/openshift/cloud-provider-azure/pull/107)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Remove concurrent-service-syncs limitation [#106](https://github.com/openshift/cloud-provider-azure/pull/106)
* [OCPCLOUD-2460](https://issues.redhat.com/browse/OCPCLOUD-2460): Adds acr-credential-provider spec file and build script [#105](https://github.com/openshift/cloud-provider-azure/pull/105)
* [OCPBUGS-26115](https://issues.redhat.com/browse/OCPBUGS-26115): Add Snyk file to exclude vendor directory on scan [#103](https://github.com/openshift/cloud-provider-azure/pull/103)
* [OCPBUGS-22556](https://issues.redhat.com/browse/OCPBUGS-22556), [OCPCLOUD-2422](https://issues.redhat.com/browse/OCPCLOUD-2422): Update to kubernetes v1.29 [#88](https://github.com/openshift/cloud-provider-azure/pull/88)
* [OCPBUGS-25590](https://issues.redhat.com/browse/OCPBUGS-25590): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#102](https://github.com/openshift/cloud-provider-azure/pull/102)
* [OCPBUGS-25589](https://issues.redhat.com/browse/OCPBUGS-25589): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#101](https://github.com/openshift/cloud-provider-azure/pull/101)
* [OCPBUGS-25005](https://issues.redhat.com/browse/OCPBUGS-25005): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#100](https://github.com/openshift/cloud-provider-azure/pull/100)
* [OCPBUGS-25003](https://issues.redhat.com/browse/OCPBUGS-25003): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#99](https://github.com/openshift/cloud-provider-azure/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/5beac87d7395d2f9c5d76a66669ad17e13d1ca07...0e9553295ecd02d6ef0aff19dfc1dfe680993112)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/face7da9972351de9a8d230b2a72af9dfe7facf7)

* [OCPBUGS-33083](https://issues.redhat.com/browse/OCPBUGS-33083): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.5 (1f08b9d) into master [#302](https://github.com/openshift/cluster-api-provider-azure/pull/302)
* [OCPBUGS-27450](https://issues.redhat.com/browse/OCPBUGS-27450): add a snyk configuration file [#299](https://github.com/openshift/cluster-api-provider-azure/pull/299)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.0 (7ee3a6a) into master [#298](https://github.com/openshift/cluster-api-provider-azure/pull/298)
* [OCPCLOUD-2443](https://issues.redhat.com/browse/OCPCLOUD-2443): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.12.1 (f32b78b) into master [#297](https://github.com/openshift/cluster-api-provider-azure/pull/297)
* [OCPBUGS-25626](https://issues.redhat.com/browse/OCPBUGS-25626): Add Snyk file to exclude vendor directory on scan [#295](https://github.com/openshift/cluster-api-provider-azure/pull/295)
* [OCPBUGS-24896](https://issues.redhat.com/browse/OCPBUGS-24896): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#293](https://github.com/openshift/cluster-api-provider-azure/pull/293)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/84ef752bcb274d97ccf57c0b61b1c7a8800c7aee...face7da9972351de9a8d230b2a72af9dfe7facf7)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6b55f6fb004454f743aa0f2e1d96010396be4c45)

* [OCPBUGS-30475](https://issues.redhat.com/browse/OCPBUGS-30475): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#78](https://github.com/openshift/azure-disk-csi-driver/pull/78)
* [STOR-1579](https://issues.redhat.com/browse/STOR-1579): Rebase v1.29.3 [#75](https://github.com/openshift/azure-disk-csi-driver/pull/75)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#74](https://github.com/openshift/azure-disk-csi-driver/pull/74)
* [OCPBUGS-25503](https://issues.redhat.com/browse/OCPBUGS-25503): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#71](https://github.com/openshift/azure-disk-csi-driver/pull/71)
* [OCPBUGS-18701](https://issues.redhat.com/browse/OCPBUGS-18701): UPSTREAM: 1904, UPSTREAM: 1917, UPSTREAM: 1955: Update disk number table [#49](https://github.com/openshift/azure-disk-csi-driver/pull/49)
* [OCPBUGS-25569](https://issues.redhat.com/browse/OCPBUGS-25569): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#70](https://github.com/openshift/azure-disk-csi-driver/pull/70)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#69](https://github.com/openshift/azure-disk-csi-driver/pull/69)
* [OCPBUGS-22559](https://issues.redhat.com/browse/OCPBUGS-22559): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#66](https://github.com/openshift/azure-disk-csi-driver/pull/66)
* [OCPBUGS-25050](https://issues.redhat.com/browse/OCPBUGS-25050): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#67](https://github.com/openshift/azure-disk-csi-driver/pull/67)
* [OCPBUGS-24938](https://issues.redhat.com/browse/OCPBUGS-24938): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#65](https://github.com/openshift/azure-disk-csi-driver/pull/65)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d...6b55f6fb004454f743aa0f2e1d96010396be4c45)


### [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0a77e596f573853126504c2159b67ac352275c83)

* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/160cf624a88f500de7a1f79e6dd9384bb7d17842...0a77e596f573853126504c2159b67ac352275c83)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/5ceb190a24730e4a3f951fa3e186e3cde9d86889)

* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): Rebase v1.29.5 for OCP 4.16 [#64](https://github.com/openshift/azure-file-csi-driver/pull/64)
* [OCPBUGS-32046](https://issues.redhat.com/browse/OCPBUGS-32046): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#60](https://github.com/openshift/azure-file-csi-driver/pull/60)
* [OCPBUGS-31869](https://issues.redhat.com/browse/OCPBUGS-31869): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 [#59](https://github.com/openshift/azure-file-csi-driver/pull/59)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): use azcopy base image to build driver [#56](https://github.com/openshift/azure-file-csi-driver/pull/56)
* [OCPBUGS-30476](https://issues.redhat.com/browse/OCPBUGS-30476): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#57](https://github.com/openshift/azure-file-csi-driver/pull/57)
* [STOR-1586](https://issues.redhat.com/browse/STOR-1586): Rebase v1.29.3 [#54](https://github.com/openshift/azure-file-csi-driver/pull/54)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#52](https://github.com/openshift/azure-file-csi-driver/pull/52)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#47](https://github.com/openshift/azure-file-csi-driver/pull/47)
* [OCPBUGS-25504](https://issues.redhat.com/browse/OCPBUGS-25504): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#49](https://github.com/openshift/azure-file-csi-driver/pull/49)
* [OCPBUGS-25550](https://issues.redhat.com/browse/OCPBUGS-25550): UPSTREAM: &lt;drop&gt;: Regenerate go.mod with go 1.21 [#48](https://github.com/openshift/azure-file-csi-driver/pull/48)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#46](https://github.com/openshift/azure-file-csi-driver/pull/46)
* [OCPBUGS-24874](https://issues.redhat.com/browse/OCPBUGS-24874): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#45](https://github.com/openshift/azure-file-csi-driver/pull/45)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/364d90d4dd15bfbe15835b0427c8c7d8f1100fb9...5ceb190a24730e4a3f951fa3e186e3cde9d86889)


### [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0a77e596f573853126504c2159b67ac352275c83)

* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/1c6294a4815b076ea3932c4bed4510043d738504...0a77e596f573853126504c2159b67ac352275c83)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)

* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Remove startupScript vmextension lookup [#102](https://github.com/openshift/machine-api-provider-azure/pull/102)
* [OCPBUGS-28309](https://issues.redhat.com/browse/OCPBUGS-28309): add an extra vendor exclude to snyk config [#99](https://github.com/openshift/machine-api-provider-azure/pull/99)
* [OCPBUGS-25940](https://issues.redhat.com/browse/OCPBUGS-25940): Don't create availability set when using spot instances [#91](https://github.com/openshift/machine-api-provider-azure/pull/91)
* [OCPCLOUD-2428](https://issues.redhat.com/browse/OCPCLOUD-2428): Rebase k8s to 1.29 and update dependencies [#94](https://github.com/openshift/machine-api-provider-azure/pull/94)
* [OCPBUGS-26122](https://issues.redhat.com/browse/OCPBUGS-26122): Add Snyk file to exclude vendor directory on scan [#92](https://github.com/openshift/machine-api-provider-azure/pull/92)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Improving performance of creating VMs in Azure [#87](https://github.com/openshift/machine-api-provider-azure/pull/87)
* [OCPBUGS-25591](https://issues.redhat.com/browse/OCPBUGS-25591): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#90](https://github.com/openshift/machine-api-provider-azure/pull/90)
* [OCPBUGS-25008](https://issues.redhat.com/browse/OCPBUGS-25008): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#88](https://github.com/openshift/machine-api-provider-azure/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/2c8c33d88e4098aaa7f57082e084d8cd1b10f152...d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/4aca092a13f62e48c700a910e8f3f0f228a7d822)

* [OCPBUGS-31283](https://issues.redhat.com/browse/OCPBUGS-31283): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#16](https://github.com/openshift/azure-workload-identity/pull/16)
* [OCPBUGS-30712](https://issues.redhat.com/browse/OCPBUGS-30712): Update to go-jose v4.0.1 [#15](https://github.com/openshift/azure-workload-identity/pull/15)
* [OCPBUGS-26203](https://issues.redhat.com/browse/OCPBUGS-26203): Upgrade golang/x/net for CVE-2023-39325 (main) [#12](https://github.com/openshift/azure-workload-identity/pull/12)
* [OCPBUGS-25777](https://issues.redhat.com/browse/OCPBUGS-25777): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 [#11](https://github.com/openshift/azure-workload-identity/pull/11)
* [OCPBUGS-25543](https://issues.redhat.com/browse/OCPBUGS-25543): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#10](https://github.com/openshift/azure-workload-identity/pull/10)
* [OCPBUGS-24854](https://issues.redhat.com/browse/OCPBUGS-24854): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART [#8](https://github.com/openshift/azure-workload-identity/pull/8)
* NO-JIRA: UPSTREAM: &lt;carry&gt; Update OWNERS [#9](https://github.com/openshift/azure-workload-identity/pull/9)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1...4aca092a13f62e48c700a910e8f3f0f228a7d822)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/f6685042380d53ca31b78e47031327092d1c0b63)

* no-jira: CAPI-Install Feature Gates per Platform [#8311](https://github.com/openshift/installer/pull/8311)
* [SPLAT-1599](https://issues.redhat.com/browse/SPLAT-1599): Added support for secure boot and storage policies to UPI pwsh. [#8328](https://github.com/openshift/installer/pull/8328)
* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): images: move container images to RHEL 9 [#8196](https://github.com/openshift/installer/pull/8196)
* [AGENT-864](https://issues.redhat.com/browse/AGENT-864): cleanup dnf cache after installing node-joiner reqs [#8329](https://github.com/openshift/installer/pull/8329)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: use ControlPlane.Replicas [#8322](https://github.com/openshift/installer/pull/8322)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): docs fix [#8325](https://github.com/openshift/installer/pull/8325)
* [OCPBUGS-33006](https://issues.redhat.com/browse/OCPBUGS-33006): baremetal: set bootstrap domain arch [#8317](https://github.com/openshift/installer/pull/8317)
* [OCPBUGS-33024](https://issues.redhat.com/browse/OCPBUGS-33024): agent: escape '%' in proxy settings [#8320](https://github.com/openshift/installer/pull/8320)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): fix oc dependency in installer images [#8326](https://github.com/openshift/installer/pull/8326)
* [OCPBUGS-29968](https://issues.redhat.com/browse/OCPBUGS-29968): Generate ZTP manifests with correct Group/Version/Kind metadata [#8068](https://github.com/openshift/installer/pull/8068)
* [CORS-3437](https://issues.redhat.com/browse/CORS-3437): infra/capi: add provisioning timeout [#8307](https://github.com/openshift/installer/pull/8307)
* [SPLAT-1596](https://issues.redhat.com/browse/SPLAT-1596): Created new function to workaround issue with Set-HardDisk. [#8315](https://github.com/openshift/installer/pull/8315)
* [CORS-3214](https://issues.redhat.com/browse/CORS-3214): capi-aws - Wavelength Zones network provisioning [#8174](https://github.com/openshift/installer/pull/8174)
* [AGENT-863](https://issues.redhat.com/browse/AGENT-863): node-joiner cluster script [#8242](https://github.com/openshift/installer/pull/8242)
* [OSASINFRA-3434](https://issues.redhat.com/browse/OSASINFRA-3434): Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests [#8021](https://github.com/openshift/installer/pull/8021)
* [CORS-2893](https://issues.redhat.com/browse/CORS-2893): capi-aws: implement preserveBootstrapIgnition [#8313](https://github.com/openshift/installer/pull/8313)
* [OCPBUGS-4466](https://issues.redhat.com/browse/OCPBUGS-4466): Add check for compact-cluster install on GCP, AWS & Azure [#8226](https://github.com/openshift/installer/pull/8226)
* [CORS-3250](https://issues.redhat.com/browse/CORS-3250): images/altinfra: add etcd/kas binaries from containers [#8309](https://github.com/openshift/installer/pull/8309)
* [CORS-2899](https://issues.redhat.com/browse/CORS-2899): AWS/CAPI Local Zones network provisioning [#8173](https://github.com/openshift/installer/pull/8173)
* [OCPBUGS-32981](https://issues.redhat.com/browse/OCPBUGS-32981): baremetal: template the number of master nodes [#8316](https://github.com/openshift/installer/pull/8316)
* [OCPBUGS-32519](https://issues.redhat.com/browse/OCPBUGS-32519): Fix appliance CI jobs [#8297](https://github.com/openshift/installer/pull/8297)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): fix ec2:DisassociateAddress requirement [#8296](https://github.com/openshift/installer/pull/8296)
* [OCPBUGS-32292](https://issues.redhat.com/browse/OCPBUGS-32292): Remove deprecated replace directives [#8271](https://github.com/openshift/installer/pull/8271)
* no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 [#8310](https://github.com/openshift/installer/pull/8310)
* [CORS-3076](https://issues.redhat.com/browse/CORS-3076): azure: Add additional tags to AzureCluster [#8301](https://github.com/openshift/installer/pull/8301)
* [CORS-3294](https://issues.redhat.com/browse/CORS-3294): CAPA health check configuration for control plane ELBv2 [#8223](https://github.com/openshift/installer/pull/8223)
* [CORS-3470](https://issues.redhat.com/browse/CORS-3470): capi/aws: add custom endpoint support. [#8306](https://github.com/openshift/installer/pull/8306)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Updating CI image to include qemu-kvm [#8312](https://github.com/openshift/installer/pull/8312)
* [MULTIARCH-4616](https://issues.redhat.com/browse/MULTIARCH-4616): Power VS: Add ServiceEndpoints for endpoint overrides [#8292](https://github.com/openshift/installer/pull/8292)
* no-jira: cluster-api/aws: bump capa to latest version [#8288](https://github.com/openshift/installer/pull/8288)
* [OCPBUGS-32306](https://issues.redhat.com/browse/OCPBUGS-32306): GCP Destroy find regional and global addresses [#8275](https://github.com/openshift/installer/pull/8275)
* [OCPBUGS-32517](https://issues.redhat.com/browse/OCPBUGS-32517): Ensure worker BMH's get unpaused [#8299](https://github.com/openshift/installer/pull/8299)
* [OCPBUGS-32591](https://issues.redhat.com/browse/OCPBUGS-32591): GCP Destroy target pools fix misleading log [#8298](https://github.com/openshift/installer/pull/8298)
* [CORS-3260](https://issues.redhat.com/browse/CORS-3260): CAPI: Create GCP Internal LB [#8151](https://github.com/openshift/installer/pull/8151)
* [OCPBUGS-15845](https://issues.redhat.com/browse/OCPBUGS-15845): Check host for compatibility with target cluster config [#7566](https://github.com/openshift/installer/pull/7566)
* no-jira: bump golangci lint to 1.54.2 [#8291](https://github.com/openshift/installer/pull/8291)
* [OCPBUGS-32425](https://issues.redhat.com/browse/OCPBUGS-32425): Test for the presence of "provisioned" server [#8289](https://github.com/openshift/installer/pull/8289)
* [SPLAT-1585](https://issues.redhat.com/browse/SPLAT-1585): capv - allow no auth to vcenter [#8276](https://github.com/openshift/installer/pull/8276)
* [SPLAT-1208](https://issues.redhat.com/browse/SPLAT-1208): replace UPI terraform with powercli [#7699](https://github.com/openshift/installer/pull/7699)
* [OCPBUGS-29765](https://issues.redhat.com/browse/OCPBUGS-29765): Fills CIS or DNS CRN in Metadata, never both [#8057](https://github.com/openshift/installer/pull/8057)
* [OCPBUGS-32042](https://issues.redhat.com/browse/OCPBUGS-32042): fix usage of addtionalTrustBundle field [#8253](https://github.com/openshift/installer/pull/8253)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): Remove terraform libvirt provider [#8160](https://github.com/openshift/installer/pull/8160)
* [MULTIARCH-4549](https://issues.redhat.com/browse/MULTIARCH-4549): Logic for creating private DNS records for PowerVS CAPI [#8246](https://github.com/openshift/installer/pull/8246)
* [OCPSTRAT-915](https://issues.redhat.com/browse/OCPSTRAT-915): Nutanix capi support [#8211](https://github.com/openshift/installer/pull/8211)
* [OCPBUGS-32133](https://issues.redhat.com/browse/OCPBUGS-32133): GCP: Fixing GCP Bootstraping [#8248](https://github.com/openshift/installer/pull/8248)
* [METAL-939](https://issues.redhat.com/browse/METAL-939): baremetal: monitor bootstrap process [#8181](https://github.com/openshift/installer/pull/8181)
* no-jira: gather: replace deprecated errors package [#8280](https://github.com/openshift/installer/pull/8280)
* no-jira:  azure: Update capz version to 1.14.2 [#8268](https://github.com/openshift/installer/pull/8268)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add `ec2:DisassociateAddress` permission [#8247](https://github.com/openshift/installer/pull/8247)
* [OCPBUGS-31563](https://issues.redhat.com/browse/OCPBUGS-31563): sdk/aws: add ssh security group rule for compute [#8229](https://github.com/openshift/installer/pull/8229)
* [MULTIARCH-4550](https://issues.redhat.com/browse/MULTIARCH-4550): Power VS: Use a custom resolver when publish strategy is Internal [#8243](https://github.com/openshift/installer/pull/8243)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678), [OCPBUGS-14478](https://issues.redhat.com/browse/OCPBUGS-14478): Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x [#8205](https://github.com/openshift/installer/pull/8205)
* [CORS-3050](https://issues.redhat.com/browse/CORS-3050): capi/aws: copy AMI to target region, if needed [#8157](https://github.com/openshift/installer/pull/8157)
* [SPLAT-1592](https://issues.redhat.com/browse/SPLAT-1592): bump capv to v1.9.3 [#8267](https://github.com/openshift/installer/pull/8267)
* [OCPBUGS-30774](https://issues.redhat.com/browse/OCPBUGS-30774): always save serial logs if they were gathered [#8263](https://github.com/openshift/installer/pull/8263)
* [CORS-3261](https://issues.redhat.com/browse/CORS-3261): GCP cluster api add disk encryption [#8222](https://github.com/openshift/installer/pull/8222)
* [CORS-3419](https://issues.redhat.com/browse/CORS-3419), [OCPBUGS-30941](https://issues.redhat.com/browse/OCPBUGS-30941): Include baremetal IPI in openshift-installer [#8161](https://github.com/openshift/installer/pull/8161)
* no-jira: PowerVS: Open port 10258 [#8261](https://github.com/openshift/installer/pull/8261)
* [OCPBUGS-31711](https://issues.redhat.com/browse/OCPBUGS-31711): AWS update explain docs [#8258](https://github.com/openshift/installer/pull/8258)
* [OCPBUGS-27965](https://issues.redhat.com/browse/OCPBUGS-27965): escape '%' in proxy settings [#8265](https://github.com/openshift/installer/pull/8265)
* [OCPBUGS-32174](https://issues.redhat.com/browse/OCPBUGS-32174): save correct bootstrap public IP [#8264](https://github.com/openshift/installer/pull/8264)
* [CORS-3420](https://issues.redhat.com/browse/CORS-3420): Remove libvirt platform from openshift-baremetal-install [#8244](https://github.com/openshift/installer/pull/8244)
* no-jira: capi: replace deprecated `--metrics-bind-addr` arg [#8251](https://github.com/openshift/installer/pull/8251)
* [CORS-3436](https://issues.redhat.com/browse/CORS-3436): capi: save log output to file [#8218](https://github.com/openshift/installer/pull/8218)
* no-jira: PowerVS: Add destroy Power Server subnets [#8260](https://github.com/openshift/installer/pull/8260)
* [OCPBUGS-32091](https://issues.redhat.com/browse/OCPBUGS-32091): Add Top-level Context for Create Commands [#8063](https://github.com/openshift/installer/pull/8063)
* [CORS-3063](https://issues.redhat.com/browse/CORS-3063): Support control plane disk encryption [#8124](https://github.com/openshift/installer/pull/8124)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure CAPI Ignite Bootstrap [#8255](https://github.com/openshift/installer/pull/8255)
* no-jira: PowerVS: add AddIPToLoadBalancerPool [#8257](https://github.com/openshift/installer/pull/8257)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump API version to promote vSphereStaticIPs from TechPreview. [#7943](https://github.com/openshift/installer/pull/7943)
* no-jira: capi/aws: bump controller log level to debug [#8252](https://github.com/openshift/installer/pull/8252)
* [CORS-3254](https://issues.redhat.com/browse/CORS-3254): Update google.golang.org/api/cloudresourcemanager library version [#8213](https://github.com/openshift/installer/pull/8213)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Update the CI image with virt-install [#8259](https://github.com/openshift/installer/pull/8259)
* [CORS-3218](https://issues.redhat.com/browse/CORS-3218): GCP Remove the use case of users passing contents for json secret data [#8234](https://github.com/openshift/installer/pull/8234)
* [OCPBUGS-27844](https://issues.redhat.com/browse/OCPBUGS-27844): Fix task for attaching IPv6 subnet to router. [#8087](https://github.com/openshift/installer/pull/8087)
* [CORS-3270](https://issues.redhat.com/browse/CORS-3270): azure: tag installer-created LB resources [#8236](https://github.com/openshift/installer/pull/8236)
* [OCPBUGS-31813](https://issues.redhat.com/browse/OCPBUGS-31813): AWS: bump CCO for permission fix [#8233](https://github.com/openshift/installer/pull/8233)
* [CORS-3289](https://issues.redhat.com/browse/CORS-3289), [CORS-3308](https://issues.redhat.com/browse/CORS-3308), [CORS-3426](https://issues.redhat.com/browse/CORS-3426): Bump CAPA provider for various fixes [#8232](https://github.com/openshift/installer/pull/8232)
* [OCPBUGS-32041](https://issues.redhat.com/browse/OCPBUGS-32041): update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 [#8256](https://github.com/openshift/installer/pull/8256)
* no-jira: docs: Fix typos [#8245](https://github.com/openshift/installer/pull/8245)
* no-jira:PowerVS: Wait for IPs [#8239](https://github.com/openshift/installer/pull/8239)
* [CORS-3075](https://issues.redhat.com/browse/CORS-3075): Allow for installation in existing resource group [#8123](https://github.com/openshift/installer/pull/8123)
* [CORS-3446](https://issues.redhat.com/browse/CORS-3446): Add instructions for obtaining correct binary [#8230](https://github.com/openshift/installer/pull/8230)
* [AGENT-858](https://issues.redhat.com/browse/AGENT-858): Agent day2 ignition services [#8093](https://github.com/openshift/installer/pull/8093)
* [CORS-3418](https://issues.redhat.com/browse/CORS-3418): images: move installer images to static builds [#8215](https://github.com/openshift/installer/pull/8215)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capi/aws: support ignition proxy and CA bundle [#8170](https://github.com/openshift/installer/pull/8170)
* [OSASINFRA-3365](https://issues.redhat.com/browse/OSASINFRA-3365): clusterapi: Add worker asset to PreProvision [#8237](https://github.com/openshift/installer/pull/8237)
* [HIVE-2476](https://issues.redhat.com/browse/HIVE-2476): OpenStack.MachineSets(): Allow nil Replicas [#8227](https://github.com/openshift/installer/pull/8227)
* [CORS-3195](https://issues.redhat.com/browse/CORS-3195): Azure CAPI Supplemental Load Balancers [#8115](https://github.com/openshift/installer/pull/8115)
* no-jira: PowerVS: Set VPC service region [#8217](https://github.com/openshift/installer/pull/8217)
* [OCPBUGS-12890](https://issues.redhat.com/browse/OCPBUGS-12890): Create bucket, signed url and use proxy info for installs [#8056](https://github.com/openshift/installer/pull/8056)
* no-jira: PowerVS: Fix COS region and VPC subnets [#8219](https://github.com/openshift/installer/pull/8219)
* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster  Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [OCPBUGS-30641](https://issues.redhat.com/browse/OCPBUGS-30641): Enable deploy by Service ID on PowerVS [#8111](https://github.com/openshift/installer/pull/8111)
* [CORS-3288](https://issues.redhat.com/browse/CORS-3288): bump CAPA for LB scheme fix [#8114](https://github.com/openshift/installer/pull/8114)
* no-jira:  machines/aws: fix subnet filter comment [#8120](https://github.com/openshift/installer/pull/8120)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: bootstrap: rename master label [#8107](https://github.com/openshift/installer/pull/8107)
* [OCPBUGS-29388](https://issues.redhat.com/browse/OCPBUGS-29388): upi: aws: fix typo in worker templates [#8112](https://github.com/openshift/installer/pull/8112)
* [OSASINFRA-3362](https://issues.redhat.com/browse/OSASINFRA-3362): Fix CAPI bootstrap deletion [#8104](https://github.com/openshift/installer/pull/8104)
* [OCPBUGS-24415](https://issues.redhat.com/browse/OCPBUGS-24415), [OCPVE-661](https://issues.redhat.com/browse/OCPVE-661): bump openshift/api version [#7546](https://github.com/openshift/installer/pull/7546)
* [MULTIARCH-4095](https://issues.redhat.com/browse/MULTIARCH-4095): Generate PowerVS machine manifests for CAPI [#8020](https://github.com/openshift/installer/pull/8020)
* [CORS-2900](https://issues.redhat.com/browse/CORS-2900): CAPI AWS IAM [#8031](https://github.com/openshift/installer/pull/8031)
* [OCPBUGS-30200](https://issues.redhat.com/browse/OCPBUGS-30200): Authn with platform-services-go-sdk for PowerVS [#8025](https://github.com/openshift/installer/pull/8025)
* [CORS-3281](https://issues.redhat.com/browse/CORS-3281): IBMCloud: initial CAPI infrastructure [#8090](https://github.com/openshift/installer/pull/8090)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): Bump CAPA Dependencies for Secondary Load Balancers [#8088](https://github.com/openshift/installer/pull/8088)
* [SPLAT-1460](https://issues.redhat.com/browse/SPLAT-1460): Make vSphere default ResourcePool formatting not contain double slash. [#8044](https://github.com/openshift/installer/pull/8044)
* [CORS-3212](https://issues.redhat.com/browse/CORS-3212): CAPG Add ignition for CAPG machines [#8027](https://github.com/openshift/installer/pull/8027)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): Remove terraform-provider-ironic [#7649](https://github.com/openshift/installer/pull/7649)
* [SPLAT-1468](https://issues.redhat.com/browse/SPLAT-1468): Added log message for import vsphere ova progress during CAPI install. [#8097](https://github.com/openshift/installer/pull/8097)
* no-jira: capi: aws: report all conflicting user tags at once [#8085](https://github.com/openshift/installer/pull/8085)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out - part 2 [#8070](https://github.com/openshift/installer/pull/8070)
* [SPLAT-1423](https://issues.redhat.com/browse/SPLAT-1423): Added static ip support to CAPI installer. [#8081](https://github.com/openshift/installer/pull/8081)
* [MULTIARCH-4159](https://issues.redhat.com/browse/MULTIARCH-4159): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8098](https://github.com/openshift/installer/pull/8098)
* [OCPBUGS-30058](https://issues.redhat.com/browse/OCPBUGS-30058): GCP: The CAPG bootstrap machine IP should be set according to the publish strategy [#8079](https://github.com/openshift/installer/pull/8079)
* [OCPBUGS-30057](https://issues.redhat.com/browse/OCPBUGS-30057): Don't auto create subnets for CAPG [#8083](https://github.com/openshift/installer/pull/8083)
* [MULTIARCH-4153](https://issues.redhat.com/browse/MULTIARCH-4153): Incorporating Eltorito Boot Loader fix for Agent [#8069](https://github.com/openshift/installer/pull/8069)
* no-jira: Missing permission from vsphere docs [#7789](https://github.com/openshift/installer/pull/7789)
* [OCPBUGS-30135](https://issues.redhat.com/browse/OCPBUGS-30135): fix "OpenShiftSDN deprecated" error message [#8092](https://github.com/openshift/installer/pull/8092)
* [CORS-3274](https://issues.redhat.com/browse/CORS-3274): GCP: add africa-south1 region to the survey as supported region [#8055](https://github.com/openshift/installer/pull/8055)
* [CORS-3251](https://issues.redhat.com/browse/CORS-3251): Create capz machine manifests [#7969](https://github.com/openshift/installer/pull/7969)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP CAPI Infra: auth with service account [#8077](https://github.com/openshift/installer/pull/8077)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Apply user defined tags on created gcp resources [#7279](https://github.com/openshift/installer/pull/7279)
* [AGENT-853](https://issues.redhat.com/browse/AGENT-853): Add ClusterInfo asset [#7997](https://github.com/openshift/installer/pull/7997)
* [SPLAT-1173](https://issues.redhat.com/browse/SPLAT-1173): Enhance vSphere Installer to use IPAddressClaims for static IP [#7501](https://github.com/openshift/installer/pull/7501)
* [CORS-3273](https://issues.redhat.com/browse/CORS-3273): capi system: don't log env vars [#8084](https://github.com/openshift/installer/pull/8084)
* [OCPBUGS-29860](https://issues.redhat.com/browse/OCPBUGS-29860): double looping of failuredomains breaks zonal [#8059](https://github.com/openshift/installer/pull/8059)
* no-jira: Remove v1alpha3 [#8061](https://github.com/openshift/installer/pull/8061)
* [OCPBUGS-30005](https://issues.redhat.com/browse/OCPBUGS-30005): remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 [#8072](https://github.com/openshift/installer/pull/8072)
* [OSASINFRA-3363](https://issues.redhat.com/browse/OSASINFRA-3363): ShiftStack CAPO integration [#7939](https://github.com/openshift/installer/pull/7939)
* [MULTIARCH-4158](https://issues.redhat.com/browse/MULTIARCH-4158): pkg/infrastructure/powervs: add initial CAPI provider [#8060](https://github.com/openshift/installer/pull/8060)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out [#8046](https://github.com/openshift/installer/pull/8046)
* [SPLAT-1459](https://issues.redhat.com/browse/SPLAT-1459): capv machines only full clone [#8042](https://github.com/openshift/installer/pull/8042)
* [OCPBUGS-29895](https://issues.redhat.com/browse/OCPBUGS-29895): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8058](https://github.com/openshift/installer/pull/8058)
* [SPLAT-1434](https://issues.redhat.com/browse/SPLAT-1434): aws: add support of BYO public ipv4 pool [#7983](https://github.com/openshift/installer/pull/7983)
* no-jira: images: libvirt: add oc to libvirt CI image [#8008](https://github.com/openshift/installer/pull/8008)
* [SPLAT-1465](https://issues.redhat.com/browse/SPLAT-1465): capv - add additional extra configs [#8054](https://github.com/openshift/installer/pull/8054)
* [SPLAT-1462](https://issues.redhat.com/browse/SPLAT-1462): capv - Remove unneeded auth env vars [#8053](https://github.com/openshift/installer/pull/8053)
* [OCPBUGS-29429](https://issues.redhat.com/browse/OCPBUGS-29429): feat: add check for SNO bootstrap condition [#8004](https://github.com/openshift/installer/pull/8004)
* Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer [#8028](https://github.com/openshift/installer/pull/8028)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP: Create DNS records and internal load balancer for CAPG Install [#8014](https://github.com/openshift/installer/pull/8014)
* [SPLAT-1198](https://issues.redhat.com/browse/SPLAT-1198): migrate vSphere installation to CAPV [#7962](https://github.com/openshift/installer/pull/7962)
* [OCPBUGS-29587](https://issues.redhat.com/browse/OCPBUGS-29587): Power VS: Fix service instance list [#8033](https://github.com/openshift/installer/pull/8033)
* [OCPBUGS-22410](https://issues.redhat.com/browse/OCPBUGS-22410): vsphere-fix convert if only provided name [#7931](https://github.com/openshift/installer/pull/7931)
* [OCPBUGS-29584](https://issues.redhat.com/browse/OCPBUGS-29584): PowerVS: handle composite_instance [#8029](https://github.com/openshift/installer/pull/8029)
* [OCPBUGS-29482](https://issues.redhat.com/browse/OCPBUGS-29482): Bump terraform-provider-ibm to v1.61.0 [#8023](https://github.com/openshift/installer/pull/8023)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): pkg/infrastructure/aws: add initial CAPI provider [#8012](https://github.com/openshift/installer/pull/8012)
* [CORS-3185](https://issues.redhat.com/browse/CORS-3185): update default release image [#7874](https://github.com/openshift/installer/pull/7874)
* [OCPBUGS-28590](https://issues.redhat.com/browse/OCPBUGS-28590): gcp: better error msg when service accnt missing [#8002](https://github.com/openshift/installer/pull/8002)
* [OCPBUGS-28203](https://issues.redhat.com/browse/OCPBUGS-28203): Power VS: Add sleep to allow workspace to configure PER [#7889](https://github.com/openshift/installer/pull/7889)
* [CORS-3220](https://issues.redhat.com/browse/CORS-3220): Initiate CAPG installation [#8011](https://github.com/openshift/installer/pull/8011)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Create the GCP cluster manifest [#7917](https://github.com/openshift/installer/pull/7917)
* [OCPBUGS-29441](https://issues.redhat.com/browse/OCPBUGS-29441): update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 [#8015](https://github.com/openshift/installer/pull/8015)
* [OCPBUGS-29425](https://issues.redhat.com/browse/OCPBUGS-29425): PowerVS Fix next start search [#8010](https://github.com/openshift/installer/pull/8010)
* Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation [#7998](https://github.com/openshift/installer/pull/7998)
* [SPLAT-1447](https://issues.redhat.com/browse/SPLAT-1447): Move MCO imports to API; update library-go, api [#8000](https://github.com/openshift/installer/pull/8000)
* NO-ISSUE: integrationt tests support for env vars substitution [#7992](https://github.com/openshift/installer/pull/7992)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7985](https://github.com/openshift/installer/pull/7985)
* [OCPBUGS-29068](https://issues.redhat.com/browse/OCPBUGS-29068): GCP: Skip validation of public and private zones for terraform vars [#7986](https://github.com/openshift/installer/pull/7986)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Copy GCP manifests within MCO bootstrap to the correct location [#7991](https://github.com/openshift/installer/pull/7991)
* [OCPBUGS-20085](https://issues.redhat.com/browse/OCPBUGS-20085): IBMCloud: Handle disk delete errors [#7515](https://github.com/openshift/installer/pull/7515)
* [OCPBUGS-28827](https://issues.redhat.com/browse/OCPBUGS-28827): do not rename boot.catalog for arm64 iso [#7972](https://github.com/openshift/installer/pull/7972)
* [OSASINFRA-3371](https://issues.redhat.com/browse/OSASINFRA-3371): Pass rhcosImage and manifests to the PreProvision hook [#7967](https://github.com/openshift/installer/pull/7967)
* [SPLAT-1387](https://issues.redhat.com/browse/SPLAT-1387): enable additional tags to be associated with vsphere machines [#7905](https://github.com/openshift/installer/pull/7905)
* [CORS-3242](https://issues.redhat.com/browse/CORS-3242): PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item [#7861](https://github.com/openshift/installer/pull/7861)
* [OPNET-357](https://issues.redhat.com/browse/OPNET-357): Populate network configuration at install-time [#7604](https://github.com/openshift/installer/pull/7604)
* [CORS-3240](https://issues.redhat.com/browse/CORS-3240): add OWNERS_ALIASES madhu-pillai [#7733](https://github.com/openshift/installer/pull/7733)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): Revert "bootkube.sh: Render kernel boot arguments for SNO" [#7979](https://github.com/openshift/installer/pull/7979)
* [CORS-3188](https://issues.redhat.com/browse/CORS-3188): Bump k8s deps [#7970](https://github.com/openshift/installer/pull/7970)
* [OCPBUGS-2135](https://issues.redhat.com/browse/OCPBUGS-2135): Include CAPG objects in uninstall filter [#7907](https://github.com/openshift/installer/pull/7907)
* [AGENT-848](https://issues.redhat.com/browse/AGENT-848): add node-joiner cli tool main [#7958](https://github.com/openshift/installer/pull/7958)
* [CORS-3207](https://issues.redhat.com/browse/CORS-3207): Generate GCP machine manifests for CAPI [#7944](https://github.com/openshift/installer/pull/7944)
* [OCPBUGS-24575](https://issues.redhat.com/browse/OCPBUGS-24575): ic: gcp: validate instance architecture [#7850](https://github.com/openshift/installer/pull/7850)
* [CORS-3196](https://issues.redhat.com/browse/CORS-3196): capg: add infrastructure components [#7968](https://github.com/openshift/installer/pull/7968)
* [CORS-3208](https://issues.redhat.com/browse/CORS-3208): Create the GCP infrastructure controller [#7940](https://github.com/openshift/installer/pull/7940)
* [OCPBUGS-27156](https://issues.redhat.com/browse/OCPBUGS-27156): GCP Destroy cleanup correct zones/records [#7932](https://github.com/openshift/installer/pull/7932)
* [OCPBUGS-27737](https://issues.redhat.com/browse/OCPBUGS-27737): aws-edge-zones preventing err before discovering [#7945](https://github.com/openshift/installer/pull/7945)
* [OCPBUGS-28708](https://issues.redhat.com/browse/OCPBUGS-28708): update tested Azure Arm64 instance type on 4.15 [#7965](https://github.com/openshift/installer/pull/7965)
* [OCPBUGS-28643](https://issues.redhat.com/browse/OCPBUGS-28643): PowerVS: Add dal12 region [#7956](https://github.com/openshift/installer/pull/7956)
* [OCPBUGS-27263](https://issues.redhat.com/browse/OCPBUGS-27263): Bump golang 1.21 [#7925](https://github.com/openshift/installer/pull/7925)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#7692](https://github.com/openshift/installer/pull/7692)
* [OCPBUGS-28705](https://issues.redhat.com/browse/OCPBUGS-28705): [azure] update tested x86 instance type on 4.15 [#7961](https://github.com/openshift/installer/pull/7961)
* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [OCPBUGS-27192](https://issues.redhat.com/browse/OCPBUGS-27192): remove retired serial NCv2 from azure tested instance type list on x86 [#7911](https://github.com/openshift/installer/pull/7911)
* no-jira:  images/altinfra: allow CAPI ARG [#7891](https://github.com/openshift/installer/pull/7891)
* [OCPBUGS-25835](https://issues.redhat.com/browse/OCPBUGS-25835): Validate baremetal capability is set for baremetal platform [#7901](https://github.com/openshift/installer/pull/7901)
* no-jira:  Add AWS m6a to tested instance types [#7851](https://github.com/openshift/installer/pull/7851)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Fix typo in CloudCredential validation [#7915](https://github.com/openshift/installer/pull/7915)
* [OCPBUGS-24303](https://issues.redhat.com/browse/OCPBUGS-24303): Check provided sha for agent ISO download [#7893](https://github.com/openshift/installer/pull/7893)
* [CORS-3203](https://issues.redhat.com/browse/CORS-3203): Fix `depreciated` typo [#7834](https://github.com/openshift/installer/pull/7834)
* [OCPBUGS-14257](https://issues.redhat.com/browse/OCPBUGS-14257): normalize ISO files extensions to three chars [#7896](https://github.com/openshift/installer/pull/7896)
* [OCPBUGS-26434](https://issues.redhat.com/browse/OCPBUGS-26434): Redact platform passwords in agent-gather output [#7873](https://github.com/openshift/installer/pull/7873)
* [OCPBUGS-27092](https://issues.redhat.com/browse/OCPBUGS-27092): baremetal: gather all recently refactored services [#7854](https://github.com/openshift/installer/pull/7854)
* [OCPBUGS-25996](https://issues.redhat.com/browse/OCPBUGS-25996): baremetal: correct external_http_url for v6-only BMCs [#7898](https://github.com/openshift/installer/pull/7898)
* [CORS-2950](https://issues.redhat.com/browse/CORS-2950): Remove openshift-sdn as an install-time option [#7720](https://github.com/openshift/installer/pull/7720)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Upgrade o/api to include extended network config [#7869](https://github.com/openshift/installer/pull/7869)
* [METAL-829](https://issues.redhat.com/browse/METAL-829): Set node cpu_arch from bmh [#7814](https://github.com/openshift/installer/pull/7814)
* [OCPBUGS-26399](https://issues.redhat.com/browse/OCPBUGS-26399): Support singular VIP in ACI for BareMetal [#7859](https://github.com/openshift/installer/pull/7859)
* [CORS-3190](https://issues.redhat.com/browse/CORS-3190): GCP: Add load balancer info to cluster infra [#7888](https://github.com/openshift/installer/pull/7888)
* [MULTIARCH-4072](https://issues.redhat.com/browse/MULTIARCH-4072): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7870](https://github.com/openshift/installer/pull/7870)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7884](https://github.com/openshift/installer/pull/7884)
* [OCPBUGS-25841](https://issues.redhat.com/browse/OCPBUGS-25841): preserve category name when trying to find tag category [#7876](https://github.com/openshift/installer/pull/7876)
* [ARO-4744](https://issues.redhat.com/browse/ARO-4744): Do not run platform validation on ARO [#7865](https://github.com/openshift/installer/pull/7865)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7875](https://github.com/openshift/installer/pull/7875)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): OpenStack: clarify root volume size requirements [#7698](https://github.com/openshift/installer/pull/7698)
* [OCPBUGS-26048](https://issues.redhat.com/browse/OCPBUGS-26048): Bump default channel to stable-4.16 [#7867](https://github.com/openshift/installer/pull/7867)
* [OCPBUGS-24862](https://issues.redhat.com/browse/OCPBUGS-24862): Updating ose-installer-altinfra-container image to be … [#7872](https://github.com/openshift/installer/pull/7872)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: allow clean shutdown of resources [#7864](https://github.com/openshift/installer/pull/7864)
* [OCPBUGS-24820](https://issues.redhat.com/browse/OCPBUGS-24820): Updating ose-baremetal-installer-container image to be consistent with ART [#7817](https://github.com/openshift/installer/pull/7817)
* [OCPBUGS-24814](https://issues.redhat.com/browse/OCPBUGS-24814): Updating ose-installer-container image to be consistent with ART [#7816](https://github.com/openshift/installer/pull/7816)
* [OCPBUGS-25600](https://issues.redhat.com/browse/OCPBUGS-25600): aws: validate instance arch [#7835](https://github.com/openshift/installer/pull/7835)
* [OCPBUGS-25440](https://issues.redhat.com/browse/OCPBUGS-25440): ic: aws: add iam:TagInstanceProfile permission requirement [#7843](https://github.com/openshift/installer/pull/7843)
* [OCPBUGS-25132](https://issues.redhat.com/browse/OCPBUGS-25132): Fixes for the OpensStack UPI playbooks. [#7833](https://github.com/openshift/installer/pull/7833)
* [OCPBUGS-24853](https://issues.redhat.com/browse/OCPBUGS-24853): Updating ose-installer-artifacts-container image to be consistent with ART [#7818](https://github.com/openshift/installer/pull/7818)
* [OCPBUGS-19054](https://issues.redhat.com/browse/OCPBUGS-19054): Warn that FeatureSet is not supported [#7825](https://github.com/openshift/installer/pull/7825)
* [CORS-2315](https://issues.redhat.com/browse/CORS-2315): GCP: Skip populating Private/Public Zones within DNS manifest [#7846](https://github.com/openshift/installer/pull/7846)
* no-jira: build: drop vsphereprivate build workaround [#7847](https://github.com/openshift/installer/pull/7847)
* [CORS-2870](https://issues.redhat.com/browse/CORS-2870): build: only rebuild terraform providers if needed [#7688](https://github.com/openshift/installer/pull/7688)
* [OCPBUGS-24473](https://issues.redhat.com/browse/OCPBUGS-24473): IBMCloud: Set IBM TF visibility based on URLs [#7805](https://github.com/openshift/installer/pull/7805)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): GCP: Update DNSType within GCP PlatformStatus based on `UserProvisionedDNS` [#7837](https://github.com/openshift/installer/pull/7837)
* [OCPBUGS-24241](https://issues.redhat.com/browse/OCPBUGS-24241): Pin openstack.cloud version. [#7821](https://github.com/openshift/installer/pull/7821)
* Revert "OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer" [#7651](https://github.com/openshift/installer/pull/7651)
* no-jira: Revert "Merge pull request #7823 from patrickdillon/build-capi-altinfra" [#7828](https://github.com/openshift/installer/pull/7828)
* [OCPBUGS-19303](https://issues.redhat.com/browse/OCPBUGS-19303): Changed OKD/FCOS workaround to also support Agent-based Installer [#7484](https://github.com/openshift/installer/pull/7484)
* [OCPBUGS-25191](https://issues.redhat.com/browse/OCPBUGS-25191): ic: azure: fix retrieving marketplace image [#7826](https://github.com/openshift/installer/pull/7826)
* [OCPBUGS-24995](https://issues.redhat.com/browse/OCPBUGS-24995): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7822](https://github.com/openshift/installer/pull/7822)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): images/altinfra: enable CAPI builds [#7823](https://github.com/openshift/installer/pull/7823)
* [CORS-3003](https://issues.redhat.com/browse/CORS-3003): [ibmcloud] add key-protect plugin in ibmcloud cli [#7811](https://github.com/openshift/installer/pull/7811)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Support installing OpenShift via Cluster API [#7807](https://github.com/openshift/installer/pull/7807)
* [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Modify the terraform variables to support Nutanix Failure Domains [#7806](https://github.com/openshift/installer/pull/7806)
* [Full changelog](https://github.com/openshift/installer/compare/4edfd0e16bc637dc2f593afbb28bba9799023892...f6685042380d53ca31b78e47031327092d1c0b63)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/11ba601fbca58557176fcc67ffe8d7d64b697a4a)

* [OCPBUGS-30477](https://issues.redhat.com/browse/OCPBUGS-30477): Bump golang-protobuf version [#213](https://github.com/openshift/cluster-api-provider-baremetal/pull/213)
* [OCPBUGS-28835](https://issues.redhat.com/browse/OCPBUGS-28835): Extend metal3remediation aggregation role [#209](https://github.com/openshift/cluster-api-provider-baremetal/pull/209)
* [OCPBUGS-25561](https://issues.redhat.com/browse/OCPBUGS-25561): Updating baremetal-machine-controller-container image to be consistent with ART [#208](https://github.com/openshift/cluster-api-provider-baremetal/pull/208)
* [OCPBUGS-25159](https://issues.redhat.com/browse/OCPBUGS-25159): Updating baremetal-machine-controller-container image to be consistent with ART [#207](https://github.com/openshift/cluster-api-provider-baremetal/pull/207)
* [OCPBUGS-24919](https://issues.redhat.com/browse/OCPBUGS-24919): Updating baremetal-machine-controller-container image to be consistent with ART [#206](https://github.com/openshift/cluster-api-provider-baremetal/pull/206)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b...11ba601fbca58557176fcc67ffe8d7d64b697a4a)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/33cfa9fcf9a13a86ca8afe0433cef49ea062ad12)

* [OCPBUGS-33048](https://issues.redhat.com/browse/OCPBUGS-33048): PreprovisioningImage should not be created on poweroff [#349](https://github.com/openshift/baremetal-operator/pull/349)
* NO-ISSUE: Sync upstream April 29 [#348](https://github.com/openshift/baremetal-operator/pull/348)
* NO-ISSUE: Merge upstream [#347](https://github.com/openshift/baremetal-operator/pull/347)
* NO-ISSUE: Sync with upstream [#344](https://github.com/openshift/baremetal-operator/pull/344)
* NO-ISSUE: Merge upstream [#340](https://github.com/openshift/baremetal-operator/pull/340)
* NO-ISSUE: Update OWNERS [#339](https://github.com/openshift/baremetal-operator/pull/339)
* [METAL-866](https://issues.redhat.com/browse/METAL-866): Merge upstream [#336](https://github.com/openshift/baremetal-operator/pull/336)
* NO-ISSUE: Merge upstream (2024.02.02) [#330](https://github.com/openshift/baremetal-operator/pull/330)
* [OCPBUGS-27825](https://issues.redhat.com/browse/OCPBUGS-27825): Merge upstream [#329](https://github.com/openshift/baremetal-operator/pull/329)
* [OCPBUGS-25567](https://issues.redhat.com/browse/OCPBUGS-25567): Updating ose-baremetal-operator-container image to be consistent with ART [#328](https://github.com/openshift/baremetal-operator/pull/328)
* [OCPBUGS-24935](https://issues.redhat.com/browse/OCPBUGS-24935): Updating ose-baremetal-operator-container image to be consistent with ART [#327](https://github.com/openshift/baremetal-operator/pull/327)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c17023eb3546d24d0529cdb4b7db96fc9ce288a7...33cfa9fcf9a13a86ca8afe0433cef49ea062ad12)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/53bcc3aa6e5ef57743526150a7280b176404442c)

* [OCPBUGS-32348](https://issues.redhat.com/browse/OCPBUGS-32348): Make log level configurable [#305](https://github.com/openshift/baremetal-runtimecfg/pull/305)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Do not add VRRP config to Node on Cloud Platforms [#303](https://github.com/openshift/baremetal-runtimecfg/pull/303)
* [OCPBUGS-29931](https://issues.redhat.com/browse/OCPBUGS-29931): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 [#300](https://github.com/openshift/baremetal-runtimecfg/pull/300)
* [OCPBUGS-29919](https://issues.redhat.com/browse/OCPBUGS-29919): Decrease log level when detecting node IP [#301](https://github.com/openshift/baremetal-runtimecfg/pull/301)
* [OCPBUGS-29095](https://issues.redhat.com/browse/OCPBUGS-29095): Ignore egress IP when selecting Node IP [#298](https://github.com/openshift/baremetal-runtimecfg/pull/298)
* [OCPBUGS-24865](https://issues.redhat.com/browse/OCPBUGS-24865): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#291](https://github.com/openshift/baremetal-runtimecfg/pull/291)
* NO-ISSUE: Upgrade k8s api and client-go deps [#297](https://github.com/openshift/baremetal-runtimecfg/pull/297)
* [OCPBUGS-26765](https://issues.redhat.com/browse/OCPBUGS-26765): Add .snyk file to ignore vendor and test files [#292](https://github.com/openshift/baremetal-runtimecfg/pull/292)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6f83b6f752ce27c6f997f2d0706b3a79b84aa763...53bcc3aa6e5ef57743526150a7280b176404442c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/51e5705eaace0d3a8b359913cb82e69a8bf0eaf1)

* [OTA-1154](https://issues.redhat.com/browse/OTA-1154): pkg/cli/admin/upgrade/status: Drop free-form Progressing output line [#1753](https://github.com/openshift/oc/pull/1753)
* [OTA-1279](https://issues.redhat.com/browse/OTA-1279): pkg/cli/admin/upgrade/status: Move Failing from free-form to updateInsight [#1744](https://github.com/openshift/oc/pull/1744)
* [OCPBUGS-32841](https://issues.redhat.com/browse/OCPBUGS-32841): Bump go-jose indirect reference to 2.6.3 [#1747](https://github.com/openshift/oc/pull/1747)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `update status`: unify on `--details` [#1748](https://github.com/openshift/oc/pull/1748)
* [OCPBUGS-32786](https://issues.redhat.com/browse/OCPBUGS-32786): Improve error message when binary is not in target list [#1746](https://github.com/openshift/oc/pull/1746)
* [OCPBUGS-32080](https://issues.redhat.com/browse/OCPBUGS-32080): release: extract ccoctl.rhel8 and ccoctl.rhel9 [#1734](https://github.com/openshift/oc/pull/1734)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Show resources in `--details=health` [#1737](https://github.com/openshift/oc/pull/1737)
* [OTA-1155](https://issues.redhat.com/browse/OTA-1155): `update status`: Simplify CO status line [#1741](https://github.com/openshift/oc/pull/1741)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1652](https://github.com/openshift/oc/pull/1652)
* NO-JIRA: Print an error msg instead of panicking when all image manifests are filtered out [#1729](https://github.com/openshift/oc/pull/1729)
* [WRKLDS-1190](https://issues.redhat.com/browse/WRKLDS-1190): oc adm must-gather: print timestamp when logging in fallback mode [#1738](https://github.com/openshift/oc/pull/1738)
* [OTA-1202](https://issues.redhat.com/browse/OTA-1202): Changing the conditional risk to known issues [#1739](https://github.com/openshift/oc/pull/1739)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: Expand health insights with `--detailed=health` [#1736](https://github.com/openshift/oc/pull/1736)
* [OTA-1174](https://issues.redhat.com/browse/OTA-1174): `upgrade status`: add `--detailed=nodes` that shows all nodes [#1735](https://github.com/openshift/oc/pull/1735)
* [MCO-1056](https://issues.redhat.com/browse/MCO-1056): MCO-1057: Implement oc adm prune machineconfigs command [#1723](https://github.com/openshift/oc/pull/1723)
* NO-JIRA: Report tests for feature [#1728](https://github.com/openshift/oc/pull/1728)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm update status`: Refactor node status [#1732](https://github.com/openshift/oc/pull/1732)
* [OTA-1036](https://issues.redhat.com/browse/OTA-1036): `adm upgrade status`: Add control plane nodes status [#1731](https://github.com/openshift/oc/pull/1731)
* [OCPBUGS-31498](https://issues.redhat.com/browse/OCPBUGS-31498): Add OIDC specific certificate authority bundle flag [#1720](https://github.com/openshift/oc/pull/1720)
* [WRKLDS-1171](https://issues.redhat.com/browse/WRKLDS-1171): Add openshift-install-fips target to oc release extract [#1725](https://github.com/openshift/oc/pull/1725)
* [OCPBUGS-31615](https://issues.redhat.com/browse/OCPBUGS-31615): Add help text the behavior of filter-by-os against single image [#1721](https://github.com/openshift/oc/pull/1721)
* make output table slightly easier to read [#1719](https://github.com/openshift/oc/pull/1719)
* NO-JIRA: update featuregate diff for clusterprofiles [#1714](https://github.com/openshift/oc/pull/1714)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): revert cli/admin/release/git: use optimized git flags [#1718](https://github.com/openshift/oc/pull/1718)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Remove some of newapp unit tests relying on external deprecated images [#1717](https://github.com/openshift/oc/pull/1717)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): cli/admin/release/git: use optimized git flags [#1708](https://github.com/openshift/oc/pull/1708)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Remove redundant endpoint resource modification [#1692](https://github.com/openshift/oc/pull/1692)
* [OCPBUGS-30703](https://issues.redhat.com/browse/OCPBUGS-30703): Bump coreos/go-oidc to 3.10.0 [#1713](https://github.com/openshift/oc/pull/1713)
* [WRKLDS-1103](https://issues.redhat.com/browse/WRKLDS-1103): tools: extend the image with sosreport [#1704](https://github.com/openshift/oc/pull/1704)
* [OTA-1165](https://issues.redhat.com/browse/OTA-1165): `adm upgrade status`: Add Worker Node Status [#1689](https://github.com/openshift/oc/pull/1689)
* [OCPBUGS-29623](https://issues.redhat.com/browse/OCPBUGS-29623): Introduce certificate-authority flag for image related commands [#1693](https://github.com/openshift/oc/pull/1693)
* [OCPBUGS-30212](https://issues.redhat.com/browse/OCPBUGS-30212): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1680](https://github.com/openshift/oc/pull/1680)
* [OCPBUGS-30244](https://issues.redhat.com/browse/OCPBUGS-30244): Add images mismatching kubectl version into warning to track [#1695](https://github.com/openshift/oc/pull/1695)
* [OCPBUGS-30162](https://issues.redhat.com/browse/OCPBUGS-30162): Introduce --issuer-url flag in oc login [#1694](https://github.com/openshift/oc/pull/1694)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1684](https://github.com/openshift/oc/pull/1684)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Extract oc also for linux/ppc64le [#1691](https://github.com/openshift/oc/pull/1691)
* [OTA-1080](https://issues.redhat.com/browse/OTA-1080): pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand [#1674](https://github.com/openshift/oc/pull/1674)
* [OCPBUGS-29210](https://issues.redhat.com/browse/OCPBUGS-29210): Update some commands incorrect examples [#1686](https://github.com/openshift/oc/pull/1686)
* NO-JIRA: Print log rather than returning an error when kubectl version mistmaches [#1685](https://github.com/openshift/oc/pull/1685)
* Do not force the ancient OS version dist tag. [#1536](https://github.com/openshift/oc/pull/1536)
* [TRT-1503](https://issues.redhat.com/browse/TRT-1503): Tools image no longer has python;adding [#1682](https://github.com/openshift/oc/pull/1682)
* Revert "NO-JIRA: Bump k8s dependencies to 1.29.1" [#1683](https://github.com/openshift/oc/pull/1683)
* NO-JIRA: Bump k8s dependencies to 1.29.1 [#1681](https://github.com/openshift/oc/pull/1681)
* [OCPBUGS-29039](https://issues.redhat.com/browse/OCPBUGS-29039): fix copy-to-node [#1679](https://github.com/openshift/oc/pull/1679)
* [OCPBUGS-28540](https://issues.redhat.com/browse/OCPBUGS-28540): Copy oc.rhel8 instead of symlink [#1669](https://github.com/openshift/oc/pull/1669)
* [OCPBUGS-27732](https://issues.redhat.com/browse/OCPBUGS-27732): Bump joelanford/ignore to bump go-git to 5.11.0 [#1671](https://github.com/openshift/oc/pull/1671)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1661](https://github.com/openshift/oc/pull/1661)
* [OCPBUGS-27957](https://issues.redhat.com/browse/OCPBUGS-27957): pkg/cli/admin/inspect: use since/since-time for previous container logs [#1666](https://github.com/openshift/oc/pull/1666)
* NO-JIRA: Fix --parallelism flag formatting in help [#1664](https://github.com/openshift/oc/pull/1664)
* NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error [#1663](https://github.com/openshift/oc/pull/1663)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1667](https://github.com/openshift/oc/pull/1667)
* [OCPBUGS-27489](https://issues.redhat.com/browse/OCPBUGS-27489): Use correct hash sum of extracted tarball after re-signing with codesign [#1659](https://github.com/openshift/oc/pull/1659)
* NO-JIRA: Simplified kubectl component version check [#1662](https://github.com/openshift/oc/pull/1662)
* [CNV-37284](https://issues.redhat.com/browse/CNV-37284): Add --all-images flag to must-gather [#1633](https://github.com/openshift/oc/pull/1633)
* Revert "WRKLDS-1016: Bump kube dependencies to 1.29.0" [#1660](https://github.com/openshift/oc/pull/1660)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1655](https://github.com/openshift/oc/pull/1655)
* NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images [#1656](https://github.com/openshift/oc/pull/1656)
* [WRKLDS-998](https://issues.redhat.com/browse/WRKLDS-998): oc login: Built-in cred exec plugin implementation and wiring [#1640](https://github.com/openshift/oc/pull/1640)
* NO-JIRA: adm update status: add TODOs to remind us to revise early decisions [#1654](https://github.com/openshift/oc/pull/1654)
* [WRKLDS-1012](https://issues.redhat.com/browse/WRKLDS-1012): oc adm must-gather: pull gather container logs [#1641](https://github.com/openshift/oc/pull/1641)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): add since and since-time flags to limit log collection on must-gather [#1648](https://github.com/openshift/oc/pull/1648)
* [WRKLDS-1010](https://issues.redhat.com/browse/WRKLDS-1010): pkg/cli/admin/inspect: use since/since-time for rotated logs [#1653](https://github.com/openshift/oc/pull/1653)
* NO-ISSUE: add information about featuregate diff in a particular release [#1650](https://github.com/openshift/oc/pull/1650)
* NO-JIRA: report kubectl version to the release controller [#1651](https://github.com/openshift/oc/pull/1651)
* [OCPBUGS-25461](https://issues.redhat.com/browse/OCPBUGS-25461): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1647](https://github.com/openshift/oc/pull/1647)
* [OTA-1087](https://issues.redhat.com/browse/OTA-1087): Add upgade health section to `adm update status` [#1636](https://github.com/openshift/oc/pull/1636)
* [OCPBUGS-19807](https://issues.redhat.com/browse/OCPBUGS-19807): pkg/cli/admin/release/extract: Log a warning on --credentials-requests without --included [#1551](https://github.com/openshift/oc/pull/1551)
* NO-JIRA: Sanitize path using filepath Clean [#1645](https://github.com/openshift/oc/pull/1645)
* [OTA-492](https://issues.redhat.com/browse/OTA-492): pkg/cli/admin/upgrade/rollback: New rollback command [#1642](https://github.com/openshift/oc/pull/1642)
* NO-JIRA: oc adm prune images: fix --certificate-authority flag name in validation code [#1644](https://github.com/openshift/oc/pull/1644)
* [OCPBUGS-25703](https://issues.redhat.com/browse/OCPBUGS-25703): validate tag name on creation [#1643](https://github.com/openshift/oc/pull/1643)
* NO-JIRA: Migrate from deprecated ioutils to relevant libraries [#1602](https://github.com/openshift/oc/pull/1602)
* [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Generate FIPS compatible RHEL9 oc binary [#1632](https://github.com/openshift/oc/pull/1632)
* [OCPBUGS-25021](https://issues.redhat.com/browse/OCPBUGS-25021): Bump ocp images to 4.16 in addition to go 1.21 [#1628](https://github.com/openshift/oc/pull/1628)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release extract: Introduce --idms-file and deprecate icsp-file [#1624](https://github.com/openshift/oc/pull/1624)
* [OCPBUGS-24834](https://issues.redhat.com/browse/OCPBUGS-24834): Bump api to include the new CloudCredential cap [#1622](https://github.com/openshift/oc/pull/1622)
* [OCPBUGS-24225](https://issues.redhat.com/browse/OCPBUGS-24225): Remove deprecated password defaulting in default config flag [#1619](https://github.com/openshift/oc/pull/1619)
* [Full changelog](https://github.com/openshift/oc/compare/d6175ebd387c07d8fd6354b476f6b1092f15ee1d...51e5705eaace0d3a8b359913cb82e69a8bf0eaf1)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/555da3f1debfad11e921539f96d5e7ab61b2af80)

* [OCPBUGS-32026](https://issues.redhat.com/browse/OCPBUGS-32026): Docs: Fix migration to azure workload identy to apply the webhook config [#695](https://github.com/openshift/cloud-credential-operator/pull/695)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Dockerfile should keep prior rhel8 behavior for ccoctl default [#694](https://github.com/openshift/cloud-credential-operator/pull/694)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 [#693](https://github.com/openshift/cloud-credential-operator/pull/693)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 [#692](https://github.com/openshift/cloud-credential-operator/pull/692)
* [OCPBUGS-31678](https://issues.redhat.com/browse/OCPBUGS-31678): aws: remove non-existent permission [#690](https://github.com/openshift/cloud-credential-operator/pull/690)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#681](https://github.com/openshift/cloud-credential-operator/pull/681)
* [OCPBUGS-30713](https://issues.redhat.com/browse/OCPBUGS-30713): update go-jose module to v4.0.1 [#687](https://github.com/openshift/cloud-credential-operator/pull/687)
* [OCPBUGS-30478](https://issues.redhat.com/browse/OCPBUGS-30478): Update to cloud.google.com/go/storage v1.39.1 [#688](https://github.com/openshift/cloud-credential-operator/pull/688)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Scope networkResourceGroup permissions to more operators [#682](https://github.com/openshift/cloud-credential-operator/pull/682)
* [OCPBUGS-28787](https://issues.redhat.com/browse/OCPBUGS-28787): gcp actuator update check to consider custom roles [#685](https://github.com/openshift/cloud-credential-operator/pull/685)
* [CCO-525](https://issues.redhat.com/browse/CCO-525): Azure workload identity doc updates [#680](https://github.com/openshift/cloud-credential-operator/pull/680)
* NO-JIRA:docu change: fix find command [#677](https://github.com/openshift/cloud-credential-operator/pull/677)
* NO-JIRA: Fix update-codegen.sh [#669](https://github.com/openshift/cloud-credential-operator/pull/669)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#672](https://github.com/openshift/cloud-credential-operator/pull/672)
* [OCPBUGS-28388](https://issues.redhat.com/browse/OCPBUGS-28388): Fix the ClusterOperator watch of the status controller [#665](https://github.com/openshift/cloud-credential-operator/pull/665)
* [OCPBUGS-27214](https://issues.redhat.com/browse/OCPBUGS-27214): ccoctl - use proxy when validating CloudFront URL [#654](https://github.com/openshift/cloud-credential-operator/pull/654)
* [OCPBUGS-28535](https://issues.redhat.com/browse/OCPBUGS-28535): stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster [#667](https://github.com/openshift/cloud-credential-operator/pull/667)
* NO-JIRA: Fix user-facing typos [#668](https://github.com/openshift/cloud-credential-operator/pull/668)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#663](https://github.com/openshift/cloud-credential-operator/pull/663)
* NO-JIRA: Keep metrics.md up-to-date [#664](https://github.com/openshift/cloud-credential-operator/pull/664)
* [OCPBUGS-27446](https://issues.redhat.com/browse/OCPBUGS-27446): Report manualpodidentity mode in metrics when using Azure Workload Identity [#657](https://github.com/openshift/cloud-credential-operator/pull/657)
* [OCPBUGS-27445](https://issues.redhat.com/browse/OCPBUGS-27445): Use cached clients to avoid client side throttling [#656](https://github.com/openshift/cloud-credential-operator/pull/656)
* NO-JIRA: azwi doc: apply webhook manifest to cluster [#652](https://github.com/openshift/cloud-credential-operator/pull/652)
* [CCO-454](https://issues.redhat.com/browse/CCO-454): Bump go.mod k8s deps to 0.29.1 [#655](https://github.com/openshift/cloud-credential-operator/pull/655)
* [OCPBUGS-16181](https://issues.redhat.com/browse/OCPBUGS-16181): Write manifests when AWS IAM roles already exist. [#514](https://github.com/openshift/cloud-credential-operator/pull/514)
* [CCO-519](https://issues.redhat.com/browse/CCO-519): Resolve all outstanding snyk vulnerabilities [#648](https://github.com/openshift/cloud-credential-operator/pull/648)
* [OCPBUGS-26488](https://issues.redhat.com/browse/OCPBUGS-26488): Use live client for metrics [#645](https://github.com/openshift/cloud-credential-operator/pull/645)
* [OCPBUGS-25533](https://issues.redhat.com/browse/OCPBUGS-25533): Updating ose-cloud-credential-operator-container image to be consistent with ART [#642](https://github.com/openshift/cloud-credential-operator/pull/642)
* NO-JIRA: Update docs/sts.md [#634](https://github.com/openshift/cloud-credential-operator/pull/634)
* [OCPBUGS-24807](https://issues.redhat.com/browse/OCPBUGS-24807): Updating ose-cloud-credential-operator-container image to be consistent with ART [#639](https://github.com/openshift/cloud-credential-operator/pull/639)
* NO-JIRA: Fixed typos [#633](https://github.com/openshift/cloud-credential-operator/pull/633)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/06a42948bf78b104e03a51bb5a555b6819db1b0a...555da3f1debfad11e921539f96d5e7ab61b2af80)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/a48ba58f632bd2a2df2810a665a375f29c900f0c)

* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#136](https://github.com/openshift/cloud-network-config-controller/pull/136)
* [OCPBUGS-27422](https://issues.redhat.com/browse/OCPBUGS-27422): Avoid nil pointer panic while assigning private IP on Azure [#133](https://github.com/openshift/cloud-network-config-controller/pull/133)
* [OCPBUGS-30146](https://issues.redhat.com/browse/OCPBUGS-30146): Serialize scheme construction to prevent panic [#134](https://github.com/openshift/cloud-network-config-controller/pull/134)
* [OCPBUGS-31289](https://issues.redhat.com/browse/OCPBUGS-31289): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 [#135](https://github.com/openshift/cloud-network-config-controller/pull/135)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#132](https://github.com/openshift/cloud-network-config-controller/pull/132)
* [SDN-4405](https://issues.redhat.com/browse/SDN-4405): 1.29_rebase: [#131](https://github.com/openshift/cloud-network-config-controller/pull/131)
* [OCPBUGS-28282](https://issues.redhat.com/browse/OCPBUGS-28282): Add Snyk file to exclude vendor dependent libraries on scan [#130](https://github.com/openshift/cloud-network-config-controller/pull/130)
* [OCPBUGS-24823](https://issues.redhat.com/browse/OCPBUGS-24823): Updating ose-cloud-network-config-controller-container image to be consistent with ART [#129](https://github.com/openshift/cloud-network-config-controller/pull/129)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/81ab2a17f2886bccd90dddf3deb213ed368c5be2...a48ba58f632bd2a2df2810a665a375f29c900f0c)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/5072745da84762bb0fc943e41dd27c941a0c046c)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#656](https://github.com/openshift/cluster-authentication-operator/pull/656)
* [OCPBUGS-24195](https://issues.redhat.com/browse/OCPBUGS-24195): the apiservice controller waits until bootstrap complete [#662](https://github.com/openshift/cluster-authentication-operator/pull/662)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#640](https://github.com/openshift/cluster-authentication-operator/pull/640)
* NO-JIRA: e2e Keycloak: retry logging in as admin [#666](https://github.com/openshift/cluster-authentication-operator/pull/666)
* [OCPBUGS-32089](https://issues.redhat.com/browse/OCPBUGS-32089): wellknown-readiness: perform several attempts to connect before going unavailable [#664](https://github.com/openshift/cluster-authentication-operator/pull/664)
* NO-ISSUE: bump to the latest version of openshift/api [#663](https://github.com/openshift/cluster-authentication-operator/pull/663)
* NO-ISSUE: bump dependencies [#659](https://github.com/openshift/cluster-authentication-operator/pull/659)
* NO-JIRA: test/lib: create SA on deploy [#660](https://github.com/openshift/cluster-authentication-operator/pull/660)
* NO-ISSUE: oauth-apiserver: disable priority and fairness [#658](https://github.com/openshift/cluster-authentication-operator/pull/658)
* NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after [#657](https://github.com/openshift/cluster-authentication-operator/pull/657)
* NO-JIRA: _output - remove dir [#651](https://github.com/openshift/cluster-authentication-operator/pull/651)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#632](https://github.com/openshift/cluster-authentication-operator/pull/632)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#646](https://github.com/openshift/cluster-authentication-operator/pull/646)
* [OCPBUGS-24883](https://issues.redhat.com/browse/OCPBUGS-24883): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#644](https://github.com/openshift/cluster-authentication-operator/pull/644)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#636](https://github.com/openshift/cluster-authentication-operator/pull/636)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/52a7d25ade22ddcf791bf6488504e3f7ef3ae770...5072745da84762bb0fc943e41dd27c941a0c046c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c852679460d8af844212462e0244eb6240d0591b)

* [OCPBUGS-31421](https://issues.redhat.com/browse/OCPBUGS-31421): add check for taint.value == nil [#292](https://github.com/openshift/kubernetes-autoscaler/pull/292)
* [OCPBUGS-28334](https://issues.redhat.com/browse/OCPBUGS-28334): update snyk file [#287](https://github.com/openshift/kubernetes-autoscaler/pull/287)
* [PODAUTO-99](https://issues.redhat.com/browse/PODAUTO-99): Fix VPA e2e test failures [#286](https://github.com/openshift/kubernetes-autoscaler/pull/286)
* [OCPCLOUD-2431](https://issues.redhat.com/browse/OCPCLOUD-2431): rebase on upstream 1.29.0 release [#285](https://github.com/openshift/kubernetes-autoscaler/pull/285)
* [PODAUTO-104](https://issues.redhat.com/browse/PODAUTO-104): Add downstream pod autoscaling team member jkyros to VPA OWNERS [#283](https://github.com/openshift/kubernetes-autoscaler/pull/283)
* [OCPBUGS-27509](https://issues.redhat.com/browse/OCPBUGS-27509): Fix unstructured taint parsing in Cluster API provider [#281](https://github.com/openshift/kubernetes-autoscaler/pull/281)
* [OCPBUGS-26504](https://issues.redhat.com/browse/OCPBUGS-26504): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 [#279](https://github.com/openshift/kubernetes-autoscaler/pull/279)
* [OCPBUGS-25855](https://issues.redhat.com/browse/OCPBUGS-25855): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 [#277](https://github.com/openshift/kubernetes-autoscaler/pull/277)
* [OCPBUGS-25625](https://issues.redhat.com/browse/OCPBUGS-25625): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/kubernetes-autoscaler/pull/276)
* [OCPBUGS-24783](https://issues.redhat.com/browse/OCPBUGS-24783): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#271](https://github.com/openshift/kubernetes-autoscaler/pull/271)
* [OCPBUGS-25579](https://issues.redhat.com/browse/OCPBUGS-25579): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#274](https://github.com/openshift/kubernetes-autoscaler/pull/274)
* [PODAUTO-91](https://issues.redhat.com/browse/PODAUTO-91): Add joelsmith to OWNERS for approving of VPA-only PRs [#273](https://github.com/openshift/kubernetes-autoscaler/pull/273)
* [OCPBUGS-24974](https://issues.redhat.com/browse/OCPBUGS-24974): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#272](https://github.com/openshift/kubernetes-autoscaler/pull/272)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b4a9dc6dd40c6c9e458e69bbfd2c667e9cb23e18...c852679460d8af844212462e0244eb6240d0591b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/89019ab5cdb49d6fbcd48f7123937bcc3f77051f)

* [OCPBUGS-31960](https://issues.redhat.com/browse/OCPBUGS-31960): Bump x/net to v.0.24.0 [#318](https://github.com/openshift/cluster-autoscaler-operator/pull/318)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Update CAO to add upstream annotations [#316](https://github.com/openshift/cluster-autoscaler-operator/pull/316)
* [OCPCLOUD-2523](https://issues.redhat.com/browse/OCPCLOUD-2523): add ExpanderOrderList api option [#304](https://github.com/openshift/cluster-autoscaler-operator/pull/304)
* [OCPBUGS-29863](https://issues.redhat.com/browse/OCPBUGS-29863): Apply hypershift cluster-profile for ibm-cloud-managed [#314](https://github.com/openshift/cluster-autoscaler-operator/pull/314)
* [OCPBUGS-28207](https://issues.redhat.com/browse/OCPBUGS-28207): update min/max memory limit documentation [#313](https://github.com/openshift/cluster-autoscaler-operator/pull/313)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Revert "OCPBUGS-18137: Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch" [#311](https://github.com/openshift/cluster-autoscaler-operator/pull/311)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#312](https://github.com/openshift/cluster-autoscaler-operator/pull/312)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH [#297](https://github.com/openshift/cluster-autoscaler-operator/pull/297)
* [OCPCLOUD-2432](https://issues.redhat.com/browse/OCPCLOUD-2432): Bump k8s packages to v1.29 [#310](https://github.com/openshift/cluster-autoscaler-operator/pull/310)
* [OCPBUGS-25559](https://issues.redhat.com/browse/OCPBUGS-25559): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#305](https://github.com/openshift/cluster-autoscaler-operator/pull/305)
* [OCPBUGS-25633](https://issues.redhat.com/browse/OCPBUGS-25633): Add Snyk file to exclude vendor directory on scan [#306](https://github.com/openshift/cluster-autoscaler-operator/pull/306)
* [OCPBUGS-24911](https://issues.redhat.com/browse/OCPBUGS-24911): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#303](https://github.com/openshift/cluster-autoscaler-operator/pull/303)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/d90c9299f6699cb26c0598af26cc8f791f8c4f28...89019ab5cdb49d6fbcd48f7123937bcc3f77051f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/aae4dcf33522b3268211a946f0a766be90262cc5)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#413](https://github.com/openshift/cluster-baremetal-operator/pull/413)
* [METAL-979](https://issues.redhat.com/browse/METAL-979): Add RBAC for newer CRDs hostfirmwarecomponents and dataimages [#412](https://github.com/openshift/cluster-baremetal-operator/pull/412)
* [METAL-904](https://issues.redhat.com/browse/METAL-904): Move parts of ICC config to a new secret [#406](https://github.com/openshift/cluster-baremetal-operator/pull/406)
* [OCPBUGS-31341](https://issues.redhat.com/browse/OCPBUGS-31341): Refactor Pull Secret application [#409](https://github.com/openshift/cluster-baremetal-operator/pull/409)
* [OCPBUGS-27760](https://issues.redhat.com/browse/OCPBUGS-27760): Update the leader election durations to be tolerant [#403](https://github.com/openshift/cluster-baremetal-operator/pull/403)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): pass all IPs to image-customization-controller [#400](https://github.com/openshift/cluster-baremetal-operator/pull/400)
* [OCPBUGS-27145](https://issues.redhat.com/browse/OCPBUGS-27145): Reduce container privileges [#396](https://github.com/openshift/cluster-baremetal-operator/pull/396)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add terminationmessagepolicy to show last of error log in API [#399](https://github.com/openshift/cluster-baremetal-operator/pull/399)
* [METAL-856](https://issues.redhat.com/browse/METAL-856): set USE_IRONIC_INSPECTOR explicitly [#398](https://github.com/openshift/cluster-baremetal-operator/pull/398)
* [OCPBUGS-25766](https://issues.redhat.com/browse/OCPBUGS-25766): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#395](https://github.com/openshift/cluster-baremetal-operator/pull/395)
* [OCPBUGS-25572](https://issues.redhat.com/browse/OCPBUGS-25572): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#394](https://github.com/openshift/cluster-baremetal-operator/pull/394)
* [OCPBUGS-24946](https://issues.redhat.com/browse/OCPBUGS-24946): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#393](https://github.com/openshift/cluster-baremetal-operator/pull/393)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fdce2d0892e255240ff760e91fa8a738ae4a7556...aae4dcf33522b3268211a946f0a766be90262cc5)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/27bfb59fd0ff399224ee673869b8875ef10f1962)

* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#103](https://github.com/openshift/cluster-bootstrap/pull/103)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#102](https://github.com/openshift/cluster-bootstrap/pull/102)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/0849c462de13b9a5765b9a8c882acb9e6e8bf39e...27bfb59fd0ff399224ee673869b8875ef10f1962)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/e9732a43bb44b4709ce1badcd4b8eac1d9c5b41c)

* [OCPBUGS-30480](https://issues.redhat.com/browse/OCPBUGS-30480): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master [#203](https://github.com/openshift/cluster-api/pull/203)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master [#199](https://github.com/openshift/cluster-api/pull/199)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#200](https://github.com/openshift/cluster-api/pull/200)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): openshift: promote core CAPI IPAM CRDs to GA [#197](https://github.com/openshift/cluster-api/pull/197)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): openshift: add CustomNoUpgrade annotation value to feature-set [#196](https://github.com/openshift/cluster-api/pull/196)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): openshift: generate separate manifest for core CAPI CRDs [#195](https://github.com/openshift/cluster-api/pull/195)
* [OCPBUGS-26111](https://issues.redhat.com/browse/OCPBUGS-26111): add snyk file [#194](https://github.com/openshift/cluster-api/pull/194)
* [OCPCLOUD-2449](https://issues.redhat.com/browse/OCPCLOUD-2449): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master [#192](https://github.com/openshift/cluster-api/pull/192)
* NO-JIRA: e2e: add openstack testing script [#193](https://github.com/openshift/cluster-api/pull/193)
* [OCPBUGS-25586](https://issues.redhat.com/browse/OCPBUGS-25586): Updating ose-cluster-api-container image to be consistent with ART [#191](https://github.com/openshift/cluster-api/pull/191)
* [OCPBUGS-25000](https://issues.redhat.com/browse/OCPBUGS-25000): Updating ose-cluster-api-container image to be consistent with ART [#190](https://github.com/openshift/cluster-api/pull/190)
* [Full changelog](https://github.com/openshift/cluster-api/compare/932dc9b2858c53811f4a346f6a4b90ede870da88...e9732a43bb44b4709ce1badcd4b8eac1d9c5b41c)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/8342a83c1830ac86792f9f2c205575fa96f40d8e)

* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609), [OCPCLOUD-1610](https://issues.redhat.com/browse/OCPCLOUD-1610): Add Support for VSphere [#149](https://github.com/openshift/cluster-capi-operator/pull/149)
* NO-JIRA: CAPA: use v1beta2 [#151](https://github.com/openshift/cluster-capi-operator/pull/151)
* NO-JIRA: Fix manifests-gen tool + testing [#168](https://github.com/openshift/cluster-capi-operator/pull/168)
* [OCPBUGS-29832](https://issues.redhat.com/browse/OCPBUGS-29832), [OCPCLOUD-2451](https://issues.redhat.com/browse/OCPCLOUD-2451): Bump CAPI 1.6 and k8s 1.28 [#164](https://github.com/openshift/cluster-capi-operator/pull/164)
* [OCPBUGS-29676](https://issues.redhat.com/browse/OCPBUGS-29676): create openshift-cluster-api namespace in CustomNoUpgrade [#163](https://github.com/openshift/cluster-capi-operator/pull/163)
* [OCPCLOUD-2517](https://issues.redhat.com/browse/OCPCLOUD-2517): manifests-gen: promote Core CAPI IPAM CRDs to GA [#162](https://github.com/openshift/cluster-capi-operator/pull/162)
* [OCPBUGS-29519](https://issues.redhat.com/browse/OCPBUGS-29519): manifests-gen: also add CustomNoUpgrade annotation value [#161](https://github.com/openshift/cluster-capi-operator/pull/161)
* [OCPBUGS-29476](https://issues.redhat.com/browse/OCPBUGS-29476): manifests-gen: store core capi crds also in their own manifest [#159](https://github.com/openshift/cluster-capi-operator/pull/159)
* [OCPBUGS-28539](https://issues.redhat.com/browse/OCPBUGS-28539): Start operator controllers only on supported platforms, add unsupported controller [#157](https://github.com/openshift/cluster-capi-operator/pull/157)
* [OCPBUGS-26121](https://issues.redhat.com/browse/OCPBUGS-26121): Add Snyk file to exclude vendor directory on scan [#156](https://github.com/openshift/cluster-capi-operator/pull/156)
* [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#87](https://github.com/openshift/cluster-capi-operator/pull/87)
* NO-JIRA: e2e: add openstack testing script [#154](https://github.com/openshift/cluster-capi-operator/pull/154)
* [OCPBUGS-25778](https://issues.redhat.com/browse/OCPBUGS-25778): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.16 [#153](https://github.com/openshift/cluster-capi-operator/pull/153)
* [OCPBUGS-24979](https://issues.redhat.com/browse/OCPBUGS-24979): Updating ose-cluster-capi-operator-container image to be consistent with ART [#150](https://github.com/openshift/cluster-capi-operator/pull/150)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c8c94baccbe1d87f08d2d2349749ca31296b85ba...8342a83c1830ac86792f9f2c205575fa96f40d8e)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/70aa31af5224c0e05314cacf9a734b8944c14fbf)

* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Pass --cluster-name to OpenStack CCM [#337](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/337)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition logic [#335](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/335)
* Bug OCPBUGS-29605: Allow to patch events in OpenStack RBAC [#336](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/336)
* [OCPVE-660](https://issues.redhat.com/browse/OCPVE-660): add CloudController capability annotation [#284](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/284)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on feature gates for whether to deploy CCMs [#334](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/334)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Increase Azure Concurrent Service Syncs to 10 [#328](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/328)
* [OCPBUGS-29220](https://issues.redhat.com/browse/OCPBUGS-29220): Set AZURE_FEDERATED_TOKEN_FILE on CCM container [#332](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/332)
* [OCPBUGS-29012](https://issues.redhat.com/browse/OCPBUGS-29012): Add EndpointSlices permissions for Azure [#331](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/331)
* [OCPBUGS-13106](https://issues.redhat.com/browse/OCPBUGS-13106): Increase GCP Concurrent Service Syncs to 10 [#329](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/329)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#330](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/330)
* NO-JIRA:Use expressive Gomega matchers with Eventually [#327](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/327)
* [OCPBUGS-24486](https://issues.redhat.com/browse/OCPBUGS-24486): Enforce the use of shared health checks [#326](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/326)
* [OCPCLOUD-2424](https://issues.redhat.com/browse/OCPCLOUD-2424): Bump k8s packages to v1.29 [#325](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/325)
* [OCPBUGS-25887](https://issues.redhat.com/browse/OCPBUGS-25887): IBMCloud: Patch CCM for 4.16 [#323](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/323)
* [OCPBUGS-26494](https://issues.redhat.com/browse/OCPBUGS-26494): PowerVS: handle 4.16 changes [#322](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/322)
* [OCPBUGS-25483](https://issues.redhat.com/browse/OCPBUGS-25483): Adds CloudConfigTransformer for Azure [#316](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/316)
* [OCPBUGS-24948](https://issues.redhat.com/browse/OCPBUGS-24948): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#308](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/308)
* [OCPBUGS-25750](https://issues.redhat.com/browse/OCPBUGS-25750): Add Snyk file to exclude vendor directory on scan [#313](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/313)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Adds GCP ClusterRole and ClusterRoleBinding [#310](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/310)
* [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#205](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/205)
* trt-1382: reorder flag initialization [#309](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/309)
* trt-1382: test add space [#307](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a125bc59fe576ad165c800badd90a93aba99c154...70aa31af5224c0e05314cacf9a734b8944c14fbf)


### [cluster-config-api](https://github.com/openshift/api/tree/ac9356ba178405e39af0a76adc7d20a529bd93af)

* [OPNET-512](https://issues.redhat.com/browse/OPNET-512): config/v1/types_infrastructure: change set to atomic for networks [#1873](https://github.com/openshift/api/pull/1873)
* [OCPBUGS-31666](https://issues.redhat.com/browse/OCPBUGS-31666): route: Fix insecureEdgeTerminationPolicy default [#1845](https://github.com/openshift/api/pull/1845)
* features: add capi-installer gate per platform [#1868](https://github.com/openshift/api/pull/1868)
* Simplify CEL validations in network operator [#1871](https://github.com/openshift/api/pull/1871)
* clean up NodeDisruptionPolicySpecAction godoc [#1870](https://github.com/openshift/api/pull/1870)
* fix MachineOSBuild printer columns [#1867](https://github.com/openshift/api/pull/1867)
* NO-JIRA: move featuregate definitions to a new package [#1821](https://github.com/openshift/api/pull/1821)
* Revert #1851 "MON-3538: Promote MetricsServer FeatureGate to GA" [#1863](https://github.com/openshift/api/pull/1863)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1: update MCP feature gated field to omitempty [#1862](https://github.com/openshift/api/pull/1862)
* NO-JIRA: Change PreviousFlakePercentage value type from int to float [#1861](https://github.com/openshift/api/pull/1861)
* [MON-3538](https://issues.redhat.com/browse/MON-3538): Promote MetricsServer FeatureGate to GA [#1851](https://github.com/openshift/api/pull/1851)
* Provide a small help when invoking tests/hack/gen-minimal-test.sh [#1860](https://github.com/openshift/api/pull/1860)
* NO-JIRA: Add DevPreviewNoUpgrade as a featureset [#1825](https://github.com/openshift/api/pull/1825)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Reintroduce CEL IP/CIDR validation for Config APIs [#1817](https://github.com/openshift/api/pull/1817)
* remove alpha level of AlertingRules which are GA since 4.14 [#1854](https://github.com/openshift/api/pull/1854)
* add explanation of how to provide automated testing for FeatureGate [#1855](https://github.com/openshift/api/pull/1855)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfig/v1: add PoolSynchronizers to MCP status [#1852](https://github.com/openshift/api/pull/1852)
* [STOR-1803](https://issues.redhat.com/browse/STOR-1803): add vsphere snapshot configuration fields to ClusterCSIDriver [#1783](https://github.com/openshift/api/pull/1783)
* NO-JIRA: add command to restrict features from promotion without tests [#1843](https://github.com/openshift/api/pull/1843)
* NO-JIRA: add type for recording tests per featuregate [#1848](https://github.com/openshift/api/pull/1848)
* MCO API Cleanup [#1850](https://github.com/openshift/api/pull/1850)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds seperate controllers for default rolebindings [#1770](https://github.com/openshift/api/pull/1770)
* [MCO-993](https://issues.redhat.com/browse/MCO-993): MachineOSBuild API [#1773](https://github.com/openshift/api/pull/1773)
* [OCPBUGS-28673](https://issues.redhat.com/browse/OCPBUGS-28673): Ingress - add connect timeout to tuning options [#1829](https://github.com/openshift/api/pull/1829)
* [SDN-4599](https://issues.redhat.com/browse/SDN-4599): Configurable network diagnostics pod placement [#1800](https://github.com/openshift/api/pull/1800)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1alpha1: add PinnedImageSet to MCN [#1824](https://github.com/openshift/api/pull/1824)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Promote `AdminNetworkPolicy` to GA [#1840](https://github.com/openshift/api/pull/1840)
* Proposed new api structure for ovnkubernetes / transit switch api [#1626](https://github.com/openshift/api/pull/1626)
* [OCPBUGS-31058](https://issues.redhat.com/browse/OCPBUGS-31058): config/ingress: Make Hostname godoc user-friendly [#1819](https://github.com/openshift/api/pull/1819)
* use CEL to enforce immutable featureset [#1839](https://github.com/openshift/api/pull/1839)
* NO-JIRA: enable the SA token node thing [#1831](https://github.com/openshift/api/pull/1831)
* [OCPCLOUD-2573](https://issues.redhat.com/browse/OCPCLOUD-2573): Enables kubelet cloud credential providers [#1786](https://github.com/openshift/api/pull/1786)
* update vendor for new test changes and vendoring [#1834](https://github.com/openshift/api/pull/1834)
* [MON-3486](https://issues.redhat.com/browse/MON-3486): add feature gate for Collection Profiles [#1835](https://github.com/openshift/api/pull/1835)
* Add models-schema to make clean [#1828](https://github.com/openshift/api/pull/1828)
* NO-JIRA: remove single-node-developer clusterProfile [#1827](https://github.com/openshift/api/pull/1827)
* NO-JIRA: update integration testing to be by gate [#1833](https://github.com/openshift/api/pull/1833)
* machineconfiguration/v1alpha1: add PinnedImageSetStatus [#1830](https://github.com/openshift/api/pull/1830)
* bump(golang.org/x/tools) to match k8s 1.28 [#1832](https://github.com/openshift/api/pull/1832)
* [MCO-1010](https://issues.redhat.com/browse/MCO-1010): Add node disruption policies to MachineConfiguration CRD [#1764](https://github.com/openshift/api/pull/1764)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1alpha1: add PinnedImageSet [#1822](https://github.com/openshift/api/pull/1822)
* NO-JIRA: Switch integration tests to ordered to save time [#1823](https://github.com/openshift/api/pull/1823)
* add markdown generator for featuregates [#1820](https://github.com/openshift/api/pull/1820)
* explain roughly what the new generator is doing [#1816](https://github.com/openshift/api/pull/1816)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Updates to build API reviewers [#1792](https://github.com/openshift/api/pull/1792)
* add section about adding new APIs [#1815](https://github.com/openshift/api/pull/1815)
* add doc.go to each generated mainfest dir [#1814](https://github.com/openshift/api/pull/1814)
* [TRT-1563](https://issues.redhat.com/browse/TRT-1563): Revert #1802 "Move config v1 IP validation to CEL" [#1810](https://github.com/openshift/api/pull/1810)
* move to new directory [#1803](https://github.com/openshift/api/pull/1803)
* skip rendering mutation of CustomNoUpgrade featuresets [#1806](https://github.com/openshift/api/pull/1806)
* All remaining genererated by new generator [#1808](https://github.com/openshift/api/pull/1808)
* Move config v1 IP validation to CEL [#1802](https://github.com/openshift/api/pull/1802)
* make featuregate manifest pattern consistent and remove legacy files [#1805](https://github.com/openshift/api/pull/1805)
* convert generation in a couple more v1 APIs [#1804](https://github.com/openshift/api/pull/1804)
* update the last manifests used directly from this image to featuregate generation [#1796](https://github.com/openshift/api/pull/1796)
* [OPNET-466](https://issues.redhat.com/browse/OPNET-466): PlatformLoadBalancer becomes GA for On-Prem [#1757](https://github.com/openshift/api/pull/1757)
* updating config stragglers to by-feature-gate generation [#1793](https://github.com/openshift/api/pull/1793)
* update network group to use "normal" generation [#1795](https://github.com/openshift/api/pull/1795)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Moved vSphereStaticIPs into Default from TechPreview [#1729](https://github.com/openshift/api/pull/1729)
* update the machine group to use the featuregate generator [#1799](https://github.com/openshift/api/pull/1799)
* tighten up the useCRD interface [#1801](https://github.com/openshift/api/pull/1801)
* Add tooling for publishing OpenShift kubebuilder tools [#1774](https://github.com/openshift/api/pull/1774)
* update machineconfiguration to use featuregated generation [#1797](https://github.com/openshift/api/pull/1797)
* update sharedresource to use featuregate generation [#1798](https://github.com/openshift/api/pull/1798)
* updating console stragglers to by-feature-gate generation [#1794](https://github.com/openshift/api/pull/1794)
* Merge manifests based on clusterProfile and featureSet [#1791](https://github.com/openshift/api/pull/1791)
* specify Featuregates by cluster profile [#1788](https://github.com/openshift/api/pull/1788)
* make the serialized featuregate location an input param [#1790](https://github.com/openshift/api/pull/1790)
* remove ungated case from manifest-merge [#1784](https://github.com/openshift/api/pull/1784)
* Generate config.openshift.io using FeatureGates instead of FeatureSets [#1731](https://github.com/openshift/api/pull/1731)
* [OCPBUGS-25594](https://issues.redhat.com/browse/OCPBUGS-25594): Fix text and indentation for TLS Security Profile [#1730](https://github.com/openshift/api/pull/1730)
* [OCPVE-658](https://issues.redhat.com/browse/OCPVE-658): add CloudController capability [#1579](https://github.com/openshift/api/pull/1579)
* [MCO-820](https://issues.redhat.com/browse/MCO-820): Add boot images update opt-in mechanism [#1672](https://github.com/openshift/api/pull/1672)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#1691](https://github.com/openshift/api/pull/1691)
* ImagePolicy uses byte format for base64 fields [#1765](https://github.com/openshift/api/pull/1765)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1771](https://github.com/openshift/api/pull/1771)
* config/v1/types_cluster_version: Drop never-implemented 'Evaluating' conditionalUpdates condition type [#1753](https://github.com/openshift/api/pull/1753)
* [NE-1303](https://issues.redhat.com/browse/NE-1303): cluster version: add v4.16 set and ingress capability [#1724](https://github.com/openshift/api/pull/1724)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1740](https://github.com/openshift/api/pull/1740)
* [SPLAT-1441](https://issues.redhat.com/browse/SPLAT-1441): promote vSphere failure domain template field [#1759](https://github.com/openshift/api/pull/1759)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): config.openshift.io/v1/scheduler: allow profile customizations for DRA [#1738](https://github.com/openshift/api/pull/1738)
* [STOR-1724](https://issues.redhat.com/browse/STOR-1724): Add Samba/CIFS CSI driver provider [#1741](https://github.com/openshift/api/pull/1741)
* [OCPBUGS-29075](https://issues.redhat.com/browse/OCPBUGS-29075): Move network.config status.conditions to GA [#1755](https://github.com/openshift/api/pull/1755)
* [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): Add BuildInterrupted type [#1752](https://github.com/openshift/api/pull/1752)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Add UnservableInFutureVersions route status condition type [#1722](https://github.com/openshift/api/pull/1722)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Add new API for VolumeGroupSnapshot [#1746](https://github.com/openshift/api/pull/1746)
* [NP-874](https://issues.redhat.com/browse/NP-874): Promote SDN Live Migration to GA [#1747](https://github.com/openshift/api/pull/1747)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Allow modified IPv6 address as CPIC name [#1727](https://github.com/openshift/api/pull/1727)
* Switch to K8s yaml to ensure consistent formatting of CRDs [#1744](https://github.com/openshift/api/pull/1744)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): add separate authentication config manifest for hypershift [#1732](https://github.com/openshift/api/pull/1732)
* [SPLAT-1396](https://issues.redhat.com/browse/SPLAT-1396): promote feature gate and vSphere failure domains to default [#1733](https://github.com/openshift/api/pull/1733)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): features: enabled TranslateStreamCloseWebsocketRequests through TechPreviewNoUpgrade [#1737](https://github.com/openshift/api/pull/1737)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Add new param ResourceManagerTags to GCPMachineProviderSpec [#1506](https://github.com/openshift/api/pull/1506)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): respect the cluster profile in rendering [#1734](https://github.com/openshift/api/pull/1734)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): Add feature gate for upgrade status [#1725](https://github.com/openshift/api/pull/1725)
* [SPLAT-1385](https://issues.redhat.com/browse/SPLAT-1385): introduce TagIDs field to vSphere providerSpec [#1697](https://github.com/openshift/api/pull/1697)
* Add ImagePolicyList and ClusterImagePolicyList to scheme known types [#1726](https://github.com/openshift/api/pull/1726)
* Add generated featuregate files inertly to payloads [#1720](https://github.com/openshift/api/pull/1720)
* add-IPsecExternal [#1667](https://github.com/openshift/api/pull/1667)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): authentication: use CRD validation for the 'type' field [#1716](https://github.com/openshift/api/pull/1716)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Revert the revert "Extend infra CR to store VIPs and MachineNetwork"" [#1695](https://github.com/openshift/api/pull/1695)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART for 4.16 [#1710](https://github.com/openshift/api/pull/1710)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): Add feature gate for pinned images [#1703](https://github.com/openshift/api/pull/1703)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1709](https://github.com/openshift/api/pull/1709)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1708](https://github.com/openshift/api/pull/1708)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#1676](https://github.com/openshift/api/pull/1676)
* Add KMSv1 to default feature gates [#1706](https://github.com/openshift/api/pull/1706)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1685](https://github.com/openshift/api/pull/1685)
* Add ClusterImagePolicy and ImagePolicy [#1457](https://github.com/openshift/api/pull/1457)
* [OCPBUGS-24955](https://issues.redhat.com/browse/OCPBUGS-24955): Updating ose-cluster-config-api-container image to be consistent with ART [#1700](https://github.com/openshift/api/pull/1700)
* Add payload manifests dir [#1648](https://github.com/openshift/api/pull/1648)
* [OCPBUGS-24573](https://issues.redhat.com/browse/OCPBUGS-24573): Generate Tech Preview version of ControllerConfig CRD [#1698](https://github.com/openshift/api/pull/1698)
* [Full changelog](https://github.com/openshift/api/compare/4511c790cc60bf2a0393c34739cf9e71d1648b39...ac9356ba178405e39af0a76adc7d20a529bd93af)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/777e50b938c9ab3bd4224dac16407de1d7acc2b3)

* [OCPBUGS-24871](https://issues.redhat.com/browse/OCPBUGS-24871): Updating ose-cluster-config-operator-container image to be consistent with ART [#390](https://github.com/openshift/cluster-config-operator/pull/390)
* [TRT-1581](https://issues.redhat.com/browse/TRT-1581): default to self-managed clusterprofile [#414](https://github.com/openshift/cluster-config-operator/pull/414)
* NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable [#412](https://github.com/openshift/cluster-config-operator/pull/412)
* [OCPBUGS-29576](https://issues.redhat.com/browse/OCPBUGS-29576): Apply hypershift cluster-profile for ibm-cloud-managed [#408](https://github.com/openshift/cluster-config-operator/pull/408)
* NO-JIRA: add check to ensure clusterprofile matches for featuregates [#411](https://github.com/openshift/cluster-config-operator/pull/411)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Fix PSa labels [#406](https://github.com/openshift/cluster-config-operator/pull/406)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Bump(openshift/api): to get new VolumeGroupSnapshot API [#405](https://github.com/openshift/cluster-config-operator/pull/405)
* [OCPBUGS-28621](https://issues.redhat.com/browse/OCPBUGS-28621): Add required PSa labels [#401](https://github.com/openshift/cluster-config-operator/pull/401)
* [SPLAT-1400](https://issues.redhat.com/browse/SPLAT-1400): promote vSphere control plane machinesets from tech preview [#400](https://github.com/openshift/cluster-config-operator/pull/400)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#399](https://github.com/openshift/cluster-config-operator/pull/399)
* Revert "OCPBUGS-26541: remove duplicate manifests in image" [#397](https://github.com/openshift/cluster-config-operator/pull/397)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#392](https://github.com/openshift/cluster-config-operator/pull/392)
* [OCPNODE-1671](https://issues.redhat.com/browse/OCPNODE-1671): Update api,client-go to add imagepolicy api [#376](https://github.com/openshift/cluster-config-operator/pull/376)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/cc1fb201a307c049036c8307d950e5cde9e565ca...777e50b938c9ab3bd4224dac16407de1d7acc2b3)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2b86969aeeee80efb1fee338effa18f86cb18953)

* [OCPBUGS-31808](https://issues.redhat.com/browse/OCPBUGS-31808): Fix ExportFailureDomain to handle empty platform spec [#287](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/287)
* [OCPBUGS-32295](https://issues.redhat.com/browse/OCPBUGS-32295): Modified webhook to allow templates by name instead of just by path. [#288](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/288)
* [SPLAT-1440](https://issues.redhat.com/browse/SPLAT-1440): prevent rollout due to irrelevant path artifacts [#275](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/275)
* [OCPBUGS-26127](https://issues.redhat.com/browse/OCPBUGS-26127): add snyk configuration file [#277](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/277)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Fix vSphere machineprovider InjectFailureDomain to handle empty network device list. [#281](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/281)
* [SPLAT-1410](https://issues.redhat.com/browse/SPLAT-1410): Modified vSphere config provider to not lose AddressesFromPools when applying Failure Domains [#273](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/273)
* [OCPBUGS-29249](https://issues.redhat.com/browse/OCPBUGS-29249): Never delete a Machine when there's a single Machine in an index [#278](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/278)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#276](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/276)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#274](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/274)
* [SPLAT-1391](https://issues.redhat.com/browse/SPLAT-1391): promote vSphere from tech preview [#272](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/272)
* [OCPCLOUD-2415](https://issues.redhat.com/browse/OCPCLOUD-2415): Update K8s deps to 1.29 [#271](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/271)
* [OCPBUGS-25577](https://issues.redhat.com/browse/OCPBUGS-25577): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#270](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/270)
* [OCPCLOUD-1894](https://issues.redhat.com/browse/OCPCLOUD-1894): Implement admission warning for missing target pools [#269](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/269)
* [OCPBUGS-24967](https://issues.redhat.com/browse/OCPBUGS-24967): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#268](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/268)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/673e7da36cad22402065e2952b4e06aff0cb9c99...2b86969aeeee80efb1fee338effa18f86cb18953)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/66048040bb40915f0903a0e7de0bbc6f4b4faef5)

* [STOR-1817](https://issues.redhat.com/browse/STOR-1817): Avoid deleting VolumeGroupSnapshot resources [#200](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/200)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#193](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/193)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Update manifests to v7.0.0 [#201](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/201)
* [OCPBUGS-31497](https://issues.redhat.com/browse/OCPBUGS-31497): create suitable role and roleBinding for csi-snapshot-webhook [#202](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/202)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set SecurityContext for HyperShift [#197](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/197)
* [OCPBUGS-30483](https://issues.redhat.com/browse/OCPBUGS-30483): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#198](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/198)
* [OCPBUGS-29577](https://issues.redhat.com/browse/OCPBUGS-29577): Apply hypershift cluster-profile for ibm-cloud-managed [#194](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/194)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Fix: typo of volumegroupsnapshots [#195](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/195)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Pass VolumeGroupSnapshot argument if feature is enabled [#191](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/191)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#192](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/192)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#190](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/190)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#187](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/187)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Revert "HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook" [#188](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/188)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): add KAS access label to csi-snapshot-controller and csi-snapshot-webhook [#182](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/182)
* [OCPBUGS-25558](https://issues.redhat.com/browse/OCPBUGS-25558): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#183](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/183)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#181](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/181)
* [OCPBUGS-25149](https://issues.redhat.com/browse/OCPBUGS-25149): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#179](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/179)
* [OCPBUGS-23838](https://issues.redhat.com/browse/OCPBUGS-23838): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#177](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/177)
* [OCPBUGS-24908](https://issues.redhat.com/browse/OCPBUGS-24908): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#178](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/178)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/1afe553a46159bd5b65061c98e15138bf48327cc...66048040bb40915f0903a0e7de0bbc6f4b4faef5)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/2d77b099cd229949067d7de843b9d1538aab7403)

* [CFE-852](https://issues.redhat.com/browse/CFE-852): Enable ocp_dnsnameresolver CoreDNS plugin [#393](https://github.com/openshift/cluster-dns-operator/pull/393)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#403](https://github.com/openshift/cluster-dns-operator/pull/403)
* [OCPBUGS-24884](https://issues.redhat.com/browse/OCPBUGS-24884): Updating ose-cluster-dns-operator-container image to be consistent with ART [#397](https://github.com/openshift/cluster-dns-operator/pull/397)
* [OCPBUGS-24602](https://issues.redhat.com/browse/OCPBUGS-24602): Enable topology-aware hints iff nodes in &gt;=2 zones [#398](https://github.com/openshift/cluster-dns-operator/pull/398)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002...2d77b099cd229949067d7de843b9d1538aab7403)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/cb78ee25cda56d8f2deb4f0e4ed09348d07220f8)

* NO-JIRA: remove cluster-backup pod [#1182](https://github.com/openshift/cluster-etcd-operator/pull/1182)
* [OCPBUGS-31956](https://issues.redhat.com/browse/OCPBUGS-31956): update golang x net [#1252](https://github.com/openshift/cluster-etcd-operator/pull/1252)
* [OCPBUGS-31249](https://issues.redhat.com/browse/OCPBUGS-31249): remove etcd-health-probe log [#1230](https://github.com/openshift/cluster-etcd-operator/pull/1230)
* [ETCD-583](https://issues.redhat.com/browse/ETCD-583): add signer expiration metric and alert [#1249](https://github.com/openshift/cluster-etcd-operator/pull/1249)
* [API-1800](https://issues.redhat.com/browse/API-1800): manifests: convert SecretTypeTLS secrets to kubernetes.io/tls [#1247](https://github.com/openshift/cluster-etcd-operator/pull/1247)
* NO-ISSUE: use IsBootstrapComplete from library-go [#1244](https://github.com/openshift/cluster-etcd-operator/pull/1244)
* [OCPBUGS-32217](https://issues.redhat.com/browse/OCPBUGS-32217): avoid race conditions during render cert creation [#1246](https://github.com/openshift/cluster-etcd-operator/pull/1246)
* [OCPBUGS-32176](https://issues.redhat.com/browse/OCPBUGS-32176): immediately return on dynamic certs errors [#1245](https://github.com/openshift/cluster-etcd-operator/pull/1245)
* Revert "ETCD-579: store revision at which signers are rotated" [#1243](https://github.com/openshift/cluster-etcd-operator/pull/1243)
* [ETCD-579](https://issues.redhat.com/browse/ETCD-579): store revision at which signers are rotated [#1235](https://github.com/openshift/cluster-etcd-operator/pull/1235)
* [ETCD-580](https://issues.redhat.com/browse/ETCD-580): Decrease validity period to prevent cert expiry for offline clusters [#1238](https://github.com/openshift/cluster-etcd-operator/pull/1238)
* [OCPBUGS-31658](https://issues.redhat.com/browse/OCPBUGS-31658): Fix feature set custom no upgrade [#1233](https://github.com/openshift/cluster-etcd-operator/pull/1233)
* NO-JIRA: fail certsignercontroller sync when secret can not be applied [#1226](https://github.com/openshift/cluster-etcd-operator/pull/1226)
* [ETCD-535](https://issues.redhat.com/browse/ETCD-535): Manual CA rotation should rotate all leaf certs [#1200](https://github.com/openshift/cluster-etcd-operator/pull/1200)
* Revert "OCPBUGS-30169: add timeout to etcd client.New config" [#1222](https://github.com/openshift/cluster-etcd-operator/pull/1222)
* [OCPBUGS-30873](https://issues.redhat.com/browse/OCPBUGS-30873): CEO aliveness check should only detect deadlocks [#1223](https://github.com/openshift/cluster-etcd-operator/pull/1223)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=master [#1219](https://github.com/openshift/cluster-etcd-operator/pull/1219)
* [ETCD-518](https://issues.redhat.com/browse/ETCD-518): garbage collect unused dynamic certs [#1209](https://github.com/openshift/cluster-etcd-operator/pull/1209)
* [OCPBUGS-30169](https://issues.redhat.com/browse/OCPBUGS-30169): add timeout to etcd client.New config [#1215](https://github.com/openshift/cluster-etcd-operator/pull/1215)
* NO-JIRA: replace nodelister with master nodelister [#1205](https://github.com/openshift/cluster-etcd-operator/pull/1205)
* [ETCD-517](https://issues.redhat.com/browse/ETCD-517): run certsignercontroller for bootstrap render [#1186](https://github.com/openshift/cluster-etcd-operator/pull/1186)
* [ETCD-516](https://issues.redhat.com/browse/ETCD-516): CEO needs to react on changing CA cert bundle and client certs [#1202](https://github.com/openshift/cluster-etcd-operator/pull/1202)
* NO-JIRA: increase client pool size [#1203](https://github.com/openshift/cluster-etcd-operator/pull/1203)
* [OCPBUGS-29417](https://issues.redhat.com/browse/OCPBUGS-29417): Sno fix bootstrap race [#1201](https://github.com/openshift/cluster-etcd-operator/pull/1201)
* [OCPBUGS-27926](https://issues.redhat.com/browse/OCPBUGS-27926): Updating cluster-etcd-operator-container image to be c… [#1189](https://github.com/openshift/cluster-etcd-operator/pull/1189)
* Revert "Revert "OCPBUGS-22969: Use v1 for flowcontrol API"" [#1199](https://github.com/openshift/cluster-etcd-operator/pull/1199)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1194](https://github.com/openshift/cluster-etcd-operator/pull/1194)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-etcd-operator namespace [#1198](https://github.com/openshift/cluster-etcd-operator/pull/1198)
* Revert "OCPBUGS-22969: Use v1 for flowcontrol API" [#1197](https://github.com/openshift/cluster-etcd-operator/pull/1197)
* [TRT-1485](https://issues.redhat.com/browse/TRT-1485): Revert #1177 "ETCD-512: refactoring the cert signer controller" [#1193](https://github.com/openshift/cluster-etcd-operator/pull/1193)
* [ETCD-512](https://issues.redhat.com/browse/ETCD-512): refactoring the cert signer controller [#1177](https://github.com/openshift/cluster-etcd-operator/pull/1177)
* [OCPBUGS-27959](https://issues.redhat.com/browse/OCPBUGS-27959): fix panic in health check timeouts [#1190](https://github.com/openshift/cluster-etcd-operator/pull/1190)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1149](https://github.com/openshift/cluster-etcd-operator/pull/1149)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): update library-go to latest commit [#1180](https://github.com/openshift/cluster-etcd-operator/pull/1180)
* [OCPBUGS-24889](https://issues.redhat.com/browse/OCPBUGS-24889): Updating cluster-etcd-operator-container image to be consistent with ART [#1175](https://github.com/openshift/cluster-etcd-operator/pull/1175)
* NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy [#1171](https://github.com/openshift/cluster-etcd-operator/pull/1171)
* add ownership for etcd-ca-bundle that I don't think is updated [#1159](https://github.com/openshift/cluster-etcd-operator/pull/1159)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9d596e149a662ff77d235b3c7e4b69f34638c2ed...cb78ee25cda56d8f2deb4f0e4ed09348d07220f8)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f3f278477a88c0934109da1f106dc5a75c1bcf67)

* [OCPBUGS-32491](https://issues.redhat.com/browse/OCPBUGS-32491): Power VS: Add support for Power VS endpoint overrides [#1024](https://github.com/openshift/cluster-image-registry-operator/pull/1024)
* [OCPBUGS-29559](https://issues.redhat.com/browse/OCPBUGS-29559): Apply hypershift cluster-profile for ibm-cloud-managed [#999](https://github.com/openshift/cluster-image-registry-operator/pull/999)
* [OCPBUGS-32328](https://issues.redhat.com/browse/OCPBUGS-32328): azure-path-fix: support auth via account key (without clientID) [#1021](https://github.com/openshift/cluster-image-registry-operator/pull/1021)
* [OCPBUGS-30484](https://issues.redhat.com/browse/OCPBUGS-30484): bump indirect google protobuf dependency [#1015](https://github.com/openshift/cluster-image-registry-operator/pull/1015)
* NO-JIRA: remove bparees from owners [#1019](https://github.com/openshift/cluster-image-registry-operator/pull/1019)
* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): bump aws-sdk-go from v1.44 to v1.50 [#1012](https://github.com/openshift/cluster-image-registry-operator/pull/1012)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1008](https://github.com/openshift/cluster-image-registry-operator/pull/1008)
* NO-JIRA: bump golangci-lint to v1.56.2 [#1013](https://github.com/openshift/cluster-image-registry-operator/pull/1013)
* [OCPBUGS-29932](https://issues.redhat.com/browse/OCPBUGS-29932): cmd/move-blobs: log and exit 1 on error instead of panic [#1006](https://github.com/openshift/cluster-image-registry-operator/pull/1006)
* [OCPBUGS-29637](https://issues.redhat.com/browse/OCPBUGS-29637): azurepathfix: fix stack hub, government and workload identity setup [#1003](https://github.com/openshift/cluster-image-registry-operator/pull/1003)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): move azure storage blobs from `docker` back into `/docker` [#998](https://github.com/openshift/cluster-image-registry-operator/pull/998)
* NO-JIRA: Add hack/local-dev.sh [#996](https://github.com/openshift/cluster-image-registry-operator/pull/996)
* [OCPBUGS-28225](https://issues.redhat.com/browse/OCPBUGS-28225): pkg/storage/s3: enable bucket key on encryption settings [#993](https://github.com/openshift/cluster-image-registry-operator/pull/993)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#992](https://github.com/openshift/cluster-image-registry-operator/pull/992)
* NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 [#989](https://github.com/openshift/cluster-image-registry-operator/pull/989)
* [OCPBUGS-26767](https://issues.redhat.com/browse/OCPBUGS-26767): MULTIARCH-4074: PowerVS: update supported regions [#987](https://github.com/openshift/cluster-image-registry-operator/pull/987)
* [IR-409](https://issues.redhat.com/browse/IR-409): build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 [#974](https://github.com/openshift/cluster-image-registry-operator/pull/974)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#979](https://github.com/openshift/cluster-image-registry-operator/pull/979)
* [IR-410](https://issues.redhat.com/browse/IR-410): build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 [#980](https://github.com/openshift/cluster-image-registry-operator/pull/980)
* [OCPBUGS-11624](https://issues.redhat.com/browse/OCPBUGS-11624): manifests/02-rbac.yaml: stop using wild cards [#964](https://github.com/openshift/cluster-image-registry-operator/pull/964)
* [OCPBUGS-24649](https://issues.redhat.com/browse/OCPBUGS-24649): add private endpoint permissions to Azure credentials request [#971](https://github.com/openshift/cluster-image-registry-operator/pull/971)
* [OCPBUGS-24997](https://issues.redhat.com/browse/OCPBUGS-24997): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#975](https://github.com/openshift/cluster-image-registry-operator/pull/975)
* [IR-412](https://issues.redhat.com/browse/IR-412): IBMCloud: Add support for endpoint overrides [#955](https://github.com/openshift/cluster-image-registry-operator/pull/955)
* [CCO-248](https://issues.redhat.com/browse/CCO-248): Revert "Merge pull request #965 from jstuever/TRT-1368" [#967](https://github.com/openshift/cluster-image-registry-operator/pull/967)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f122f0b9a706abff7610f732cba4dd6eca9771f6...f3f278477a88c0934109da1f106dc5a75c1bcf67)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b7d42a2535904aab104e1f3d709832b1c104204c)

* [OCPBUGS-28673](https://issues.redhat.com/browse/OCPBUGS-28673): implement connect timeout tuning option [#1035](https://github.com/openshift/cluster-ingress-operator/pull/1035)
* [NE-1317](https://issues.redhat.com/browse/NE-1317): manifests - add ingress capability annotation [#950](https://github.com/openshift/cluster-ingress-operator/pull/950)
* [OCPBUGS-32371](https://issues.redhat.com/browse/OCPBUGS-32371): Bump openshift/api, and update CRD generation [#1045](https://github.com/openshift/cluster-ingress-operator/pull/1045)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add vnet subnet read and join permission for azure [#1029](https://github.com/openshift/cluster-ingress-operator/pull/1029)
* [OCPBUGS-30834](https://issues.redhat.com/browse/OCPBUGS-30834): Update to go 1.21 [#1040](https://github.com/openshift/cluster-ingress-operator/pull/1040)
* [OCPBUGS-31722](https://issues.redhat.com/browse/OCPBUGS-31722): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1037](https://github.com/openshift/cluster-ingress-operator/pull/1037)
* [OCPBUGS-3522](https://issues.redhat.com/browse/OCPBUGS-3522): Include recent errors in canary checks fail [#865](https://github.com/openshift/cluster-ingress-operator/pull/865)
* [OCPBUGS-30091](https://issues.redhat.com/browse/OCPBUGS-30091): TestHostNetworkPortBinding: Delete t.Parallel() [#1032](https://github.com/openshift/cluster-ingress-operator/pull/1032)
* [CFE-987](https://issues.redhat.com/browse/CFE-987): Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods [#1017](https://github.com/openshift/cluster-ingress-operator/pull/1017)
* [CORS-2317](https://issues.redhat.com/browse/CORS-2317): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1016](https://github.com/openshift/cluster-ingress-operator/pull/1016)
* [OCPBUGS-28596](https://issues.redhat.com/browse/OCPBUGS-28596): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 [#1020](https://github.com/openshift/cluster-ingress-operator/pull/1020)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1019](https://github.com/openshift/cluster-ingress-operator/pull/1019)
* [NE-1490](https://issues.redhat.com/browse/NE-1490): update to go v1.20 [#1012](https://github.com/openshift/cluster-ingress-operator/pull/1012)
* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes [#980](https://github.com/openshift/cluster-ingress-operator/pull/980)
* [CCO-249](https://issues.redhat.com/browse/CCO-249): Replace GCP role with explicit permissions [#844](https://github.com/openshift/cluster-ingress-operator/pull/844)
* [OCPBUGS-25006](https://issues.redhat.com/browse/OCPBUGS-25006): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-ingress-operator/pull/1006)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert " OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved" [#1011](https://github.com/openshift/cluster-ingress-operator/pull/1011)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Revert "Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest" and add changes to skip test only for Azure and GCP [#1008](https://github.com/openshift/cluster-ingress-operator/pull/1008)
* [OCPBUGS-24531](https://issues.redhat.com/browse/OCPBUGS-24531): Skip CI for scope change until OCPBUGS-24044 is resolved [#1007](https://github.com/openshift/cluster-ingress-operator/pull/1007)
* [OCPVE-780](https://issues.redhat.com/browse/OCPVE-780): annotate credentials request manifests [#995](https://github.com/openshift/cluster-ingress-operator/pull/995)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/0106cb99b340a2f266a88700b4250f11457ffb05...b7d42a2535904aab104e1f3d709832b1c104204c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1d9a2d0d604601640d318ea0cf973d23d711e970)

* [OCPEDGE-902](https://issues.redhat.com/browse/OCPEDGE-902): add SNO control plane high cpu usage alert [#1660](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1660)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#1664](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1664)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1577](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1577)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret controller in update only mode [#1659](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1659)
* NO-ISSUE: Revert "certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates [#1661](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1661)
* NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry [#1652](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1652)
* [OCPBUGS-30119](https://issues.redhat.com/browse/OCPBUGS-30119): certrotation: Bump library-go to latest master [#1651](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1651)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): External CCM should no longer rely on feature gate access [#1649](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1649)
* [OCPBUGS-25894](https://issues.redhat.com/browse/OCPBUGS-25894): operator: stop removing kube-apiserver-slos asset [#1642](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1642)
* NO-JIRA: extend node-system-admin-client validity to 2 years [#1618](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1618)
* [OBSDA-553](https://issues.redhat.com/browse/OBSDA-553): add provider name to cluster_infrastructure_provider when external platform [#1638](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1638)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): Add PSa labels to openshift-kube-apiserver-operator namespace [#1637](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1637)
* [OCPBUGS-27842](https://issues.redhat.com/browse/OCPBUGS-27842): Add sno section to alert description [#1633](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1633)
* NO-JIRA: Add Vu and Vadim to OWNERS [#1634](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1634)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): when skipping a webhook check because of missing CA log the name of the webhook [#1632](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1632)
* NO-JIRA: Add ownership for the admin kubeconfig [#1584](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1584)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#1546](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1546)
* NO-ISSUE: prevent update status conflicts [#1621](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1621)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#1619](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1619)
* [OCPBUGS-14496](https://issues.redhat.com/browse/OCPBUGS-14496): manifests: fix the scope of the TechPreviewNoUpgrade alert [#1512](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1512)
* [OCPBUGS-24907](https://issues.redhat.com/browse/OCPBUGS-24907): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1606](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1606)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1608](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1608)
* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1587](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1587)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): revert #1586 #1596 [#1607](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1607)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#1586](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1586)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Set flag to skip setting cloud-provider=external [#1596](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1596)
* [OCPBUGS-24701](https://issues.redhat.com/browse/OCPBUGS-24701): ignore vendor folder in SAST scan [#1599](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1599)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1...1d9a2d0d604601640d318ea0cf973d23d711e970)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)

* [OCPBUGS-28592](https://issues.redhat.com/browse/OCPBUGS-28592): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/cluster-api-operator/pull/37)
* [OCPBUGS-26140](https://issues.redhat.com/browse/OCPBUGS-26140): Fix formatting in snyk vendor exclusions [#36](https://github.com/openshift/cluster-api-operator/pull/36)
* [OCPBUGS-25634](https://issues.redhat.com/browse/OCPBUGS-25634): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/cluster-api-operator/pull/33)
* [OCPBUGS-24887](https://issues.redhat.com/browse/OCPBUGS-24887): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#32](https://github.com/openshift/cluster-api-operator/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/128d8e08c48e2002c416e84d0dec816bf5999c7e...95ceaa9e2e1fea94e82e078a77633c8cd105a3c7)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/f0f485f3c1d70416c242e3159820331a36fb2d2a)

* [API-1800](https://issues.redhat.com/browse/API-1800): bindata: convert SecretTypeTLS secrets [#804](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/804)
* [WRKLDS-1169](https://issues.redhat.com/browse/WRKLDS-1169): tolerate node-role.kubernetes.io/control-plane:NoExecute [#802](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/802)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#800](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/800)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): revision_controller: do not create a new revision when a required object is missing [#796](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/796)
* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition [#795](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/795)
* [OCPBUGS-30488](https://issues.redhat.com/browse/OCPBUGS-30488): bump(google.golang.org/protobuf)=v1.33.0 [#798](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/798)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514): Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. [#794](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/794)
* [OCPBUGS-29565](https://issues.redhat.com/browse/OCPBUGS-29565): Apply hypershift cluster-profile for ibm-cloud-managed [#793](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/793)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#786](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/786)
* [OCPBUGS-26117](https://issues.redhat.com/browse/OCPBUGS-26117): Add .snyk file to exclude vendor and ignore unit tests [#784](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/784)
* [OCPBUGS-25587](https://issues.redhat.com/browse/OCPBUGS-25587): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#780](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/780)
* NO-JIRA: Make render unit pass consistently [#782](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/782)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#781](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/781)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#770](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/770)
* [OCPBUGS-5825](https://issues.redhat.com/browse/OCPBUGS-5825): Removes legacy cloud-provider resources [#778](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/778)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#777](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/777)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#757](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/757)
* [OCPBUGS-25001](https://issues.redhat.com/browse/OCPBUGS-25001): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#775](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/775)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/642fb08461913d9352b781693311727da42ffc0a...f0f485f3c1d70416c242e3159820331a36fb2d2a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/630f63bc7a30d2662bbb5115233144079de6eef6)

* [WRKLDS-1168](https://issues.redhat.com/browse/WRKLDS-1168): tolerate node-role.kubernetes.io/control-plane:NoExecute [#539](https://github.com/openshift/cluster-kube-scheduler-operator/pull/539)
* [OCPBUGS-30489](https://issues.redhat.com/browse/OCPBUGS-30489): bump(google.golang.org/protobuf)=v1.33.0 [#538](https://github.com/openshift/cluster-kube-scheduler-operator/pull/538)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=release-4.16 [#536](https://github.com/openshift/cluster-kube-scheduler-operator/pull/536)
* [OCPBUGS-29566](https://issues.redhat.com/browse/OCPBUGS-29566): Apply hypershift cluster-profile for ibm-cloud-managed [#535](https://github.com/openshift/cluster-kube-scheduler-operator/pull/535)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): README: fix dynamicResourceAllocation field name [#534](https://github.com/openshift/cluster-kube-scheduler-operator/pull/534)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate [#532](https://github.com/openshift/cluster-kube-scheduler-operator/pull/532)
* [AUTH-481](https://issues.redhat.com/browse/AUTH-481): add PSa labels to openshift-kube-scheduler-operator namespace [#533](https://github.com/openshift/cluster-kube-scheduler-operator/pull/533)
* NO-JIRA: readme: describe mapping between logLevel and log level [#531](https://github.com/openshift/cluster-kube-scheduler-operator/pull/531)
* NO-JIRA: README: add notes about dumping KS's node cache [#530](https://github.com/openshift/cluster-kube-scheduler-operator/pull/530)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#526](https://github.com/openshift/cluster-kube-scheduler-operator/pull/526)
* [OCPBUGS-23631](https://issues.redhat.com/browse/OCPBUGS-23631): Add .snyk file to exclude vendor and ignore unit tests [#524](https://github.com/openshift/cluster-kube-scheduler-operator/pull/524)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#522](https://github.com/openshift/cluster-kube-scheduler-operator/pull/522)
* [TRT-1420](https://issues.redhat.com/browse/TRT-1420): Bump openshift/library-go to pick up revision_controller revert [#521](https://github.com/openshift/cluster-kube-scheduler-operator/pull/521)
* [OCPNODE-1890](https://issues.redhat.com/browse/OCPNODE-1890): Bump k8s api to v0.29.0 [#510](https://github.com/openshift/cluster-kube-scheduler-operator/pull/510)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#519](https://github.com/openshift/cluster-kube-scheduler-operator/pull/519)
* [OCPBUGS-24915](https://issues.redhat.com/browse/OCPBUGS-24915): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#517](https://github.com/openshift/cluster-kube-scheduler-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e1a1e3a845fd27d2dc8cbd7eb40975505ff294ab...630f63bc7a30d2662bbb5115233144079de6eef6)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/bf6afbb820531b4adc3a52f78a90f317c5580bad)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#107](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/107)
* [OCPBUGS-29567](https://issues.redhat.com/browse/OCPBUGS-29567): Apply hypershift cluster-profile for ibm-cloud-managed [#106](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/106)
* [OCPBUGS-27930](https://issues.redhat.com/browse/OCPBUGS-27930): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/103)
* [OCPBUGS-24989](https://issues.redhat.com/browse/OCPBUGS-24989): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#101](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/101)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/37015e879a7ef647d7a953edea902d67e2ae91a7...bf6afbb820531b4adc3a52f78a90f317c5580bad)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/d3b6e4ba503c8e1d13f535409db1e75844e5763f)

* [OCPBUGS-29568](https://issues.redhat.com/browse/OCPBUGS-29568): Apply hypershift cluster-profile for ibm-cloud-managed [#229](https://github.com/openshift/cluster-machine-approver/pull/229)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#227](https://github.com/openshift/cluster-machine-approver/pull/227)
* [OCPBUGS-26116](https://issues.redhat.com/browse/OCPBUGS-26116): Add Snyk file to exclude vendor directory on scan [#225](https://github.com/openshift/cluster-machine-approver/pull/225)
* [OCPCLOUD-2417](https://issues.redhat.com/browse/OCPCLOUD-2417): Update to kube 1.29 and controller-runtime 0.17.0 [#224](https://github.com/openshift/cluster-machine-approver/pull/224)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Increase concurrent reconciles to 10 [#222](https://github.com/openshift/cluster-machine-approver/pull/222)
* [OCPBUGS-25582](https://issues.redhat.com/browse/OCPBUGS-25582): Updating ose-cluster-machine-approver-container image to be consistent with ART [#223](https://github.com/openshift/cluster-machine-approver/pull/223)
* [OCPBUGS-24985](https://issues.redhat.com/browse/OCPBUGS-24985): Updating ose-cluster-machine-approver-container image to be consistent with ART [#218](https://github.com/openshift/cluster-machine-approver/pull/218)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba...d3b6e4ba503c8e1d13f535409db1e75844e5763f)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/77f948e59ad02a95b13d24b5a01e88e673c8875e)

* [MON-3163](https://issues.redhat.com/browse/MON-3163): support VPAs [#2078](https://github.com/openshift/cluster-monitoring-operator/pull/2078)
* [OCPBUGS-23801](https://issues.redhat.com/browse/OCPBUGS-23801): update OTEL `google.golang.org/grpc/otelgrpc` [#2321](https://github.com/openshift/cluster-monitoring-operator/pull/2321)
* NO-JIRA: Increase `checkAlertmanagerAPIVerbs` timeout [#2330](https://github.com/openshift/cluster-monitoring-operator/pull/2330)
* [MON-3487](https://issues.redhat.com/browse/MON-3487): base CP enablement on dedicated feature gate [#2153](https://github.com/openshift/cluster-monitoring-operator/pull/2153)
* [OCPBUGS-32177](https://issues.redhat.com/browse/OCPBUGS-32177): fix wrong dir hack/tools of tools.go [#2327](https://github.com/openshift/cluster-monitoring-operator/pull/2327)
* [MON-3707](https://issues.redhat.com/browse/MON-3707): Add ipsec state metric into telemetry [#2326](https://github.com/openshift/cluster-monitoring-operator/pull/2326)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for k8s Prometheus [#2323](https://github.com/openshift/cluster-monitoring-operator/pull/2323)
* [MON-3839](https://issues.redhat.com/browse/MON-3839): test: add skip tests for prometheus adapter tests [#2328](https://github.com/openshift/cluster-monitoring-operator/pull/2328)
* [MON-3820](https://issues.redhat.com/browse/MON-3820): allow read-only access for Alertmanager API [#2319](https://github.com/openshift/cluster-monitoring-operator/pull/2319)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove trusted CA bundle from Thanos Querier [#2325](https://github.com/openshift/cluster-monitoring-operator/pull/2325)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): follow-up of PR #2308 [#2324](https://github.com/openshift/cluster-monitoring-operator/pull/2324)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Synchronize versions of the downstream components [#2322](https://github.com/openshift/cluster-monitoring-operator/pull/2322)
* [OCPBUGS-30430](https://issues.redhat.com/browse/OCPBUGS-30430): update `google.golang.org/protobuf` [#2320](https://github.com/openshift/cluster-monitoring-operator/pull/2320)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of trusted CA bundle for main Alertmanager [#2310](https://github.com/openshift/cluster-monitoring-operator/pull/2310)
* [MON-3783](https://issues.redhat.com/browse/MON-3783): add controller-id annotation to pods deployments and operator [#2309](https://github.com/openshift/cluster-monitoring-operator/pull/2309)
* [OCPBUGS-18643](https://issues.redhat.com/browse/OCPBUGS-18643): address lint warnings [#2284](https://github.com/openshift/cluster-monitoring-operator/pull/2284)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): assets, jsonnet: Add container_network openshift-kubernetes.rules [#2314](https://github.com/openshift/cluster-monitoring-operator/pull/2314)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Synchronize versions of the downstream components [#2318](https://github.com/openshift/cluster-monitoring-operator/pull/2318)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): remove references to OAuth proxy [#2308](https://github.com/openshift/cluster-monitoring-operator/pull/2308)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: simplify GetServiceAccountToken() [#2272](https://github.com/openshift/cluster-monitoring-operator/pull/2272)
* [MON-3621](https://issues.redhat.com/browse/MON-3621): Enable `extra-scrape-metrics` feature in PrometheusUWM [#2302](https://github.com/openshift/cluster-monitoring-operator/pull/2302)
* [OCPBUGS-31411](https://issues.redhat.com/browse/OCPBUGS-31411): add runbook link for KubeAggregatedAPIErrors alert [#2316](https://github.com/openshift/cluster-monitoring-operator/pull/2316)
* [OCPBUGS-29531](https://issues.redhat.com/browse/OCPBUGS-29531): Add include.release.openshift.io/hypershift label [#2264](https://github.com/openshift/cluster-monitoring-operator/pull/2264)
* [MON-3778](https://issues.redhat.com/browse/MON-3778), [OLS-117](https://issues.redhat.com/browse/OLS-117): Add OLS metrics to telemetry whitelist [#2300](https://github.com/openshift/cluster-monitoring-operator/pull/2300)
* [OCPBUGS-31920](https://issues.redhat.com/browse/OCPBUGS-31920): go.mod: bump openshift/api [#2290](https://github.com/openshift/cluster-monitoring-operator/pull/2290)
* [MON-3700](https://issues.redhat.com/browse/MON-3700): replace OAuth proxy for Thanos Ruler [#2294](https://github.com/openshift/cluster-monitoring-operator/pull/2294)
* [MON-3799](https://issues.redhat.com/browse/MON-3799): Synchronize versions of the downstream components [#2301](https://github.com/openshift/cluster-monitoring-operator/pull/2301)
* [MON-3749](https://issues.redhat.com/browse/MON-3749): enable request headers flags for metrics server [#2293](https://github.com/openshift/cluster-monitoring-operator/pull/2293)
* [OCPBUGS-28650](https://issues.redhat.com/browse/OCPBUGS-28650): fix generation of telemeter token hash [#2298](https://github.com/openshift/cluster-monitoring-operator/pull/2298)
* [MON-3801](https://issues.redhat.com/browse/MON-3801): remove oauth-redirectreference annotations [#2299](https://github.com/openshift/cluster-monitoring-operator/pull/2299)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Synchronize versions of the downstream components [#2295](https://github.com/openshift/cluster-monitoring-operator/pull/2295)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): jsonnet: Bump jsonnet deps for prometheus-operator [#2296](https://github.com/openshift/cluster-monitoring-operator/pull/2296)
* [MON-3792](https://issues.redhat.com/browse/MON-3792): fix metrics-server path for /test versions [#2286](https://github.com/openshift/cluster-monitoring-operator/pull/2286)
* [MON-3789](https://issues.redhat.com/browse/MON-3789): add a golangci-lint-fix makefile target to fix golangci-lint errros when possible [#2275](https://github.com/openshift/cluster-monitoring-operator/pull/2275)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): update Prometheus operator to v0.72.0 [#2288](https://github.com/openshift/cluster-monitoring-operator/pull/2288)
* [MON-3498](https://issues.redhat.com/browse/MON-3498): Modify prometheus-adapter e2e tests to compact with metrics server [#2196](https://github.com/openshift/cluster-monitoring-operator/pull/2196)
* [OCPBUGS-30257](https://issues.redhat.com/browse/OCPBUGS-30257): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2269](https://github.com/openshift/cluster-monitoring-operator/pull/2269)
* [OCPNODE-2100](https://issues.redhat.com/browse/OCPNODE-2100): jsonnet: update crio port to TLS port 9637 [#2257](https://github.com/openshift/cluster-monitoring-operator/pull/2257)
* [MON-3694](https://issues.redhat.com/browse/MON-3694): chore: encourage the use of the new 'slices' package instead of 'golang.org/x/exp/slices' [#2243](https://github.com/openshift/cluster-monitoring-operator/pull/2243)
* [MON-3748](https://issues.redhat.com/browse/MON-3748): Enable audit logs by default for metrics-server [#2280](https://github.com/openshift/cluster-monitoring-operator/pull/2280)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): adjust prometheus-k8s service openshift.io/description [#2279](https://github.com/openshift/cluster-monitoring-operator/pull/2279)
* [MON-3747](https://issues.redhat.com/browse/MON-3747): Increase e2e test timeout to 150 min [#2278](https://github.com/openshift/cluster-monitoring-operator/pull/2278)
* [MON-3381](https://issues.redhat.com/browse/MON-3381): replace OAuth proxy for Alertmanager [#2260](https://github.com/openshift/cluster-monitoring-operator/pull/2260)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix Thanos ruler alert generator url [#2267](https://github.com/openshift/cluster-monitoring-operator/pull/2267)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): Revert "chore: poll immediately in the e2e tests" [#2271](https://github.com/openshift/cluster-monitoring-operator/pull/2271)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. [#2226](https://github.com/openshift/cluster-monitoring-operator/pull/2226)
* [MON-3717](https://issues.redhat.com/browse/MON-3717): update library-go to get https://github.com/openshift/libra… [#2266](https://github.com/openshift/cluster-monitoring-operator/pull/2266)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): re-add kube-rbac-proxy for /metrics and /federate [#2261](https://github.com/openshift/cluster-monitoring-operator/pull/2261)
* [MON-3172](https://issues.redhat.com/browse/MON-3172): describe monitoring services [#2188](https://github.com/openshift/cluster-monitoring-operator/pull/2188)
* [MON-3706](https://issues.redhat.com/browse/MON-3706): chore: poll immediately in the e2e tests [#2258](https://github.com/openshift/cluster-monitoring-operator/pull/2258)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): replace OAuth proxy for prometheus-k8s [#2246](https://github.com/openshift/cluster-monitoring-operator/pull/2246)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add Console cap annotation to dashboards [#2254](https://github.com/openshift/cluster-monitoring-operator/pull/2254)
* [TRT-1489](https://issues.redhat.com/browse/TRT-1489): Revert "jsonnet: update crio port to TLS port 9637" [#2255](https://github.com/openshift/cluster-monitoring-operator/pull/2255)
* [OCPNODE-2022](https://issues.redhat.com/browse/OCPNODE-2022): jsonnet: update crio port to TLS port 9637 [#2229](https://github.com/openshift/cluster-monitoring-operator/pull/2229)
* [MON-3705](https://issues.redhat.com/browse/MON-3705): [bot] Update jsonnet dependencies [#2208](https://github.com/openshift/cluster-monitoring-operator/pull/2208)
* [MON-3699](https://issues.redhat.com/browse/MON-3699): chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc [#2247](https://github.com/openshift/cluster-monitoring-operator/pull/2247)
* [MON-3697](https://issues.redhat.com/browse/MON-3697): use `maximumStartupDurationSeconds` instead of container patch [#2251](https://github.com/openshift/cluster-monitoring-operator/pull/2251)
* [OCPBUGS-28246](https://issues.redhat.com/browse/OCPBUGS-28246): fix: set externalURL in UWM Prometheus [#2250](https://github.com/openshift/cluster-monitoring-operator/pull/2250)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Synchronize versions of the downstream components [#2245](https://github.com/openshift/cluster-monitoring-operator/pull/2245)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 [#2244](https://github.com/openshift/cluster-monitoring-operator/pull/2244)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to cluster-storage-operator [#2235](https://github.com/openshift/cluster-monitoring-operator/pull/2235)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): rollout metrics-server on cert rotations [#2242](https://github.com/openshift/cluster-monitoring-operator/pull/2242)
* [OCPBUGS-27213](https://issues.redhat.com/browse/OCPBUGS-27213): Adjust lastError injection to wait.PollUntilContextTimeout's final error [#2234](https://github.com/openshift/cluster-monitoring-operator/pull/2234)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#2240](https://github.com/openshift/cluster-monitoring-operator/pull/2240)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Synchronize versions of the downstream components [#2238](https://github.com/openshift/cluster-monitoring-operator/pull/2238)
* [MON-2853](https://issues.redhat.com/browse/MON-2853): add runbook link to TargetDown alert [#2237](https://github.com/openshift/cluster-monitoring-operator/pull/2237)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): [bot] Synchronize versions of the downstream components [#2236](https://github.com/openshift/cluster-monitoring-operator/pull/2236)
* [OCPBUGS-26983](https://issues.redhat.com/browse/OCPBUGS-26983): rollout monitoring plugin on TLS rotation [#2233](https://github.com/openshift/cluster-monitoring-operator/pull/2233)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): chore: update Prometheus operator to v0.71.0 [#2230](https://github.com/openshift/cluster-monitoring-operator/pull/2230)
* [MON-3667](https://issues.redhat.com/browse/MON-3667): remove outdated documentation [#2232](https://github.com/openshift/cluster-monitoring-operator/pull/2232)
* [OCPBUGS-25849](https://issues.redhat.com/browse/OCPBUGS-25849): make PrometheusAdapter and MetricsServer tasks less conflict prone [#2218](https://github.com/openshift/cluster-monitoring-operator/pull/2218)
* [OCPBUGS-25378](https://issues.redhat.com/browse/OCPBUGS-25378): drop InfoInhibitor from default Alertmanager config [#2225](https://github.com/openshift/cluster-monitoring-operator/pull/2225)
* [MON-3664](https://issues.redhat.com/browse/MON-3664): chore: avoid issues with std.set* functions [#2231](https://github.com/openshift/cluster-monitoring-operator/pull/2231)
* [MON-3654](https://issues.redhat.com/browse/MON-3654): use Go standard errors package instead of github.com/pkg/errors [#2224](https://github.com/openshift/cluster-monitoring-operator/pull/2224)
* [MON-1047](https://issues.redhat.com/browse/MON-1047): fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… [#2228](https://github.com/openshift/cluster-monitoring-operator/pull/2228)
* [MON-3552](https://issues.redhat.com/browse/MON-3552): remove temporary cleanup code and no longer needed tests [#2210](https://github.com/openshift/cluster-monitoring-operator/pull/2210)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Synchronize versions of the downstream components [#2222](https://github.com/openshift/cluster-monitoring-operator/pull/2222)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Synchronize versions of the downstream components [#2221](https://github.com/openshift/cluster-monitoring-operator/pull/2221)
* [MON-3644](https://issues.redhat.com/browse/MON-3644): Ease the tracking of monitoring components versions. [#2220](https://github.com/openshift/cluster-monitoring-operator/pull/2220)
* [OCPBUGS-25803](https://issues.redhat.com/browse/OCPBUGS-25803): make CMO ConsolePluginComponents task resilient to dependencies [#2193](https://github.com/openshift/cluster-monitoring-operator/pull/2193)
* [OCPBUGS-25676](https://issues.redhat.com/browse/OCPBUGS-25676): fix(tasks): adjust 'trusted CA bundle ConfigMap' related logs for alertmanagers. [#2219](https://github.com/openshift/cluster-monitoring-operator/pull/2219)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Synchronize versions of the downstream components [#2214](https://github.com/openshift/cluster-monitoring-operator/pull/2214)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2211](https://github.com/openshift/cluster-monitoring-operator/pull/2211)
* [OCPBUGS-25403](https://issues.redhat.com/browse/OCPBUGS-25403): go.mod update k8s.io/api* to v0.29.0 [#2205](https://github.com/openshift/cluster-monitoring-operator/pull/2205)
* [MON-3589](https://issues.redhat.com/browse/MON-3589): Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for --scrape.timestamp-tolerance on Platform Prometheus [#2194](https://github.com/openshift/cluster-monitoring-operator/pull/2194)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): use 1.20 in go.mod [#2199](https://github.com/openshift/cluster-monitoring-operator/pull/2199)
* [MON-3592](https://issues.redhat.com/browse/MON-3592): Use strict yaml unmarshaling [#2195](https://github.com/openshift/cluster-monitoring-operator/pull/2195)
* [OCPBUGS-25025](https://issues.redhat.com/browse/OCPBUGS-25025): go.mod: bump prometheus-operator to v0.70.0 [#2191](https://github.com/openshift/cluster-monitoring-operator/pull/2191)
* [OCPBUGS-24977](https://issues.redhat.com/browse/OCPBUGS-24977): Updating cluster-monitoring-operator-container image to be consistent with ART [#2190](https://github.com/openshift/cluster-monitoring-operator/pull/2190)
* [OCPBUGS-24630](https://issues.redhat.com/browse/OCPBUGS-24630): additionalArgs: list items must have named fields [#2189](https://github.com/openshift/cluster-monitoring-operator/pull/2189)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1...77f948e59ad02a95b13d24b5a01e88e673c8875e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/7604c189b47723fd932cf959c8c15d694262b1f5)

* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Update EQoS CRD to latest [#2362](https://github.com/openshift/cluster-network-operator/pull/2362)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Reapply "Merge pull request #2330 from pperiyasamy/block-sdn-upgrade" [#2361](https://github.com/openshift/cluster-network-operator/pull/2361)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2354](https://github.com/openshift/cluster-network-operator/pull/2354)
* Revert #2330 "SDN-4726: Block upgrade for openshift-sdn" [#2356](https://github.com/openshift/cluster-network-operator/pull/2356)
* [SDN-4434](https://issues.redhat.com/browse/SDN-4434): Network diagnostics scheduling [#2339](https://github.com/openshift/cluster-network-operator/pull/2339)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Block upgrade for openshift-sdn [#2330](https://github.com/openshift/cluster-network-operator/pull/2330)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Add iptables-alerter daemonset [#2329](https://github.com/openshift/cluster-network-operator/pull/2329)
* [OCPBUGS-31528](https://issues.redhat.com/browse/OCPBUGS-31528): infraconfig: handle vSphere UPI by not updating any fields [#2327](https://github.com/openshift/cluster-network-operator/pull/2327)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Improved prometheus rule for ipsec metric [#2346](https://github.com/openshift/cluster-network-operator/pull/2346)
* [OCPBUGS-32402](https://issues.redhat.com/browse/OCPBUGS-32402): Fix wait logic for IPsec certificate signing request [#2342](https://github.com/openshift/cluster-network-operator/pull/2342)
* [SDN-4688](https://issues.redhat.com/browse/SDN-4688): ANP: Add RBAC for cluster-manager [#2338](https://github.com/openshift/cluster-network-operator/pull/2338)
* [OCPBUGS-32347](https://issues.redhat.com/browse/OCPBUGS-32347): Improve IPsec MachineConfig readiness check [#2341](https://github.com/openshift/cluster-network-operator/pull/2341)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Add ipsec state to telemetry [#2270](https://github.com/openshift/cluster-network-operator/pull/2270)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#2095](https://github.com/openshift/cluster-network-operator/pull/2095)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2340](https://github.com/openshift/cluster-network-operator/pull/2340)
* [SDN-4519](https://issues.redhat.com/browse/SDN-4519): Configure CNO as per new API changes for join and transit switch subnet [#2318](https://github.com/openshift/cluster-network-operator/pull/2318)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2334](https://github.com/openshift/cluster-network-operator/pull/2334)
* [NP-956](https://issues.redhat.com/browse/NP-956): Remove managed cluster checking for live migration [#2321](https://github.com/openshift/cluster-network-operator/pull/2321)
* [OCPBUGS-26408](https://issues.redhat.com/browse/OCPBUGS-26408): automountServiceAccountToken:false hosted CP pods [#2306](https://github.com/openshift/cluster-network-operator/pull/2306)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Update (B)ANP CRDs; prepare for GA [#2328](https://github.com/openshift/cluster-network-operator/pull/2328)
* [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319)
* [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309)
* [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313)
* [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307)
* [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288)
* [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308)
* [OCPBUGS-30299](https://issues.redhat.com/browse/OCPBUGS-30299): Fix managed cluster detection on ARO [#2299](https://github.com/openshift/cluster-network-operator/pull/2299)
* [OPNET-358](https://issues.redhat.com/browse/OPNET-358), [OPNET-360](https://issues.redhat.com/browse/OPNET-360): Allow VIP mutation in Infra CR [#2130](https://github.com/openshift/cluster-network-operator/pull/2130)
* [OCPBUGS-29288](https://issues.redhat.com/browse/OCPBUGS-29288): Ensure proper deprecation for the default field manager [#2274](https://github.com/openshift/cluster-network-operator/pull/2274)
* [OCPBUGS-24380](https://issues.redhat.com/browse/OCPBUGS-24380), [OCPBUGS-24381](https://issues.redhat.com/browse/OCPBUGS-24381), [OCPBUGS-24382](https://issues.redhat.com/browse/OCPBUGS-24382): Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods [#2262](https://github.com/openshift/cluster-network-operator/pull/2262)
* [OCPBUGS-25764](https://issues.redhat.com/browse/OCPBUGS-25764): memory-trim-on-compaction is enabled by default [#2260](https://github.com/openshift/cluster-network-operator/pull/2260)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#2127](https://github.com/openshift/cluster-network-operator/pull/2127)
* [OCPBUGS-29341](https://issues.redhat.com/browse/OCPBUGS-29341): Run dhcp-daemon pods as system-node-critical priority [#2280](https://github.com/openshift/cluster-network-operator/pull/2280)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Disable network-node-identity on ROKS [#2197](https://github.com/openshift/cluster-network-operator/pull/2197)
* [OCPBUGS-26492](https://issues.redhat.com/browse/OCPBUGS-26492): Not set CNO to degraded if API server returns conflict error [#2192](https://github.com/openshift/cluster-network-operator/pull/2192)
* [OCPBUGS-24214](https://issues.redhat.com/browse/OCPBUGS-24214): Add ownership annotations [#2120](https://github.com/openshift/cluster-network-operator/pull/2120)
* [OCPBUGS-24601](https://issues.redhat.com/browse/OCPBUGS-24601): Add minReadySeconds to network-node-identity [#2151](https://github.com/openshift/cluster-network-operator/pull/2151)
* [OCPBUGS-29305](https://issues.redhat.com/browse/OCPBUGS-29305): ipsec: fix openssl typo [#2269](https://github.com/openshift/cluster-network-operator/pull/2269)
* [OCPBUGS-28920](https://issues.redhat.com/browse/OCPBUGS-28920): Update ingressconfig_controller to use field Manager [#2259](https://github.com/openshift/cluster-network-operator/pull/2259)
* NO-JIRA: Remove ILB from CNCC [#2182](https://github.com/openshift/cluster-network-operator/pull/2182)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Fix CloudPrivateIPConfig CRD in common [#2249](https://github.com/openshift/cluster-network-operator/pull/2249)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2233](https://github.com/openshift/cluster-network-operator/pull/2233)
* [OCPBUGS-28676](https://issues.redhat.com/browse/OCPBUGS-28676): Remove libreswan rpm existence checks [#2238](https://github.com/openshift/cluster-network-operator/pull/2238)
* [OCPBUGS-29099](https://issues.redhat.com/browse/OCPBUGS-29099): Add hostNetwork:true to cni-sysctl-allowlist ds [#2237](https://github.com/openshift/cluster-network-operator/pull/2237)
* [OCPBUGS-24436](https://issues.redhat.com/browse/OCPBUGS-24436): Add probes to node-network-identity [#2148](https://github.com/openshift/cluster-network-operator/pull/2148)
* [OCPBUGS-24299](https://issues.redhat.com/browse/OCPBUGS-24299): network-node-identity mounts secrets with mode 0640 [#2142](https://github.com/openshift/cluster-network-operator/pull/2142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#2224](https://github.com/openshift/cluster-network-operator/pull/2224)
* [NP-874](https://issues.redhat.com/browse/NP-874), [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Bump openshift API [#2246](https://github.com/openshift/cluster-network-operator/pull/2246)
* [OCPBUGS-24383](https://issues.redhat.com/browse/OCPBUGS-24383): Limit write permissions for egressservices [#2171](https://github.com/openshift/cluster-network-operator/pull/2171)
* [NP-903](https://issues.redhat.com/browse/NP-903): Only allows live migration on standalone managed clusters [#2236](https://github.com/openshift/cluster-network-operator/pull/2236)
* [OCPBUGS-19551](https://issues.redhat.com/browse/OCPBUGS-19551): ovnkube: simplify northd threading and SNO templating [#2234](https://github.com/openshift/cluster-network-operator/pull/2234)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156)
* [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208)
* NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226)
* [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209)
* [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807)
* [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201)
* [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206)
* NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199)
* [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191)
* [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170)
* [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153)
* [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187)
* [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173)
* [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169)
* [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179)
* [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070)
* [SDN-4227](https://issues.redhat.com/browse/SDN-4227): Use specific permissions for CNCC in GCP [#2069](https://github.com/openshift/cluster-network-operator/pull/2069)
* [OCPBUGS-24693](https://issues.redhat.com/browse/OCPBUGS-24693): HyperShift, network-node-identity: Check the deployment in the management cluster [#2166](https://github.com/openshift/cluster-network-operator/pull/2166)
* [OCPBUGS-24176](https://issues.redhat.com/browse/OCPBUGS-24176): Ignore invalid PEM blocks [#2178](https://github.com/openshift/cluster-network-operator/pull/2178)
* [OCPBUGS-25337](https://issues.redhat.com/browse/OCPBUGS-25337): Avoid removal of ipsec-host daemonset when node is NotReady [#2161](https://github.com/openshift/cluster-network-operator/pull/2161)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): remove service account token mount in cloud-network-con… [#2165](https://github.com/openshift/cluster-network-operator/pull/2165)
* [OCPBUGS-23729](https://issues.redhat.com/browse/OCPBUGS-23729): Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy [#2159](https://github.com/openshift/cluster-network-operator/pull/2159)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2114](https://github.com/openshift/cluster-network-operator/pull/2114)
* [OCPBUGS-23199](https://issues.redhat.com/browse/OCPBUGS-23199): add env var in whereabouts-reconciler daemonset [#2160](https://github.com/openshift/cluster-network-operator/pull/2160)
* [OCPBUGS-19830](https://issues.redhat.com/browse/OCPBUGS-19830): fix whereabouts conformance test failures [#2103](https://github.com/openshift/cluster-network-operator/pull/2103)
* [OCPBUGS-24650](https://issues.redhat.com/browse/OCPBUGS-24650), [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Set enable-multi-external-gateway flag in ovnkube.conf [#2149](https://github.com/openshift/cluster-network-operator/pull/2149)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f41dbd3ab6c426157b4d58e103f4148913edc531...7604c189b47723fd932cf959c8c15d694262b1f5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5a9355ec2c462d83812184c83deb209aa5762801)

* set required-scc for openshift workloads (#968) [#968](https://github.com/openshift/cluster-node-tuning-operator/pull/968)
* [OCPBUGS-26401](https://issues.redhat.com/browse/OCPBUGS-26401): TuneD prior to kubelet in one-shot mode (#1045) [#1045](https://github.com/openshift/cluster-node-tuning-operator/pull/1045)
* perfprof: e2e: account for node base load (#1047) [#1047](https://github.com/openshift/cluster-node-tuning-operator/pull/1047)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 2] Hypershift PAO adoption (#1037) [#1037](https://github.com/openshift/cluster-node-tuning-operator/pull/1037)
* [CNF-11099](https://issues.redhat.com/browse/CNF-11099): set intel_pstate driver to automatic as default (#950) [#950](https://github.com/openshift/cluster-node-tuning-operator/pull/950)
* [OCPBUGS-32469](https://issues.redhat.com/browse/OCPBUGS-32469): Remove tuned/rendered object (#1036) [#1036](https://github.com/openshift/cluster-node-tuning-operator/pull/1036)
* NO-JIRA: 4.16 go deps (#1042) [#1042](https://github.com/openshift/cluster-node-tuning-operator/pull/1042)
* [CNF-6517](https://issues.redhat.com/browse/CNF-6517): [Part 1]  Hypershift PAO adoption  (#1032) [#1032](https://github.com/openshift/cluster-node-tuning-operator/pull/1032)
* [PSAP-1354](https://issues.redhat.com/browse/PSAP-1354): Updated a script for deploying a custom NTO image to a cluster (#1030) [#1030](https://github.com/openshift/cluster-node-tuning-operator/pull/1030)
* [OCPBUGS-30111](https://issues.redhat.com/browse/OCPBUGS-30111): Negative net interface name does not reduce queues (#973) [#973](https://github.com/openshift/cluster-node-tuning-operator/pull/973)
* Enhance latency cnf-tests UX (#1041) [#1041](https://github.com/openshift/cluster-node-tuning-operator/pull/1041)
* pao:controller: remove depracated function (#1039) [#1039](https://github.com/openshift/cluster-node-tuning-operator/pull/1039)
* Replaced tuned hard-included repo with a git submodule (#1029) [#1029](https://github.com/openshift/cluster-node-tuning-operator/pull/1029)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes  (#1012) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): NTO operand (openshift-tuned) fixes (#1024) [#1024](https://github.com/openshift/cluster-node-tuning-operator/pull/1024)
* NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) [#1031](https://github.com/openshift/cluster-node-tuning-operator/pull/1031)
* NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) [#1022](https://github.com/openshift/cluster-node-tuning-operator/pull/1022)
* Update the awk print field to fetch rhcos-image (#1033) [#1033](https://github.com/openshift/cluster-node-tuning-operator/pull/1033)
* set Cgroups V2 as default (#1010) [#1010](https://github.com/openshift/cluster-node-tuning-operator/pull/1010)
* E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) [#1011](https://github.com/openshift/cluster-node-tuning-operator/pull/1011)
* NO-JIRA: deps: Bump to K8s 1.29.2 (#990) [#990](https://github.com/openshift/cluster-node-tuning-operator/pull/990)
* Delete duplicate mixedcpus e2e test (#1015) [#1015](https://github.com/openshift/cluster-node-tuning-operator/pull/1015)
* e2e: Enhance tests related to crio annotations (#955) [#955](https://github.com/openshift/cluster-node-tuning-operator/pull/955)
* NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) [#993](https://github.com/openshift/cluster-node-tuning-operator/pull/993)
* [OCPBUGS-30569](https://issues.redhat.com/browse/OCPBUGS-30569): Systemd processes not being moved to cpuset/systemd.slice fix (#992) [#992](https://github.com/openshift/cluster-node-tuning-operator/pull/992)
* NO-JIRA: E2E: Add  systemd package to fetch properties of cgroup slice  (#991) [#991](https://github.com/openshift/cluster-node-tuning-operator/pull/991)
* e2e: when crun is enabled by default skip checking runc config (#948) [#948](https://github.com/openshift/cluster-node-tuning-operator/pull/948)
* NO-JIRA: Update tuned profile degraded test (#1005) [#1005](https://github.com/openshift/cluster-node-tuning-operator/pull/1005)
* Change .snyk format (#1000) [#1000](https://github.com/openshift/cluster-node-tuning-operator/pull/1000)
* Remove removePerformanceOLMOperator() (#997) [#997](https://github.com/openshift/cluster-node-tuning-operator/pull/997)
* [CNF-11213](https://issues.redhat.com/browse/CNF-11213): added mixedCpus e2e test (#967) [#967](https://github.com/openshift/cluster-node-tuning-operator/pull/967)
* NO-JIRA: Add positive tests with ginkgo timeout (#964) [#964](https://github.com/openshift/cluster-node-tuning-operator/pull/964)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): Remove TuneD timeout code and reload on ERRORs (#998) [#998](https://github.com/openshift/cluster-node-tuning-operator/pull/998)
* Add sync for rendering extra ctrcfgs (#980) [#980](https://github.com/openshift/cluster-node-tuning-operator/pull/980)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): Reduce number of reboots in offline tests (#940) [#940](https://github.com/openshift/cluster-node-tuning-operator/pull/940)
* makefile:hypershift: initial make target (#995) [#995](https://github.com/openshift/cluster-node-tuning-operator/pull/995)
* e2e:mixedcpus: check env variables of init process (#961) [#961](https://github.com/openshift/cluster-node-tuning-operator/pull/961)
* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 24786: update protobuf (#985) [#985](https://github.com/openshift/cluster-node-tuning-operator/pull/985)
* Ignore scheduler plugin IRQs when globally enabled (#987) [#987](https://github.com/openshift/cluster-node-tuning-operator/pull/987)
* E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) [#988](https://github.com/openshift/cluster-node-tuning-operator/pull/988)
* Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) [#969](https://github.com/openshift/cluster-node-tuning-operator/pull/969)
* Update OWNERS file (#872) [#872](https://github.com/openshift/cluster-node-tuning-operator/pull/872)
* e2e: perf-prof: increase logging for debugging (#974) [#974](https://github.com/openshift/cluster-node-tuning-operator/pull/974)
* [OCPBUGS-26400](https://issues.redhat.com/browse/OCPBUGS-26400): scheduler plugin: ignore IRQs (#976) [#976](https://github.com/openshift/cluster-node-tuning-operator/pull/976)
* e2e: testdata: remove the annotated profile (#962) [#962](https://github.com/openshift/cluster-node-tuning-operator/pull/962)
* [OCPBUGS-29641](https://issues.redhat.com/browse/OCPBUGS-29641): fix rendering extra ctrcfgs (#972) [#972](https://github.com/openshift/cluster-node-tuning-operator/pull/972)
* NTO operand cleanup (#970) [#970](https://github.com/openshift/cluster-node-tuning-operator/pull/970)
* Render: Don't fail if there is no recommended profile. (#935) [#935](https://github.com/openshift/cluster-node-tuning-operator/pull/935)
* [OCPBUGS-23167](https://issues.redhat.com/browse/OCPBUGS-23167): Add performance real time tuned template (#954) [#954](https://github.com/openshift/cluster-node-tuning-operator/pull/954)
* Add support to inject owner-ref argument to render command (#960) [#960](https://github.com/openshift/cluster-node-tuning-operator/pull/960)
* [OCPBUGS-29546](https://issues.redhat.com/browse/OCPBUGS-29546): Apply hypershift cluster-profile for ibm-cloud-managed (#958) [#958](https://github.com/openshift/cluster-node-tuning-operator/pull/958)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): e2e: fix comparing incompatible types (#957) [#957](https://github.com/openshift/cluster-node-tuning-operator/pull/957)
* Render: Add MCSelector to missing default MCPs (#956) [#956](https://github.com/openshift/cluster-node-tuning-operator/pull/956)
* e2e: check if shared CPUs survive Kubelet restart (#912) [#912](https://github.com/openshift/cluster-node-tuning-operator/pull/912)
* render: perfprofile: don't annotate perfprof (#951) [#951](https://github.com/openshift/cluster-node-tuning-operator/pull/951)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: mixedcpus test (#892) [#892](https://github.com/openshift/cluster-node-tuning-operator/pull/892)
* e2e: fix typo in label name (#947) [#947](https://github.com/openshift/cluster-node-tuning-operator/pull/947)
* skip realtime disabled tests due to OCPBUGS-28828 (#944) [#944](https://github.com/openshift/cluster-node-tuning-operator/pull/944)
* [OCPBUGS-29183](https://issues.redhat.com/browse/OCPBUGS-29183): Enable crun as runtime only if missing (#937) [#937](https://github.com/openshift/cluster-node-tuning-operator/pull/937)
* Fix e2e tests on SNO (#939) [#939](https://github.com/openshift/cluster-node-tuning-operator/pull/939)
* e2e: classifying tests using labels (#936) [#936](https://github.com/openshift/cluster-node-tuning-operator/pull/936)
* Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) [#938](https://github.com/openshift/cluster-node-tuning-operator/pull/938)
* [CNF-9173](https://issues.redhat.com/browse/CNF-9173): e2e: cgroups: introduce cgroup package (#906) [#906](https://github.com/openshift/cluster-node-tuning-operator/pull/906)
* New flags in Performance profile creator (#908) [#908](https://github.com/openshift/cluster-node-tuning-operator/pull/908)
* NO-JIRA: e2e: set performance profile cpus using env vars (#909) [#909](https://github.com/openshift/cluster-node-tuning-operator/pull/909)
* [CNF-11091](https://issues.redhat.com/browse/CNF-11091): Change webhook failure policy to ignore (#933) [#933](https://github.com/openshift/cluster-node-tuning-operator/pull/933)
* [CNF-11145](https://issues.redhat.com/browse/CNF-11145): Enhance render sync to include bootstrap rendering tests (#932) [#932](https://github.com/openshift/cluster-node-tuning-operator/pull/932)
* NO-JIRA: perfprof: render: make ownerReference optional (#907) [#907](https://github.com/openshift/cluster-node-tuning-operator/pull/907)
* Revert "NO-JIRA: skip crun configuration test" (#918) [#918](https://github.com/openshift/cluster-node-tuning-operator/pull/918)
* Render MC without additional PP (#924) [#924](https://github.com/openshift/cluster-node-tuning-operator/pull/924)
* Report duplicate priority only for multiple matching profiles (#890) [#890](https://github.com/openshift/cluster-node-tuning-operator/pull/890)
* e2e: `UpdateWithRetry` only update spec (#914) [#914](https://github.com/openshift/cluster-node-tuning-operator/pull/914)
* Skip PerformanceProfile update test (#929) [#929](https://github.com/openshift/cluster-node-tuning-operator/pull/929)
* Export ValidateBasicFields for Hypershift (#916) [#916](https://github.com/openshift/cluster-node-tuning-operator/pull/916)
* e2e: log: set ctrl-runtime logger (#911) [#911](https://github.com/openshift/cluster-node-tuning-operator/pull/911)
* [OCPBUGS-22095](https://issues.redhat.com/browse/OCPBUGS-22095): Add default MCP objects for rendering (#833) [#833](https://github.com/openshift/cluster-node-tuning-operator/pull/833)
* README Doc Typo Fix (#920) [#920](https://github.com/openshift/cluster-node-tuning-operator/pull/920)
* HyperShift code linter PR837 followup (#910) [#910](https://github.com/openshift/cluster-node-tuning-operator/pull/910)
* [CNF-10786](https://issues.redhat.com/browse/CNF-10786): e2e: general improvements and cleanup  (#898) [#898](https://github.com/openshift/cluster-node-tuning-operator/pull/898)
* dnm: skip crun configuration test (#917) [#917](https://github.com/openshift/cluster-node-tuning-operator/pull/917)
* Add .snyk file for static code analysis (#902) [#902](https://github.com/openshift/cluster-node-tuning-operator/pull/902)
* [OCPBUGS-25699](https://issues.redhat.com/browse/OCPBUGS-25699): irqbalance: set banned cpus list to '0' (#899) [#899](https://github.com/openshift/cluster-node-tuning-operator/pull/899)
* rps: fail silently when rps application failed (#895) [#895](https://github.com/openshift/cluster-node-tuning-operator/pull/895)
* [OCPBUGS-20368](https://issues.redhat.com/browse/OCPBUGS-20368): E2E: Add tests for Dynamic ovs pinning (#746) [#746](https://github.com/openshift/cluster-node-tuning-operator/pull/746)
* NTO: Add MCP name to filter PP (#878) [#878](https://github.com/openshift/cluster-node-tuning-operator/pull/878)
* [OCPBUGS-24581](https://issues.redhat.com/browse/OCPBUGS-24581): rps: fix mask update for SR-IOV devices (#877) [#877](https://github.com/openshift/cluster-node-tuning-operator/pull/877)
* [OCPBUGS-24792](https://issues.redhat.com/browse/OCPBUGS-24792): Make MC names deterministic (#875) [#875](https://github.com/openshift/cluster-node-tuning-operator/pull/875)
* makefile: add target to trigger mixedcpus e2e test (#883) [#883](https://github.com/openshift/cluster-node-tuning-operator/pull/883)
* Fix error logging in metrics server.go (#882) [#882](https://github.com/openshift/cluster-node-tuning-operator/pull/882)
* e2e-test: Call SetLogger (#881) [#881](https://github.com/openshift/cluster-node-tuning-operator/pull/881)
* Use go 1.21 (#879) [#879](https://github.com/openshift/cluster-node-tuning-operator/pull/879)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#868) [#868](https://github.com/openshift/cluster-node-tuning-operator/pull/868)
* Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) [#867](https://github.com/openshift/cluster-node-tuning-operator/pull/867)
* e2e: images: bump default test image to 4.14 (#856) [#856](https://github.com/openshift/cluster-node-tuning-operator/pull/856)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/948f0937e74d79db176f718398dfdea4c95ff145...5a9355ec2c462d83812184c83deb209aa5762801)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/5332ad906fda9671f1b0cd53979fab07bb0eb04a)

* [OPRUN-3291](https://issues.redhat.com/browse/OPRUN-3291): Update dependencies [#51](https://github.com/openshift/cluster-olm-operator/pull/51)
* [OCPBUGS-31280](https://issues.redhat.com/browse/OCPBUGS-31280): manual art compliance [#50](https://github.com/openshift/cluster-olm-operator/pull/50)
* [OCPBUGS-32188](https://issues.redhat.com/browse/OCPBUGS-32188): Update README.md [#49](https://github.com/openshift/cluster-olm-operator/pull/49)
* [OCPBUGS-30491](https://issues.redhat.com/browse/OCPBUGS-30491): Update kube dep to 1.27.12 [#48](https://github.com/openshift/cluster-olm-operator/pull/48)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#46](https://github.com/openshift/cluster-olm-operator/pull/46)
* NO-ISSUE: Remove ncdc from OWNERS [#45](https://github.com/openshift/cluster-olm-operator/pull/45)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Reenable cluster-olm-operator [#44](https://github.com/openshift/cluster-olm-operator/pull/44)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Disable cluster-olm-operator [#43](https://github.com/openshift/cluster-olm-operator/pull/43)
* [OCPBUGS-25542](https://issues.redhat.com/browse/OCPBUGS-25542): Updating ose-cluster-olm-operator-container image to be consistent with ART [#42](https://github.com/openshift/cluster-olm-operator/pull/42)
* [OCPBUGS-24794](https://issues.redhat.com/browse/OCPBUGS-24794): Updating ose-cluster-olm-operator-container image to be consistent with ART [#39](https://github.com/openshift/cluster-olm-operator/pull/39)
* NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#37](https://github.com/openshift/cluster-olm-operator/pull/37)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/a7ba89874970cd10765e1d0753405e32fb357d84...5332ad906fda9671f1b0cd53979fab07bb0eb04a)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/d26f3002e10be6f206f69a829d1511130e8188d9)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): Set required-scc for openshift workloads [#573](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/573)
* [WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015): tolerate node-role.kubernetes.io/control-plane:NoExecute [#574](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/574)
* [OCPBUGS-29580](https://issues.redhat.com/browse/OCPBUGS-29580): Apply hypershift cluster-profile for ibm-cloud-managed [#572](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/572)
* [OCPBUGS-32346](https://issues.redhat.com/browse/OCPBUGS-32346): the apiservice controller waits until bootstrap complete [#575](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/575)
* NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets [#577](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/577)
* NO-ISSUE: fix: TestRedeployOnConfigChange [#576](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/576)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#559](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/559)
* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#566](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/566)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#547](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/547)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#562](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/562)
* [OCPBUGS-24972](https://issues.redhat.com/browse/OCPBUGS-24972): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#561](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/561)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/74013916aadbe6a18ac06e93c0ff72e8735a9668...d26f3002e10be6f206f69a829d1511130e8188d9)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d291c51f0becf065fbe740cf7b113b81378ee34a)

* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps opentelemetry dependencies [#341](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/341)
* [OCPBUGS-29973](https://issues.redhat.com/browse/OCPBUGS-29973): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 [#337](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/337)
* [OCPBUGS-29581](https://issues.redhat.com/browse/OCPBUGS-29581): Apply hypershift cluster-profile for ibm-cloud-managed [#334](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/334)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#316](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/316)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#338](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/338)
* [OCPBUGS-24888](https://issues.redhat.com/browse/OCPBUGS-24888): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#321](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/321)
* [OCPBUGS-28666](https://issues.redhat.com/browse/OCPBUGS-28666): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#326](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/326)
* [OCPBUGS-23624](https://issues.redhat.com/browse/OCPBUGS-23624): Add .snyk file to exclude vendor and ignore unit tests [#325](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/325)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump k8s dependencies to 1.29.0 [#324](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/324)
* [OCPBUGS-24190](https://issues.redhat.com/browse/OCPBUGS-24190): Disable deployer-controller when deploymentconfig is disabled [#320](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/320)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/f189a00839491e166cd0220afe11d35cdb844754...d291c51f0becf065fbe740cf7b113b81378ee34a)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/5fb399e948428a7967e8cbcaac0cc8362e90cb49)

* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Reenable po [#110](https://github.com/openshift/platform-operators/pull/110)
* NO-ISSUE: Add kevinrizza to OWNERS [#111](https://github.com/openshift/platform-operators/pull/111)
* NO-ISSUE: Update to use rukpakv1alpha2 apis [#108](https://github.com/openshift/platform-operators/pull/108)
* [OCPBUGS-28597](https://issues.redhat.com/browse/OCPBUGS-28597): Disable PO [#109](https://github.com/openshift/platform-operators/pull/109)
* [OCPBUGS-24876](https://issues.redhat.com/browse/OCPBUGS-24876): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#105](https://github.com/openshift/platform-operators/pull/105)
* [Full changelog](https://github.com/openshift/platform-operators/compare/37a0a919b1032f7affa49b756eda4762d77751d5...5fb399e948428a7967e8cbcaac0cc8362e90cb49)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/eaea543f4c845a7b65705f12e162cc121bb12f88)

* [OCPBUGS-30496](https://issues.redhat.com/browse/OCPBUGS-30496): bump(google.golang.org/protobuf)=v1.33.0 [#147](https://github.com/openshift/cluster-policy-controller/pull/147)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#146](https://github.com/openshift/cluster-policy-controller/pull/146)
* [OCPBUGS-24877](https://issues.redhat.com/browse/OCPBUGS-24877): Updating ose-cluster-policy-controller-container image to be consistent with ART [#144](https://github.com/openshift/cluster-policy-controller/pull/144)
* [OCPBUGS-26190](https://issues.redhat.com/browse/OCPBUGS-26190): Add .snyk file to exclude vendor and ignore unit tests [#145](https://github.com/openshift/cluster-policy-controller/pull/145)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/cc48f3152213bfe6e42fdd82f760246e862d208f...eaea543f4c845a7b65705f12e162cc121bb12f88)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/d4dd84396472c5e974f0562046a6ad068b6f20f8)

* [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543)
* Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542)
* [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540)
* [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#530](https://github.com/openshift/cluster-samples-operator/pull/530)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#527](https://github.com/openshift/cluster-samples-operator/pull/527)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d546ec2c5146e3a701840ab1a84cdca5b3682dc2...d4dd84396472c5e974f0562046a6ad068b6f20f8)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0669fc4b2b26afa2497610c2950e427fa5cf59cb)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#467](https://github.com/openshift/cluster-storage-operator/pull/467)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): update ClusterCSIDriver CRDs [#464](https://github.com/openshift/cluster-storage-operator/pull/464)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#459](https://github.com/openshift/cluster-storage-operator/pull/459)
* [OCPBUGS-28748](https://issues.redhat.com/browse/OCPBUGS-28748): log default storage class names when collector is triggered [#460](https://github.com/openshift/cluster-storage-operator/pull/460)
* [OCPBUGS-30498](https://issues.redhat.com/browse/OCPBUGS-30498): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#463](https://github.com/openshift/cluster-storage-operator/pull/463)
* [STOR-1758](https://issues.redhat.com/browse/STOR-1758): Add azure file hypershift [#454](https://github.com/openshift/cluster-storage-operator/pull/454)
* [OCPBUGS-28879](https://issues.redhat.com/browse/OCPBUGS-28879): Fix problem-detector proxy setting [#457](https://github.com/openshift/cluster-storage-operator/pull/457)
* [OCPBUGS-29573](https://issues.redhat.com/browse/OCPBUGS-29573): Apply hypershift cluster-profile for ibm-cloud-managed [#458](https://github.com/openshift/cluster-storage-operator/pull/458)
* [OCPBUGS-28765](https://issues.redhat.com/browse/OCPBUGS-28765): Remove master node selector from azure-csi-driver-operator deployment [#448](https://github.com/openshift/cluster-storage-operator/pull/448)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#455](https://github.com/openshift/cluster-storage-operator/pull/455)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#447](https://github.com/openshift/cluster-storage-operator/pull/447)
* [STOR-1611](https://issues.redhat.com/browse/STOR-1611): remove ibm-vpc-node-label-updater [#445](https://github.com/openshift/cluster-storage-operator/pull/445)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Allow vSphere CSI driver to be disabled [#444](https://github.com/openshift/cluster-storage-operator/pull/444)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to CSO [#442](https://github.com/openshift/cluster-storage-operator/pull/442)
* [STOR-1354](https://issues.redhat.com/browse/STOR-1354): Remove Alibaba Disk CSI Driver [#440](https://github.com/openshift/cluster-storage-operator/pull/440)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#443](https://github.com/openshift/cluster-storage-operator/pull/443)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Azure disk hypershift [#420](https://github.com/openshift/cluster-storage-operator/pull/420)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#437](https://github.com/openshift/cluster-storage-operator/pull/437)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert [#430](https://github.com/openshift/cluster-storage-operator/pull/430)
* [OCPBUGS-22422](https://issues.redhat.com/browse/OCPBUGS-22422): Fix PodStartupStorageOperationsFailing alert [#436](https://github.com/openshift/cluster-storage-operator/pull/436)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#434](https://github.com/openshift/cluster-storage-operator/pull/434)
* [OCPBUGS-25564](https://issues.redhat.com/browse/OCPBUGS-25564): Updating ose-cluster-storage-operator-container image to be consistent with ART [#435](https://github.com/openshift/cluster-storage-operator/pull/435)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): replace instanceAdmin role with specific compute permissions [#429](https://github.com/openshift/cluster-storage-operator/pull/429)
* [OCPBUGS-24927](https://issues.redhat.com/browse/OCPBUGS-24927): Updating ose-cluster-storage-operator-container image to be consistent with ART [#432](https://github.com/openshift/cluster-storage-operator/pull/432)
* [OCPBUGS-23852](https://issues.redhat.com/browse/OCPBUGS-23852): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#431](https://github.com/openshift/cluster-storage-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1a2443a7fe8a00597f8c19382fb8ce617943029c...0669fc4b2b26afa2497610c2950e427fa5cf59cb)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)

* [OCPBUGS-29570](https://issues.redhat.com/browse/OCPBUGS-29570): Apply hypershift cluster-profile for ibm-cloud-managed [#54](https://github.com/openshift/cluster-update-keys/pull/54)
* [OCPBUGS-24932](https://issues.redhat.com/browse/OCPBUGS-24932): Updating ose-cluster-update-keys-container image to be consistent with ART [#53](https://github.com/openshift/cluster-update-keys/pull/53)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/be6ba5b0acee8970345b5259025506a04562ad37...c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/0b3f507632ce4705702fc725614bd22d25d6686c)

* [OTA-1160](https://issues.redhat.com/browse/OTA-1160): pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart [#1044](https://github.com/openshift/cluster-version-operator/pull/1044)
* NO-ISSUE: pkg/payload/task: Drop unused Requeued property [#1043](https://github.com/openshift/cluster-version-operator/pull/1043)
* [NE-1318](https://issues.redhat.com/browse/NE-1318): Add always-enable-capabilities flag and set Ingress as always enabled [#946](https://github.com/openshift/cluster-version-operator/pull/946)
* [OCPBUGS-9133](https://issues.redhat.com/browse/OCPBUGS-9133): pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded [#746](https://github.com/openshift/cluster-version-operator/pull/746)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1038](https://github.com/openshift/cluster-version-operator/pull/1038)
* NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 [#1042](https://github.com/openshift/cluster-version-operator/pull/1042)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): pkg/cvo: Render status.Failure in ReconciliationIssues [#1041](https://github.com/openshift/cluster-version-operator/pull/1041)
* [OTA-1210](https://issues.redhat.com/browse/OTA-1210): *: Add --update-service command-line option [#1035](https://github.com/openshift/cluster-version-operator/pull/1035)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [2/3] Maintain `ReconciliationIssues` condition [#1032](https://github.com/openshift/cluster-version-operator/pull/1032)
* [OCPBUGS-29868](https://issues.redhat.com/browse/OCPBUGS-29868): Apply hypershift cluster-profile for ibm-cloud-managed [#1037](https://github.com/openshift/cluster-version-operator/pull/1037)
* NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded [#1036](https://github.com/openshift/cluster-version-operator/pull/1036)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api with new capability [#979](https://github.com/openshift/cluster-version-operator/pull/979)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [1/x] Refactor syncStatus for testability [#1031](https://github.com/openshift/cluster-version-operator/pull/1031)
* [OCPBUGS-18454](https://issues.redhat.com/browse/OCPBUGS-18454): Avoid using risk names as condition reasons when invalid [#962](https://github.com/openshift/cluster-version-operator/pull/962)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): yield lock while retrieving payload [#1005](https://github.com/openshift/cluster-version-operator/pull/1005)
* NO-JIRA: manifests: fix service manifest filename [#1027](https://github.com/openshift/cluster-version-operator/pull/1027)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features [#1026](https://github.com/openshift/cluster-version-operator/pull/1026)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): Refactor & improve SyncWorker lock code [#1020](https://github.com/openshift/cluster-version-operator/pull/1020)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): deps: bump openshift/api and k8s.io/client.go [#1022](https://github.com/openshift/cluster-version-operator/pull/1022)
* [OCPBUGS-25862](https://issues.redhat.com/browse/OCPBUGS-25862): CO health: only track current in-progress upgrade start [#1011](https://github.com/openshift/cluster-version-operator/pull/1011)
* [OCPBUGS-26014](https://issues.redhat.com/browse/OCPBUGS-26014): clusterOperatorBuilder: Reconcile metadata on COs [#1012](https://github.com/openshift/cluster-version-operator/pull/1012)
* [OCPBUGS-25708](https://issues.redhat.com/browse/OCPBUGS-25708): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1009](https://github.com/openshift/cluster-version-operator/pull/1009)
* [OCPBUGS-24535](https://issues.redhat.com/browse/OCPBUGS-24535): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#996](https://github.com/openshift/cluster-version-operator/pull/996)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1006](https://github.com/openshift/cluster-version-operator/pull/1006)
* [OCPBUGS-25055](https://issues.redhat.com/browse/OCPBUGS-25055): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1003](https://github.com/openshift/cluster-version-operator/pull/1003)
* [OCPBUGS-24963](https://issues.redhat.com/browse/OCPBUGS-24963): Updating cluster-version-operator-container image to be consistent with ART [#1004](https://github.com/openshift/cluster-version-operator/pull/1004)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/705f11a24965df33c4c3ae69147c0215e2109208...0b3f507632ce4705702fc725614bd22d25d6686c)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)

* [MON-3671](https://issues.redhat.com/browse/MON-3671): add machine424 and rexagod to OWNERS [#55](https://github.com/openshift/configmap-reload/pull/55)
* [OCPBUGS-24912](https://issues.redhat.com/browse/OCPBUGS-24912): Updating configmap-reload-container image to be consistent with ART [#58](https://github.com/openshift/configmap-reload/pull/58)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/617398f581faadbad2c7ded993bfa3169a87b6ab...dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)


### [console](https://github.com/openshift/console/tree/6c050bebfd222e4d97ef15b9148258936261d0c9)

* [OCPBUGS-32707](https://issues.redhat.com/browse/OCPBUGS-32707): Fix React Router useParams in dynamic demo plugin [#13803](https://github.com/openshift/console/pull/13803)
* [CONSOLE-1756](https://issues.redhat.com/browse/CONSOLE-1756): replace PodIP with PodIPs or HostIP with HostIPs if mor… [#13774](https://github.com/openshift/console/pull/13774)
* [ODC-7437](https://issues.redhat.com/browse/ODC-7437): Remove pf classes in topology package [#13710](https://github.com/openshift/console/pull/13710)
* [OCPBUGS-33011](https://issues.redhat.com/browse/OCPBUGS-33011): fix issues with Edit Route form [#13799](https://github.com/openshift/console/pull/13799)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014), [OCPBUGS-32791](https://issues.redhat.com/browse/OCPBUGS-32791): Consume telemetry CLUSTER_ID and use it together with orgId as segment identifier [#13786](https://github.com/openshift/console/pull/13786)
* [ODC-7435](https://issues.redhat.com/browse/ODC-7435): Remove pf classes in pipelines package [#13739](https://github.com/openshift/console/pull/13739)
* [ODC-7569](https://issues.redhat.com/browse/ODC-7569): Automation of the Recently Used Resources Section in the Search Resource page Dropdown [#13791](https://github.com/openshift/console/pull/13791)
* [ODC-7566](https://issues.redhat.com/browse/ODC-7566): Remove the Approvals Feature from the Console Repository [#13789](https://github.com/openshift/console/pull/13789)
* [ODC-7547](https://issues.redhat.com/browse/ODC-7547): Add e2e tests for QuickStarts in CI [#13764](https://github.com/openshift/console/pull/13764)
* [ODC-7438](https://issues.redhat.com/browse/ODC-7438), [ODC-7535](https://issues.redhat.com/browse/ODC-7535): web-terminal automation improvement [#13749](https://github.com/openshift/console/pull/13749)
* [OCPBUGS-32741](https://issues.redhat.com/browse/OCPBUGS-32741): change OperatorHub filter FIPS Mode to Designed for FIPS [#13790](https://github.com/openshift/console/pull/13790)
* [WINC-1180](https://issues.redhat.com/browse/WINC-1180): Use record created for container_network metrics [#13759](https://github.com/openshift/console/pull/13759)
* [OBSDOCS-986](https://issues.redhat.com/browse/OBSDOCS-986): Update the Monitoring topic used by the console team [#13765](https://github.com/openshift/console/pull/13765)
* [ODC-7433](https://issues.redhat.com/browse/ODC-7433): Remove PatternFly classes from helm integration tests [#13777](https://github.com/openshift/console/pull/13777)
* [CONSOLE-4020](https://issues.redhat.com/browse/CONSOLE-4020): i18n upload/download routine task - Sprint 252 [#13760](https://github.com/openshift/console/pull/13760)
* [OCPBUGS-32725](https://issues.redhat.com/browse/OCPBUGS-32725): fix OIDC logging out [#13755](https://github.com/openshift/console/pull/13755)
* [OCPBUGS-32059](https://issues.redhat.com/browse/OCPBUGS-32059): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13776](https://github.com/openshift/console/pull/13776)
* [OCPBUGS-32222](https://issues.redhat.com/browse/OCPBUGS-32222): Add warning about service binding operator will not be supported from 4.15 [#13766](https://github.com/openshift/console/pull/13766)
* [ODC-7554](https://issues.redhat.com/browse/ODC-7554): Update the UI according to the recent changes from UX [#13723](https://github.com/openshift/console/pull/13723)
* [ODC-7565](https://issues.redhat.com/browse/ODC-7565): Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) [#13773](https://github.com/openshift/console/pull/13773)
* [OCPBUGS-13114](https://issues.redhat.com/browse/OCPBUGS-13114): Add visual connector between VMs and non VMs workloads [#13617](https://github.com/openshift/console/pull/13617)
* [OCPBUGS-31809](https://issues.redhat.com/browse/OCPBUGS-31809): Pipeline details page Metrics tab crashed due to no custom data [#13733](https://github.com/openshift/console/pull/13733)
* [OCPBUGS-30426](https://issues.redhat.com/browse/OCPBUGS-30426): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#13661](https://github.com/openshift/console/pull/13661)
* [OCPBUGS-28723](https://issues.redhat.com/browse/OCPBUGS-28723): Improve Create serverless function error message [#13591](https://github.com/openshift/console/pull/13591)
* [OCPBUGS-32218](https://issues.redhat.com/browse/OCPBUGS-32218): fix runtime error on Pending pod details page [#13768](https://github.com/openshift/console/pull/13768)
* [ODC-7479](https://issues.redhat.com/browse/ODC-7479): automation of quick-starts-cluster-overview.feature [#13715](https://github.com/openshift/console/pull/13715)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Add NaN handling for Stacked Graphs [#13712](https://github.com/openshift/console/pull/13712)
* [OCPBUGS-26073](https://issues.redhat.com/browse/OCPBUGS-26073): setting correct image trigger annotation [#13492](https://github.com/openshift/console/pull/13492)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944): Disable segment analytics when cluster telemetry is disabled [#13677](https://github.com/openshift/console/pull/13677)
* [OCPBUGS-32019](https://issues.redhat.com/browse/OCPBUGS-32019): Handle loading issue for PLR status in PLR list page [#13747](https://github.com/openshift/console/pull/13747)
* [OCPBUGS-29377](https://issues.redhat.com/browse/OCPBUGS-29377): Routes created by devfiles do not always use HTTPS [#13725](https://github.com/openshift/console/pull/13725)
* [OCPBUGS-32307](https://issues.redhat.com/browse/OCPBUGS-32307): Increase Max node limit for topology page to 300 [#13761](https://github.com/openshift/console/pull/13761)
* [OCPBUGS-22405](https://issues.redhat.com/browse/OCPBUGS-22405): Add a button to enable autoscaling for a deployment that is scaled to 0 [#13711](https://github.com/openshift/console/pull/13711)
* [OCPBUGS-32189](https://issues.redhat.com/browse/OCPBUGS-32189): Fix PatternFly version resolution check script for MacOS [#13757](https://github.com/openshift/console/pull/13757)
* [CONSOLE-3759](https://issues.redhat.com/browse/CONSOLE-3759): Update file-loader pkg [#13743](https://github.com/openshift/console/pull/13743)
* [OCPBUGS-31430](https://issues.redhat.com/browse/OCPBUGS-31430): Re-enable Pipelines e2e tests [#13700](https://github.com/openshift/console/pull/13700)
* [OCPBUGS-32175](https://issues.redhat.com/browse/OCPBUGS-32175): Update i18n docs : Change "traditional Chinese" to "simplified Chinese" [#13754](https://github.com/openshift/console/pull/13754)
* [OCPBUGS-32117](https://issues.redhat.com/browse/OCPBUGS-32117): Add flag to hide Output tab contributed by pipelines-plugin [#13751](https://github.com/openshift/console/pull/13751)
* [CONSOLE-3997](https://issues.redhat.com/browse/CONSOLE-3997): Bump Yarn to v1 latest & add script to check PatternFly modules [#13706](https://github.com/openshift/console/pull/13706)
* [OCPBUGS-31745](https://issues.redhat.com/browse/OCPBUGS-31745): TaskRun status is not displayed near the name [#13746](https://github.com/openshift/console/pull/13746)
* [CONSOLE-3916](https://issues.redhat.com/browse/CONSOLE-3916): Direct OIDC tech debt [#13647](https://github.com/openshift/console/pull/13647)
* [OCPBUGS-31082](https://issues.redhat.com/browse/OCPBUGS-31082): Remove deprecated resources from spec of the Pipeline [#13741](https://github.com/openshift/console/pull/13741)
* [OCPBUGS-31759](https://issues.redhat.com/browse/OCPBUGS-31759): Update i18n docs on how to update Phrase Project Template [#13730](https://github.com/openshift/console/pull/13730)
* [OCPBUGS-31843](https://issues.redhat.com/browse/OCPBUGS-31843): Use UserInfo username field when logging out as kubeadmin [#13740](https://github.com/openshift/console/pull/13740)
* [OCPBUGS-31680](https://issues.redhat.com/browse/OCPBUGS-31680): Correct the button text for VolumeSnapshotContent [#13742](https://github.com/openshift/console/pull/13742)
* [WINC-1182](https://issues.redhat.com/browse/WINC-1182): [node] Modify filesystem queries to include Windows metrics [#13662](https://github.com/openshift/console/pull/13662)
* [OCPBUGS-31703](https://issues.redhat.com/browse/OCPBUGS-31703): Resource yaml with create [#13722](https://github.com/openshift/console/pull/13722)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment [#13728](https://github.com/openshift/console/pull/13728)
* [OCPBUGS-23319](https://issues.redhat.com/browse/OCPBUGS-23319): fix bug where paused MCPs were incorrectly unpausing w… [#13717](https://github.com/openshift/console/pull/13717)
* [OCPBUGS-31744](https://issues.redhat.com/browse/OCPBUGS-31744): Add fr and es languages to i18n script for Memsource upload [#13729](https://github.com/openshift/console/pull/13729)
* [OCPBUGS-29616](https://issues.redhat.com/browse/OCPBUGS-29616), [OCPBUGS-29823](https://issues.redhat.com/browse/OCPBUGS-29823), [OCPBUGS-31613](https://issues.redhat.com/browse/OCPBUGS-31613): Add validation for vSphere fields [#13726](https://github.com/openshift/console/pull/13726)
* [OCPBUGS-23480](https://issues.redhat.com/browse/OCPBUGS-23480): Improve PipelineRun list view performance [#13676](https://github.com/openshift/console/pull/13676)
* [OCPBUGS-31732](https://issues.redhat.com/browse/OCPBUGS-31732): Hide the cluster configuration for analytics [#13727](https://github.com/openshift/console/pull/13727)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: use our own pre-configured client for token refreshes [#13716](https://github.com/openshift/console/pull/13716)
* [OCPBUGS-31695](https://issues.redhat.com/browse/OCPBUGS-31695): Use bearer-token for local dev with auth [#13720](https://github.com/openshift/console/pull/13720)
* [OCPBUGS-31355](https://issues.redhat.com/browse/OCPBUGS-31355): add readOnly option to ResourceYAMLEditor [#13694](https://github.com/openshift/console/pull/13694)
* [ODC-7436](https://issues.redhat.com/browse/ODC-7436): shipwright test package update concerning pf5 update [#13660](https://github.com/openshift/console/pull/13660)
* [OCPBUGS-31431](https://issues.redhat.com/browse/OCPBUGS-31431): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13701](https://github.com/openshift/console/pull/13701)
* [ODC-7431](https://issues.redhat.com/browse/ODC-7431): dev-console test package update concerning pf5 update [#13685](https://github.com/openshift/console/pull/13685)
* [OCPBUGS-31315](https://issues.redhat.com/browse/OCPBUGS-31315): i18n upload/download routine task - Sprint 249 [#13692](https://github.com/openshift/console/pull/13692)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): fix asynccache improper initialization [#13703](https://github.com/openshift/console/pull/13703)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13454](https://github.com/openshift/console/pull/13454)
* Revert "OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters" [#13705](https://github.com/openshift/console/pull/13705)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Improve local plugin development docs [#13679](https://github.com/openshift/console/pull/13679)
* [OCPBUGS-30958](https://issues.redhat.com/browse/OCPBUGS-30958): Upgrade Pipeline trigger resources to v1beta1 [#13702](https://github.com/openshift/console/pull/13702)
* [OCPBUGS-30824](https://issues.redhat.com/browse/OCPBUGS-30824): Remove react-helmet from Console provided shared modules [#13687](https://github.com/openshift/console/pull/13687)
* [CONSOLE-3971](https://issues.redhat.com/browse/CONSOLE-3971): add impersonate action to Group list and details pages [#13671](https://github.com/openshift/console/pull/13671)
* [OCPBUGS-28585](https://issues.redhat.com/browse/OCPBUGS-28585): remove generics from use*Modal docs [#13689](https://github.com/openshift/console/pull/13689)
* [OCPBUGS-24637](https://issues.redhat.com/browse/OCPBUGS-24637): Fix storage request unit dropdown to display any valid unit [#13620](https://github.com/openshift/console/pull/13620)
* [OCPBUGS-29992](https://issues.redhat.com/browse/OCPBUGS-29992), [OCPBUGS-30584](https://issues.redhat.com/browse/OCPBUGS-30584): PatternFly upgrade to 5.2.1 followup to… [#13693](https://github.com/openshift/console/pull/13693)
* [CONSOLE-3972](https://issues.redhat.com/browse/CONSOLE-3972): add Last Status to Pod details Container list and Conta… [#13674](https://github.com/openshift/console/pull/13674)
* [ODC-7531](https://issues.redhat.com/browse/ODC-7531): Added the ApprovalTask List Tabbed Page [#13651](https://github.com/openshift/console/pull/13651)
* [ODC-7546](https://issues.redhat.com/browse/ODC-7546): Fix that the UI doesn't load on non-openshift clusters [#13408](https://github.com/openshift/console/pull/13408)
* [ODC-7498](https://issues.redhat.com/browse/ODC-7498): Show an opt-in / opt-out option to the user depending on the cluster configuration [#13587](https://github.com/openshift/console/pull/13587)
* [ODC-7434](https://issues.redhat.com/browse/ODC-7434): Knative test package update concerning pf5 update [#13562](https://github.com/openshift/console/pull/13562)
* [OCPBUGS-24049](https://issues.redhat.com/browse/OCPBUGS-24049): Add option to enable/disable tailing to Pod log viewer mobile screen issues [#13394](https://github.com/openshift/console/pull/13394)
* [CONSOLE-3949](https://issues.redhat.com/browse/CONSOLE-3949): Add support for returning response.header in consoleFetchCommon function [#13623](https://github.com/openshift/console/pull/13623)
* [CONSOLE-3969](https://issues.redhat.com/browse/CONSOLE-3969): Enable French and Spanish in the OCP Console [#13665](https://github.com/openshift/console/pull/13665)
* [ODC-7519](https://issues.redhat.com/browse/ODC-7519): Update the Pipeline Topology to adjust the new node design for the CustomRun [#13613](https://github.com/openshift/console/pull/13613)
* [CONSOLE-3922](https://issues.redhat.com/browse/CONSOLE-3922): Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage [#13560](https://github.com/openshift/console/pull/13560)
* [ODC-7489](https://issues.redhat.com/browse/ODC-7489): automation for getting-started-tour-dev-perspective feature file [#13531](https://github.com/openshift/console/pull/13531)
* [OCPBUGS-30052](https://issues.redhat.com/browse/OCPBUGS-30052), [OCPBUGS-30575](https://issues.redhat.com/browse/OCPBUGS-30575): PipelineRuns in Console show wrong status or load indefinitely [#13659](https://github.com/openshift/console/pull/13659)
* [CONSOLE-3965](https://issues.redhat.com/browse/CONSOLE-3965): i18n upload/download routine task for version-4.16/ sprint-248 [#13652](https://github.com/openshift/console/pull/13652)
* [ODC-7492](https://issues.redhat.com/browse/ODC-7492): automation for sample-card-add-page feature file [#13589](https://github.com/openshift/console/pull/13589)
* [OCPBUGS-30567](https://issues.redhat.com/browse/OCPBUGS-30567): Remove wrong arguments in K8sCreate method instance for Create YAML editor [#13658](https://github.com/openshift/console/pull/13658)
* [OCPBUGS-30297](https://issues.redhat.com/browse/OCPBUGS-30297): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13650](https://github.com/openshift/console/pull/13650)
* [CONSOLE-3931](https://issues.redhat.com/browse/CONSOLE-3931): replace existing CloseButton with one from @patternfly/… [#13588](https://github.com/openshift/console/pull/13588)
* [OCPBUGS-30805](https://issues.redhat.com/browse/OCPBUGS-30805): fix Configure link in AlertmanagerReceiversNotConfigur… [#13666](https://github.com/openshift/console/pull/13666)
* [OCPBUGS-30762](https://issues.redhat.com/browse/OCPBUGS-30762): Fix bugs in Console dynamic plugin SDK webpack code [#13657](https://github.com/openshift/console/pull/13657)
* [ODC-7539](https://issues.redhat.com/browse/ODC-7539): Update devfile library to v2.2.2 [#13045](https://github.com/openshift/console/pull/13045)
* [OCPBUGS-26415](https://issues.redhat.com/browse/OCPBUGS-26415): Application creation fail when manually entering input scaling value in local setup [#13487](https://github.com/openshift/console/pull/13487)
* [OCPBUGS-30551](https://issues.redhat.com/browse/OCPBUGS-30551): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13654](https://github.com/openshift/console/pull/13654)
* [OCPBUGS-29513](https://issues.redhat.com/browse/OCPBUGS-29513): Update the Pipeline List and Details Pages to acknowledge Custom Task [#13614](https://github.com/openshift/console/pull/13614)
* [OCPBUGS-29365](https://issues.redhat.com/browse/OCPBUGS-29365): Requesting for country codes in localization of openshift - webconsole [#13612](https://github.com/openshift/console/pull/13612)
* [OCPBUGS-25931](https://issues.redhat.com/browse/OCPBUGS-25931): fix for execute inline markdown syntax issue [#13580](https://github.com/openshift/console/pull/13580)
* [RHSTOR-4130](https://issues.redhat.com/browse/RHSTOR-4130): Cross storage class clone /restore [#13549](https://github.com/openshift/console/pull/13549)
* [OCPBUGS-27469](https://issues.redhat.com/browse/OCPBUGS-27469): "Deploy Image" with "Serverless Deployment", Scaling "Min Pods"/"Max Pods" should set "autoscaling.knative.dev/min-scale"/max-scale not minScale/maxScale [#13534](https://github.com/openshift/console/pull/13534)
* [OCPBUGS-30073](https://issues.redhat.com/browse/OCPBUGS-30073): Upload Jar form's Clear button is not functioning [#13644](https://github.com/openshift/console/pull/13644)
* [OCPBUGS-21800](https://issues.redhat.com/browse/OCPBUGS-21800): Dev console buildconfig got [the server does not allow this method on the requested resource] error when not setting metadate.namespace [#13544](https://github.com/openshift/console/pull/13544)
* [OCPBUGS-30046](https://issues.redhat.com/browse/OCPBUGS-30046): Missing dependency warning error in console UI dev env [#13640](https://github.com/openshift/console/pull/13640)
* [OCPBUGS-22894](https://issues.redhat.com/browse/OCPBUGS-22894): adjusting documentation links for 4.15 [#13634](https://github.com/openshift/console/pull/13634)
* [OCPBUGS-30077](https://issues.redhat.com/browse/OCPBUGS-30077): Add additional search filters in the toolbar [#13233](https://github.com/openshift/console/pull/13233)
* [ODC-7480](https://issues.redhat.com/browse/ODC-7480): Recently Searched Section in Search Resource Page Dropdown [#13389](https://github.com/openshift/console/pull/13389)
* [CONSOLE-3907](https://issues.redhat.com/browse/CONSOLE-3907): add actions extension point to Events [#13554](https://github.com/openshift/console/pull/13554)
* [OCPBUGS-22487](https://issues.redhat.com/browse/OCPBUGS-22487): Fix operands list endpoint. [#13632](https://github.com/openshift/console/pull/13632)
* [CONSOLE-3948](https://issues.redhat.com/browse/CONSOLE-3948): rename 'supported but not recommended' to 'known issues… [#13622](https://github.com/openshift/console/pull/13622)
* [OCPBUGS-29701](https://issues.redhat.com/browse/OCPBUGS-29701): Use selfsubjectreview API from frontend [#13605](https://github.com/openshift/console/pull/13605)
* [ODC-7478](https://issues.redhat.com/browse/ODC-7478): Gherkin and automation of "Install Red Hat Developer Hub with a Helm Chart" guided tour [#13511](https://github.com/openshift/console/pull/13511)
* [CONSOLE-3924](https://issues.redhat.com/browse/CONSOLE-3924): i18n upload/download routine task - version4.16/sprint247 [#13608](https://github.com/openshift/console/pull/13608)
* [CONSOLE-3776](https://issues.redhat.com/browse/CONSOLE-3776): Add GCP token auth to Infrastructure features filter section in OpertorHub [#13559](https://github.com/openshift/console/pull/13559)
* [OCPBUGS-29816](https://issues.redhat.com/browse/OCPBUGS-29816): Switch to service from external result route endpoint [#13624](https://github.com/openshift/console/pull/13624)
* [OCPBUGS-29757](https://issues.redhat.com/browse/OCPBUGS-29757): Use HTTP proxy configuration from environment variables in dev-console proxies, so that our backend proxies works fine on airgapped clusters [#13619](https://github.com/openshift/console/pull/13619)
* [OCPBUGS-28967](https://issues.redhat.com/browse/OCPBUGS-28967): 'Oh no somthing went wrong' shown on Image Manifest Vulnerability page after create IMV via CL [#13578](https://github.com/openshift/console/pull/13578)
* [CONSOLE-3921](https://issues.redhat.com/browse/CONSOLE-3921): Remove Disks/NICs page from Node details [#13552](https://github.com/openshift/console/pull/13552)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update dynamic plugins README [#13598](https://github.com/openshift/console/pull/13598)
* [OCPBUGS-29760](https://issues.redhat.com/browse/OCPBUGS-29760): Dev console: Observe &gt; Dashboard page should be called "Dashboards" (OU-260) [#13597](https://github.com/openshift/console/pull/13597)
* [CONSOLE-3774](https://issues.redhat.com/browse/CONSOLE-3774): Enable OperatorHub filter by TLSProfiles annotation [#13555](https://github.com/openshift/console/pull/13555)
* [ODC-7477](https://issues.redhat.com/browse/ODC-7477): automation of quick-start-access-code-snippet.feature [#13494](https://github.com/openshift/console/pull/13494)
* [OCPBUGS-29423](https://issues.redhat.com/browse/OCPBUGS-29423): update TableData doc to use PatternFly 5 classname [#13606](https://github.com/openshift/console/pull/13606)
* [OCPBUGS-29363](https://issues.redhat.com/browse/OCPBUGS-29363): TaskRuns list page is loading constantly for all projects [#13604](https://github.com/openshift/console/pull/13604)
* [OCPBUGS-29355](https://issues.redhat.com/browse/OCPBUGS-29355): Output image url link leads to 404 for Shipwright Builds [#13602](https://github.com/openshift/console/pull/13602)
* [OCPBUGS-29601](https://issues.redhat.com/browse/OCPBUGS-29601): Disabling pipeline tests to restore CI health [#13611](https://github.com/openshift/console/pull/13611)
* [ODC-7476](https://issues.redhat.com/browse/ODC-7476): automation for getting-started-serverless gherkin [#13476](https://github.com/openshift/console/pull/13476)
* [OCPBUGS-27473](https://issues.redhat.com/browse/OCPBUGS-27473): Error in displaying BuildRun logs in Console [#13583](https://github.com/openshift/console/pull/13583)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Update Console vs. dynamic plugin SDK package compat table [#13586](https://github.com/openshift/console/pull/13586)
* [OCPBUGS-9714](https://issues.redhat.com/browse/OCPBUGS-9714): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13411](https://github.com/openshift/console/pull/13411)
* [OCPBUGS-28718](https://issues.redhat.com/browse/OCPBUGS-28718): Revision tab and routes tab in serving details page showing no resource found [#13556](https://github.com/openshift/console/pull/13556)
* [OCPBUGS-26566](https://issues.redhat.com/browse/OCPBUGS-26566): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13504](https://github.com/openshift/console/pull/13504)
* [OCPBUGS-28383](https://issues.redhat.com/browse/OCPBUGS-28383): Activity card event has expanded content that is not correctly left aligned with the rest of the card content [#13547](https://github.com/openshift/console/pull/13547)
* [OCPBUGS-27247](https://issues.redhat.com/browse/OCPBUGS-27247): improve empty state message for Machines and MachineSets page [#13577](https://github.com/openshift/console/pull/13577)
* [OCPBUGS-25942](https://issues.redhat.com/browse/OCPBUGS-25942): make sure folder is encapsulated with quotas [#13477](https://github.com/openshift/console/pull/13477)
* [OCPBUGS-27246](https://issues.redhat.com/browse/OCPBUGS-27246): Unhealthy conditions table should put Type as first column on MachineHealthCheck details page [#13576](https://github.com/openshift/console/pull/13576)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name to "network-xxx-xxx" when creating [#13568](https://github.com/openshift/console/pull/13568)
* [ODC-7490](https://issues.redhat.com/browse/ODC-7490): Add TaskRun tab in PLR details page using plugin [#13527](https://github.com/openshift/console/pull/13527)
* [OCPBUGS-28856](https://issues.redhat.com/browse/OCPBUGS-28856): make getGroupVersionKindForResource null safe [#13574](https://github.com/openshift/console/pull/13574)
* [OCPBUGS-27908](https://issues.redhat.com/browse/OCPBUGS-27908): fix i18n for Remove volume modal [#13550](https://github.com/openshift/console/pull/13550)
* [CONSOLE-3377](https://issues.redhat.com/browse/CONSOLE-3377): Add Cypress integration tests for ConsoleYAMLSample CRDs [#13567](https://github.com/openshift/console/pull/13567)
* [OCPBUGS-28836](https://issues.redhat.com/browse/OCPBUGS-28836): AUTH-440: fix usersettings identifier creation [#13557](https://github.com/openshift/console/pull/13557)
* [OCPBUGS-27310](https://issues.redhat.com/browse/OCPBUGS-27310): Source column header not displayed in PVC &gt; VolumeSnapshots tab [#13565](https://github.com/openshift/console/pull/13565)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Optimize module federation of PatternFly packages [#13521](https://github.com/openshift/console/pull/13521)
* [CONSOLE-3909](https://issues.redhat.com/browse/CONSOLE-3909): i18n upload/download routine task - chore(i18n): update translations [#13519](https://github.com/openshift/console/pull/13519)
* [CONSOLE-3818](https://issues.redhat.com/browse/CONSOLE-3818): Remove Chrome from the console builder image [#13539](https://github.com/openshift/console/pull/13539)
* [OCPBUGS-28216](https://issues.redhat.com/browse/OCPBUGS-28216): Adjust width and spacing so that warning icons are not clipped. [#13546](https://github.com/openshift/console/pull/13546)
* [OCPBUGS-26236](https://issues.redhat.com/browse/OCPBUGS-26236): VolumeSnapshots data not displayed in PVC &gt;  VolumeSnapshots tab [#13485](https://github.com/openshift/console/pull/13485)
* [OCPBUGS-25936](https://issues.redhat.com/browse/OCPBUGS-25936): fix copy-execute-demo.yaml inline syntax [#13471](https://github.com/openshift/console/pull/13471)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13513](https://github.com/openshift/console/pull/13513)
* [OCPBUGS-25843](https://issues.redhat.com/browse/OCPBUGS-25843): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13483](https://github.com/openshift/console/pull/13483)
* [OCPBUGS-25881](https://issues.redhat.com/browse/OCPBUGS-25881): remove "openshift-storage" namespace usage from the console [#13418](https://github.com/openshift/console/pull/13418)
* [OCPBUGS-27455](https://issues.redhat.com/browse/OCPBUGS-27455): do not deduplicate ImageManifestVulns in Overview popover [#13529](https://github.com/openshift/console/pull/13529)
* [OCPBUGS-27016](https://issues.redhat.com/browse/OCPBUGS-27016): fix resizeObserver limit exceed for dev-console [#13502](https://github.com/openshift/console/pull/13502)
* [OCPBUGS-27152](https://issues.redhat.com/browse/OCPBUGS-27152): Fix popover jump in Tables [#13524](https://github.com/openshift/console/pull/13524)
* [OCPBUGS-25788](https://issues.redhat.com/browse/OCPBUGS-25788): Add Node Maintenance menu actions to Node list/details [#13506](https://github.com/openshift/console/pull/13506)
* [OCPBUGS-27779](https://issues.redhat.com/browse/OCPBUGS-27779): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13532](https://github.com/openshift/console/pull/13532)
* [CONSOLE-3430](https://issues.redhat.com/browse/CONSOLE-3430): add Cluster Settings &gt; Details integration tests [#13515](https://github.com/openshift/console/pull/13515)
* [ODC-7482](https://issues.redhat.com/browse/ODC-7482): Add flags checks to hide Pipeline static plugin List and details pages [#13512](https://github.com/openshift/console/pull/13512)
* [OCPBUGS-27498](https://issues.redhat.com/browse/OCPBUGS-27498): Update get method so it can display zero value when set [#13533](https://github.com/openshift/console/pull/13533)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): Addition of optional chaining to prevent yaml crash [#13510](https://github.com/openshift/console/pull/13510)
* [OCPBUGS-27399](https://issues.redhat.com/browse/OCPBUGS-27399): Filter out Client CSRs for nodes which already exist [#13522](https://github.com/openshift/console/pull/13522)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-16814](https://issues.redhat.com/browse/OCPBUGS-16814): backend: use the k8s SelfSubjectReview API to get info about a user [#13321](https://github.com/openshift/console/pull/13321)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13276](https://github.com/openshift/console/pull/13276)
* [OCPBUGS-26772](https://issues.redhat.com/browse/OCPBUGS-26772): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13503](https://github.com/openshift/console/pull/13503)
* [OCPBUGS-26039](https://issues.redhat.com/browse/OCPBUGS-26039): Make editor sidebar width consistent [#13495](https://github.com/openshift/console/pull/13495)
* [OCPBUGS-10851](https://issues.redhat.com/browse/OCPBUGS-10851): Add source maps to production builds [#13497](https://github.com/openshift/console/pull/13497)
* [OCPBUGS-25890](https://issues.redhat.com/browse/OCPBUGS-25890): Prevent complete page reload when changing perspective [#13500](https://github.com/openshift/console/pull/13500)
* [OCPBUGS-14481](https://issues.redhat.com/browse/OCPBUGS-14481): update check for the 'provider' label on the PackageMa… [#13491](https://github.com/openshift/console/pull/13491)
* [OCPBUGS-26554](https://issues.redhat.com/browse/OCPBUGS-26554): Fixed some problems in topology Chinese translation text [#13458](https://github.com/openshift/console/pull/13458)
* [OCPBUGS-18699](https://issues.redhat.com/browse/OCPBUGS-18699): add additional check to determine if file is binary [#13496](https://github.com/openshift/console/pull/13496)
* [ODC-7465](https://issues.redhat.com/browse/ODC-7465): Update Getting started section in Openshift UI to use expandable section [#13466](https://github.com/openshift/console/pull/13466)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13441](https://github.com/openshift/console/pull/13441)
* [OCPBUGS-25722](https://issues.redhat.com/browse/OCPBUGS-25722): Add support for custom segment domains (to load JS and make API calls) [#13459](https://github.com/openshift/console/pull/13459)
* [OCPBUGS-26049](https://issues.redhat.com/browse/OCPBUGS-26049): Tab VolumeSnapshots crashed on PVC page [#13481](https://github.com/openshift/console/pull/13481)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): add integration test to check that Update cluster moda… [#13480](https://github.com/openshift/console/pull/13480)
* [OCPBUGS-25898](https://issues.redhat.com/browse/OCPBUGS-25898): Fix PipelineRun Logs tab navigation [#13470](https://github.com/openshift/console/pull/13470)
* [OCPBUGS-25840](https://issues.redhat.com/browse/OCPBUGS-25840): make Azure warning title consistent [#13472](https://github.com/openshift/console/pull/13472)
* [OCPBUGS-25771](https://issues.redhat.com/browse/OCPBUGS-25771): Enable catalog source badge to truncate for long names [#13474](https://github.com/openshift/console/pull/13474)
* [OCPBUGS-25780](https://issues.redhat.com/browse/OCPBUGS-25780): fix bug where Update cluster modal will not open [#13473](https://github.com/openshift/console/pull/13473)
* [OCPBUGS-25934](https://issues.redhat.com/browse/OCPBUGS-25934): clean up icon color and sizes [#13460](https://github.com/openshift/console/pull/13460)
* [OCPBUGS-25927](https://issues.redhat.com/browse/OCPBUGS-25927): Fix config ini format [#13210](https://github.com/openshift/console/pull/13210)
* [OCPBUGS-25612](https://issues.redhat.com/browse/OCPBUGS-25612): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13455](https://github.com/openshift/console/pull/13455)
* [OCPBUGS-24592](https://issues.redhat.com/browse/OCPBUGS-24592): Fix CI tests in helm and devconsole packages [#13464](https://github.com/openshift/console/pull/13464)
* [OCPBUGS-25206](https://issues.redhat.com/browse/OCPBUGS-25206): Re-enable and fix pipelines e2e tests [#13438](https://github.com/openshift/console/pull/13438)
* [OCPBUGS-18844](https://issues.redhat.com/browse/OCPBUGS-18844): Replace the old sr-only class to the patternfly pf-v5-u-screen-reader class [#13453](https://github.com/openshift/console/pull/13453)
* [HELM-522](https://issues.redhat.com/browse/HELM-522): bump helm version to 3.13.2 for OCP 4.15 [#13410](https://github.com/openshift/console/pull/13410)
* [OCPBUGS-25441](https://issues.redhat.com/browse/OCPBUGS-25441): fix Observe tab in Topology overview [#13451](https://github.com/openshift/console/pull/13451)
* [OCPBUGS-25530](https://issues.redhat.com/browse/OCPBUGS-25530): fix bug where filter at mobile could be empty on Searc… [#13456](https://github.com/openshift/console/pull/13456)
* [OCPBUGS-25396](https://issues.redhat.com/browse/OCPBUGS-25396): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13450](https://github.com/openshift/console/pull/13450)
* [CONSOLE-3874](https://issues.redhat.com/browse/CONSOLE-3874): Refactor EventStream [#13431](https://github.com/openshift/console/pull/13431)
* [OCPBUGS-23299](https://issues.redhat.com/browse/OCPBUGS-23299): Replace checkbox with PF checkbox component to correct alignment [#13397](https://github.com/openshift/console/pull/13397)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13445](https://github.com/openshift/console/pull/13445)
* [OCPBUGS-24711](https://issues.redhat.com/browse/OCPBUGS-24711): fix preferredTab selection on Pipelines page [#13430](https://github.com/openshift/console/pull/13430)
* [OCPBUGS-24715](https://issues.redhat.com/browse/OCPBUGS-24715), [OCPBUGS-25018](https://issues.redhat.com/browse/OCPBUGS-25018): Fix pipelineRuns loading on repository details page [#13432](https://github.com/openshift/console/pull/13432)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13434](https://github.com/openshift/console/pull/13434)
* [OCPBUGS-24408](https://issues.redhat.com/browse/OCPBUGS-24408): fix runtime error on Node details Overview when Machin… [#13422](https://github.com/openshift/console/pull/13422)
* [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Prevent text overlap with popover close button on Create NetworkPolicy form [#13429](https://github.com/openshift/console/pull/13429)
* [CONSOLE-3853](https://issues.redhat.com/browse/CONSOLE-3853): Prevent PatternFly styles from being included in plugin compilation [#13388](https://github.com/openshift/console/pull/13388)
* [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): Add missing https:// check for an external link [#13421](https://github.com/openshift/console/pull/13421)
* chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13403](https://github.com/openshift/console/pull/13403)
* [OCPBUGS-5113](https://issues.redhat.com/browse/OCPBUGS-5113): Date&Time values are not showing as per browser default language [#12506](https://github.com/openshift/console/pull/12506)
* [OCPBUGS-23925](https://issues.redhat.com/browse/OCPBUGS-23925): Only show VPAs that are associated with the selected namespace [#13417](https://github.com/openshift/console/pull/13417)
* [OCPBUGS-24186](https://issues.redhat.com/browse/OCPBUGS-24186): Strip 'Server' header from proxy response [#13404](https://github.com/openshift/console/pull/13404)
* Console-3733: Add support for Azure Workload Identity / Federated Identity based installs in OperatorHub [#13082](https://github.com/openshift/console/pull/13082)
* [Full changelog](https://github.com/openshift/console/compare/8a4b6840da5377346225d520b113d169615f2a38...6c050bebfd222e4d97ef15b9148258936261d0c9)


### [console-operator](https://github.com/openshift/console-operator/tree/dac8cc800dc7cb7d8925da0b8a47b7f3e2b69b1f)

* [TRT-1623](https://issues.redhat.com/browse/TRT-1623): Revert "Merge pull request #889 from jhadvig/CONSOLE-4014" [#892](https://github.com/openshift/console-operator/pull/892)
* [CONSOLE-4014](https://issues.redhat.com/browse/CONSOLE-4014): Pass OCM organization ID and OCP cluster ID to console-config.yaml [#889](https://github.com/openshift/console-operator/pull/889)
* [OCPBUGS-20129](https://issues.redhat.com/browse/OCPBUGS-20129): Fix triggering `upgradenotification` in the cluster installation time [#790](https://github.com/openshift/console-operator/pull/790)
* [OCPBUGS-20466](https://issues.redhat.com/browse/OCPBUGS-20466): Tighten console operator permissions for cluster operators [#873](https://github.com/openshift/console-operator/pull/873)
* [OCPBUGS-32400](https://issues.redhat.com/browse/OCPBUGS-32400): base OIDC status updates on the ExternalOIDC feature gate [#887](https://github.com/openshift/console-operator/pull/887)
* [OCPBUGS-29547](https://issues.redhat.com/browse/OCPBUGS-29547): Apply hypershift cluster-profile for ibm-cloud-managed [#868](https://github.com/openshift/console-operator/pull/868)
* [OCPBUGS-30458](https://issues.redhat.com/browse/OCPBUGS-30458): Bump k8s.io/component-base to latest [#884](https://github.com/openshift/console-operator/pull/884)
* [CONSOLE-3944](https://issues.redhat.com/browse/CONSOLE-3944), [OCPBUGS-31020](https://issues.redhat.com/browse/OCPBUGS-31020): Disable segment analytics when cluster telemetry is disabled [#877](https://github.com/openshift/console-operator/pull/877)
* [CONSOLE-3910](https://issues.redhat.com/browse/CONSOLE-3910): Add quickstart to impersonate a system:admin user [#865](https://github.com/openshift/console-operator/pull/865)
* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: synchronize the CM with a CA to trust the issuer, if configured [#879](https://github.com/openshift/console-operator/pull/879)
* [OCPBUGS-29331](https://issues.redhat.com/browse/OCPBUGS-29331): Update RHDH QuickStarts and add CR examples [#878](https://github.com/openshift/console-operator/pull/878)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 [#827](https://github.com/openshift/console-operator/pull/827)
* [OCPBUGS-28541](https://issues.redhat.com/browse/OCPBUGS-28541): Remove Janus IDP and update RHDH quickstarts [#862](https://github.com/openshift/console-operator/pull/862)
* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): Add startupProbe to console container. [#869](https://github.com/openshift/console-operator/pull/869)
* [OCPBUGS-29532](https://issues.redhat.com/browse/OCPBUGS-29532): ouathclients: further split oidc and integrated oauth handling [#861](https://github.com/openshift/console-operator/pull/861)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): always sync oidcClients in authn status if the field is present [#857](https://github.com/openshift/console-operator/pull/857)
* [OCPBUGS-28982](https://issues.redhat.com/browse/OCPBUGS-28982): oauthclients: fix oauthclients degraded condition that never gets removed [#855](https://github.com/openshift/console-operator/pull/855)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#847](https://github.com/openshift/console-operator/pull/847)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#849](https://github.com/openshift/console-operator/pull/849)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#841](https://github.com/openshift/console-operator/pull/841)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Merge auth cert configmap deployment annotations into one [#842](https://github.com/openshift/console-operator/pull/842)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): make it impossible double set conditions in a single loop [#848](https://github.com/openshift/console-operator/pull/848)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#839](https://github.com/openshift/console-operator/pull/839)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): The console-deployment should set the number of replicas based on the ControlPlaneTopology [#838](https://github.com/openshift/console-operator/pull/838)
* NO-JIRA:(chore) remove unused loglevel [#830](https://github.com/openshift/console-operator/pull/830)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): Bump library-go to deal with GET conflict [#836](https://github.com/openshift/console-operator/pull/836)
* [OCPBUGS-24041](https://issues.redhat.com/browse/OCPBUGS-24041): Prevent healthcheck controller from Available=False blipping [#834](https://github.com/openshift/console-operator/pull/834)
* [OCPBUGS-7656](https://issues.redhat.com/browse/OCPBUGS-7656): Remove service ca controller annotation from console-redirect service. [#826](https://github.com/openshift/console-operator/pull/826)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Revert #831 and fix cluster proxy annotation on console conversion webhook deployment [#833](https://github.com/openshift/console-operator/pull/833)
* Revert #822 "OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher" [#831](https://github.com/openshift/console-operator/pull/831)
* [OCPBUGS-15827](https://issues.redhat.com/browse/OCPBUGS-15827): Update console conversion webhook server to use sig.k8s.io certwatcher [#822](https://github.com/openshift/console-operator/pull/822)
* [OCPBUGS-25618](https://issues.redhat.com/browse/OCPBUGS-25618): Bump documentationBaseURL to 4.16 [#824](https://github.com/openshift/console-operator/pull/824)
* [OCPBUGS-24913](https://issues.redhat.com/browse/OCPBUGS-24913): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#823](https://github.com/openshift/console-operator/pull/823)
* [Full changelog](https://github.com/openshift/console-operator/compare/e9ec54b60ce943bace46ef7493452e2be3c39983...dac8cc800dc7cb7d8925da0b8a47b7f3e2b69b1f)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/f503997690a236f322ae062ab2ebcf720b0457bf)

* [OCPBUGS-32212](https://issues.redhat.com/browse/OCPBUGS-32212): modify to invoke SAST test [#159](https://github.com/openshift/containernetworking-plugins/pull/159)
* [OCPBUGS-28559](https://issues.redhat.com/browse/OCPBUGS-28559): Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 [#150](https://github.com/openshift/containernetworking-plugins/pull/150)
* [USHIFT-2219](https://issues.redhat.com/browse/USHIFT-2219): Dockerfile for MicroShift [#153](https://github.com/openshift/containernetworking-plugins/pull/153)
* [OCPBUGS-29888](https://issues.redhat.com/browse/OCPBUGS-29888): cherry-pick containernetworking/plugins#997 [#154](https://github.com/openshift/containernetworking-plugins/pull/154)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#146](https://github.com/openshift/containernetworking-plugins/pull/146)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#145](https://github.com/openshift/containernetworking-plugins/pull/145)
* [OCPBUGS-24810](https://issues.redhat.com/browse/OCPBUGS-24810): Updating ose-containernetworking-plugins-container image to be consistent with ART [#142](https://github.com/openshift/containernetworking-plugins/pull/142)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7...f503997690a236f322ae062ab2ebcf720b0457bf)


### [coredns](https://github.com/openshift/coredns/tree/f937ebfb6b8a31fc194597a1ade0e93e73e474b5)

* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: &lt;carry&gt;: openshift: Add ocp_dnsnameresolver external plugin [#115](https://github.com/openshift/coredns/pull/115)
* [OCPBUGS-27928](https://issues.redhat.com/browse/OCPBUGS-27928): Updating coredns-container image to be consistent with ART for 4.16 [#111](https://github.com/openshift/coredns/pull/111)
* [OCPBUGS-27397](https://issues.redhat.com/browse/OCPBUGS-27397): UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 [#109](https://github.com/openshift/coredns/pull/109)
* [OCPBUGS-24957](https://issues.redhat.com/browse/OCPBUGS-24957): Updating coredns-container image to be consistent with ART [#107](https://github.com/openshift/coredns/pull/107)
* [OCPBUGS-15755](https://issues.redhat.com/browse/OCPBUGS-15755): UPSTREAM: &lt;carry&gt;: openshift: Fix OCPBUGS-15755 [#105](https://github.com/openshift/coredns/pull/105)
* [Full changelog](https://github.com/openshift/coredns/compare/22f950eae53fcba187c2303ac4f1a8305b6c1c8a...f937ebfb6b8a31fc194597a1ade0e93e73e474b5)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5340eaab09d8057a705b7a7124e05231cfd37978)

* [OCPBUGS-13680](https://issues.redhat.com/browse/OCPBUGS-13680): Allow changing cluster-name on existing deployments [#276](https://github.com/openshift/cloud-provider-openstack/pull/276)
* [OCPBUGS-29605](https://issues.redhat.com/browse/OCPBUGS-29605): Remove enforcement of IPv6 LB as internal [#275](https://github.com/openshift/cloud-provider-openstack/pull/275)
* NO-JIRA: More snyk ignores [#265](https://github.com/openshift/cloud-provider-openstack/pull/265)
* don't use static version in sed replacement rules [#2510](https://github.com/openshift/cloud-provider-openstack/pull/2510)
* bump k8s e2e test to 1.29 [#2509](https://github.com/openshift/cloud-provider-openstack/pull/2509)
* update docs in order to reflect the current state of the ovn lb-provider support [#2489](https://github.com/openshift/cloud-provider-openstack/pull/2489)
* update CSI version [#2478](https://github.com/openshift/cloud-provider-openstack/pull/2478)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1bec5942cd0651a3c2f7114368591f334952ceda...5340eaab09d8057a705b7a7124e05231cfd37978)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/csi-driver-manila-operator/pull/229)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#226](https://github.com/openshift/csi-driver-manila-operator/pull/226)
* [OCPBUGS-28934](https://issues.redhat.com/browse/OCPBUGS-28934): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 [#227](https://github.com/openshift/csi-driver-manila-operator/pull/227)
* NO-ISSUE: Remove local manifests [#208](https://github.com/openshift/csi-driver-manila-operator/pull/208)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#225](https://github.com/openshift/csi-driver-manila-operator/pull/225)
* [OCPBUGS-23809](https://issues.redhat.com/browse/OCPBUGS-23809): Bump opentelemetry libs [#220](https://github.com/openshift/csi-driver-manila-operator/pull/220)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#223](https://github.com/openshift/csi-driver-manila-operator/pull/223)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#218](https://github.com/openshift/csi-driver-manila-operator/pull/218)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#217](https://github.com/openshift/csi-driver-manila-operator/pull/217)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#214](https://github.com/openshift/csi-driver-manila-operator/pull/214)
* [OCPBUGS-24824](https://issues.redhat.com/browse/OCPBUGS-24824): Updating csi-driver-manila-operator-container image to be consistent with ART [#213](https://github.com/openshift/csi-driver-manila-operator/pull/213)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7...6de0dc79d67fdf817ac0bed7a6d7b1d1131a5751)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/406cec72a10684a7545a976a8c31e60712bcc5b2)

* [OCPBUGS-30439](https://issues.redhat.com/browse/OCPBUGS-30439): Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#139](https://github.com/openshift/csi-driver-nfs/pull/139)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#138](https://github.com/openshift/csi-driver-nfs/pull/138)
* NO-JIRA: Add snyk configuration file [#137](https://github.com/openshift/csi-driver-nfs/pull/137)
* [OCPBUGS-24952](https://issues.redhat.com/browse/OCPBUGS-24952): Updating csi-driver-nfs-container image to be consistent with ART [#136](https://github.com/openshift/csi-driver-nfs/pull/136)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/d032dc1050b58a965e6bb9f923baef6d3c95538e...406cec72a10684a7545a976a8c31e60712bcc5b2)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/cf116d908e98b71bfafc31042e17a93e8f3de6b1)

* [OCPBUGS-30501](https://issues.redhat.com/browse/OCPBUGS-30501): bump google.golang.org/grpc to 1.63.0 [#172](https://github.com/openshift/csi-driver-shared-resource/pull/172)
* [OCPBUGS-29871](https://issues.redhat.com/browse/OCPBUGS-29871): Apply hypershift cluster-profile for ibm-cloud-managed [#171](https://github.com/openshift/csi-driver-shared-resource/pull/171)
* [OCPBUGS-28663](https://issues.redhat.com/browse/OCPBUGS-28663): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#165](https://github.com/openshift/csi-driver-shared-resource/pull/165)
* [OCPBUGS-27860](https://issues.redhat.com/browse/OCPBUGS-27860), [OCPBUGS-28261](https://issues.redhat.com/browse/OCPBUGS-28261): address SAST/SNYK findings [#164](https://github.com/openshift/csi-driver-shared-resource/pull/164)
* [OCPBUGS-26081](https://issues.redhat.com/browse/OCPBUGS-26081), [OCPBUGS-26114](https://issues.redhat.com/browse/OCPBUGS-26114), [OCPBUGS-26145](https://issues.redhat.com/browse/OCPBUGS-26145): add snyk config file for SAST scan [#161](https://github.com/openshift/csi-driver-shared-resource/pull/161)
* [OCPBUGS-24984](https://issues.redhat.com/browse/OCPBUGS-24984): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#159](https://github.com/openshift/csi-driver-shared-resource/pull/159)
* [OCPBUGS-25035](https://issues.redhat.com/browse/OCPBUGS-25035): Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART [#160](https://github.com/openshift/csi-driver-shared-resource/pull/160)
* [OCPBUGS-24903](https://issues.redhat.com/browse/OCPBUGS-24903): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#158](https://github.com/openshift/csi-driver-shared-resource/pull/158)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/260a085ae25606bba7a94cdfed88f67265905ba9...cf116d908e98b71bfafc31042e17a93e8f3de6b1)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#107](https://github.com/openshift/csi-driver-shared-resource-operator/pull/107)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#100](https://github.com/openshift/csi-driver-shared-resource-operator/pull/100)
* [OCPBUGS-28941](https://issues.redhat.com/browse/OCPBUGS-28941): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/csi-driver-shared-resource-operator/pull/101)
* [OCPBUGS-28664](https://issues.redhat.com/browse/OCPBUGS-28664): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#99](https://github.com/openshift/csi-driver-shared-resource-operator/pull/99)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#98](https://github.com/openshift/csi-driver-shared-resource-operator/pull/98)
* [OCPBUGS-26087](https://issues.redhat.com/browse/OCPBUGS-26087): add snyk config file for SAST scan [#95](https://github.com/openshift/csi-driver-shared-resource-operator/pull/95)
* [OCPBUGS-24855](https://issues.redhat.com/browse/OCPBUGS-24855): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART [#94](https://github.com/openshift/csi-driver-shared-resource-operator/pull/94)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/8d017b7f19f0226dfd4fc7933271939c550d180f...1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/7da80aab15cabd182ee35742443c0b836de4e180)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-attacher` to v4.5.1 for OCP 4.16 [#72](https://github.com/openshift/csi-external-attacher/pull/72)
* [OCPBUGS-30437](https://issues.redhat.com/browse/OCPBUGS-30437): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#71](https://github.com/openshift/csi-external-attacher/pull/71)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#70](https://github.com/openshift/csi-external-attacher/pull/70)
* [OCPBUGS-25576](https://issues.redhat.com/browse/OCPBUGS-25576): Updating csi-attacher-container image to be consistent with ART [#69](https://github.com/openshift/csi-external-attacher/pull/69)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#68](https://github.com/openshift/csi-external-attacher/pull/68)
* [OCPBUGS-25053](https://issues.redhat.com/browse/OCPBUGS-25053): Updating csi-attacher-container image to be consistent with ART [#67](https://github.com/openshift/csi-external-attacher/pull/67)
* [OCPBUGS-24966](https://issues.redhat.com/browse/OCPBUGS-24966): Updating csi-attacher-container image to be consistent with ART [#66](https://github.com/openshift/csi-external-attacher/pull/66)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/f806f266600fbc0db4d072e4d041fc80e28deee7...7da80aab15cabd182ee35742443c0b836de4e180)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/9e8af011e0a0aea96066821b57c42bdaccf24a42)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-provisioner` to v4.0.1 for OCP 4.16 [#95](https://github.com/openshift/csi-external-provisioner/pull/95)
* [OCPBUGS-30442](https://issues.redhat.com/browse/OCPBUGS-30442): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#94](https://github.com/openshift/csi-external-provisioner/pull/94)
* [OCPBUGS-29971](https://issues.redhat.com/browse/OCPBUGS-29971): Updating csi-provisioner-container image to be consistent with ART for 4.16 [#93](https://github.com/openshift/csi-external-provisioner/pull/93)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#88](https://github.com/openshift/csi-external-provisioner/pull/88)
* [OCPBUGS-25492](https://issues.redhat.com/browse/OCPBUGS-25492): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#85](https://github.com/openshift/csi-external-provisioner/pull/85)
* [OCPBUGS-25532](https://issues.redhat.com/browse/OCPBUGS-25532): Updating csi-provisioner-container image to be consistent with ART [#84](https://github.com/openshift/csi-external-provisioner/pull/84)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#83](https://github.com/openshift/csi-external-provisioner/pull/83)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-23812](https://issues.redhat.com/browse/OCPBUGS-23812): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#81](https://github.com/openshift/csi-external-provisioner/pull/81)
* [OCPBUGS-25082](https://issues.redhat.com/browse/OCPBUGS-25082): Updating csi-provisioner-container image to be consistent with ART [#80](https://github.com/openshift/csi-external-provisioner/pull/80)
* [OCPBUGS-24804](https://issues.redhat.com/browse/OCPBUGS-24804): Updating csi-provisioner-container image to be consistent with ART [#79](https://github.com/openshift/csi-external-provisioner/pull/79)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/ce5a1a33fadf10bba0c90510c09dfc879dcfec87...9e8af011e0a0aea96066821b57c42bdaccf24a42)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/bdf5bfb4da07be6a85ae5253218f29fb8af51adf)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-resizer` to v1.10.0 for OCP 4.16 [#160](https://github.com/openshift/csi-external-resizer/pull/160)
* [OCPBUGS-30502](https://issues.redhat.com/browse/OCPBUGS-30502): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#159](https://github.com/openshift/csi-external-resizer/pull/159)
* [OCPBUGS-29984](https://issues.redhat.com/browse/OCPBUGS-29984): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 [#158](https://github.com/openshift/csi-external-resizer/pull/158)
* [OCPBUGS-25540](https://issues.redhat.com/browse/OCPBUGS-25540): Updating ose-csi-external-resizer-container image to be consistent with ART [#154](https://github.com/openshift/csi-external-resizer/pull/154)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#153](https://github.com/openshift/csi-external-resizer/pull/153)
* [OCPBUGS-24846](https://issues.redhat.com/browse/OCPBUGS-24846): Updating ose-csi-external-resizer-container image to be consistent with ART [#152](https://github.com/openshift/csi-external-resizer/pull/152)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/3b4236d382e4593ca41ecc6f394775be467b1a0d...bdf5bfb4da07be6a85ae5253218f29fb8af51adf)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/5315d37a1e5415e8b6870f23e50238681979cc28)

* [OCPBUGS-31746](https://issues.redhat.com/browse/OCPBUGS-31746): Backport volumegroupsnapshot fixes to OCP 4.16 [#148](https://github.com/openshift/csi-external-snapshotter/pull/148)
* [OCPBUGS-31439](https://issues.redhat.com/browse/OCPBUGS-31439): Backport volumegroupsnapshot fixes to OCP 4.16 [#146](https://github.com/openshift/csi-external-snapshotter/pull/146)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase external-snapshotter to v7.0.1 for OCP 4.16 [#145](https://github.com/openshift/csi-external-snapshotter/pull/145)
* [OCPBUGS-30503](https://issues.redhat.com/browse/OCPBUGS-30503): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#144](https://github.com/openshift/csi-external-snapshotter/pull/144)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Rebase `external-snapshotter` to v7.0.0 to get VolumeGroupSnapshot [#139](https://github.com/openshift/csi-external-snapshotter/pull/139)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#137](https://github.com/openshift/csi-external-snapshotter/pull/137)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#133](https://github.com/openshift/csi-external-snapshotter/pull/133)
* [OCPBUGS-25548](https://issues.redhat.com/browse/OCPBUGS-25548): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#135](https://github.com/openshift/csi-external-snapshotter/pull/135)
* [OCPBUGS-25575](https://issues.redhat.com/browse/OCPBUGS-25575): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#136](https://github.com/openshift/csi-external-snapshotter/pull/136)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#132](https://github.com/openshift/csi-external-snapshotter/pull/132)
* [OCPBUGS-25052](https://issues.redhat.com/browse/OCPBUGS-25052): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#131](https://github.com/openshift/csi-external-snapshotter/pull/131)
* [OCPBUGS-25124](https://issues.redhat.com/browse/OCPBUGS-25124): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#130](https://github.com/openshift/csi-external-snapshotter/pull/130)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#129](https://github.com/openshift/csi-external-snapshotter/pull/129)
* [OCPBUGS-24964](https://issues.redhat.com/browse/OCPBUGS-24964): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#128](https://github.com/openshift/csi-external-snapshotter/pull/128)
* [OCPBUGS-24866](https://issues.redhat.com/browse/OCPBUGS-24866): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#127](https://github.com/openshift/csi-external-snapshotter/pull/127)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13...5315d37a1e5415e8b6870f23e50238681979cc28)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/f5e3ff5532d58af34b5b407be2cac6934c1ff223)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `livenessprobe` to v2.12.0 for OCP 4.16 [#64](https://github.com/openshift/csi-livenessprobe/pull/64)
* [OCPBUGS-30440](https://issues.redhat.com/browse/OCPBUGS-30440): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#63](https://github.com/openshift/csi-livenessprobe/pull/63)
* [OCPBUGS-29972](https://issues.redhat.com/browse/OCPBUGS-29972): Updating csi-livenessprobe-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/csi-livenessprobe/pull/62)
* [OCPBUGS-25534](https://issues.redhat.com/browse/OCPBUGS-25534): Updating csi-livenessprobe-container image to be consistent with ART [#58](https://github.com/openshift/csi-livenessprobe/pull/58)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#57](https://github.com/openshift/csi-livenessprobe/pull/57)
* [OCPBUGS-25093](https://issues.redhat.com/browse/OCPBUGS-25093): Updating csi-livenessprobe-container image to be consistent with ART [#56](https://github.com/openshift/csi-livenessprobe/pull/56)
* [OCPBUGS-24815](https://issues.redhat.com/browse/OCPBUGS-24815): Updating csi-livenessprobe-container image to be consistent with ART [#55](https://github.com/openshift/csi-livenessprobe/pull/55)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3...f5e3ff5532d58af34b5b407be2cac6934c1ff223)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/8930c368500a5d1f15c3e1a5906397e206879de0)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `node-driver-registrar` to v2.10.0 for OCP 4.16 [#70](https://github.com/openshift/csi-node-driver-registrar/pull/70)
* [OCPBUGS-30441](https://issues.redhat.com/browse/OCPBUGS-30441): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#69](https://github.com/openshift/csi-node-driver-registrar/pull/69)
* [OCPBUGS-29987](https://issues.redhat.com/browse/OCPBUGS-29987): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 [#68](https://github.com/openshift/csi-node-driver-registrar/pull/68)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#64](https://github.com/openshift/csi-node-driver-registrar/pull/64)
* [OCPBUGS-25544](https://issues.redhat.com/browse/OCPBUGS-25544): Updating csi-node-driver-registrar-container image to be consistent with ART [#62](https://github.com/openshift/csi-node-driver-registrar/pull/62)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#61](https://github.com/openshift/csi-node-driver-registrar/pull/61)
* [OCPBUGS-25117](https://issues.redhat.com/browse/OCPBUGS-25117): Updating csi-node-driver-registrar-container image to be consistent with ART [#59](https://github.com/openshift/csi-node-driver-registrar/pull/59)
* [OCPBUGS-23811](https://issues.redhat.com/browse/OCPBUGS-23811): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#58](https://github.com/openshift/csi-node-driver-registrar/pull/58)
* [OCPBUGS-24856](https://issues.redhat.com/browse/OCPBUGS-24856): Updating csi-node-driver-registrar-container image to be consistent with ART [#57](https://github.com/openshift/csi-node-driver-registrar/pull/57)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9005584ee45c4d3158e383870aafa5d78a03b141...8930c368500a5d1f15c3e1a5906397e206879de0)


### [docker-builder](https://github.com/openshift/builder/tree/ca2b36ac7f38efc76bedc87cc81f9464f52bf332)

* [OCPBUGS-30672](https://issues.redhat.com/browse/OCPBUGS-30672): bump go-jose to fix CVE-2024-28176 [#386](https://github.com/openshift/builder/pull/386)
* [OCPBUGS-31930](https://issues.redhat.com/browse/OCPBUGS-31930): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#385](https://github.com/openshift/builder/pull/385)
* [OCPBUGS-24746](https://issues.redhat.com/browse/OCPBUGS-24746): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#382](https://github.com/openshift/builder/pull/382)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#380](https://github.com/openshift/builder/pull/380)
* [OCPBUGS-28661](https://issues.redhat.com/browse/OCPBUGS-28661): Replace 'coreydaley' with 'sayan-biswas' [#377](https://github.com/openshift/builder/pull/377)
* [Full changelog](https://github.com/openshift/builder/compare/67918658ae7d34e4f9472acba5150bfb3726f70d...ca2b36ac7f38efc76bedc87cc81f9464f52bf332)


### [docker-registry](https://github.com/openshift/image-registry/tree/4462ddcd818294725dfd0f5232cc908408372524)

* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): vendor: bump aws-sdk-go to support ca-west-1 [#395](https://github.com/openshift/image-registry/pull/395)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): update distribution with bugfix [#392](https://github.com/openshift/image-registry/pull/392)
* [OCPBUGS-26173](https://issues.redhat.com/browse/OCPBUGS-26173): Updating openshift-enterprise-registry-container image to be consistent with ART [#390](https://github.com/openshift/image-registry/pull/390)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#389](https://github.com/openshift/image-registry/pull/389)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#388](https://github.com/openshift/image-registry/pull/388)
* [Full changelog](https://github.com/openshift/image-registry/compare/340eda0bfc9a86254d7f0f37cd6a5320779ecf81...4462ddcd818294725dfd0f5232cc908408372524)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/82e950507a066cb93ee19371f375ba0565f591a7)

* Add importMode and set it to `PreserveOriginal` to import (#144) [#144](https://github.com/openshift/driver-toolkit/pull/144)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): Start using rhel-coreos image rather than machine-os-content. (#142) [#142](https://github.com/openshift/driver-toolkit/pull/142)
* apply hypershift cluster-profile (#143) [#143](https://github.com/openshift/driver-toolkit/pull/143)
* Add support for 64k pages with ARM64 (#140) [#140](https://github.com/openshift/driver-toolkit/pull/140)
* Updating driver-toolkit-container image to be consistent with ART (#139) [#139](https://github.com/openshift/driver-toolkit/pull/139)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7a448c2ee026c772e293dd344da587493c859f82...82e950507a066cb93ee19371f375ba0565f591a7)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7534ab906e5f9d38defbbbc6b169e5d829463bb5)

* [OCPBUGS-28581](https://issues.redhat.com/browse/OCPBUGS-28581): Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 [#80](https://github.com/openshift/egress-router-cni/pull/80)
* [OCPBUGS-24860](https://issues.redhat.com/browse/OCPBUGS-24860): Updating ose-egress-router-cni-container image to be consistent with ART [#79](https://github.com/openshift/egress-router-cni/pull/79)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/39ea8ee1d8299b9052be76bd4b50c79d731c9e38...7534ab906e5f9d38defbbbc6b169e5d829463bb5)


### [etcd](https://github.com/openshift/etcd/tree/aa0c441f97e070fed62cc3e1423537eb42c661a3)

* [OCPBUGS-31624](https://issues.redhat.com/browse/OCPBUGS-31624): Rebase etcd 3.5.13 openshift 4.16 [#259](https://github.com/openshift/etcd/pull/259)
* no-issue: Update Installer dockerfile to use golang-1.20 [#251](https://github.com/openshift/etcd/pull/251)
* [OCPBUGS-28730](https://issues.redhat.com/browse/OCPBUGS-28730): Rebase etcd 3.5.12 openshift 4.16 [#242](https://github.com/openshift/etcd/pull/242)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to build etcd for openshift-installer [#249](https://github.com/openshift/etcd/pull/249)
* [OCPBUGS-24988](https://issues.redhat.com/browse/OCPBUGS-24988): Updating ose-etcd-container image to be consistent with ART [#236](https://github.com/openshift/etcd/pull/236)
* [OCPBUGS-24931](https://issues.redhat.com/browse/OCPBUGS-24931): Rebase etcd 3.5.11 openshift 4.16 [#237](https://github.com/openshift/etcd/pull/237)
* [Full changelog](https://github.com/openshift/etcd/compare/8aecb841e30bb4ce38de1d270ef5138301de828a...aa0c441f97e070fed62cc3e1423537eb42c661a3)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/26b43dfc7ddce718014b8991db10cbff30b7b117)

* [OCPCLOUD-2463](https://issues.redhat.com/browse/OCPCLOUD-2463): Adds auth-provider-gcp .spec file and build script [#58](https://github.com/openshift/cloud-provider-gcp/pull/58)
* [OCPBUGS-22598](https://issues.redhat.com/browse/OCPBUGS-22598): Merge https://github.com/kubernetes/cloud-provider-gcp:master (58ec6ae) into master [#53](https://github.com/openshift/cloud-provider-gcp/pull/53)
* [OCPBUGS-25754](https://issues.redhat.com/browse/OCPBUGS-25754): Add Snyk file to exclude vendor directory on scan [#54](https://github.com/openshift/cloud-provider-gcp/pull/54)
* [OCPBUGS-24044](https://issues.redhat.com/browse/OCPBUGS-24044): Merge https://github.com/kubernetes/cloud-provider-gcp:master (522e293) into master [#40](https://github.com/openshift/cloud-provider-gcp/pull/40)
* [OCPBUGS-25581](https://issues.redhat.com/browse/OCPBUGS-25581): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#52](https://github.com/openshift/cloud-provider-gcp/pull/52)
* [OCPBUGS-24981](https://issues.redhat.com/browse/OCPBUGS-24981): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#48](https://github.com/openshift/cloud-provider-gcp/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/118209dfa2ee7ce8acea2872db4544068aa9e1a1...26b43dfc7ddce718014b8991db10cbff30b7b117)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c76ca4039dd0f452cf0e6d70e800c25e319e5c38)

* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#222](https://github.com/openshift/cluster-api-provider-gcp/pull/222)
* [OCPCLOUD-2445](https://issues.redhat.com/browse/OCPCLOUD-2445): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.6.0 (be17146) into master [#221](https://github.com/openshift/cluster-api-provider-gcp/pull/221)
* [OCPBUGS-26143](https://issues.redhat.com/browse/OCPBUGS-26143): Fix formatting in snyk vendor exclusions [#219](https://github.com/openshift/cluster-api-provider-gcp/pull/219)
* [OCPBUGS-24875](https://issues.redhat.com/browse/OCPBUGS-24875): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#215](https://github.com/openshift/cluster-api-provider-gcp/pull/215)
* [OCPBUGS-25628](https://issues.redhat.com/browse/OCPBUGS-25628): Add Snyk file to exclude vendor directory on scan [#216](https://github.com/openshift/cluster-api-provider-gcp/pull/216)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/8a32c37ba168db37780064dc2798f9e6b230dd85...c76ca4039dd0f452cf0e6d70e800c25e319e5c38)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/fc80687e76e6d04444f20914f60915067b832e30)

* [CFE-684](https://issues.redhat.com/browse/CFE-684): Add user defined tags to the created gcp resource [#54](https://github.com/openshift/machine-api-provider-gcp/pull/54)
* [OCPBUGS-27866](https://issues.redhat.com/browse/OCPBUGS-27866): Update Snyk file to exclude other vendor folders [#81](https://github.com/openshift/machine-api-provider-gcp/pull/81)
* [OCPCLOUD-2427](https://issues.redhat.com/browse/OCPCLOUD-2427): Rebase k8s to 1.29 and update dependencies [#78](https://github.com/openshift/machine-api-provider-gcp/pull/78)
* [OCPBUGS-26128](https://issues.redhat.com/browse/OCPBUGS-26128): Add Snyk file to exclude vendor directory on scan [#77](https://github.com/openshift/machine-api-provider-gcp/pull/77)
* [OCPBUGS-25578](https://issues.redhat.com/browse/OCPBUGS-25578): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-gcp/pull/75)
* [OCPBUGS-24970](https://issues.redhat.com/browse/OCPBUGS-24970): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#73](https://github.com/openshift/machine-api-provider-gcp/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b15daaf5836910277b7154a006800505f018aa5a...fc80687e76e6d04444f20914f60915067b832e30)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/5ed71c64ce9c1879f0d2a17976387f1b0292796d)

* [OCPBUGS-30511](https://issues.redhat.com/browse/OCPBUGS-30511): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#60](https://github.com/openshift/gcp-pd-csi-driver/pull/60)
* [STOR-1581](https://issues.redhat.com/browse/STOR-1581): Rebase to new upstream version 1.13.0 [#59](https://github.com/openshift/gcp-pd-csi-driver/pull/59)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#58](https://github.com/openshift/gcp-pd-csi-driver/pull/58)
* [OCPBUGS-25553](https://issues.redhat.com/browse/OCPBUGS-25553): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#56](https://github.com/openshift/gcp-pd-csi-driver/pull/56)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#55](https://github.com/openshift/gcp-pd-csi-driver/pull/55)
* [OCPBUGS-25138](https://issues.redhat.com/browse/OCPBUGS-25138): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#54](https://github.com/openshift/gcp-pd-csi-driver/pull/54)
* [OCPBUGS-24886](https://issues.redhat.com/browse/OCPBUGS-24886): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART [#53](https://github.com/openshift/gcp-pd-csi-driver/pull/53)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/856ee3e23802cd341619cc4fc3181cf6ebbbd548...5ed71c64ce9c1879f0d2a17976387f1b0292796d)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/799327f7c45b362beadc39e85b9e773cab3654c5)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#119](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/119)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node registrat healthcheck [#118](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/118)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#116](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/116)
* [OCPBUGS-28939](https://issues.redhat.com/browse/OCPBUGS-28939): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.16 [#117](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/117)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#115](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/115)
* [OCPBUGS-26486](https://issues.redhat.com/browse/OCPBUGS-26486): Increase data source provision timeout [#112](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/112)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#110](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/110)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#105](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/105)
* [OCPBUGS-25541](https://issues.redhat.com/browse/OCPBUGS-25541): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#106](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/106)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#104](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/104)
* [OCPBUGS-25113](https://issues.redhat.com/browse/OCPBUGS-25113): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#101](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/101)
* [OCPBUGS-23859](https://issues.redhat.com/browse/OCPBUGS-23859): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#98](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#100](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/100)
* [OCPBUGS-24847](https://issues.redhat.com/browse/OCPBUGS-24847): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART [#99](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3b91ee310c8a7394ceb2d4de6a51dd18a3800312...799327f7c45b362beadc39e85b9e773cab3654c5)


### [haproxy-router](https://github.com/openshift/router/tree/b6f7c63c52e6b20fde2549a3c3e69a052ab453cc)

* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Make ingressConditionsEqual more efficient [#588](https://github.com/openshift/router/pull/588)
* [OCPBUGS-29690](https://issues.redhat.com/browse/OCPBUGS-29690): Count active services before setting weight to 1 [#576](https://github.com/openshift/router/pull/576)
* "OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests" [#575](https://github.com/openshift/router/pull/575)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Reject routes with SHA1 certs [#552](https://github.com/openshift/router/pull/552)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Upgrade Validation plugin for SHA1 certs [#555](https://github.com/openshift/router/pull/555)
* [OCPBUGS-32044](https://issues.redhat.com/browse/OCPBUGS-32044): Introduce 'idle-close-on-response' option for frontends [#573](https://github.com/openshift/router/pull/573)
* [OCPBUGS-22739](https://issues.redhat.com/browse/OCPBUGS-22739): Properly handle rewrite-target annotation [#534](https://github.com/openshift/router/pull/534)
* NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image [#567](https://github.com/openshift/router/pull/567)
* [OCPBUGS-30314](https://issues.redhat.com/browse/OCPBUGS-30314): Refactor logging in DoHTTPProbe to avoid serialisation errors [#566](https://github.com/openshift/router/pull/566)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Bump HaProxy to the latest version 2.8 [#563](https://github.com/openshift/router/pull/563)
* [TRT-1507](https://issues.redhat.com/browse/TRT-1507): Revert #551 "NE-1444: Upgrade OpenShift Router to HAProxy 2.8" [#561](https://github.com/openshift/router/pull/561)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Upgrade OpenShift Router to HAProxy 2.8 [#551](https://github.com/openshift/router/pull/551)
* [OCPBUGS-26539](https://issues.redhat.com/browse/OCPBUGS-26539): Reject routes with MD5 certs [#553](https://github.com/openshift/router/pull/553)
* [OCPBUGS-25546](https://issues.redhat.com/browse/OCPBUGS-25546): Updating ose-haproxy-router-base-container image to be consistent with ART [#550](https://github.com/openshift/router/pull/550)
* NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug [#544](https://github.com/openshift/router/pull/544)
* [OCPBUGS-25029](https://issues.redhat.com/browse/OCPBUGS-25029): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART [#547](https://github.com/openshift/router/pull/547)
* [NE-1446](https://issues.redhat.com/browse/NE-1446): Update to RHEL9 base image [#548](https://github.com/openshift/router/pull/548)
* [OCPBUGS-24859](https://issues.redhat.com/browse/OCPBUGS-24859): Updating ose-haproxy-router-base-container image to be consistent with ART [#546](https://github.com/openshift/router/pull/546)
* [Full changelog](https://github.com/openshift/router/compare/b7001137f832d02d4ed68cba27fe3001ff523fa6...b6f7c63c52e6b20fde2549a3c3e69a052ab453cc)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/d1ec84aa4c0ca46e90b22b364a62d38c78487c12)

* NO-JIRA: UPSTREAM: &lt;carry&gt;: Revert create readyz event for kubeapi server [#1957](https://github.com/openshift/kubernetes/pull/1957)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1954](https://github.com/openshift/kubernetes/pull/1954)
* [OCPBUGS-32296](https://issues.redhat.com/browse/OCPBUGS-32296): Bump K8s api to 1.29.4 [#1947](https://github.com/openshift/kubernetes/pull/1947)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): UPSTREAM: &lt;carry&gt;: Fix garbage-collection for CRDs. [#1811](https://github.com/openshift/kubernetes/pull/1811)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): UPSTREAM: &lt;carry&gt;: create readyz event for kubeapi server [#1914](https://github.com/openshift/kubernetes/pull/1914)
* UPSTREAM: &lt;carry&gt;: OCPEDGE-807: add support for cpu limits into management workloads [#1902](https://github.com/openshift/kubernetes/pull/1902)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator [#1904](https://github.com/openshift/kubernetes/pull/1904)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: featureset validation moved to CEL [#1944](https://github.com/openshift/kubernetes/pull/1944)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): bump library-go [#1941](https://github.com/openshift/kubernetes/pull/1941)
* [OCPBUGS-11933](https://issues.redhat.com/browse/OCPBUGS-11933): UPSTREAM: &lt;drop&gt;: bump apiserver-library-go [#1910](https://github.com/openshift/kubernetes/pull/1910)
* [OCPBUGS-31663](https://issues.redhat.com/browse/OCPBUGS-31663): UPSTREAM: &lt;carry&gt;: add management workload check for guaranteed qos [#1928](https://github.com/openshift/kubernetes/pull/1928)
* [OCPBUGS-30957](https://issues.redhat.com/browse/OCPBUGS-30957): Use the right feature gate when updating uncertain … [#1919](https://github.com/openshift/kubernetes/pull/1919)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: &lt;carry&gt;: allow type mutation for specific secrets [#1932](https://github.com/openshift/kubernetes/pull/1932)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Bump k8s 1.29.3 [#1925](https://github.com/openshift/kubernetes/pull/1925)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: &lt;carry&gt;: allow type mutation for specific secrets [#1929](https://github.com/openshift/kubernetes/pull/1929)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: &lt;carry&gt;: allow type mutation for specific secrets [#1924](https://github.com/openshift/kubernetes/pull/1924)
* [OCPBUGS-30767](https://issues.redhat.com/browse/OCPBUGS-30767): UPSTREAM: 124110: retry policy creation for CRD type checking E2E test [#1922](https://github.com/openshift/kubernetes/pull/1922)
* [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: &lt;carry&gt;: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852)
* UPSTREAM: &lt;carry&gt;: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911)
* [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900)
* [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: &lt;carry&gt;: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888)
* NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872)
* NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM &lt;carry&gt;: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871)
* [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: &lt;carry&gt;: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841)
* [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845)
* [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: &lt;carry&gt;: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: &lt;carry&gt;: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849)
* [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: &lt;carry&gt;: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848)
* [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846)
* [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f1b5f6c8166add33d0d5b0964e7e4482d11b1a17...d1ec84aa4c0ca46e90b22b364a62d38c78487c12)


### [hypershift](https://github.com/openshift/hypershift/tree/6bb55dffe1bbf25c1086fa4398c8c97b083b57bb)

* [OCPBUGS-33132](https://issues.redhat.com/browse/OCPBUGS-33132): Restore ingresscontroller rbac [#3965](https://github.com/openshift/hypershift/pull/3965)
* NO-JIRA: sizing: add logging for what we're doing [#3961](https://github.com/openshift/hypershift/pull/3961)
* chore(deps): update rhtap references [#3966](https://github.com/openshift/hypershift/pull/3966)
* NO-JIRA: Minor doc updates to creating Azure HC on AKS [#3964](https://github.com/openshift/hypershift/pull/3964)
* [OCPBUGS-29110](https://issues.redhat.com/browse/OCPBUGS-29110): Reconcile over ICSP/IDMS [#3933](https://github.com/openshift/hypershift/pull/3933)
* [OCPBUGS-33101](https://issues.redhat.com/browse/OCPBUGS-33101): Fix nil pointer deref when effects not specified in CSC [#3959](https://github.com/openshift/hypershift/pull/3959)
* [OCPBUGS-32110](https://issues.redhat.com/browse/OCPBUGS-32110): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3906](https://github.com/openshift/hypershift/pull/3906)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -&gt; 0.4 migration [#3956](https://github.com/openshift/hypershift/pull/3956)
* [OCPBUGS-31398](https://issues.redhat.com/browse/OCPBUGS-31398): Recycler-pod image now points to the OCP Payload reference [#3901](https://github.com/openshift/hypershift/pull/3901)
* [HOSTEDCP-1525](https://issues.redhat.com/browse/HOSTEDCP-1525): Support Azure KMS key rotation [#3940](https://github.com/openshift/hypershift/pull/3940)
* [CNV-40687](https://issues.redhat.com/browse/CNV-40687): Detect machine and cluster-network cidr collision [#3880](https://github.com/openshift/hypershift/pull/3880)
* [OCPBUGS-32930](https://issues.redhat.com/browse/OCPBUGS-32930): Allow specifying resource requests per cluster size [#3941](https://github.com/openshift/hypershift/pull/3941)
* [OCPBUGS-32760](https://issues.redhat.com/browse/OCPBUGS-32760): Request serving scheduler: omit deleting nodes [#3929](https://github.com/openshift/hypershift/pull/3929)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): fix setting replicas on autoscaler [#3947](https://github.com/openshift/hypershift/pull/3947)
* [OCPBUGS-32378](https://issues.redhat.com/browse/OCPBUGS-32378): Ensure placeholder deployments are deleted [#3931](https://github.com/openshift/hypershift/pull/3931)
* [OCPBUGS-32255](https://issues.redhat.com/browse/OCPBUGS-32255): Remove kube-scheduler readiness probe [#3889](https://github.com/openshift/hypershift/pull/3889)
* [HOSTEDCP-1484](https://issues.redhat.com/browse/HOSTEDCP-1484): Disaster recovery documentation with OADP [#3950](https://github.com/openshift/hypershift/pull/3950)
* [OCPBUGS-32492](https://issues.redhat.com/browse/OCPBUGS-32492): Set ImportMode for catalog [#3937](https://github.com/openshift/hypershift/pull/3937)
* [HOSTEDCP-1522](https://issues.redhat.com/browse/HOSTEDCP-1522): Add API definitions and CEL for AzurePlatformSpec vars [#3879](https://github.com/openshift/hypershift/pull/3879)
* NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 [#3821](https://github.com/openshift/hypershift/pull/3821)
* chore(deps): update rhtap references (main) [#3943](https://github.com/openshift/hypershift/pull/3943)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Ignore subnet annotations for control plane load balancers [#3944](https://github.com/openshift/hypershift/pull/3944)
* [OCPBUGS-32759](https://issues.redhat.com/browse/OCPBUGS-32759): Fix invalid node selector in autosizing placeholder [#3930](https://github.com/openshift/hypershift/pull/3930)
* [HOSTEDCP-1044](https://issues.redhat.com/browse/HOSTEDCP-1044): Add NodePool Size/Replicas to Telemetry [#3593](https://github.com/openshift/hypershift/pull/3593)
* NO-JIRA: remove obsolete konnectivity image code [#3932](https://github.com/openshift/hypershift/pull/3932)
* [HOSTEDCP-1219](https://issues.redhat.com/browse/HOSTEDCP-1219): Add arch & multi-arch flags to HCP CLI [#3926](https://github.com/openshift/hypershift/pull/3926)
* NO-JIRA: reduce autoscaling test memory requests [#3938](https://github.com/openshift/hypershift/pull/3938)
* NO-JIRA: chore(deps): update rhtap references [#3934](https://github.com/openshift/hypershift/pull/3934)
* [ACM-11259](https://issues.redhat.com/browse/ACM-11259): Add mapping documentation for KubeVirt CSI driver snaphotting [#3925](https://github.com/openshift/hypershift/pull/3925)
* [OCPBUGS-32496](https://issues.redhat.com/browse/OCPBUGS-32496): Controller to assist autoscaling for placeholder nodes [#3922](https://github.com/openshift/hypershift/pull/3922)
* Revert "Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters"" [#3895](https://github.com/openshift/hypershift/pull/3895)
* chore(deps): update rhtap references [#3919](https://github.com/openshift/hypershift/pull/3919)
* [OCPBUGS-32487](https://issues.redhat.com/browse/OCPBUGS-32487): Fix OLM intilization args [#3918](https://github.com/openshift/hypershift/pull/3918)
* [OCPNODE-2096](https://issues.redhat.com/browse/OCPNODE-2096): Add ClusterImagePolicy to the list of valid config manifests [#3894](https://github.com/openshift/hypershift/pull/3894)
* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): KubeVirt, Add snapshot side car and volumesnapshot class [#3640](https://github.com/openshift/hypershift/pull/3640)
* NO-ISSUE: placeholders: ignore auto-sizer placeholders [#3877](https://github.com/openshift/hypershift/pull/3877)
* [OCPBUGS-32228](https://issues.redhat.com/browse/OCPBUGS-32228): Fix failure to create a second hostedcluster in the same namespace [#3900](https://github.com/openshift/hypershift/pull/3900)
* [OCPBUGS-32248](https://issues.redhat.com/browse/OCPBUGS-32248): Replace periods with commas in subnet label value [#3885](https://github.com/openshift/hypershift/pull/3885)
* chore(deps): update rhtap references [#3886](https://github.com/openshift/hypershift/pull/3886)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): set HostPath.Type on volumesource in CloudNodeManagerD… [#3892](https://github.com/openshift/hypershift/pull/3892)
* NO-JIRA: fixed e2e teardown failing the outer test instead of subtest [#3891](https://github.com/openshift/hypershift/pull/3891)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): feat(api): Add ingress-controller-load-balancer-scope annotation [#3848](https://github.com/openshift/hypershift/pull/3848)
* NO-JIRA: remove ovnkube-control-plane from expected component token m… [#3850](https://github.com/openshift/hypershift/pull/3850)
* [CNV-40622](https://issues.redhat.com/browse/CNV-40622): Docs: Avoid cidr Collisions b/w Infra &Guest cluster [#3863](https://github.com/openshift/hypershift/pull/3863)
* NO-JIRA: Disable kubevirt-csi crash detection in e2e [#3896](https://github.com/openshift/hypershift/pull/3896)
* Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters" [#3890](https://github.com/openshift/hypershift/pull/3890)
* [HOSTEDCP-1465](https://issues.redhat.com/browse/HOSTEDCP-1465): Create HCPs with externalDNS on AKS Clusters [#3688](https://github.com/openshift/hypershift/pull/3688)
* chore(deps): update rhtap references [#3872](https://github.com/openshift/hypershift/pull/3872)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric [#3697](https://github.com/openshift/hypershift/pull/3697)
* NO-ISSUE: *: use the api package constant for the size label [#3876](https://github.com/openshift/hypershift/pull/3876)
* NO-JIRA: bump capk ci image [#3830](https://github.com/openshift/hypershift/pull/3830)
* NO-JIRA: chore(deps): update rhtap references (main) [#3867](https://github.com/openshift/hypershift/pull/3867)
* [OCPBUGS-29466](https://issues.redhat.com/browse/OCPBUGS-29466): Fix ICSP and IDMS inclusion as registriesOverrides [#3862](https://github.com/openshift/hypershift/pull/3862)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set RUN_AS_USER if mgmt cluster doesn't have SCC [#3819](https://github.com/openshift/hypershift/pull/3819)
* [OCPBUGS-29494](https://issues.redhat.com/browse/OCPBUGS-29494): Fix disconnected metadata inspection [#3860](https://github.com/openshift/hypershift/pull/3860)
* [OCPBUGS-31012](https://issues.redhat.com/browse/OCPBUGS-31012): Disable audit-log container in kas when profile is None [#3765](https://github.com/openshift/hypershift/pull/3765)
* NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster [#3854](https://github.com/openshift/hypershift/pull/3854)
* NO-JIRA: update private cluster IAM policy doc [#3851](https://github.com/openshift/hypershift/pull/3851)
* NO-JIRA: chore(deps): update rhtap references (main) [#3856](https://github.com/openshift/hypershift/pull/3856)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): disable autoscaler when no nodepool requires it [#3846](https://github.com/openshift/hypershift/pull/3846)
* NO-JIRA: Document additional known issues for the disconnected scenario [#3611](https://github.com/openshift/hypershift/pull/3611)
* NO-JIRA: Update RHTAP references (main) [#3834](https://github.com/openshift/hypershift/pull/3834)
* [OCPBUGS-29391](https://issues.redhat.com/browse/OCPBUGS-29391): Add new permission required in CAPA [#3779](https://github.com/openshift/hypershift/pull/3779)
* [CNF-11885](https://issues.redhat.com/browse/CNF-11885): nto: add events resources under operator `Role` [#3827](https://github.com/openshift/hypershift/pull/3827)
* [OCPBUGS-31444](https://issues.redhat.com/browse/OCPBUGS-31444): use dnsPolicy: Default for konnectivity-agent in data plane [#3810](https://github.com/openshift/hypershift/pull/3810)
* NO-JIRA: docs: fixing wrong key name [#3833](https://github.com/openshift/hypershift/pull/3833)
* NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… [#3837](https://github.com/openshift/hypershift/pull/3837)
* [OCPBUGS-31725](https://issues.redhat.com/browse/OCPBUGS-31725): include hostnetwork SCC CPO role for 4.13 and earlier [#3838](https://github.com/openshift/hypershift/pull/3838)
* [HOSTEDCP-1511](https://issues.redhat.com/browse/HOSTEDCP-1511): enable and document kubevirt custom default network [#3832](https://github.com/openshift/hypershift/pull/3832)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support annotation scoping for hostedcluster resources [#3702](https://github.com/openshift/hypershift/pull/3702)
* [OCPBUGS-31415](https://issues.redhat.com/browse/OCPBUGS-31415): update desired image even when HCP doesn't exist yet [#3829](https://github.com/openshift/hypershift/pull/3829)
* NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. [#2707](https://github.com/openshift/hypershift/pull/2707)
* [OCPBUGS-31585](https://issues.redhat.com/browse/OCPBUGS-31585): disable http2 for ignition server and proxy [#3817](https://github.com/openshift/hypershift/pull/3817)
* [OTA-1211](https://issues.redhat.com/browse/OTA-1211): api/v1beta1/hostedcluster_types: Add spec.updateService [#3576](https://github.com/openshift/hypershift/pull/3576)
* [HOSTEDCP-1365](https://issues.redhat.com/browse/HOSTEDCP-1365): kubevirt, Generate kccm lb endpointslices [#3528](https://github.com/openshift/hypershift/pull/3528)
* NO-JIRA: Add --auto-repair flag to `hcp create nodepool` [#3163](https://github.com/openshift/hypershift/pull/3163)
* NO-JIRA: Set control plane to HA by default [#3788](https://github.com/openshift/hypershift/pull/3788)
* NO-JIRA: Fix docs commands related to Azure ephemeral OS disks [#3809](https://github.com/openshift/hypershift/pull/3809)
* Update RHTAP references [#3814](https://github.com/openshift/hypershift/pull/3814)
* NO-JIRA: Documentation overview of HCP KubeVirt Storage [#3763](https://github.com/openshift/hypershift/pull/3763)
* [OCPBUGS-31465](https://issues.redhat.com/browse/OCPBUGS-31465): remove max function usage from deicated request serving nodes [#3815](https://github.com/openshift/hypershift/pull/3815)
* [OCPBUGS-31106](https://issues.redhat.com/browse/OCPBUGS-31106): Reduce log file size for hypershift apiservers [#3781](https://github.com/openshift/hypershift/pull/3781)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): Enable TestNodePool and CreateCluster tests on Azure [#3732](https://github.com/openshift/hypershift/pull/3732)
* [OCPBUGS-31319](https://issues.redhat.com/browse/OCPBUGS-31319): copy issuerCertificateAuthority configmap into HC openshift-config [#3799](https://github.com/openshift/hypershift/pull/3799)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Request serving node scheduler that uses HC size label [#3776](https://github.com/openshift/hypershift/pull/3776)
* [OCPBUGS-31076](https://issues.redhat.com/browse/OCPBUGS-31076): Support other azure clouds [#3804](https://github.com/openshift/hypershift/pull/3804)
* [OCPBUGS-31110](https://issues.redhat.com/browse/OCPBUGS-31110): Fix empty RHCOSImage error when creating Azure Infrastructure [#3782](https://github.com/openshift/hypershift/pull/3782)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104): Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server [#3797](https://github.com/openshift/hypershift/pull/3797)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): fix race between ignition payload generation and MCS configmap update [#3795](https://github.com/openshift/hypershift/pull/3795)
* NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools [#3752](https://github.com/openshift/hypershift/pull/3752)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 [#3710](https://github.com/openshift/hypershift/pull/3710)
* [OCPBUGS-31089](https://issues.redhat.com/browse/OCPBUGS-31089): Fix empty resourceGroupName error when deleting Azure infra [#3775](https://github.com/openshift/hypershift/pull/3775)
* [OCPBUGS-31090](https://issues.redhat.com/browse/OCPBUGS-31090): Fix empty subnet name error when creating Azure infrastructure [#3778](https://github.com/openshift/hypershift/pull/3778)
* [OCPBUGS-31263](https://issues.redhat.com/browse/OCPBUGS-31263): Add missing PodSecurityViolation alert [#3733](https://github.com/openshift/hypershift/pull/3733)
* [OCPBUGS-31118](https://issues.redhat.com/browse/OCPBUGS-31118): fix(ignition): Fix priority class override [#3784](https://github.com/openshift/hypershift/pull/3784)
* [OCPBUGS-31088](https://issues.redhat.com/browse/OCPBUGS-31088): Fix loopvar issue [#3770](https://github.com/openshift/hypershift/pull/3770)
* Update RHTAP references [#3790](https://github.com/openshift/hypershift/pull/3790)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104), [HOSTEDCP-1105](https://issues.redhat.com/browse/HOSTEDCP-1105): Validate multi-arch aspects in an AWS Hosted Cluster [#3769](https://github.com/openshift/hypershift/pull/3769)
* [HOSTEDCP-1501](https://issues.redhat.com/browse/HOSTEDCP-1501): Create default ClusterSizingConfig CR on start [#3787](https://github.com/openshift/hypershift/pull/3787)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3789](https://github.com/openshift/hypershift/pull/3789)
* [OCPBUGS-30930](https://issues.redhat.com/browse/OCPBUGS-30930): Add CEL validation for NodePool autoScaling / replicas [#3786](https://github.com/openshift/hypershift/pull/3786)
* [OCPBUGS-31102](https://issues.redhat.com/browse/OCPBUGS-31102): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3780](https://github.com/openshift/hypershift/pull/3780)
* NO-JIRA: Adding Disable PKI Reconciliation annotation as an option [#2989](https://github.com/openshift/hypershift/pull/2989)
* [OCPBUGS-30991](https://issues.redhat.com/browse/OCPBUGS-30991): external OIDC: fix certificateAuthority field in structured auth config [#3773](https://github.com/openshift/hypershift/pull/3773)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): Add install flag to enable/disable size tagging [#3766](https://github.com/openshift/hypershift/pull/3766)
* [OCPBUGS-30968](https://issues.redhat.com/browse/OCPBUGS-30968): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3760](https://github.com/openshift/hypershift/pull/3760)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add managed service constants to HyperShift API [#3762](https://github.com/openshift/hypershift/pull/3762)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support subnet labels separated by periods [#3767](https://github.com/openshift/hypershift/pull/3767)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: wire up placeholder pods for sizes [#3749](https://github.com/openshift/hypershift/pull/3749)
* NO-JIRA: Increase stability in autoscaled environments [#3757](https://github.com/openshift/hypershift/pull/3757)
* NO-JIRA: Bump HO read budget in e2e to 6000 [#3761](https://github.com/openshift/hypershift/pull/3761)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3743](https://github.com/openshift/hypershift/pull/3743)
* [HOSTEDCP-1467](https://issues.redhat.com/browse/HOSTEDCP-1467): ARO HCP - Add ability to specify subnet at nodepool level [#3748](https://github.com/openshift/hypershift/pull/3748)
* NO-JIRA: Update RHTAP references [#3753](https://github.com/openshift/hypershift/pull/3753)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support specifying AWS LB subnets [#3746](https://github.com/openshift/hypershift/pull/3746)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add ability to set managed service type in HO [#3736](https://github.com/openshift/hypershift/pull/3736)
* NO-ISSUE: hypershift-operator: react to hosted cluster changes [#3735](https://github.com/openshift/hypershift/pull/3735)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: add a controller for t-shirt sizing [#3686](https://github.com/openshift/hypershift/pull/3686)
* [HOSTEDCP-929](https://issues.redhat.com/browse/HOSTEDCP-929): Add nodepool annotation to allow requesting IMDSv2 [#3584](https://github.com/openshift/hypershift/pull/3584)
* NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget [#3745](https://github.com/openshift/hypershift/pull/3745)
* [OCPBUGS-30320](https://issues.redhat.com/browse/OCPBUGS-30320): speed up HCP rollout durations [#3734](https://github.com/openshift/hypershift/pull/3734)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set env var when the mgmt cluster supports SCC [#3701](https://github.com/openshift/hypershift/pull/3701)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3742](https://github.com/openshift/hypershift/pull/3742)
* NO-JIRA: Update RHTAP references [#3737](https://github.com/openshift/hypershift/pull/3737)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): consider nigthly images in payoad version check [#3727](https://github.com/openshift/hypershift/pull/3727)
* [OCPBUGS-28634](https://issues.redhat.com/browse/OCPBUGS-28634): Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES [#3687](https://github.com/openshift/hypershift/pull/3687)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Support additional node selectors for request serving nodes [#3729](https://github.com/openshift/hypershift/pull/3729)
* Revert "HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation" [#3731](https://github.com/openshift/hypershift/pull/3731)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): honor HC image configuration [#3714](https://github.com/openshift/hypershift/pull/3714)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3689](https://github.com/openshift/hypershift/pull/3689)
* [OCPBUGS-30769](https://issues.redhat.com/browse/OCPBUGS-30769): include node local client loadbalancer address in kube-apiserver signing ips [#3699](https://github.com/openshift/hypershift/pull/3699)
* NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline [#3728](https://github.com/openshift/hypershift/pull/3728)
* [HOSTEDCP-1460](https://issues.redhat.com/browse/HOSTEDCP-1460): Remove resource limits on azure-cloud-node-manager [#3725](https://github.com/openshift/hypershift/pull/3725)
* [HOSTEDCP-1479](https://issues.redhat.com/browse/HOSTEDCP-1479): Update IBM/networking-go-sdk package [#3722](https://github.com/openshift/hypershift/pull/3722)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#3718](https://github.com/openshift/hypershift/pull/3718)
* NO-JIRA: Fixes Dependabot PR #3712 [#3716](https://github.com/openshift/hypershift/pull/3716)
* [HOSTEDCP-1466](https://issues.redhat.com/browse/HOSTEDCP-1466): support/metrics: don't filter HCCO metrics [#3715](https://github.com/openshift/hypershift/pull/3715)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): ignition-server/controllers: drop `MCSIgnitionProvider` [#3709](https://github.com/openshift/hypershift/pull/3709)
* [HOSTEDCP-1469](https://issues.redhat.com/browse/HOSTEDCP-1469): Set GOMEMLIMIT annotation based on request serving node label [#3708](https://github.com/openshift/hypershift/pull/3708)
* [OCPBUGS-30574](https://issues.redhat.com/browse/OCPBUGS-30574): Update OLM Default Catalog Sources to 4.16 on main [#3707](https://github.com/openshift/hypershift/pull/3707)
* chore(deps): update rhtap references [#3704](https://github.com/openshift/hypershift/pull/3704)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): Use cluster-config-operator for 4.14 payload [#3685](https://github.com/openshift/hypershift/pull/3685)
* NO-JIRA: Dependabot#3659 [#3665](https://github.com/openshift/hypershift/pull/3665)
* Revert "NO-JIRA: test/e2e: temporarily skip NTO machineconfig test" [#3700](https://github.com/openshift/hypershift/pull/3700)
* NO-JIRA: cleanup: nilness check failures [#3698](https://github.com/openshift/hypershift/pull/3698)
* [HOSTEDCP-1464](https://issues.redhat.com/browse/HOSTEDCP-1464): Add pull secret to install CLI & create k8s secret [#3682](https://github.com/openshift/hypershift/pull/3682)
* [OCPBUGS-30060](https://issues.redhat.com/browse/OCPBUGS-30060): Set OPERATOR_IMAGE environment variable [#3667](https://github.com/openshift/hypershift/pull/3667)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Use correct return error when destroying AWS SG [#3661](https://github.com/openshift/hypershift/pull/3661)
* [OCPBUGS-30301](https://issues.redhat.com/browse/OCPBUGS-30301): [kubevirt] Fix virt-launcher netpol to allow missing access [#3680](https://github.com/openshift/hypershift/pull/3680)
* [OCPBUGS-30124](https://issues.redhat.com/browse/OCPBUGS-30124): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3678](https://github.com/openshift/hypershift/pull/3678)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3658](https://github.com/openshift/hypershift/pull/3658)
* NO-JIRA: Bump the golang-dependencies group with 1 update [#3657](https://github.com/openshift/hypershift/pull/3657)
* chore(deps): update rhtap references [#3674](https://github.com/openshift/hypershift/pull/3674)
* NO-JIRA: test/e2e: temporarily skip NTO machineconfig test [#3683](https://github.com/openshift/hypershift/pull/3683)
* NO-JIRA: chore(deps): update rhtap references [#3671](https://github.com/openshift/hypershift/pull/3671)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3605](https://github.com/openshift/hypershift/pull/3605)
* [OCPBUGS-30102](https://issues.redhat.com/browse/OCPBUGS-30102): Support to disable machine management components [#3570](https://github.com/openshift/hypershift/pull/3570)
* NO-JIRA: Minor cleanup of Azure create cluster document [#3663](https://github.com/openshift/hypershift/pull/3663)
* NO-JIRA: chore(deps): update rhtap references [#3650](https://github.com/openshift/hypershift/pull/3650)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): test: add a test for invalid CSRs [#3612](https://github.com/openshift/hypershift/pull/3612)
* NO-JIRA: test: skip CCO in pod crash check [#3652](https://github.com/openshift/hypershift/pull/3652)
* [OCPBUGS-29773](https://issues.redhat.com/browse/OCPBUGS-29773): set Konnectivity cipher suites [#3618](https://github.com/openshift/hypershift/pull/3618)
* [OCPBUGS-30030](https://issues.redhat.com/browse/OCPBUGS-30030): rollout kas on auth config change [#3647](https://github.com/openshift/hypershift/pull/3647)
* NO-JIRA: test: increase CPO mutate budget [#3649](https://github.com/openshift/hypershift/pull/3649)
* NO-JIRA: test: debug certificates on unauthz error [#3642](https://github.com/openshift/hypershift/pull/3642)
* NO-JIRA: Remove replace statements [#3631](https://github.com/openshift/hypershift/pull/3631)
* NO-JIRA: DEPENDABOT#3613 [#3617](https://github.com/openshift/hypershift/pull/3617)
* NO-JIRA: chore(deps): update rhtap references [#3638](https://github.com/openshift/hypershift/pull/3638)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates [#3636](https://github.com/openshift/hypershift/pull/3636)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3634](https://github.com/openshift/hypershift/pull/3634)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Skip SG deletion if it has dependancy violation [#3622](https://github.com/openshift/hypershift/pull/3622)
* NO-JIRA: Update RHTAP references [#3621](https://github.com/openshift/hypershift/pull/3621)
* NO-JIRA: Update RHTAP references (main) [#3623](https://github.com/openshift/hypershift/pull/3623)
* [OCPBUGS-23457](https://issues.redhat.com/browse/OCPBUGS-23457): Switch to use service endpoint for Konnectivity [#3627](https://github.com/openshift/hypershift/pull/3627)
* [OCPBUGS-27180](https://issues.redhat.com/browse/OCPBUGS-27180): Update the oauth API server's shutdown delay duration [#3608](https://github.com/openshift/hypershift/pull/3608)
* NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) [#3600](https://github.com/openshift/hypershift/pull/3600)
* [OCPBUGS-29855](https://issues.redhat.com/browse/OCPBUGS-29855): feat(ho): Add flag for dedicated request serving isolation [#3601](https://github.com/openshift/hypershift/pull/3601)
* [OCPBUGS-28607](https://issues.redhat.com/browse/OCPBUGS-28607): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3477](https://github.com/openshift/hypershift/pull/3477)
* NO-JIRA: adjust pdb for oauth-apiserver [#3619](https://github.com/openshift/hypershift/pull/3619)
* [OCPBUGS-29645](https://issues.redhat.com/browse/OCPBUGS-29645): control-plane-pki-operator: fix CA used for SRE client credentials [#3615](https://github.com/openshift/hypershift/pull/3615)
* [HOSTEDCP-1424](https://issues.redhat.com/browse/HOSTEDCP-1424): ARO HCP Support Disabling Outbound SNAT [#3583](https://github.com/openshift/hypershift/pull/3583)
* NO-JIRA: always set minAvailable on PDBs to 1 [#3616](https://github.com/openshift/hypershift/pull/3616)
* [OCPBUGS-29723](https://issues.redhat.com/browse/OCPBUGS-29723): CLI: create nodepool aws - remove sg requirement [#3614](https://github.com/openshift/hypershift/pull/3614)
* NO-JIRA: Bump the misc-dependencies group with 15 updates [#3609](https://github.com/openshift/hypershift/pull/3609)
* NO-JIRA: Ignore kubectl version mistmaches in Component Versions [#3575](https://github.com/openshift/hypershift/pull/3575)
* NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates [#3598](https://github.com/openshift/hypershift/pull/3598)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Add an SCC for validation pods with Cilium SDN [#3602](https://github.com/openshift/hypershift/pull/3602)
* NO-JIRA: chore(deps): update rhtap references [#3603](https://github.com/openshift/hypershift/pull/3603)
* [HOSTEDCP-1411](https://issues.redhat.com/browse/HOSTEDCP-1411): Add capability to specify additional tags to azure resource… [#3490](https://github.com/openshift/hypershift/pull/3490)
* NO-JIRA: chore(deps): update rhtap references [#3590](https://github.com/openshift/hypershift/pull/3590)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3574](https://github.com/openshift/hypershift/pull/3574)
* [HOSTEDCP-1428](https://issues.redhat.com/browse/HOSTEDCP-1428): hcco: report node count on HCPs [#3557](https://github.com/openshift/hypershift/pull/3557)
* [HOSTEDCP-1436](https://issues.redhat.com/browse/HOSTEDCP-1436): Make nodepool.spec.aws.subnet required [#3581](https://github.com/openshift/hypershift/pull/3581)
* [OCPBUGS-29586](https://issues.redhat.com/browse/OCPBUGS-29586): use 2040 for apiserver svc in IBM provider [#3569](https://github.com/openshift/hypershift/pull/3569)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): Preserve container resources for more hosted control plane components [#3120](https://github.com/openshift/hypershift/pull/3120)
* NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements [#3585](https://github.com/openshift/hypershift/pull/3585)
* NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector [#3464](https://github.com/openshift/hypershift/pull/3464)
* NO-JIRA: remove dead code from kas config [#3578](https://github.com/openshift/hypershift/pull/3578)
* [OCPBUGS-29115](https://issues.redhat.com/browse/OCPBUGS-29115): Default NodeUpgradeType on day2 nodepool creation [#3572](https://github.com/openshift/hypershift/pull/3572)
* Revert "CNV-36608: Enable InPlace NodePool upgrade test for kubevirt" [#3547](https://github.com/openshift/hypershift/pull/3547)
* NO-JIRA: Update RHTAP references [#3577](https://github.com/openshift/hypershift/pull/3577)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Added docs to get other sdn providers deployed with agent provider [#3405](https://github.com/openshift/hypershift/pull/3405)
* Update RHTAP references [#3568](https://github.com/openshift/hypershift/pull/3568)
* [CNF-6516](https://issues.redhat.com/browse/CNF-6516): NTO: Enable PerformanceProfile [#1782](https://github.com/openshift/hypershift/pull/1782)
* [OCPBUGS-29209](https://issues.redhat.com/browse/OCPBUGS-29209): hypershift-operator: don't create PKI rbac when disabled [#3544](https://github.com/openshift/hypershift/pull/3544)
* [OCPBUGS-29104](https://issues.redhat.com/browse/OCPBUGS-29104): control-plane-pki-operator: add a signer for SRE break-glass [#3542](https://github.com/openshift/hypershift/pull/3542)
* NO-ISSUE: test: wait longer for certificate signing, revocation [#3560](https://github.com/openshift/hypershift/pull/3560)
* NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues [#3562](https://github.com/openshift/hypershift/pull/3562)
* NO-JIRA: Developer namespace template for CI clusters [#3561](https://github.com/openshift/hypershift/pull/3561)
* [HOSTEDCP-1419](https://issues.redhat.com/browse/HOSTEDCP-1419): Always include AWS default security group in worker security groups [#3527](https://github.com/openshift/hypershift/pull/3527)
* [HOSTEDCP-1407](https://issues.redhat.com/browse/HOSTEDCP-1407): Add steps for seting up  azure CI cluster [#3545](https://github.com/openshift/hypershift/pull/3545)
* Update RHTAP references (main) [#3546](https://github.com/openshift/hypershift/pull/3546)
* [HOSTEDCP-1420](https://issues.redhat.com/browse/HOSTEDCP-1420): Set a fixed minimum supported version [#3525](https://github.com/openshift/hypershift/pull/3525)
* NO-JIRA: Update RHTAP references [#3518](https://github.com/openshift/hypershift/pull/3518)
* [OCPBUGS-29103](https://issues.redhat.com/browse/OCPBUGS-29103): control-plane-pki-operator: validate CN for CSR [#3538](https://github.com/openshift/hypershift/pull/3538)
* NO-JIRA: stevekuznetsov approver on CPPO and integration tests [#3540](https://github.com/openshift/hypershift/pull/3540)
* NO-JIRA: Fix issue with release note tool [#3429](https://github.com/openshift/hypershift/pull/3429)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Hypershift API separation [#3390](https://github.com/openshift/hypershift/pull/3390)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): control-plane-pki-operator: add a revocation controller [#3339](https://github.com/openshift/hypershift/pull/3339)
* [CNV-36608](https://issues.redhat.com/browse/CNV-36608): Enable InPlace NodePool upgrade test for kubevirt [#3517](https://github.com/openshift/hypershift/pull/3517)
* [OCPBUGS-27282](https://issues.redhat.com/browse/OCPBUGS-27282): Make ControllerAvailabilityPolicy immutable [#3513](https://github.com/openshift/hypershift/pull/3513)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3512](https://github.com/openshift/hypershift/pull/3512)
* [OCPBUGS-28659](https://issues.redhat.com/browse/OCPBUGS-28659): Add ValidatingAdmissionPolicy to KAS config [#3488](https://github.com/openshift/hypershift/pull/3488)
* [OCPBUGS-28741](https://issues.redhat.com/browse/OCPBUGS-28741): Fix default release image lookup [#3450](https://github.com/openshift/hypershift/pull/3450)
* NO-JIRA: Add app labels to KubeVirt CCM component [#3510](https://github.com/openshift/hypershift/pull/3510)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3491](https://github.com/openshift/hypershift/pull/3491)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3503](https://github.com/openshift/hypershift/pull/3503)
* [OCPBUGS-28625](https://issues.redhat.com/browse/OCPBUGS-28625): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3511](https://github.com/openshift/hypershift/pull/3511)
* NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools [#3505](https://github.com/openshift/hypershift/pull/3505)
* Update RHTAP references (main) [#3508](https://github.com/openshift/hypershift/pull/3508)
* [OCPBUGS-28763](https://issues.redhat.com/browse/OCPBUGS-28763): Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used [#3494](https://github.com/openshift/hypershift/pull/3494)
* [OCPBUGS-28601](https://issues.redhat.com/browse/OCPBUGS-28601): Remove webhook validations that introduce resource ordering [#3484](https://github.com/openshift/hypershift/pull/3484)
* NO-JIRA: manifests: Skip pod anti affinity for nil labels [#3507](https://github.com/openshift/hypershift/pull/3507)
* [MULTIARCH-3882](https://issues.redhat.com/browse/MULTIARCH-3882): Support PER solution for powervs platform via transit gateway [#3277](https://github.com/openshift/hypershift/pull/3277)
* [HOSTEDCP-1408](https://issues.redhat.com/browse/HOSTEDCP-1408): Update CAPZ Identity Type to Service Principal [#3501](https://github.com/openshift/hypershift/pull/3501)
* [OCPBUGS-27161](https://issues.redhat.com/browse/OCPBUGS-27161): reflect NodePool replica count nil in status [#3472](https://github.com/openshift/hypershift/pull/3472)
* NO-JIRA: Fix dependabot pr 3414 [#3453](https://github.com/openshift/hypershift/pull/3453)
* NO-JIRA: kubevirt, e2e, Add additional network test [#3449](https://github.com/openshift/hypershift/pull/3449)
* NO-JIRA: remove PrivateIngressController cleanup [#3489](https://github.com/openshift/hypershift/pull/3489)
* [HOSTEDCP-1373](https://issues.redhat.com/browse/HOSTEDCP-1373): ARO HCP - Add capability for Azure VMs to be created with ephemeral disks [#3483](https://github.com/openshift/hypershift/pull/3483)
* NO-JIRA: contrib: add code for aws-tag-lb-service-webhook [#3493](https://github.com/openshift/hypershift/pull/3493)
* NO-JIRA: Bump the misc-dependencies group with 3 updates [#3486](https://github.com/openshift/hypershift/pull/3486)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3469](https://github.com/openshift/hypershift/pull/3469)
* [HOSTEDCP-1364](https://issues.redhat.com/browse/HOSTEDCP-1364): kubevirt,  use selector less services for ingress [#3343](https://github.com/openshift/hypershift/pull/3343)
* [OCPBUGS-22899](https://issues.redhat.com/browse/OCPBUGS-22899): node spread anti-affinity for HA HCP [#3286](https://github.com/openshift/hypershift/pull/3286)
* NO-JIRA: Bump the misc-dependencies group with 17 updates [#3476](https://github.com/openshift/hypershift/pull/3476)
* [HOSTEDCP-1401](https://issues.redhat.com/browse/HOSTEDCP-1401): Enable BYO NSG [#3455](https://github.com/openshift/hypershift/pull/3455)
* NO-JIRA: Update go-jose to the latest version to fix CVE [#3475](https://github.com/openshift/hypershift/pull/3475)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): re-revert api stuff [#3463](https://github.com/openshift/hypershift/pull/3463)
* [OCPBUGS-26940](https://issues.redhat.com/browse/OCPBUGS-26940): Include OperatorHubSpec sync with HC when Config is empty [#3454](https://github.com/openshift/hypershift/pull/3454)
* NO-JIRA: Simplified kubectl component version check [#3458](https://github.com/openshift/hypershift/pull/3458)
* NO-JIRA: Remove '--attach-default-network' from productized cli [#3462](https://github.com/openshift/hypershift/pull/3462)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#3451](https://github.com/openshift/hypershift/pull/3451)
* NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 [#3466](https://github.com/openshift/hypershift/pull/3466)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): indicate cluster profile to render the correct manifests [#3443](https://github.com/openshift/hypershift/pull/3443)
* [OCPBUGS-26977](https://issues.redhat.com/browse/OCPBUGS-26977): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3403](https://github.com/openshift/hypershift/pull/3403)
* [TRT-1456](https://issues.redhat.com/browse/TRT-1456): Revert #3448 "api: move CSRA to a new group" [#3460](https://github.com/openshift/hypershift/pull/3460)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): api: move CSRA to a new group [#3448](https://github.com/openshift/hypershift/pull/3448)
* [HOSTEDCP-1397](https://issues.redhat.com/browse/HOSTEDCP-1397): Add documentation on how to debug Azure nodes [#3452](https://github.com/openshift/hypershift/pull/3452)
* NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images [#3426](https://github.com/openshift/hypershift/pull/3426)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Add e2e to ensure SA token not mounted on mgmt workloa… [#3301](https://github.com/openshift/hypershift/pull/3301)
* NO-JIRA: Fix promql testdata missing issue [#3438](https://github.com/openshift/hypershift/pull/3438)
* NO-JIRA: Update RHTAP references (main) [#3446](https://github.com/openshift/hypershift/pull/3446)
* [HOSTEDCP-1188](https://issues.redhat.com/browse/HOSTEDCP-1188): Add docs for control plane scheduling topologies [#3434](https://github.com/openshift/hypershift/pull/3434)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Set outbound LoadBalancer name on AzureCluster [#3445](https://github.com/openshift/hypershift/pull/3445)
* NO-JIRA: Bump misc dependencies 21f825371d [#3433](https://github.com/openshift/hypershift/pull/3433)
* [HOSTEDCP-1207](https://issues.redhat.com/browse/HOSTEDCP-1207): Automated etcd backup [#3034](https://github.com/openshift/hypershift/pull/3034)
* NO-JIRA: Document machine configuration in HyperShift [#3331](https://github.com/openshift/hypershift/pull/3331)
* [HOSTEDCP-1382](https://issues.redhat.com/browse/HOSTEDCP-1382): [Subtask] Restore Ability to Create HCPs on Azure [#3404](https://github.com/openshift/hypershift/pull/3404)
* [HOSTEDCP-1314](https://issues.redhat.com/browse/HOSTEDCP-1314): Ensure all e2e HCs use NLB for ingress controller [#3293](https://github.com/openshift/hypershift/pull/3293)
* [OCPBUGS-26757](https://issues.redhat.com/browse/OCPBUGS-26757): Change KAS bootstrap image to cluster-config-api [#3400](https://github.com/openshift/hypershift/pull/3400)
* NO-JIRA: Improve nodepool's machine condition message [#3354](https://github.com/openshift/hypershift/pull/3354)
* [OCPBUGS-23228](https://issues.redhat.com/browse/OCPBUGS-23228): Add storage, csisnapshotcontroller and clustercsidrive… [#3396](https://github.com/openshift/hypershift/pull/3396)
* [OCPBUGS-27027](https://issues.redhat.com/browse/OCPBUGS-27027): availability-prober: wait for infrastructure name to be set [#3409](https://github.com/openshift/hypershift/pull/3409)
* NO-JIRA: remove non-existent v1beta2 from webhook [#3407](https://github.com/openshift/hypershift/pull/3407)
* [HOSTEDCP-1376](https://issues.redhat.com/browse/HOSTEDCP-1376): Bump the sigs.k8s-dependencies group and update dependabot groupings [#3392](https://github.com/openshift/hypershift/pull/3392)
* [OCPBUGS-25696](https://issues.redhat.com/browse/OCPBUGS-25696): Apply Scheduling Configuration for kCCM [#3382](https://github.com/openshift/hypershift/pull/3382)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): remove LoadBalancer filter from external-dns [#3410](https://github.com/openshift/hypershift/pull/3410)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): fix up external-dns flags [#3408](https://github.com/openshift/hypershift/pull/3408)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): reduce external-dns route53 call volume [#3394](https://github.com/openshift/hypershift/pull/3394)
* Update RHTAP references (main) [#3401](https://github.com/openshift/hypershift/pull/3401)
* [OCPBUGS-25897](https://issues.redhat.com/browse/OCPBUGS-25897): hcco: use manual mode for CCO [#3375](https://github.com/openshift/hypershift/pull/3375)
* [HOSTEDCP-1309](https://issues.redhat.com/browse/HOSTEDCP-1309): Add GC knobs for KAS [#3384](https://github.com/openshift/hypershift/pull/3384)
* NO-JIRA: [KubeVirt] Fix external infra permissions documentation [#3391](https://github.com/openshift/hypershift/pull/3391)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3373](https://github.com/openshift/hypershift/pull/3373)
* [OCPBUGS-25974](https://issues.redhat.com/browse/OCPBUGS-25974): Do not use CPO image from status if it's not a valid image reference [#3361](https://github.com/openshift/hypershift/pull/3361)
* [OCPBUGS-23518](https://issues.redhat.com/browse/OCPBUGS-23518): consider HCP upgradeable if CVO has no upgradable condition [#3239](https://github.com/openshift/hypershift/pull/3239)
* [OCPBUGS-26232](https://issues.redhat.com/browse/OCPBUGS-26232): set KAS runtime-config in alignment with feature gates [#3377](https://github.com/openshift/hypershift/pull/3377)
* [HOSTEDCP-1372](https://issues.redhat.com/browse/HOSTEDCP-1372): Bumps k8s to v0.29 [#3360](https://github.com/openshift/hypershift/pull/3360)
* [OCPBUGS-25342](https://issues.redhat.com/browse/OCPBUGS-25342): Add extra resources to be encrypted. [#3341](https://github.com/openshift/hypershift/pull/3341)
* [OCPBUGS-26197](https://issues.redhat.com/browse/OCPBUGS-26197): hostedcontrolplane: don't start pki operator when disabled [#3368](https://github.com/openshift/hypershift/pull/3368)
* [CNV-36656](https://issues.redhat.com/browse/CNV-36656): Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider [#3364](https://github.com/openshift/hypershift/pull/3364)
* NO-JIRA: Update RHTAP references (main) [#3365](https://github.com/openshift/hypershift/pull/3365)
* [HOSTEDCP-1371](https://issues.redhat.com/browse/HOSTEDCP-1371): Bump Golang to v1.21 [#3359](https://github.com/openshift/hypershift/pull/3359)
* [HOSTEDCP-1328](https://issues.redhat.com/browse/HOSTEDCP-1328): Add Ability to Encrypt VM OS Disks [#3281](https://github.com/openshift/hypershift/pull/3281)
* [HOSTEDCP-1122](https://issues.redhat.com/browse/HOSTEDCP-1122): Etcd defrag controller [#2869](https://github.com/openshift/hypershift/pull/2869)
* NO-JIRA: Update RHTAP references (main) [#3275](https://github.com/openshift/hypershift/pull/3275)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move fixtures out of API [#3342](https://github.com/openshift/hypershift/pull/3342)
* [OCPBUGS-23362](https://issues.redhat.com/browse/OCPBUGS-23362): Set new condition on SG deletion. [#3307](https://github.com/openshift/hypershift/pull/3307)
* NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update [#3251](https://github.com/openshift/hypershift/pull/3251)
* NO-JIRA: Add rbac permission for kubevirt capi [#3344](https://github.com/openshift/hypershift/pull/3344)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry writer when telemeter-client cm not exists [#3348](https://github.com/openshift/hypershift/pull/3348)
* NO-JIRA: Approvers update [#3347](https://github.com/openshift/hypershift/pull/3347)
* [HOSTEDCP-1262](https://issues.redhat.com/browse/HOSTEDCP-1262): Add additional CEL to Arch in NodePoolSpec [#3333](https://github.com/openshift/hypershift/pull/3333)
* NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools [#3334](https://github.com/openshift/hypershift/pull/3334)
* NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 [#3335](https://github.com/openshift/hypershift/pull/3335)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3332](https://github.com/openshift/hypershift/pull/3332)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move CAPI imports from /api package into support/api [#3270](https://github.com/openshift/hypershift/pull/3270)
* [OCPBUGS-24308](https://issues.redhat.com/browse/OCPBUGS-24308): Add PodDisruptionBudget for router deployment [#3337](https://github.com/openshift/hypershift/pull/3337)
* [HOSTEDCP-1355](https://issues.redhat.com/browse/HOSTEDCP-1355): Remove unused functions from repo [#3325](https://github.com/openshift/hypershift/pull/3325)
* NO-JIRA: RHTAP Multi-Arch PipelineSpec [#3340](https://github.com/openshift/hypershift/pull/3340)
* [HOSTEDCP-1329](https://issues.redhat.com/browse/HOSTEDCP-1329): Allow user to specify resource group for NodePool resources [#3279](https://github.com/openshift/hypershift/pull/3279)
* [HOSTEDCP-1353](https://issues.redhat.com/browse/HOSTEDCP-1353): Improve description for agent APIServerAddress CLI flag [#3314](https://github.com/openshift/hypershift/pull/3314)
* [ACM-8917](https://issues.redhat.com/browse/ACM-8917): Add agentLabelSelector to nodepool agent create to CLI [#3285](https://github.com/openshift/hypershift/pull/3285)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): control-plane-operator: reconcile the CCO [#2794](https://github.com/openshift/hypershift/pull/2794)
* NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools [#3045](https://github.com/openshift/hypershift/pull/3045)
* NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools [#3145](https://github.com/openshift/hypershift/pull/3145)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): use library-go crypto where we can [#3326](https://github.com/openshift/hypershift/pull/3326)
* [OCPBUGS-25332](https://issues.redhat.com/browse/OCPBUGS-25332): Force KMSv1 on [#3318](https://github.com/openshift/hypershift/pull/3318)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3320](https://github.com/openshift/hypershift/pull/3320)
* [HOSTEDCP-1327](https://issues.redhat.com/browse/HOSTEDCP-1327): Remove Old Azure SDKs from Azure Infra [#3274](https://github.com/openshift/hypershift/pull/3274)
* [OCPBUGS-25306](https://issues.redhat.com/browse/OCPBUGS-25306): Use k8s.io/kube-scheduler/config/v1 [#3313](https://github.com/openshift/hypershift/pull/3313)
* [TRT-1406](https://issues.redhat.com/browse/TRT-1406): Revert #3283 "HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation" [#3306](https://github.com/openshift/hypershift/pull/3306)
* [OCPBUGS-25103](https://issues.redhat.com/browse/OCPBUGS-25103): Remove reference to v1alpha1 flowcontrol [#3304](https://github.com/openshift/hypershift/pull/3304)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3267](https://github.com/openshift/hypershift/pull/3267)
* NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) [#3305](https://github.com/openshift/hypershift/pull/3305)
* [OCPBUGS-24261](https://issues.redhat.com/browse/OCPBUGS-24261): Konnectivity agent update strategy [#3294](https://github.com/openshift/hypershift/pull/3294)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3280](https://github.com/openshift/hypershift/pull/3280)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3284](https://github.com/openshift/hypershift/pull/3284)
* [OCPBUGS-23511](https://issues.redhat.com/browse/OCPBUGS-23511): Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals [#3215](https://github.com/openshift/hypershift/pull/3215)
* NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out [#3302](https://github.com/openshift/hypershift/pull/3302)
* [HOSTEDCP-1343](https://issues.redhat.com/browse/HOSTEDCP-1343): docs(ibmcloud): Add HC/HCP yamls for IBM Cloud [#3287](https://github.com/openshift/hypershift/pull/3287)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3283](https://github.com/openshift/hypershift/pull/3283)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3276](https://github.com/openshift/hypershift/pull/3276)
* [OCPBUGS-20035](https://issues.redhat.com/browse/OCPBUGS-20035): Add HostedCluster false conditions sumamry when cluste… [#3190](https://github.com/openshift/hypershift/pull/3190)
* [Full changelog](https://github.com/openshift/hypershift/compare/eebff759de63215ec24011fbfba6e2e1054c1333...6bb55dffe1bbf25c1086fa4398c8c97b083b57bb)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)

* [OCPBUGS-22602](https://issues.redhat.com/browse/OCPBUGS-22602), [OCPCLOUD-2419](https://issues.redhat.com/browse/OCPCLOUD-2419): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (d1ca4a9) into master [#59](https://github.com/openshift/cloud-provider-ibm/pull/59)
* [OCPBUGS-25562](https://issues.redhat.com/browse/OCPBUGS-25562): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-ibm/pull/62)
* [OCPBUGS-25638](https://issues.redhat.com/browse/OCPBUGS-25638): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/cloud-provider-ibm/pull/63)
* [OCPBUGS-24921](https://issues.redhat.com/browse/OCPBUGS-24921): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-ibm/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/19e64d5c78656c7c91cbec310ca312cbe92f60f0...f961f16d17dcd6f7e43fd7fed967ce3b06ec9494)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/32b4c00517de0f54bf738380064a12d58b031eec)

* [OCPBUGS-30514](https://issues.redhat.com/browse/OCPBUGS-30514): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#65](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/65)
* [STOR-1571](https://issues.redhat.com/browse/STOR-1571): Chore: Update ibm-vpc-block-csi-driver to the latest release [#64](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/64)
* [OCPBUGS-25566](https://issues.redhat.com/browse/OCPBUGS-25566): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#63](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/63)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#62](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/62)
* [OCPBUGS-25049](https://issues.redhat.com/browse/OCPBUGS-25049): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#61](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/61)
* [OCPBUGS-24930](https://issues.redhat.com/browse/OCPBUGS-24930): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#60](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/60)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ce7f53cdf24173b0625b9263ef38a8ed956adcd2...32b4c00517de0f54bf738380064a12d58b031eec)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/9cc8f148e2f6e6228419b165ef7813f9548df2dd)

* [OCPBUGS-29247](https://issues.redhat.com/browse/OCPBUGS-29247): ibm-vpc-block-csi-driver is missing sidecar metrics [#112](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/112)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node registrar [#110](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/110)
* [OCPBUGS-29578](https://issues.redhat.com/browse/OCPBUGS-29578): Apply hypershift cluster-profile for ibm-cloud-managed [#111](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/111)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#108](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/108)
* [OCPBUGS-28938](https://issues.redhat.com/browse/OCPBUGS-28938): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#109](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/109)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#107](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/107)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#105](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/105)
* [OCPBUGS-25539](https://issues.redhat.com/browse/OCPBUGS-25539): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#102](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/102)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#101](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/101)
* [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#100](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/100)
* [OCPBUGS-25105](https://issues.redhat.com/browse/OCPBUGS-25105): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#98](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/98)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#97](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/97)
* [OCPBUGS-24845](https://issues.redhat.com/browse/OCPBUGS-24845): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART [#96](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/96)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/516264a98d130f9f2a03b20acf33dcc1b556e6a8...9cc8f148e2f6e6228419b165ef7813f9548df2dd)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/3c01576e22ba1b9fdb7e513838b108021e32cc77)

* [OCPBUGS-29590](https://issues.redhat.com/browse/OCPBUGS-29590): Update golang.org/x/crypto module [#77](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/77)
* [OCPBUGS-24924](https://issues.redhat.com/browse/OCPBUGS-24924): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#70](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/70)
* [OCPBUGS-22604](https://issues.redhat.com/browse/OCPBUGS-22604), [OCPCLOUD-2454](https://issues.redhat.com/browse/OCPCLOUD-2454): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.7.0 (e51c61e) into main [#74](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/74)
* [OCPBUGS-26135](https://issues.redhat.com/browse/OCPBUGS-26135): Fix formatting in snyk vendor exclusions [#75](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/75)
* [OCPBUGS-25631](https://issues.redhat.com/browse/OCPBUGS-25631): Add Snyk file to exclude vendor directory on scan [#71](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/71)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/34fb625247f6743637b0ef0c5767e000e0ec1e65...3c01576e22ba1b9fdb7e513838b108021e32cc77)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1a3a3030afcbbc0a26e794050d300b818069ba16)

* [OCPBUGS-27872](https://issues.redhat.com/browse/OCPBUGS-27872): add an extra vendor exclude to snyk config [#36](https://github.com/openshift/machine-api-provider-ibmcloud/pull/36)
* [OCPBUGS-28965](https://issues.redhat.com/browse/OCPBUGS-28965): update textlogger usage [#35](https://github.com/openshift/machine-api-provider-ibmcloud/pull/35)
* [OCPCLOUD-2426](https://issues.redhat.com/browse/OCPCLOUD-2426): Update to k8s 1.29 [#34](https://github.com/openshift/machine-api-provider-ibmcloud/pull/34)
* [OCPBUGS-26134](https://issues.redhat.com/browse/OCPBUGS-26134): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/machine-api-provider-ibmcloud/pull/33)
* [OCPBUGS-25574](https://issues.redhat.com/browse/OCPBUGS-25574): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#32](https://github.com/openshift/machine-api-provider-ibmcloud/pull/32)
* [OCPBUGS-24962](https://issues.redhat.com/browse/OCPBUGS-24962): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#31](https://github.com/openshift/machine-api-provider-ibmcloud/pull/31)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1...1a3a3030afcbbc0a26e794050d300b818069ba16)


### [insights-operator](https://github.com/openshift/insights-operator/tree/82e7c86ab5707ee3ccc6adbf78656a7a1e1daa12)

* [OCPBUGS-32702](https://issues.redhat.com/browse/OCPBUGS-32702): anonymization - externalIP can be nil (#929) [#929](https://github.com/openshift/insights-operator/pull/929)
* [OCPBUGS-31959](https://issues.redhat.com/browse/OCPBUGS-31959): bump golang.org/x/net version (#924) [#924](https://github.com/openshift/insights-operator/pull/924)
* feat: increase archive size (#923) [#923](https://github.com/openshift/insights-operator/pull/923)
* DVO metrics gatherer minor changes (#922) [#922](https://github.com/openshift/insights-operator/pull/922)
* NO-JIRA: (refactor) reduce cognitive and adding unit tests (#889) [#889](https://github.com/openshift/insights-operator/pull/889)
* update & refactor "checkSummaryAndSend" function in the insightsuploader (#919) [#919](https://github.com/openshift/insights-operator/pull/919)
* delete all active jobs during restart (#920) [#920](https://github.com/openshift/insights-operator/pull/920)
* [OCPBUGS-31031](https://issues.redhat.com/browse/OCPBUGS-31031): use retrywatcher when watching job (#921) [#921](https://github.com/openshift/insights-operator/pull/921)
* [OCPBUGS-30515](https://issues.redhat.com/browse/OCPBUGS-30515): update protobuf version (#918) [#918](https://github.com/openshift/insights-operator/pull/918)
* NO-JIRA: (refactor) job completion uses event instead polling (#888) [#888](https://github.com/openshift/insights-operator/pull/888)
* apply hypershift cluster-profile (#914) [#914](https://github.com/openshift/insights-operator/pull/914)
* manifests: set required-scc for openshift workloads (#915) [#915](https://github.com/openshift/insights-operator/pull/915)
* extend clusteroperators gatherer to collect status of insightsoperator resource (#912) [#912](https://github.com/openshift/insights-operator/pull/912)
* update dependencies (#916) [#916](https://github.com/openshift/insights-operator/pull/916)
* NO-JIRA: update the gathered CPU usage metric (#913) [#913](https://github.com/openshift/insights-operator/pull/913)
* NO-JIRA: adjust loglevel for  some further messages (#911) [#911](https://github.com/openshift/insights-operator/pull/911)
* apply hypershift cluster-profile (#908) [#908](https://github.com/openshift/insights-operator/pull/908)
* bump loglevel of operator to normal (#895) [#895](https://github.com/openshift/insights-operator/pull/895)
* adjust log level of some rather important messages (#898) [#898](https://github.com/openshift/insights-operator/pull/898)
* NO-JIRA: add permission for prometheus to be able to read metrics (#907) [#907](https://github.com/openshift/insights-operator/pull/907)
* [OCPBUGS-26937](https://issues.redhat.com/browse/OCPBUGS-26937): Add extra check in ids to bypass validations (#899) [#899](https://github.com/openshift/insights-operator/pull/899)
* gather etcd_server_slow metrics (#897) [#897](https://github.com/openshift/insights-operator/pull/897)
* NO-JIRA: fix helmchart gather unit test (#880) [#880](https://github.com/openshift/insights-operator/pull/880)
* feature: support loglevel controller (#894) [#894](https://github.com/openshift/insights-operator/pull/894)
* NO-JIRA: Adding insights-config configuration description to arch.md (#892) [#892](https://github.com/openshift/insights-operator/pull/892)
* another attempt to fix security warning for changelog script (#893) [#893](https://github.com/openshift/insights-operator/pull/893)
* OpenShift & K8s versions bump up (#881) [#881](https://github.com/openshift/insights-operator/pull/881)
* NO-JIRA: fix errors handling + docs + lint (#866) [#866](https://github.com/openshift/insights-operator/pull/866)
* changelog script - parse arguments as time (#882) [#882](https://github.com/openshift/insights-operator/pull/882)
* Updating ose-insights-operator-container image to be consistent with ART (#885) [#885](https://github.com/openshift/insights-operator/pull/885)
* Updating ose-insights-operator-container image to be consistent with ART (#871) [#871](https://github.com/openshift/insights-operator/pull/871)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a6923466398b283a68b78fad9b1f2c5ccf9eaded...82e7c86ab5707ee3ccc6adbf78656a7a1e1daa12)


### [ironic](https://github.com/openshift/ironic-image/tree/280091b7e56ba25d95a989f19f70455bd243edb4)

* NO-ISSUE: Merge from metal3-io/ironic-image [#473](https://github.com/openshift/ironic-image/pull/473)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] remove unused prometheus-exporter from OKD too [#486](https://github.com/openshift/ironic-image/pull/486)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Remove unused prometheus exporter [#484](https://github.com/openshift/ironic-image/pull/484)
* [OCPBUGS-32366](https://issues.redhat.com/browse/OCPBUGS-32366): [4.16] Bump gunicorn version [#480](https://github.com/openshift/ironic-image/pull/480)
* NO-ISSUE: Use microversion-parse package [#481](https://github.com/openshift/ironic-image/pull/481)
* [OCPBUGS-32350](https://issues.redhat.com/browse/OCPBUGS-32350): Update to include fixes for ironic servicing feature [#478](https://github.com/openshift/ironic-image/pull/478)
* [OCPBUGS-32390](https://issues.redhat.com/browse/OCPBUGS-32390): Use unix sockets by default for reverse proxy communication [#472](https://github.com/openshift/ironic-image/pull/472)
* [OCPBUGS-32162](https://issues.redhat.com/browse/OCPBUGS-32162): Bump eventlet version [#471](https://github.com/openshift/ironic-image/pull/471)
* [METAL-949](https://issues.redhat.com/browse/METAL-949): Force pysnmp-lextudio and pyasn1 min version [#464](https://github.com/openshift/ironic-image/pull/464)
* [METAL-952](https://issues.redhat.com/browse/METAL-952): Install sushy from source [#466](https://github.com/openshift/ironic-image/pull/466)
* [METAL-804](https://issues.redhat.com/browse/METAL-804): Bump ironic hash to include recent fixes and features [#465](https://github.com/openshift/ironic-image/pull/465)
* [METAL-944](https://issues.redhat.com/browse/METAL-944): Install ironic-lib from source [#463](https://github.com/openshift/ironic-image/pull/463)
* [METAL-923](https://issues.redhat.com/browse/METAL-923): pick-up non-bootable ISO fix [#462](https://github.com/openshift/ironic-image/pull/462)
* [METAL-922](https://issues.redhat.com/browse/METAL-922): Add check requirements script [#461](https://github.com/openshift/ironic-image/pull/461)
* [METAL-901](https://issues.redhat.com/browse/METAL-901): Update ironic dependencies for OCP 4.16 [#457](https://github.com/openshift/ironic-image/pull/457)
* NO-ISSUE: Merge from upstream metal3-io/ironic-image [#459](https://github.com/openshift/ironic-image/pull/459)
* [METAL-909](https://issues.redhat.com/browse/METAL-909): Avoid context copy in CI or local builds [#458](https://github.com/openshift/ironic-image/pull/458)
* [METAL-849](https://issues.redhat.com/browse/METAL-849): Install ironic and ironic-inspector from source [#444](https://github.com/openshift/ironic-image/pull/444)
* [METAL-902](https://issues.redhat.com/browse/METAL-902): Split OKD and OCP packages list [#456](https://github.com/openshift/ironic-image/pull/456)
* NO-ISSUE: Updating openstack-ironic version [#455](https://github.com/openshift/ironic-image/pull/455)
* [OCPBUGS-27967](https://issues.redhat.com/browse/OCPBUGS-27967): Update packages for OCP 4.16 [#451](https://github.com/openshift/ironic-image/pull/451)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#449](https://github.com/openshift/ironic-image/pull/449)
* [OCPBUGS-22699](https://issues.redhat.com/browse/OCPBUGS-22699): Fix Inspector iPXE config for IPv6 addresses [#446](https://github.com/openshift/ironic-image/pull/446)
* [OCPBUGS-25605](https://issues.redhat.com/browse/OCPBUGS-25605): Relax packages requirements [#441](https://github.com/openshift/ironic-image/pull/441)
* NO-ISSUE: Merge from metal3-io/ironic-image (33275f5) [#443](https://github.com/openshift/ironic-image/pull/443)
* NO-ISSUE: Add requirements placeholders for cachito [#437](https://github.com/openshift/ironic-image/pull/437)
* [OCPBUGS-25392](https://issues.redhat.com/browse/OCPBUGS-25392): Stuck deployment [#440](https://github.com/openshift/ironic-image/pull/440)
* [OCPBUGS-24747](https://issues.redhat.com/browse/OCPBUGS-24747): Updating ironic-container image to be consistent with ART [#438](https://github.com/openshift/ironic-image/pull/438)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e38f8df7cff70fb7c2b87aee3bf9a265e342d676...280091b7e56ba25d95a989f19f70455bd243edb4)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/63681a469fdba2f223373ff36350bf2462b997a3)

* [OCPBUGS-31549](https://issues.redhat.com/browse/OCPBUGS-31549): update ironic-python-agent with latest fixes [#128](https://github.com/openshift/ironic-agent-image/pull/128)
* [OCPBUGS-32172](https://issues.redhat.com/browse/OCPBUGS-32172): Fix name in setup.cfg [#122](https://github.com/openshift/ironic-agent-image/pull/122)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Fix permission of check reqs script [#120](https://github.com/openshift/ironic-agent-image/pull/120)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add makefile with build and check reqs [#119](https://github.com/openshift/ironic-agent-image/pull/119)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Install ironic-python-agent from source [#118](https://github.com/openshift/ironic-agent-image/pull/118)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add requirements placeholders for cachito [#117](https://github.com/openshift/ironic-agent-image/pull/117)
* NO-ISSUE: Update openstack-ironic-python-agent version [#110](https://github.com/openshift/ironic-agent-image/pull/110)
* [METAL-913](https://issues.redhat.com/browse/METAL-913): drop dependency on python-hardware [#113](https://github.com/openshift/ironic-agent-image/pull/113)
* [OCPBUGS-30075](https://issues.redhat.com/browse/OCPBUGS-30075): Fix tripleo url with commit hash for openstack repos config [#114](https://github.com/openshift/ironic-agent-image/pull/114)
* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Always add ignition to set hostname on /etc/hostname [#106](https://github.com/openshift/ironic-agent-image/pull/106)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#104](https://github.com/openshift/ironic-agent-image/pull/104)
* [OCPBUGS-19950](https://issues.redhat.com/browse/OCPBUGS-19950): pick up the heartbeat retry fix [#101](https://github.com/openshift/ironic-agent-image/pull/101)
* [OCPBUGS-16607](https://issues.redhat.com/browse/OCPBUGS-16607): 502 Proxy Error [#100](https://github.com/openshift/ironic-agent-image/pull/100)
* [OCPBUGS-24781](https://issues.redhat.com/browse/OCPBUGS-24781): Updating ironic-agent-container image to be consistent with ART [#97](https://github.com/openshift/ironic-agent-image/pull/97)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/39d5064babe4291e475268666b28b62004235e43...63681a469fdba2f223373ff36350bf2462b997a3)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/93b8b5fa33950cadd2310278b7c762ebe0057418)

* [OCPBUGS-25775](https://issues.redhat.com/browse/OCPBUGS-25775): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.16 [#96](https://github.com/openshift/ironic-rhcos-downloader/pull/96)
* [OCPBUGS-25526](https://issues.redhat.com/browse/OCPBUGS-25526): Updating ironic-rhcos-downloader-container image to be consistent with ART [#95](https://github.com/openshift/ironic-rhcos-downloader/pull/95)
* [OCPBUGS-24788](https://issues.redhat.com/browse/OCPBUGS-24788): Updating ironic-rhcos-downloader-container image to be consistent with ART [#94](https://github.com/openshift/ironic-rhcos-downloader/pull/94)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/bcbcd95b6209afc8248b34c55294686dbd3831a3...93b8b5fa33950cadd2310278b7c762ebe0057418)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/e78e4c3e6db1805816308197eb9002dfbca27560)

* [OCPBUGS-24790](https://issues.redhat.com/browse/OCPBUGS-24790): Updating ironic-static-ip-manager-container image to be consistent with ART [#41](https://github.com/openshift/ironic-static-ip-manager/pull/41)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/472000211344be4a5e9581820e94895144cf2bfc...e78e4c3e6db1805816308197eb9002dfbca27560)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/e4f859be4f56d1fc65138f99f5331baf17c15885)

* [OCPBUGS-30532](https://issues.redhat.com/browse/OCPBUGS-30532): upgrade github.com/golang/protobuf to v1.5.4 for bette… [#101](https://github.com/openshift/k8s-prometheus-adapter/pull/101)
* [OCPBUGS-25583](https://issues.redhat.com/browse/OCPBUGS-25583): Updating ose-prometheus-adapter-container image to be consistent with ART [#100](https://github.com/openshift/k8s-prometheus-adapter/pull/100)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#99](https://github.com/openshift/k8s-prometheus-adapter/pull/99)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#98](https://github.com/openshift/k8s-prometheus-adapter/pull/98)
* [MON-3584](https://issues.redhat.com/browse/MON-3584): Remove trailing spaces from Dockerfile.ocp [#97](https://github.com/openshift/k8s-prometheus-adapter/pull/97)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/c38187e7ff03fb341eab7c05b4b91d6b2c40410e...e4f859be4f56d1fc65138f99f5331baf17c15885)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/95de81f5ffc9c8b50dddd4f890a666820e3b2b18)

* NO-ISSUE:  Add Scott and Mrunal as image approvers [#170](https://github.com/openshift/images/pull/170)
* NO-ISSUE: remove bparees from owners [#169](https://github.com/openshift/images/pull/169)
* [OCPBUGS-29484](https://issues.redhat.com/browse/OCPBUGS-29484): update unit tests in egress/dns-proxy [#165](https://github.com/openshift/images/pull/165)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): egress/dns-proxy: switch to haproxy28 RPM package [#160](https://github.com/openshift/images/pull/160)
* [OCPBUGS-24861](https://issues.redhat.com/browse/OCPBUGS-24861): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART [#158](https://github.com/openshift/images/pull/158)
* [OCPBUGS-24751](https://issues.redhat.com/browse/OCPBUGS-24751): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART [#155](https://github.com/openshift/images/pull/155)
* [OCPBUGS-24723](https://issues.redhat.com/browse/OCPBUGS-24723): Updating openshift-enterprise-base-container image to be consistent with ART [#154](https://github.com/openshift/images/pull/154)
* [Full changelog](https://github.com/openshift/images/compare/5d1de7f1b00d8517ba5c4b5b635fc60b954f2bff...95de81f5ffc9c8b50dddd4f890a666820e3b2b18)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/7938f253e74f2259951cc882f2879a9860a38481)

* [OCPBUGS-25164](https://issues.redhat.com/browse/OCPBUGS-25164): Bump to 0.7.1 [#25](https://github.com/openshift/kubernetes-metrics-server/pull/25)
* [OCPBUGS-31288](https://issues.redhat.com/browse/OCPBUGS-31288): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.16 [#24](https://github.com/openshift/kubernetes-metrics-server/pull/24)
* [MON-3465](https://issues.redhat.com/browse/MON-3465): Sync metrics-server with upstream v0.7.0 [#22](https://github.com/openshift/kubernetes-metrics-server/pull/22)
* [OCPBUGS-24858](https://issues.redhat.com/browse/OCPBUGS-24858): Updating ose-kube-metrics-server-container image to be consistent with ART [#21](https://github.com/openshift/kubernetes-metrics-server/pull/21)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/bcbf241cece8ef455be32a910f1570bae827b4a1...7938f253e74f2259951cc882f2879a9860a38481)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/5b658c433786797d0ac1b870db08346584794514)

* [OCPBUGS-30431](https://issues.redhat.com/browse/OCPBUGS-30431): CVE-2024-24786: bump pkg golang protobuf [#620](https://github.com/openshift/sdn/pull/620)
* [SDN-4404](https://issues.redhat.com/browse/SDN-4404): Kube 1.29 bump [#618](https://github.com/openshift/sdn/pull/618)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Do per-pod MCS/metadata blocking with nftables rather than iptables [#581](https://github.com/openshift/sdn/pull/581)
* NO-JIRA: Update README to note that openshift-sdn is deprecated [#611](https://github.com/openshift/sdn/pull/611)
* NO-JIRA: Move sdn to RHEL9 base image [#598](https://github.com/openshift/sdn/pull/598)
* [OCPBUGS-25740](https://issues.redhat.com/browse/OCPBUGS-25740): Updating ose-node-container image to be consistent with ART for 4.16 [#599](https://github.com/openshift/sdn/pull/599)
* [OCPBUGS-23666](https://issues.redhat.com/browse/OCPBUGS-23666): Add Snyk file to exclude directories on scan [#604](https://github.com/openshift/sdn/pull/604)
* [OCPBUGS-25779](https://issues.redhat.com/browse/OCPBUGS-25779): Updating kube-proxy-container image to be consistent with ART for 4.16 [#600](https://github.com/openshift/sdn/pull/600)
* [SDN-4179](https://issues.redhat.com/browse/SDN-4179): Metrics: Add metric for multicast enabled netnamespaces [#603](https://github.com/openshift/sdn/pull/603)
* [OCPBUGS-25015](https://issues.redhat.com/browse/OCPBUGS-25015): Updating kube-proxy-container image to be consistent with ART [#596](https://github.com/openshift/sdn/pull/596)
* [OCPBUGS-25036](https://issues.redhat.com/browse/OCPBUGS-25036): Use openshift-clients rpm rather than cli image [#593](https://github.com/openshift/sdn/pull/593)
* [Full changelog](https://github.com/openshift/sdn/compare/71a6f28d69f77953d104219cee344a70f7cbede1...5b658c433786797d0ac1b870db08346584794514)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/04d0a78154b45ce300e176836bd47c6004603e88)

* [AUTH-486](https://issues.redhat.com/browse/AUTH-486): Add tests for the hardcoded-authorizer feature [#90](https://github.com/openshift/kube-rbac-proxy/pull/90)
* [OCPBUGS-29974](https://issues.redhat.com/browse/OCPBUGS-29974): Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/kube-rbac-proxy/pull/91)
* [OCPBUGS-24818](https://issues.redhat.com/browse/OCPBUGS-24818): Updating kube-rbac-proxy-container image to be consistent with ART [#88](https://github.com/openshift/kube-rbac-proxy/pull/88)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/e8e8c84bcc6d4419970726f3028df4b178c0b1c9...04d0a78154b45ce300e176836bd47c6004603e88)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/9b67b8d1adbd63e27b622b3d050e0673766a6f2d)

* NO-JIRA: Merge `v2.11.0` and `v2.12.0` tags [#110](https://github.com/openshift/kube-state-metrics/pull/110)
* [OCPBUGS-25585](https://issues.redhat.com/browse/OCPBUGS-25585): Updating kube-state-metrics-container image to be consistent with ART [#109](https://github.com/openshift/kube-state-metrics/pull/109)
* [OCPBUGS-24993](https://issues.redhat.com/browse/OCPBUGS-24993): Updating kube-state-metrics-container image to be consistent with ART [#108](https://github.com/openshift/kube-state-metrics/pull/108)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/037b59c265454c599dfb0829a856e14b1ab07896...9b67b8d1adbd63e27b622b3d050e0673766a6f2d)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)

* [OCPBUGS-27929](https://issues.redhat.com/browse/OCPBUGS-27929): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 [#203](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/203)
* [OCPBUGS-24969](https://issues.redhat.com/browse/OCPBUGS-24969): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#202](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/202)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/e8749689edb8e7fea42eca5f2b67c3187192cdeb...969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/3db76104a38bd9160ca24e2ed4a33649843f210a)

* [OCPBUGS-30518](https://issues.redhat.com/browse/OCPBUGS-30518): Upstream rebase 18 04 2024 [#41](https://github.com/openshift/cloud-provider-kubevirt/pull/41)
* [OCPBUGS-24936](https://issues.redhat.com/browse/OCPBUGS-24936): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#30](https://github.com/openshift/cloud-provider-kubevirt/pull/30)
* [OCPBUGS-26182](https://issues.redhat.com/browse/OCPBUGS-26182): Upstream rebease 4 5 2024 [#40](https://github.com/openshift/cloud-provider-kubevirt/pull/40)
* [OCPBUGS-30303](https://issues.redhat.com/browse/OCPBUGS-30303): Merge github.com/kubevirt 03 06 2024 [#35](https://github.com/openshift/cloud-provider-kubevirt/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/315a448d86ea260bcf6b31052bfd44c71dfcc3d2...3db76104a38bd9160ca24e2ed4a33649843f210a)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/738dc394f915b6585f2cc4c1cc312b51d45d8d1f)

* [CNV-36073](https://issues.redhat.com/browse/CNV-36073): Sync upstream kubevirt-csi 2024-04-19 [#39](https://github.com/openshift/kubevirt-csi-driver/pull/39)
* "NO-JIRA: Sync upstream kubevirt-csi 2024-04-08" [#38](https://github.com/openshift/kubevirt-csi-driver/pull/38)
* [OCPBUGS-31276](https://issues.redhat.com/browse/OCPBUGS-31276): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/kubevirt-csi-driver/pull/37)
* [CNV-32073](https://issues.redhat.com/browse/CNV-32073): Sync upstream 2024-03-15 [#36](https://github.com/openshift/kubevirt-csi-driver/pull/36)
* NO-JIRA: Address CVE-2024-1725:  Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#32](https://github.com/openshift/kubevirt-csi-driver/pull/32)
* NO-JIRA: Snapshot backport [#31](https://github.com/openshift/kubevirt-csi-driver/pull/31)
* NO-JIRA: Auto sync upstream 2024 01 05 18 36 [#27](https://github.com/openshift/kubevirt-csi-driver/pull/27)
* [OCPBUGS-24805](https://issues.redhat.com/browse/OCPBUGS-24805): Updating ose-kubevirt-csi-driver-container image to be consistent with ART [#26](https://github.com/openshift/kubevirt-csi-driver/pull/26)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/aea7be8e2213a74d1945d39eba4d1efec0369c36...738dc394f915b6585f2cc4c1cc312b51d45d8d1f)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/a336f0b5f7ee99c418aaab3d511707bd0064bd56)

* [OCPBUGS-26046](https://issues.redhat.com/browse/OCPBUGS-26046): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#281](https://github.com/openshift/cluster-api-provider-libvirt/pull/281)
* [OCPBUGS-25630](https://issues.redhat.com/browse/OCPBUGS-25630): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/cluster-api-provider-libvirt/pull/276)
* [OCPBUGS-25173](https://issues.redhat.com/browse/OCPBUGS-25173): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#275](https://github.com/openshift/cluster-api-provider-libvirt/pull/275)
* [OCPBUGS-25101](https://issues.redhat.com/browse/OCPBUGS-25101): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#274](https://github.com/openshift/cluster-api-provider-libvirt/pull/274)
* [OCPBUGS-24833](https://issues.redhat.com/browse/OCPBUGS-24833): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#273](https://github.com/openshift/cluster-api-provider-libvirt/pull/273)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a...a336f0b5f7ee99c418aaab3d511707bd0064bd56)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/ac84cecd1374041a1dbb70313f76504c41b131a6)

* [OCPCLOUD-2501](https://issues.redhat.com/browse/OCPCLOUD-2501): Update to set GpuType annotation to remove hardcoded value [#1226](https://github.com/openshift/machine-api-operator/pull/1226)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Bug fix in unit test [#1232](https://github.com/openshift/machine-api-operator/pull/1232)
* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Add unit tests for the functions handling ScaleFromZero annotations [#1227](https://github.com/openshift/machine-api-operator/pull/1227)
* [OCPBUGS-31962](https://issues.redhat.com/browse/OCPBUGS-31962): Bump x/net to v.0.24.0 [#1228](https://github.com/openshift/machine-api-operator/pull/1228)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1219](https://github.com/openshift/machine-api-operator/pull/1219)
* [OCPBUGS-29874](https://issues.redhat.com/browse/OCPBUGS-29874): Apply hypershift cluster-profile for ibm-cloud-managed [#1218](https://github.com/openshift/machine-api-operator/pull/1218)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump IPAM types to v1beta1. [#1205](https://github.com/openshift/machine-api-operator/pull/1205)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Add build tags to tools.go file to solve linting issues when running Snyk scans [#1215](https://github.com/openshift/machine-api-operator/pull/1215)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add additional vnet join permission for Azure [#1212](https://github.com/openshift/machine-api-operator/pull/1212)
* [SPLAT-1386](https://issues.redhat.com/browse/SPLAT-1386): reconcile additional tags assigned to machine [#1204](https://github.com/openshift/machine-api-operator/pull/1204)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Fix formatting in snyk vendor exclusions [#1201](https://github.com/openshift/machine-api-operator/pull/1201)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1211](https://github.com/openshift/machine-api-operator/pull/1211)
* [CFE-684](https://issues.redhat.com/browse/CFE-684), [OCPCLOUD-2430](https://issues.redhat.com/browse/OCPCLOUD-2430): Rebase k8s 1.29 and update dependencies [#1208](https://github.com/openshift/machine-api-operator/pull/1208)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Update GCPCloudCredentials with TagUser role [#1158](https://github.com/openshift/machine-api-operator/pull/1158)
* [OCPBUGS-27385](https://issues.redhat.com/browse/OCPBUGS-27385): Add useExternalIp gcp permission [#1206](https://github.com/openshift/machine-api-operator/pull/1206)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Set --max-concurrent-reconciles=10 for Azure machine controller [#1203](https://github.com/openshift/machine-api-operator/pull/1203)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Add AddWithActuatorOpts to allow overriding Machine controller options [#1202](https://github.com/openshift/machine-api-operator/pull/1202)
* [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1178](https://github.com/openshift/machine-api-operator/pull/1178)
* [OCPBUGS-25580](https://issues.redhat.com/browse/OCPBUGS-25580): Updating ose-machine-api-operator-container image to be consistent with ART [#1190](https://github.com/openshift/machine-api-operator/pull/1190)
* [OCPBUGS-25735](https://issues.redhat.com/browse/OCPBUGS-25735): Add Snyk file to exclude vendor directory on scan [#1192](https://github.com/openshift/machine-api-operator/pull/1192)
* [OCPBUGS-24980](https://issues.redhat.com/browse/OCPBUGS-24980): Updating ose-machine-api-operator-container image to be consistent with ART [#1187](https://github.com/openshift/machine-api-operator/pull/1187)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e2b4537e57f4407e5469ad673dda126df5bb2a8b...ac84cecd1374041a1dbb70313f76504c41b131a6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/69944ada37af73f874bc436cbd79e5b9af4c16de)

* [OCPBUGS-11936](https://issues.redhat.com/browse/OCPBUGS-11936): Wait for OpenStack Metadata service [#4092](https://github.com/openshift/machine-config-operator/pull/4092)
* NO-ISSUE: API bump & reconcile feature gates move [#4335](https://github.com/openshift/machine-config-operator/pull/4335)
* NO-ISSUE: Add NodeDisruptionPolicy docs [#4336](https://github.com/openshift/machine-config-operator/pull/4336)
* [OCPBUGS-32739](https://issues.redhat.com/browse/OCPBUGS-32739): MachineConfigurations is only effective with name &lt;cluster&gt; [#4332](https://github.com/openshift/machine-config-operator/pull/4332)
* [MCO-1017](https://issues.redhat.com/browse/MCO-1017): MCO-1018  MCO-1019:  MCO-1020:  MCO-1021: OCPBUGS-32583: OCPBUGS-32679: Implement PinnedImageSets [#4303](https://github.com/openshift/machine-config-operator/pull/4303)
* [OCPBUGS-33018](https://issues.redhat.com/browse/OCPBUGS-33018): pkg/daemon: Ignore watch failure unless kubelet needs a rebootstrap [#4337](https://github.com/openshift/machine-config-operator/pull/4337)
* [MCO-1009](https://issues.redhat.com/browse/MCO-1009): MCO-1008: MCO-905: Implement NodeDisruptionPolicy API [#4267](https://github.com/openshift/machine-config-operator/pull/4267)
* [OCPBUGS-32138](https://issues.redhat.com/browse/OCPBUGS-32138): add cluster fleet evaluation support to mco [#4316](https://github.com/openshift/machine-config-operator/pull/4316)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): cleanup: update references in docs from machine-os-contenet to rhel-coreos [#4329](https://github.com/openshift/machine-config-operator/pull/4329)
* [MCO-1029](https://issues.redhat.com/browse/MCO-1029): MCO-678: Implement Boot Image update opt-in API [#4281](https://github.com/openshift/machine-config-operator/pull/4281)
* [MCO-1117](https://issues.redhat.com/browse/MCO-1117): Make local MCO image builds faster [#4296](https://github.com/openshift/machine-config-operator/pull/4296)
* [OCPBUGS-32278](https://issues.redhat.com/browse/OCPBUGS-32278): Fix configure-ip-forwarding.sh [#4323](https://github.com/openshift/machine-config-operator/pull/4323)
* [MCO-1102](https://issues.redhat.com/browse/MCO-1102): OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API [#4285](https://github.com/openshift/machine-config-operator/pull/4285)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4318](https://github.com/openshift/machine-config-operator/pull/4318)
* [MCO-1129](https://issues.redhat.com/browse/MCO-1129): Re-land Adapting the MCO featuregate usage to new API [#4315](https://github.com/openshift/machine-config-operator/pull/4315)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4319](https://github.com/openshift/machine-config-operator/pull/4319)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Support Cluster ImagePolicy CRD [#4160](https://github.com/openshift/machine-config-operator/pull/4160)
* [OCPBUGS-32028](https://issues.redhat.com/browse/OCPBUGS-32028): Decrease logs of haproxy [#4245](https://github.com/openshift/machine-config-operator/pull/4245)
* [OCPBUGS-30192](https://issues.redhat.com/browse/OCPBUGS-30192): Move StartLimitIntervalSec to Unit section [#4304](https://github.com/openshift/machine-config-operator/pull/4304)
* [OCPBUGS-28577](https://issues.redhat.com/browse/OCPBUGS-28577): MCO-1030, MCO-910: Updating MCO base image to RHEL9 [#4241](https://github.com/openshift/machine-config-operator/pull/4241)
* [OCPBUGS-22910](https://issues.redhat.com/browse/OCPBUGS-22910): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4016](https://github.com/openshift/machine-config-operator/pull/4016)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955): make sure CO degrades if OCL config is invalid [#4294](https://github.com/openshift/machine-config-operator/pull/4294)
* [OCPBUGS-31630](https://issues.redhat.com/browse/OCPBUGS-31630): fix: resources were in the wrong indentation level [#4299](https://github.com/openshift/machine-config-operator/pull/4299)
* [TRT-1587](https://issues.redhat.com/browse/TRT-1587): Revert #4275 "MCO-1092: Adapt the MCO's featuregate usage to new API" [#4295](https://github.com/openshift/machine-config-operator/pull/4295)
* [OCPBUGS-31376](https://issues.redhat.com/browse/OCPBUGS-31376): kubelet: restorecon necessary files on kubelet's prestart [#4287](https://github.com/openshift/machine-config-operator/pull/4287)
* [MCO-1092](https://issues.redhat.com/browse/MCO-1092): Adapt the MCO's featuregate usage to new API [#4275](https://github.com/openshift/machine-config-operator/pull/4275)
* [OCPBUGS-31067](https://issues.redhat.com/browse/OCPBUGS-31067): server: still serve kubeconfig with node-bootstrapper-token [#4276](https://github.com/openshift/machine-config-operator/pull/4276)
* [OCPBUGS-9108](https://issues.redhat.com/browse/OCPBUGS-9108): OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading [#4240](https://github.com/openshift/machine-config-operator/pull/4240)
* [OCPBUGS-27316](https://issues.redhat.com/browse/OCPBUGS-27316): configure-ovs: generate profiles directly in /run [#4042](https://github.com/openshift/machine-config-operator/pull/4042)
* [OCPBUGS-25744](https://issues.redhat.com/browse/OCPBUGS-25744), [OPNET-303](https://issues.redhat.com/browse/OPNET-303): Remove weights from ingress check script [#3698](https://github.com/openshift/machine-config-operator/pull/3698)
* [OCPBUGS-31365](https://issues.redhat.com/browse/OCPBUGS-31365): make verify should use MCO's kube version [#4280](https://github.com/openshift/machine-config-operator/pull/4280)
* [MCO-760](https://issues.redhat.com/browse/MCO-760): add rebuild mechanism to ocb [#4189](https://github.com/openshift/machine-config-operator/pull/4189)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Updates GCR CredentialProviderConfig [#4260](https://github.com/openshift/machine-config-operator/pull/4260)
* [OCPBUGS-30852](https://issues.redhat.com/browse/OCPBUGS-30852): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4261](https://github.com/openshift/machine-config-operator/pull/4261)
* [MCO-909](https://issues.redhat.com/browse/MCO-909): Openshift/Kubernetes 1.29 Rebase Updates [#4256](https://github.com/openshift/machine-config-operator/pull/4256)
* [OCPBUGS-30239](https://issues.redhat.com/browse/OCPBUGS-30239): Prevent OVS-configuration to run before kdump [#4213](https://github.com/openshift/machine-config-operator/pull/4213)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514), [OCPCLOUD-2516](https://issues.redhat.com/browse/OCPCLOUD-2516): Remove reliance on feature gates for cloud provider flags [#4228](https://github.com/openshift/machine-config-operator/pull/4228)
* NO-JIRA: Sync CRI-O owners [#4234](https://github.com/openshift/machine-config-operator/pull/4234)
* [OCPNODE-2098](https://issues.redhat.com/browse/OCPNODE-2098): Add static pod for kube-rbac-proxy-crio [#4175](https://github.com/openshift/machine-config-operator/pull/4175)
* [OCPCLOUD-2462](https://issues.redhat.com/browse/OCPCLOUD-2462): Add Image Credential Provider flags for Kubelet on Azure [#4222](https://github.com/openshift/machine-config-operator/pull/4222)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821): backportable version of api-int cert work [#4106](https://github.com/openshift/machine-config-operator/pull/4106)
* [MCO-898](https://issues.redhat.com/browse/MCO-898): OCPBUGS-29857: OCPBUGS-29819: Implement an alerting mechanism for boot image update failures [#4194](https://github.com/openshift/machine-config-operator/pull/4194)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Add Image Credential Provider flags for Kubelet on GCP [#4224](https://github.com/openshift/machine-config-operator/pull/4224)
* [OCPBUGS-30136](https://issues.redhat.com/browse/OCPBUGS-30136): APIVersion and Kind sometimes are empty when listing objects [#4231](https://github.com/openshift/machine-config-operator/pull/4231)
* [OCPBUGS-29946](https://issues.redhat.com/browse/OCPBUGS-29946): Prevent pull images in podmanCopy if they are present [#4216](https://github.com/openshift/machine-config-operator/pull/4216)
* [OCPBUGS-18670](https://issues.redhat.com/browse/OCPBUGS-18670): OCPBUGS-18535: MCO-809: rendercontroller should also reconcile machineconfigs [#4158](https://github.com/openshift/machine-config-operator/pull/4158)
* [OCPBUGS-30090](https://issues.redhat.com/browse/OCPBUGS-30090): add node owner to MCN [#4223](https://github.com/openshift/machine-config-operator/pull/4223)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Add HostToContainer propogataion for coreDNS pods on cloud platforms [#4218](https://github.com/openshift/machine-config-operator/pull/4218)
* NO-JIRA: ovs-configfuration, run after nmstate.service [#4212](https://github.com/openshift/machine-config-operator/pull/4212)
* [OCPBUGS-29713](https://issues.redhat.com/browse/OCPBUGS-29713): set nodeStatusReportFrequency [#4204](https://github.com/openshift/machine-config-operator/pull/4204)
* [MCO-998](https://issues.redhat.com/browse/MCO-998): sets up MCO repository for Snyk CI scans [#4197](https://github.com/openshift/machine-config-operator/pull/4197)
* [OCPBUGS-29732](https://issues.redhat.com/browse/OCPBUGS-29732): Always touch resolv-prepender file at end of script [#4207](https://github.com/openshift/machine-config-operator/pull/4207)
* [OCPBUGS-29659](https://issues.redhat.com/browse/OCPBUGS-29659): Apply new DNS configuration only if changed [#4196](https://github.com/openshift/machine-config-operator/pull/4196)
* [OCPBUGS-29624](https://issues.redhat.com/browse/OCPBUGS-29624): Restart resolv-prepender on failure [#4201](https://github.com/openshift/machine-config-operator/pull/4201)
* [OCPNODE-1877](https://issues.redhat.com/browse/OCPNODE-1877): Delete image openshift/openshift-proxy-pull-test [#4047](https://github.com/openshift/machine-config-operator/pull/4047)
* NO-JIRA: nmstate, configure nmstate to keep service yamls [#4190](https://github.com/openshift/machine-config-operator/pull/4190)
* NO-ISSUE: OWNERS: Remove myself from reviewers [#3628](https://github.com/openshift/machine-config-operator/pull/3628)
* NO-ISSUE: add e2e-techpreview-shared, remove layering test target [#4183](https://github.com/openshift/machine-config-operator/pull/4183)
* [OCPBUGS-27162](https://issues.redhat.com/browse/OCPBUGS-27162): Add dependency on crio-wipe to resolv-prepender [#4146](https://github.com/openshift/machine-config-operator/pull/4146)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Revert "Revert "Merge pull request #4028 from cybertron/wait-for-br-ex"" [#4079](https://github.com/openshift/machine-config-operator/pull/4079)
* [OPNET-355](https://issues.redhat.com/browse/OPNET-355): Use NM's dns-change event for resolv.conf [#4133](https://github.com/openshift/machine-config-operator/pull/4133)
* [OCPBUGS-18940](https://issues.redhat.com/browse/OCPBUGS-18940): Add keepalived healthcheck for machine-config-server [#4129](https://github.com/openshift/machine-config-operator/pull/4129)
* [MCO-774](https://issues.redhat.com/browse/MCO-774): Write e2e tests for bootimage management [#4177](https://github.com/openshift/machine-config-operator/pull/4177)
* NO-JIRA: remove kube-rbac-proxy for crio port [#4181](https://github.com/openshift/machine-config-operator/pull/4181)
* [OCPBUGS-26951](https://issues.redhat.com/browse/OCPBUGS-26951): annotate on-prem static pods for workload partitioning [#4143](https://github.com/openshift/machine-config-operator/pull/4143)
* NO-JIRA: Fix patch comparison bug in test [#4176](https://github.com/openshift/machine-config-operator/pull/4176)
* docs/HACKING: Update command for building customize OCP release [#4023](https://github.com/openshift/machine-config-operator/pull/4023)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955), [OCPBUGS-18989](https://issues.redhat.com/browse/OCPBUGS-18989), [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): add capability to react to OCB ImageBuilderType changes [#4127](https://github.com/openshift/machine-config-operator/pull/4127)
* [OCPBUGS-29098](https://issues.redhat.com/browse/OCPBUGS-29098): Revert "OCPNODE-2024: crio: migrate metrics port to localhost only" [#4168](https://github.com/openshift/machine-config-operator/pull/4168)
* [OCPBUGS-28969](https://issues.redhat.com/browse/OCPBUGS-28969): On-prem coredns manifests should not be generated for GCP [#4165](https://github.com/openshift/machine-config-operator/pull/4165)
* [OCPBUGS-26557](https://issues.redhat.com/browse/OCPBUGS-26557): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4111](https://github.com/openshift/machine-config-operator/pull/4111)
* [OCPNODE-2024](https://issues.redhat.com/browse/OCPNODE-2024): crio: migrate metrics port to localhost only [#4164](https://github.com/openshift/machine-config-operator/pull/4164)
* [OCPBUGS-24356](https://issues.redhat.com/browse/OCPBUGS-24356): ovs-configure: fix `vlan_parent` calculation [#4055](https://github.com/openshift/machine-config-operator/pull/4055)
* [OCPBUGS-24705](https://issues.redhat.com/browse/OCPBUGS-24705): consider currentImage and desiredImage annotations [#4135](https://github.com/openshift/machine-config-operator/pull/4135)
* [CORS-2814](https://issues.redhat.com/browse/CORS-2814): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4018](https://github.com/openshift/machine-config-operator/pull/4018)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721), [OCPBUGS-25753](https://issues.redhat.com/browse/OCPBUGS-25753): Run resolv-prepender entirely async [#4102](https://github.com/openshift/machine-config-operator/pull/4102)
* [OCPBUGS-26489](https://issues.redhat.com/browse/OCPBUGS-26489): feat: enable nodeip service for single node [#4142](https://github.com/openshift/machine-config-operator/pull/4142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#4147](https://github.com/openshift/machine-config-operator/pull/4147)
* [OCPBUGS-24366](https://issues.redhat.com/browse/OCPBUGS-24366): Delete state files on reboot only [#4124](https://github.com/openshift/machine-config-operator/pull/4124)
* [OCPBUGS-17788](https://issues.redhat.com/browse/OCPBUGS-17788): Improved error handling for missing MC [#4096](https://github.com/openshift/machine-config-operator/pull/4096)
* [OCPBUGS-27508](https://issues.redhat.com/browse/OCPBUGS-27508): daemon: allow the user to override drains on IR changes [#4139](https://github.com/openshift/machine-config-operator/pull/4139)
* [MCO-831](https://issues.redhat.com/browse/MCO-831): added feature gate to mco for on cluster builds [#4060](https://github.com/openshift/machine-config-operator/pull/4060)
* [OCPNODE-2005](https://issues.redhat.com/browse/OCPNODE-2005): crio: add support for LinkLogs annotation by default [#4116](https://github.com/openshift/machine-config-operator/pull/4116)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Bump k8s api to v0.29.0 [#4119](https://github.com/openshift/machine-config-operator/pull/4119)
* [OCPBUGS-27190](https://issues.redhat.com/browse/OCPBUGS-27190): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4125](https://github.com/openshift/machine-config-operator/pull/4125)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Add Image Credential Provider flags for Kubelet on AWS [#4103](https://github.com/openshift/machine-config-operator/pull/4103)
* [OCPNODE-2021](https://issues.redhat.com/browse/OCPNODE-2021): add crio-kube-rbac-proxy [#4108](https://github.com/openshift/machine-config-operator/pull/4108)
* [OCPBUGS-24831](https://issues.redhat.com/browse/OCPBUGS-24831): Updating ose-machine-config-operator-container image to be consistent with ART [#4070](https://github.com/openshift/machine-config-operator/pull/4070)
* [OCPBUGS-22664](https://issues.redhat.com/browse/OCPBUGS-22664): Mount /run/nodeip-configuration into coredns containers [#4058](https://github.com/openshift/machine-config-operator/pull/4058)
* [OCPBUGS-27261](https://issues.redhat.com/browse/OCPBUGS-27261): Fix typo in AWS node env unit [#4126](https://github.com/openshift/machine-config-operator/pull/4126)
* NO-ISSUE: Update the design doc dual support icsp and idms [#4085](https://github.com/openshift/machine-config-operator/pull/4085)
* NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets [#4089](https://github.com/openshift/machine-config-operator/pull/4089)
* [OCPBUGS-25725](https://issues.redhat.com/browse/OCPBUGS-25725): ManagedBootImages: failed to fetch architecture type of machineset no linked machine found [#4088](https://github.com/openshift/machine-config-operator/pull/4088)
* [OCPBUGS-26605](https://issues.redhat.com/browse/OCPBUGS-26605): use machine client instead of oc for teardown [#4110](https://github.com/openshift/machine-config-operator/pull/4110)
* [OCPBUGS-5452](https://issues.redhat.com/browse/OCPBUGS-5452): If node is not in pool, error [#4097](https://github.com/openshift/machine-config-operator/pull/4097)
* [OCPBUGS-24416](https://issues.redhat.com/browse/OCPBUGS-24416): Sync MCN with node creation and deletion [#4062](https://github.com/openshift/machine-config-operator/pull/4062)
* NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports [#4091](https://github.com/openshift/machine-config-operator/pull/4091)
* [MCO-679](https://issues.redhat.com/browse/MCO-679): MCO-830: Managed boot images MVP [#4083](https://github.com/openshift/machine-config-operator/pull/4083)
* [OCPBUGS-25406](https://issues.redhat.com/browse/OCPBUGS-25406): Azure Run ovs-configuration.service before dnsmasq.service [#4087](https://github.com/openshift/machine-config-operator/pull/4087)
* [OCPBUGS-19628](https://issues.redhat.com/browse/OCPBUGS-19628): Log network service output to console [#3927](https://github.com/openshift/machine-config-operator/pull/3927)
* [OCPBUGS-25362](https://issues.redhat.com/browse/OCPBUGS-25362): kubelet: fix kubelet labels [#4074](https://github.com/openshift/machine-config-operator/pull/4074)
* [OCPBUGS-19427](https://issues.redhat.com/browse/OCPBUGS-19427): Add source and mirror format regex validation [#4064](https://github.com/openshift/machine-config-operator/pull/4064)
* docs/MachineOSBuilderDesign: 'Known Limitations' links [#4086](https://github.com/openshift/machine-config-operator/pull/4086)
* [OCPBUGS-25412](https://issues.redhat.com/browse/OCPBUGS-25412): APIServer URL env should exist on all nodes [#4076](https://github.com/openshift/machine-config-operator/pull/4076)
* [OCPBUGS-25245](https://issues.redhat.com/browse/OCPBUGS-25245): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4073](https://github.com/openshift/machine-config-operator/pull/4073)
* [OCPBUGS-24030](https://issues.redhat.com/browse/OCPBUGS-24030): add uncordon to mcn [#4065](https://github.com/openshift/machine-config-operator/pull/4065)
* [OCPBUGS-23085](https://issues.redhat.com/browse/OCPBUGS-23085): MCO duplicates kernel arguments during firstboot [#4046](https://github.com/openshift/machine-config-operator/pull/4046)
* [OCPBUGS-25144](https://issues.redhat.com/browse/OCPBUGS-25144): Remove MCN lister and informer from MCO struct [#4071](https://github.com/openshift/machine-config-operator/pull/4071)
* [OCPBUGS-24743](https://issues.redhat.com/browse/OCPBUGS-24743): crio: drop automatic image cleanup on upgrades [#4068](https://github.com/openshift/machine-config-operator/pull/4068)
* [OCPNODE-1943](https://issues.redhat.com/browse/OCPNODE-1943): crio: add crun handler to template [#4054](https://github.com/openshift/machine-config-operator/pull/4054)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/8437f354d88926efbf447472c640f27cc3764741...69944ada37af73f874bc436cbd79e5b9af4c16de)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/394809633b6b2e33ea1af444f7237f066bf0abb1)

* [METAL-855](https://issues.redhat.com/browse/METAL-855): drop the default for inspector URL [#124](https://github.com/openshift/image-customization-controller/pull/124)
* [OCPBUGS-28728](https://issues.redhat.com/browse/OCPBUGS-28728): Updating ose-image-customization-controller-container image to be consistent with ART for 4.16 [#122](https://github.com/openshift/image-customization-controller/pull/122)
* [OCPBUGS-24579](https://issues.redhat.com/browse/OCPBUGS-24579): account for more cases when handling base URLs [#120](https://github.com/openshift/image-customization-controller/pull/120)
* [METAL-834](https://issues.redhat.com/browse/METAL-834): Add --metrics-addr argument to controller [#110](https://github.com/openshift/image-customization-controller/pull/110)
* [OCPBUGS-25538](https://issues.redhat.com/browse/OCPBUGS-25538): Updating ose-image-customization-controller-container image to be consistent with ART [#116](https://github.com/openshift/image-customization-controller/pull/116)
* [METAL-835](https://issues.redhat.com/browse/METAL-835): Get secret from mounted file when envvar empty [#115](https://github.com/openshift/image-customization-controller/pull/115)
* [OCPBUGS-25099](https://issues.redhat.com/browse/OCPBUGS-25099): Updating ose-image-customization-controller-container image to be consistent with ART [#114](https://github.com/openshift/image-customization-controller/pull/114)
* [OCPBUGS-24832](https://issues.redhat.com/browse/OCPBUGS-24832): Updating ose-image-customization-controller-container image to be consistent with ART [#113](https://github.com/openshift/image-customization-controller/pull/113)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/97d87657caab4323f82f9d0958e6d30fc8fd1846...394809633b6b2e33ea1af444f7237f066bf0abb1)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)

* [CORS-2797](https://issues.redhat.com/browse/CORS-2797): Image to rhel9 [#36](https://github.com/openshift/machine-os-images/pull/36)
* [OCPBUGS-24816](https://issues.redhat.com/browse/OCPBUGS-24816): Updating ose-machine-os-images-container image to be consistent with ART [#34](https://github.com/openshift/machine-os-images/pull/34)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e9c920f985a375536e8d4caafd2d7ed579e27f3...3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f1fc4315bffa538d0a18e581866093a004db460b)

* [OU-416](https://issues.redhat.com/browse/OU-416): throw an error when a custom datasource is not found [#117](https://github.com/openshift/monitoring-plugin/pull/117)
* [OCPBUGS-12857](https://issues.redhat.com/browse/OCPBUGS-12857): Gracefully Handle NaN values in stacked graphs [#111](https://github.com/openshift/monitoring-plugin/pull/111)
* [OU-395](https://issues.redhat.com/browse/OU-395): Alert detail page renders buttons and links from the plugin extension [#114](https://github.com/openshift/monitoring-plugin/pull/114)
* [OCPBUGS-31931](https://issues.redhat.com/browse/OCPBUGS-31931): make createdBy mandatory and auto fill with the current user [#113](https://github.com/openshift/monitoring-plugin/pull/113)
* [OU-379](https://issues.redhat.com/browse/OU-379): Add datasource parameter to handle metrics from custom datasources [#112](https://github.com/openshift/monitoring-plugin/pull/112)
* [OU-370](https://issues.redhat.com/browse/OU-370): Split Dashboard Label and Line Chart Queries [#109](https://github.com/openshift/monitoring-plugin/pull/109)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Disable nginx module for rhel9 [#110](https://github.com/openshift/monitoring-plugin/pull/110)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#108](https://github.com/openshift/monitoring-plugin/pull/108)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/monitoring-plugin/pull/103)
* [OCPBUGS-29947](https://issues.redhat.com/browse/OCPBUGS-29947): upgrade sanitize-html vulnerable dependency [#105](https://github.com/openshift/monitoring-plugin/pull/105)
* [OCPBUGS-31291](https://issues.redhat.com/browse/OCPBUGS-31291): Upgrade Webpack dev server [#104](https://github.com/openshift/monitoring-plugin/pull/104)
* NO-ISSUE: Add peteryurkovich to OWNERS [#102](https://github.com/openshift/monitoring-plugin/pull/102)
* [OU-321](https://issues.redhat.com/browse/OU-321): Fix `monitoring-alert-list-item` extension action to pass alert object [#101](https://github.com/openshift/monitoring-plugin/pull/101)
* NO-ISSUE: Update README.md [#100](https://github.com/openshift/monitoring-plugin/pull/100)
* [OU-236](https://issues.redhat.com/browse/OU-236): Add CSV export option to dashboards and metrics tables [#98](https://github.com/openshift/monitoring-plugin/pull/98)
* [OU-310](https://issues.redhat.com/browse/OU-310): Add an extension point for alerts, to be able to add an inspect link [#95](https://github.com/openshift/monitoring-plugin/pull/95)
* [OU-309](https://issues.redhat.com/browse/OU-309): consider all metric keys to display all results on dashboards tables [#96](https://github.com/openshift/monitoring-plugin/pull/96)
* [OCPBUGS-27201](https://issues.redhat.com/browse/OCPBUGS-27201): upgrade follow-redirects parent dependency [#92](https://github.com/openshift/monitoring-plugin/pull/92)
* [OU-311](https://issues.redhat.com/browse/OU-311): Add Dockerfile for local testing [#91](https://github.com/openshift/monitoring-plugin/pull/91)
* [OU-308](https://issues.redhat.com/browse/OU-308): Revert "fix default nginx path to look for static files" [#90](https://github.com/openshift/monitoring-plugin/pull/90)
* [OCPBUGS-25313](https://issues.redhat.com/browse/OCPBUGS-25313): On the alert details page, don't require all alert labels in URL [#88](https://github.com/openshift/monitoring-plugin/pull/88)
* [OCPBUGS-24848](https://issues.redhat.com/browse/OCPBUGS-24848): Updating monitoring-plugin-container image to be consistent with ART [#86](https://github.com/openshift/monitoring-plugin/pull/86)
* [OCPBUGS-24515](https://issues.redhat.com/browse/OCPBUGS-24515): remove regex from console page route path so plugin pages are found [#84](https://github.com/openshift/monitoring-plugin/pull/84)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c3d2272954610dc99a80e51f5b888af09973903f...f1fc4315bffa538d0a18e581866093a004db460b)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/2591682f2d409eea29cced23bf355ca8f27fcec8)

* [OCPBUGS-32303](https://issues.redhat.com/browse/OCPBUGS-32303): Add .snyk file to fix SAST warning messages [#84](https://github.com/openshift/multus-admission-controller/pull/84)
* [OCPBUGS-32219](https://issues.redhat.com/browse/OCPBUGS-32219): Upstream sync 2024 04 [#83](https://github.com/openshift/multus-admission-controller/pull/83)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#80](https://github.com/openshift/multus-admission-controller/pull/80)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#79](https://github.com/openshift/multus-admission-controller/pull/79)
* [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#78](https://github.com/openshift/multus-admission-controller/pull/78)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44...2591682f2d409eea29cced23bf355ca8f27fcec8)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bd8686f05101480960845742a79414f21fd17945)

* [OCPBUGS-32440](https://issues.redhat.com/browse/OCPBUGS-32440): Update snyk file to add exclude vendor [#229](https://github.com/openshift/multus-cni/pull/229)
* [OCPBUGS-32393](https://issues.redhat.com/browse/OCPBUGS-32393): April 2024 [#228](https://github.com/openshift/multus-cni/pull/228)
* [OCPBUGS-30449](https://issues.redhat.com/browse/OCPBUGS-30449): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [#226](https://github.com/openshift/multus-cni/pull/226)
* [USHIFT-2218](https://issues.redhat.com/browse/USHIFT-2218): Dockerfile for MicroShift [#222](https://github.com/openshift/multus-cni/pull/222)
* [OCPBUGS-29856](https://issues.redhat.com/browse/OCPBUGS-29856): Upstream sync to 2024 02 22 [#221](https://github.com/openshift/multus-cni/pull/221)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Fix SAST scan issues for multus-cni-container [#217](https://github.com/openshift/multus-cni/pull/217)
* [OCPBUGS-27429](https://issues.redhat.com/browse/OCPBUGS-27429): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#216](https://github.com/openshift/multus-cni/pull/216)
* [OCPBUGS-29162](https://issues.redhat.com/browse/OCPBUGS-29162): Upstream sync to 20240207 [#214](https://github.com/openshift/multus-cni/pull/214)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Remove unused webhook related yamls [#213](https://github.com/openshift/multus-cni/pull/213)
* [OCPBUGS-28583](https://issues.redhat.com/browse/OCPBUGS-28583): Updating multus-cni-container image to be consistent with ART for 4.16 [#212](https://github.com/openshift/multus-cni/pull/212)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait to account for the possiblity of a not ready unix socket [#208](https://github.com/openshift/multus-cni/pull/208)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#204](https://github.com/openshift/multus-cni/pull/204)
* [OCPBUGS-26397](https://issues.redhat.com/browse/OCPBUGS-26397): Revert #205 "Adds a wait on unix socket readiness" [#207](https://github.com/openshift/multus-cni/pull/207)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait on unix socket readiness [#205](https://github.com/openshift/multus-cni/pull/205)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#203](https://github.com/openshift/multus-cni/pull/203)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#202](https://github.com/openshift/multus-cni/pull/202)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c9b9d67151be0a551fdab4d3575ea5bb6676ec8b...bd8686f05101480960845742a79414f21fd17945)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/c9a6ba24e92dad55e00fc17815a3e9988ee14d2d)

* WIP: test for SAST security fix (#53) [#53](https://github.com/openshift/multus-networkpolicy/pull/53)
* [OCPBUGS-32030](https://issues.redhat.com/browse/OCPBUGS-32030): Upstream sync 2404 (#52) [#52](https://github.com/openshift/multus-networkpolicy/pull/52)
* Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 (#61) (#50) [#61](https://github.com/openshift/multus-networkpolicy/pull/61)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#47) [#47](https://github.com/openshift/multus-networkpolicy/pull/47)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#46) [#46](https://github.com/openshift/multus-networkpolicy/pull/46)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#45) [#45](https://github.com/openshift/multus-networkpolicy/pull/45)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6212406b49cbcc75a01da85a67469b4872754e1d...c9a6ba24e92dad55e00fc17815a3e9988ee14d2d)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/6a04feea1b1ab85914d9793a3bb8502c54bef172)

* [OCPBUGS-28557](https://issues.redhat.com/browse/OCPBUGS-28557): Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 [#54](https://github.com/openshift/route-override-cni/pull/54)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#53](https://github.com/openshift/route-override-cni/pull/53)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#52](https://github.com/openshift/route-override-cni/pull/52)
* [OCPBUGS-24721](https://issues.redhat.com/browse/OCPBUGS-24721): Updating ose-multus-route-override-cni-container image to be consistent with ART [#51](https://github.com/openshift/route-override-cni/pull/51)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5...6a04feea1b1ab85914d9793a3bb8502c54bef172)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/2a70b36325e0a9a7d92c9045aadd859fdaa5e700)

* [OCPBUGS-32931](https://issues.redhat.com/browse/OCPBUGS-32931): Add .snyk file [#254](https://github.com/openshift/whereabouts-cni/pull/254)
* [OCPBUGS-28556](https://issues.redhat.com/browse/OCPBUGS-28556): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART for 4.16 [#242](https://github.com/openshift/whereabouts-cni/pull/242)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Downstream sync - includes configurable schedule for reconciler [#227](https://github.com/openshift/whereabouts-cni/pull/227)
* [OCPBUGS-26017](https://issues.redhat.com/browse/OCPBUGS-26017): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#223](https://github.com/openshift/whereabouts-cni/pull/223)
* [OCPBUGS-24608](https://issues.redhat.com/browse/OCPBUGS-24608): Downstream sync - includes assignment error fix [#211](https://github.com/openshift/whereabouts-cni/pull/211)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#213](https://github.com/openshift/whereabouts-cni/pull/213)
* [OCPBUGS-24720](https://issues.redhat.com/browse/OCPBUGS-24720): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#212](https://github.com/openshift/whereabouts-cni/pull/212)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2edc45fe57cc6c861f8014fdc514ca03442fde17...2a70b36325e0a9a7d92c9045aadd859fdaa5e700)


### [must-gather](https://github.com/openshift/must-gather/tree/68204b5c7e9c933479d3d6f2313b24423e120d9f)

* NO-JIRA: Use oc rhel8 binary explicitly until base image is rhel9 [#418](https://github.com/openshift/must-gather/pull/418)
* [MON-3754](https://issues.redhat.com/browse/MON-3754): Enable metrics-server audit log collection [#413](https://github.com/openshift/must-gather/pull/413)
* [OCPBUGS-32210](https://issues.redhat.com/browse/OCPBUGS-32210): Collect Assisted Installer Namespace Logs [#417](https://github.com/openshift/must-gather/pull/417)
* [CNF-9168](https://issues.redhat.com/browse/CNF-9168): MetalLB: adjust to support frrk8s and small fix [#412](https://github.com/openshift/must-gather/pull/412)
* [OCPBUGS-31900](https://issues.redhat.com/browse/OCPBUGS-31900): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#409](https://github.com/openshift/must-gather/pull/409)
* [SDN-4597](https://issues.redhat.com/browse/SDN-4597): Add cluster scoped ANP resource to collection [#411](https://github.com/openshift/must-gather/pull/411)
* NO-JIRA: Add ARO support to must-gather client [#392](https://github.com/openshift/must-gather/pull/392)
* [OCPBUGS-30349](https://issues.redhat.com/browse/OCPBUGS-30349): Updating ose-must-gather-container image to be consistent with ART for 4.16 [#406](https://github.com/openshift/must-gather/pull/406)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): use must-gather since and since time env vars on inspect cmds [#400](https://github.com/openshift/must-gather/pull/400)
* [OCPBUGS-25054](https://issues.redhat.com/browse/OCPBUGS-25054): Updating ose-must-gather-container image to be consistent with ART [#395](https://github.com/openshift/must-gather/pull/395)
* [Full changelog](https://github.com/openshift/must-gather/compare/47335065cc7137ec098567b06d21f742669b4200...68204b5c7e9c933479d3d6f2313b24423e120d9f)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/bb911451158fc06f193917863778434944e88ae1)

* [OCPBUGS-28578](https://issues.redhat.com/browse/OCPBUGS-28578): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/bond-cni/pull/62)
* [OCPBUGS-24835](https://issues.redhat.com/browse/OCPBUGS-24835): Updating ose-network-interface-bond-cni-container image to be consistent with ART [#60](https://github.com/openshift/bond-cni/pull/60)
* [Full changelog](https://github.com/openshift/bond-cni/compare/f91decaa10cfa233c9e680c96ec7ae642e30a03c...bb911451158fc06f193917863778434944e88ae1)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/710bd872934572584eff4987eb638764afd04cdb)

* Updating ose-network-metrics-daemon-container image to be consistent with ART (#91) [#91](https://github.com/openshift/network-metrics-daemon/pull/91)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#89) [#89](https://github.com/openshift/network-metrics-daemon/pull/89)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/0288f3620532f481ce258f5169b42a67b7f9a0cb...710bd872934572584eff4987eb638764afd04cdb)


### [network-tools](https://github.com/openshift/network-tools/tree/0e1891d86a645e2e9345d2d0c33787c1b7e6818d)

* NO-JIRA: Fix alphabetical ordering of packages in Dockerfiles [#123](https://github.com/openshift/network-tools/pull/123)
* [OCPBUGS-31699](https://issues.redhat.com/browse/OCPBUGS-31699): replace wireshark with wireshark-cli [#116](https://github.com/openshift/network-tools/pull/116)
* NO-JIRA:Add sdn-team-bot [#115](https://github.com/openshift/network-tools/pull/115)
* NO-JIRA:Fix bug list formatting in verbose mode and remove metal lb component [#114](https://github.com/openshift/network-tools/pull/114)
* NO-JIRA: add total and external rows + misc fixes [#113](https://github.com/openshift/network-tools/pull/113)
* NO-JIRA: Remove SAST,ART,backport bugs from bug count & show them separately [#112](https://github.com/openshift/network-tools/pull/112)
* NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional [#101](https://github.com/openshift/network-tools/pull/101)
* [OCPBUGS-26490](https://issues.redhat.com/browse/OCPBUGS-26490): Updating ose-network-tools-container image to be consistent with ART [#108](https://github.com/openshift/network-tools/pull/108)
* NO-JIRA: jira-scripts: disable flavio [#111](https://github.com/openshift/network-tools/pull/111)
* NO-JIRA: Update docs after adding a new command. [#110](https://github.com/openshift/network-tools/pull/110)
* [SDN-4194](https://issues.redhat.com/browse/SDN-4194): Add a script to find OVN perf problems [#107](https://github.com/openshift/network-tools/pull/107)
* [OCPBUGS-25040](https://issues.redhat.com/browse/OCPBUGS-25040): Updating ose-network-tools-container image to be consistent with ART [#105](https://github.com/openshift/network-tools/pull/105)
* [Full changelog](https://github.com/openshift/network-tools/compare/be5b7d060d18980e4f54204e5023615d3cd52dae...0e1891d86a645e2e9345d2d0c33787c1b7e6818d)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/c9bbc44c0200c8061506c465d0eb3c97fe94e197)

* [OCPCLOUD-2418](https://issues.redhat.com/browse/OCPCLOUD-2418): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (b009266) into main [#21](https://github.com/openshift/cloud-provider-nutanix/pull/21)
* [OCPBUGS-22623](https://issues.redhat.com/browse/OCPBUGS-22623): Bumps otehttp to v0.44.0 [#29](https://github.com/openshift/cloud-provider-nutanix/pull/29)
* [OCPBUGS-25629](https://issues.redhat.com/browse/OCPBUGS-25629): Add Snyk file to exclude vendor directory on scan [#26](https://github.com/openshift/cloud-provider-nutanix/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d...c9bbc44c0200c8061506c465d0eb3c97fe94e197)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed)

* [OCPBUGS-27390](https://issues.redhat.com/browse/OCPBUGS-27390): IPI install fails on Nutanix when using DHCP [#66](https://github.com/openshift/machine-api-provider-nutanix/pull/66)
* [OCPBUGS-27874](https://issues.redhat.com/browse/OCPBUGS-27874): Update Snyk file to exclude other vendor folders [#65](https://github.com/openshift/machine-api-provider-nutanix/pull/65)
* [OCPCLOUD-2425](https://issues.redhat.com/browse/OCPCLOUD-2425): Rebase to k8s 129 [#64](https://github.com/openshift/machine-api-provider-nutanix/pull/64)
* [OCPBUGS-26184](https://issues.redhat.com/browse/OCPBUGS-26184): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/machine-api-provider-nutanix/pull/63)
* [OCPBUGS-24949](https://issues.redhat.com/browse/OCPBUGS-24949): Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-nutanix/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f02b1a28d89ea69c614995163874ca1eff4f4aaf...e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/fa1f097c2800b06b3b56537651294d023762a4eb)

* NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig [#111](https://github.com/openshift/oauth-apiserver/pull/111)
* [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#108](https://github.com/openshift/oauth-apiserver/pull/108)
* NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness [#106](https://github.com/openshift/oauth-apiserver/pull/106)
* NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration [#105](https://github.com/openshift/oauth-apiserver/pull/105)
* [OCPBUGS-29176](https://issues.redhat.com/browse/OCPBUGS-29176): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/oauth-apiserver/pull/101)
* [OCPBUGS-28658](https://issues.redhat.com/browse/OCPBUGS-28658): bump k8s.io and others (master) [#98](https://github.com/openshift/oauth-apiserver/pull/98)
* [OCPBUGS-24954](https://issues.redhat.com/browse/OCPBUGS-24954): Updating ose-oauth-apiserver-container image to be consistent with ART [#94](https://github.com/openshift/oauth-apiserver/pull/94)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: &lt;carry&gt;: retry etcd Unavailable errors [#95](https://github.com/openshift/oauth-apiserver/pull/95)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/34756b67ae1ce1307d07bd1834579de1e4b47f17...fa1f097c2800b06b3b56537651294d023762a4eb)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/30f8012482023689655252dc2af2f17fe6a09253)

* [OCPBUGS-24791](https://issues.redhat.com/browse/OCPBUGS-24791): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#270](https://github.com/openshift/oauth-proxy/pull/270)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e...30f8012482023689655252dc2af2f17fe6a09253)


### [oauth-server](https://github.com/openshift/oauth-server/tree/5597860a7484ea3e680b2564a4ba89a83888ace3)

* NO-JIRA: bump go-jose to a newer version [#147](https://github.com/openshift/oauth-server/pull/147)
* [OCPBUGS-32331](https://issues.redhat.com/browse/OCPBUGS-32331): Updating oauth-server-container image to be consistent with ART for 4.16 [#145](https://github.com/openshift/oauth-server/pull/145)
* [OCPBUGS-24987](https://issues.redhat.com/browse/OCPBUGS-24987), [OCPBUGS-30319](https://issues.redhat.com/browse/OCPBUGS-30319): bump lib-go to fix SAs acting as OAuth2 clients [#142](https://github.com/openshift/oauth-server/pull/142)
* [Full changelog](https://github.com/openshift/oauth-server/compare/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5...5597860a7484ea3e680b2564a4ba89a83888ace3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/d0c3c4722ec5509aef6ce65f5fae534b8940efdf)

* [OCPBUGS-31092](https://issues.redhat.com/browse/OCPBUGS-31092): Fix archive tar file size to respect the archiveSize setting when mirror with V2 format (#842) [#842](https://github.com/openshift/oc-mirror/pull/842)
* [OCPBUGS-31083](https://issues.redhat.com/browse/OCPBUGS-31083): Fix help for --strict-archive flag (#841) [#841](https://github.com/openshift/oc-mirror/pull/841)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix graph image mirroring during MirrorToDisk (#840) [#840](https://github.com/openshift/oc-mirror/pull/840)
* [CLID-63](https://issues.redhat.com/browse/CLID-63): moves pkg dir to internal dir (#839) [#839](https://github.com/openshift/oc-mirror/pull/839)
* [CLID-101](https://issues.redhat.com/browse/CLID-101): Fix TlsVerify always set to false (#838) [#838](https://github.com/openshift/oc-mirror/pull/838)
* [CLID-80](https://issues.redhat.com/browse/CLID-80): changes README.md (#837) [#837](https://github.com/openshift/oc-mirror/pull/837)
* Exit if release is unsigned (#834) [#834](https://github.com/openshift/oc-mirror/pull/834)
* OCPBUGS-23479 (#835) [#835](https://github.com/openshift/oc-mirror/pull/835)
* [CLID-81](https://issues.redhat.com/browse/CLID-81): refines v2 --help (#836) [#836](https://github.com/openshift/oc-mirror/pull/836)
* CLID5: Create API v2alpha1 for oc-mirror v2 TP (#830) [#830](https://github.com/openshift/oc-mirror/pull/830)
* [CLID-19](https://issues.redhat.com/browse/CLID-19): Replace the prepare subcommand by dry-run flag (#829) [#829](https://github.com/openshift/oc-mirror/pull/829)
* CLID-95 removes the concurrency and adds a progress bar on batch pkg (#832) [#832](https://github.com/openshift/oc-mirror/pull/832)
* [CLID-53](https://issues.redhat.com/browse/CLID-53): Introduce env var to provide OCP release signature verification key (#831) [#831](https://github.com/openshift/oc-mirror/pull/831)
* [CLID-35](https://issues.redhat.com/browse/CLID-35): introduce filtering operators by selecting specific bundles (#824) [#824](https://github.com/openshift/oc-mirror/pull/824)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024), [OCPBUGS-31529](https://issues.redhat.com/browse/OCPBUGS-31529), [OCPBUGS-31530](https://issues.redhat.com/browse/OCPBUGS-31530): Remove creationTimestamp from the generated yaml catalogSource (#826) [#826](https://github.com/openshift/oc-mirror/pull/826)
* [CLID-46](https://issues.redhat.com/browse/CLID-46), [CLID-47](https://issues.redhat.com/browse/CLID-47): Use of TargetCatalog and TargetTag on all catalogs (#827) [#827](https://github.com/openshift/oc-mirror/pull/827)
* [CLID-20](https://issues.redhat.com/browse/CLID-20): feat: Delete functionality for v2 enclave support (#812) [#812](https://github.com/openshift/oc-mirror/pull/812)
* [CLID-85](https://issues.redhat.com/browse/CLID-85): Change string replacement in registry config to use templates (#828) [#828](https://github.com/openshift/oc-mirror/pull/828)
* [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#815) [#815](https://github.com/openshift/oc-mirror/pull/815)
* Bump version to include v5.11.0 of go-git (#821) [#821](https://github.com/openshift/oc-mirror/pull/821)
* [CLID-54](https://issues.redhat.com/browse/CLID-54): Mirror to mirror workflow (#811) [#811](https://github.com/openshift/oc-mirror/pull/811)
* [OCPBUGS-31024](https://issues.redhat.com/browse/OCPBUGS-31024): Ommit icon from catalogSource if empty (#816) [#816](https://github.com/openshift/oc-mirror/pull/816)
* [OCPBUGS-31344](https://issues.redhat.com/browse/OCPBUGS-31344): fix: issue when different versions of the same operator catalog (#820) [#820](https://github.com/openshift/oc-mirror/pull/820)
* [OCPBUGS-31084](https://issues.redhat.com/browse/OCPBUGS-31084): feat: changes the code to have retro-compatible version command with v1 (#817) [#817](https://github.com/openshift/oc-mirror/pull/817)
* [CLID-8](https://issues.redhat.com/browse/CLID-8): Initial E2E test (#798) [#798](https://github.com/openshift/oc-mirror/pull/798)
* [OCPBUGS-19853](https://issues.redhat.com/browse/OCPBUGS-19853): improve support for multiarch (#813) [#813](https://github.com/openshift/oc-mirror/pull/813)
* [CLID-17](https://issues.redhat.com/browse/CLID-17): feat: docker v2s2 manifest list (fat manifest) / oci image index implementation (#810) [#810](https://github.com/openshift/oc-mirror/pull/810)
* [CLID-70](https://issues.redhat.com/browse/CLID-70): fix: issue when mirroring multiple catalogs (#807) [#807](https://github.com/openshift/oc-mirror/pull/807)
* [CLID-67](https://issues.redhat.com/browse/CLID-67): feat: adds --v1 flag to redirect to legacy code (#806) [#806](https://github.com/openshift/oc-mirror/pull/806)
* [CLID-27](https://issues.redhat.com/browse/CLID-27): Update to include oci (disk based layout) for v2 (#800) [#800](https://github.com/openshift/oc-mirror/pull/800)
* changes to support pulling charts from URL (#723) [#723](https://github.com/openshift/oc-mirror/pull/723)
* [CLID-9](https://issues.redhat.com/browse/CLID-9): feat: hide unnecessary flags (#801) [#801](https://github.com/openshift/oc-mirror/pull/801)
* [CLID-7](https://issues.redhat.com/browse/CLID-7): feat: load operator catalog using LoadFS (#799) [#799](https://github.com/openshift/oc-mirror/pull/799)
* [CLID-24](https://issues.redhat.com/browse/CLID-24), [CLID-9](https://issues.redhat.com/browse/CLID-9): Support incremental mirroring using archives by date (#795) [#795](https://github.com/openshift/oc-mirror/pull/795)
* [CLID-21](https://issues.redhat.com/browse/CLID-21), [CLID-22](https://issues.redhat.com/browse/CLID-22), [CLID-9](https://issues.redhat.com/browse/CLID-9): Respect archive max size (#789) [#789](https://github.com/openshift/oc-mirror/pull/789)
* Fix documentation diagram (#792) [#792](https://github.com/openshift/oc-mirror/pull/792)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): feat: operator catalog filtering on v2 (#787) [#787](https://github.com/openshift/oc-mirror/pull/787)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate CatalogSource files (#784) [#784](https://github.com/openshift/oc-mirror/pull/784)
* [CLID-10](https://issues.redhat.com/browse/CLID-10): Generate ITMS along with IDMS (#781) [#781](https://github.com/openshift/oc-mirror/pull/781)
* [CLID-30](https://issues.redhat.com/browse/CLID-30): Update overall code coverage in v2 (#783) [#783](https://github.com/openshift/oc-mirror/pull/783)
* Make EnclaveSupport a DevPreview (#788) [#788](https://github.com/openshift/oc-mirror/pull/788)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: adds 2 new scenarios (#785) [#785](https://github.com/openshift/oc-mirror/pull/785)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: add 3 new scenarios for catalog filtering (#782) [#782](https://github.com/openshift/oc-mirror/pull/782)
* [OCPBUGS-26513](https://issues.redhat.com/browse/OCPBUGS-26513): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) [#772](https://github.com/openshift/oc-mirror/pull/772)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): Add study results in docs (#778) [#778](https://github.com/openshift/oc-mirror/pull/778)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both binaries for rhel8 and rhel9 (#767) [#767](https://github.com/openshift/oc-mirror/pull/767)
* Add documentation for enclave support (#771) [#771](https://github.com/openshift/oc-mirror/pull/771)
* [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#773) [#773](https://github.com/openshift/oc-mirror/pull/773)
* Fix to ensure operator not found error exits with correct status (#770) [#770](https://github.com/openshift/oc-mirror/pull/770)
* Fix to ensure tar sequence is ignored using --skip-pruning (#760) [#760](https://github.com/openshift/oc-mirror/pull/760)
* Updating oc-mirror-plugin-container image to be consistent with ART (#763) [#763](https://github.com/openshift/oc-mirror/pull/763)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-21865](https://issues.redhat.com/browse/OCPBUGS-21865): Honor IncludeChannel.MaxVersion when mirroring differentially (#761) [#761](https://github.com/openshift/oc-mirror/pull/761)
* [OCPBUGS-24357](https://issues.redhat.com/browse/OCPBUGS-24357): Move logs folder under workingDir (#750) [#750](https://github.com/openshift/oc-mirror/pull/750)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#753) [#753](https://github.com/openshift/oc-mirror/pull/753)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): - oc-mirror on RHEL9 Host with FIPS enabled (#751) [#751](https://github.com/openshift/oc-mirror/pull/751)
* Add generation of updateService.yaml (#746) [#746](https://github.com/openshift/oc-mirror/pull/746)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#752) [#752](https://github.com/openshift/oc-mirror/pull/752)
* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#748) [#748](https://github.com/openshift/oc-mirror/pull/748)
* Make A.Guidi approver on oc-mirror (#755) [#755](https://github.com/openshift/oc-mirror/pull/755)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/9621d8f72ecc7a0a13e40b9709b5e19cc621117b...d0c3c4722ec5509aef6ce65f5fae534b8940efdf)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/8213041557d47608d855ca2aec9f51178d7d8817)

* [OCPBUGS-31286](https://issues.redhat.com/browse/OCPBUGS-31286): Updating ose-olm-catalogd-container image to be consistent with ART for 4.16 [#48](https://github.com/openshift/operator-framework-catalogd/pull/48)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#47](https://github.com/openshift/operator-framework-catalogd/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-catalogd/pull/46)
* [OCPBUGS-29453](https://issues.redhat.com/browse/OCPBUGS-29453): UPSTREAM: 231: make garbage collection a runnable [#42](https://github.com/openshift/operator-framework-catalogd/pull/42)
* NO-ISSUE: Remove ncdc from OWNERS [#41](https://github.com/openshift/operator-framework-catalogd/pull/41)
* NO-ISSUE: Synchronize From Upstream Repositories [#38](https://github.com/openshift/operator-framework-catalogd/pull/38)
* [OCPBUGS-25172](https://issues.redhat.com/browse/OCPBUGS-25172): Updating ose-olm-catalogd-container image to be consistent with ART [#37](https://github.com/openshift/operator-framework-catalogd/pull/37)
* NO-JIRA: add tmshort to approvers [#34](https://github.com/openshift/operator-framework-catalogd/pull/34)
* [OCPBUGS-24806](https://issues.redhat.com/browse/OCPBUGS-24806): Updating ose-olm-catalogd-container image to be consistent with ART [#36](https://github.com/openshift/operator-framework-catalogd/pull/36)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/2724be3ed7a0205241c33c26d92d33f3d246662c...8213041557d47608d855ca2aec9f51178d7d8817)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/f5d6bc09a94f07cf776840d1728d64fb1bd61aea)

* NO-ISSUE: Synchronize From Upstream Repositories [#99](https://github.com/openshift/operator-framework-operator-controller/pull/99)
* [OCPBUGS-31459](https://issues.redhat.com/browse/OCPBUGS-31459): Synchronize From Upstream Repositories [#97](https://github.com/openshift/operator-framework-operator-controller/pull/97)
* [OPRUN-3268](https://issues.redhat.com/browse/OPRUN-3268): Add pointer to tooling README for downstreaming info [#94](https://github.com/openshift/operator-framework-operator-controller/pull/94)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#89](https://github.com/openshift/operator-framework-operator-controller/pull/89)
* NO-ISSUE: Synchronize From Upstream Repositories [#92](https://github.com/openshift/operator-framework-operator-controller/pull/92)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#91](https://github.com/openshift/operator-framework-operator-controller/pull/91)
* NO-ISSUE: Synchronize From Upstream Repositories [#90](https://github.com/openshift/operator-framework-operator-controller/pull/90)
* NO-ISSUE: Synchronize From Upstream Repositories [#88](https://github.com/openshift/operator-framework-operator-controller/pull/88)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#86](https://github.com/openshift/operator-framework-operator-controller/pull/86)
* NO-ISSUE: Synchronize From Upstream Repositories [#87](https://github.com/openshift/operator-framework-operator-controller/pull/87)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-operator-controller/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-operator-controller/pull/83)
* NO-ISSUE: Synchronize From Upstream Repositories [#82](https://github.com/openshift/operator-framework-operator-controller/pull/82)
* NO-ISSUE: Synchronize From Upstream Repositories [#81](https://github.com/openshift/operator-framework-operator-controller/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-operator-controller/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#79](https://github.com/openshift/operator-framework-operator-controller/pull/79)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-operator-controller/pull/78)
* NO-ISSUE: Synchronize From Upstream Repositories [#77](https://github.com/openshift/operator-framework-operator-controller/pull/77)
* NO-ISSUE: Synchronize From Upstream Repositories [#76](https://github.com/openshift/operator-framework-operator-controller/pull/76)
* NO-ISSUE: Synchronize From Upstream Repositories [#75](https://github.com/openshift/operator-framework-operator-controller/pull/75)
* NO-ISSUE: Synchronize From Upstream Repositories [#74](https://github.com/openshift/operator-framework-operator-controller/pull/74)
* NO-ISSUE: Synchronize From Upstream Repositories [#73](https://github.com/openshift/operator-framework-operator-controller/pull/73)
* NO-ISSUE: Synchronize From Upstream Repositories [#72](https://github.com/openshift/operator-framework-operator-controller/pull/72)
* NO-ISSUE: Synchronize From Upstream Repositories [#70](https://github.com/openshift/operator-framework-operator-controller/pull/70)
* NO-ISSUE: Synchronize From Upstream Repositories [#67](https://github.com/openshift/operator-framework-operator-controller/pull/67)
* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-operator-controller/pull/66)
* NO-ISSUE: Synchronize From Upstream Repositories [#65](https://github.com/openshift/operator-framework-operator-controller/pull/65)
* NO-ISSUE: Synchronize From Upstream Repositories [#64](https://github.com/openshift/operator-framework-operator-controller/pull/64)
* NO-ISSUE: Synchronize From Upstream Repositories [#63](https://github.com/openshift/operator-framework-operator-controller/pull/63)
* NO-ISSUE: Synchronize From Upstream Repositories [#62](https://github.com/openshift/operator-framework-operator-controller/pull/62)
* NO-ISSUE: Synchronize From Upstream Repositories [#61](https://github.com/openshift/operator-framework-operator-controller/pull/61)
* NO-ISSUE: Synchronize From Upstream Repositories [#60](https://github.com/openshift/operator-framework-operator-controller/pull/60)
* NO-ISSUE: Synchronize From Upstream Repositories [#59](https://github.com/openshift/operator-framework-operator-controller/pull/59)
* [OCPBUGS-24795](https://issues.redhat.com/browse/OCPBUGS-24795): Updating ose-olm-operator-controller-container image to be consistent with ART [#51](https://github.com/openshift/operator-framework-operator-controller/pull/51)
* NO-ISSUE: Synchronize From Upstream Repositories [#56](https://github.com/openshift/operator-framework-operator-controller/pull/56)
* NO-ISSUE: Synchronize From Upstream Repositories [#55](https://github.com/openshift/operator-framework-operator-controller/pull/55)
* NO-ISSUE: Synchronize From Upstream Repositories [#54](https://github.com/openshift/operator-framework-operator-controller/pull/54)
* NO-ISSUE: Synchronize From Upstream Repositories [#53](https://github.com/openshift/operator-framework-operator-controller/pull/53)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/e2906934f5051bb0f80ccdd0091e5ffd85addaff...f5d6bc09a94f07cf776840d1728d64fb1bd61aea)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/38965a71a46318b8b133d46188a6b2795fce7c68)

* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-rukpak/pull/83)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#82](https://github.com/openshift/operator-framework-rukpak/pull/82)
* [OCPBUGS-31278](https://issues.redhat.com/browse/OCPBUGS-31278): Updating ose-olm-rukpak-container image to be consistent with ART for 4.16 [#81](https://github.com/openshift/operator-framework-rukpak/pull/81)
* NO-ISSUE: Synchronize From Upstream Repositories [#80](https://github.com/openshift/operator-framework-rukpak/pull/80)
* NO-ISSUE: Synchronize From Upstream Repositories [#78](https://github.com/openshift/operator-framework-rukpak/pull/78)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: Remove ncdc from OWNERS [#74](https://github.com/openshift/operator-framework-rukpak/pull/74)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): Synchronize From Upstream Repositories [#69](https://github.com/openshift/operator-framework-rukpak/pull/69)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): UPSTREAM: revert "UPSTREAM: &lt;carry&gt;: Update go-git to v5.11.0" [#71](https://github.com/openshift/operator-framework-rukpak/pull/71)
* [OCPBUGS-27792](https://issues.redhat.com/browse/OCPBUGS-27792), [OCPBUGS-27796](https://issues.redhat.com/browse/OCPBUGS-27796): [Upstream]: &lt;carry&gt;: Update go-git to v5.11.0 [#70](https://github.com/openshift/operator-framework-rukpak/pull/70)
* [OCPBUGS-25535](https://issues.redhat.com/browse/OCPBUGS-25535): Updating ose-olm-rukpak-container image to be consistent with ART [#68](https://github.com/openshift/operator-framework-rukpak/pull/68)
* [OCPBUGS-24825](https://issues.redhat.com/browse/OCPBUGS-24825): Updating ose-olm-rukpak-container image to be consistent with ART [#67](https://github.com/openshift/operator-framework-rukpak/pull/67)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3...38965a71a46318b8b133d46188a6b2795fce7c68)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/dd8658e4f242fd580e21384683e82b90360700f3)

* [CFE-885](https://issues.redhat.com/browse/CFE-885): Feature route external certificate validation [#407](https://github.com/openshift/openshift-apiserver/pull/407)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): remove unauthenticated group from any cluster role binding [#423](https://github.com/openshift/openshift-apiserver/pull/423)
* [OCPBUGS-31957](https://issues.redhat.com/browse/OCPBUGS-31957): Bump golang/x/net to v0.23.0 [#427](https://github.com/openshift/openshift-apiserver/pull/427)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): make GarbageCollection supported for ClusterResourceQuotas as it is backed by a CRD [#405](https://github.com/openshift/openshift-apiserver/pull/405)
* [CFE-1048](https://issues.redhat.com/browse/CFE-1048): Bump Kubernetes to 1.29.2 [#425](https://github.com/openshift/openshift-apiserver/pull/425)
* NO-ISSUE: go mod tidy && go mod vendor [#420](https://github.com/openshift/openshift-apiserver/pull/420)
* [OCPBUGS-30279](https://issues.redhat.com/browse/OCPBUGS-30279): vendor upgrade runtime-utils [#419](https://github.com/openshift/openshift-apiserver/pull/419)
* [OCPBUGS-27927](https://issues.redhat.com/browse/OCPBUGS-27927): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 [#415](https://github.com/openshift/openshift-apiserver/pull/415)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: &lt;carry&gt;: retry etcd Unavailable errors [#410](https://github.com/openshift/openshift-apiserver/pull/410)
* [OCPBUGS-24895](https://issues.redhat.com/browse/OCPBUGS-24895): Updating ose-openshift-apiserver-container image to be consistent with ART [#409](https://github.com/openshift/openshift-apiserver/pull/409)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/ae99b858c04476b7a98c6b3dc40283586ef98380...dd8658e4f242fd580e21384683e82b90360700f3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8f6f90a1e8b7057588006508cc2be22949d3b0e2)

* [TRT-1632](https://issues.redhat.com/browse/TRT-1632): Revert #298 "OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade." [#301](https://github.com/openshift/openshift-controller-manager/pull/301)
* [OCPBUGS-32729](https://issues.redhat.com/browse/OCPBUGS-32729): Rollback state of managed image pull secrets after downgrade. [#298](https://github.com/openshift/openshift-controller-manager/pull/298)
* [OCPBUGS-31213](https://issues.redhat.com/browse/OCPBUGS-31213): Unable to look up the service account secrets for build [#292](https://github.com/openshift/openshift-controller-manager/pull/292)
* [BUILD-725](https://issues.redhat.com/browse/BUILD-725): Adds build & deployer controller [#289](https://github.com/openshift/openshift-controller-manager/pull/289)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps otelgrpc version & dependencies [#293](https://github.com/openshift/openshift-controller-manager/pull/293)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#290](https://github.com/openshift/openshift-controller-manager/pull/290)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#283](https://github.com/openshift/openshift-controller-manager/pull/283)
* [OCPBUGS-28665](https://issues.redhat.com/browse/OCPBUGS-28665): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#284](https://github.com/openshift/openshift-controller-manager/pull/284)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/edbf7353e21a286cac85867ec13d6cf937dd9c33...8f6f90a1e8b7057588006508cc2be22949d3b0e2)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/59b8a0ffc0a472e819e0c30911201c34c85a4684)

* [OCPBUGS-24878](https://issues.redhat.com/browse/OCPBUGS-24878): Updating openshift-state-metrics-container image to be consistent with ART [#112](https://github.com/openshift/openshift-state-metrics/pull/112)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/1915f64591a18c11138d10c00c50b3f5cff632ce...59b8a0ffc0a472e819e0c30911201c34c85a4684)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6b5a59b34641fd3c7f3aca93d8bf40ae2a174466)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#166](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/166)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healtcheck for node-registrar [#161](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/161)
* [OCPBUGS-30951](https://issues.redhat.com/browse/OCPBUGS-30951): Relax requirement to enable topology [#164](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/164)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#159](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/159)
* [OCPBUGS-28937](https://issues.redhat.com/browse/OCPBUGS-28937): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 [#160](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/160)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#158](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/158)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#155](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/155)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#152](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/152)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#151](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/151)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#150](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/150)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#149](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/149)
* [OCPBUGS-24844](https://issues.redhat.com/browse/OCPBUGS-24844): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#145](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/145)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#146](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/146)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80...6b5a59b34641fd3c7f3aca93d8bf40ae2a174466)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/c42a4659d6c092229e84169bfadd7dd80d7cf27b)

* [OSASINFRA-3437](https://issues.redhat.com/browse/OSASINFRA-3437): Rebase on CAPO v0.10 [#305](https://github.com/openshift/cluster-api-provider-openstack/pull/305)
* [OCPBUGS-31277](https://issues.redhat.com/browse/OCPBUGS-31277): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 [#301](https://github.com/openshift/cluster-api-provider-openstack/pull/301)
* 🐛 Persist API FloatingIP immediately on creation [#1831](https://github.com/openshift/cluster-api-provider-openstack/pull/1831)
* :bug: Fix patching OpenstackMachine's immutable spec during reconcile [#1819](https://github.com/openshift/cluster-api-provider-openstack/pull/1819)
* ✨ Add flags for configuring rate limits [#1817](https://github.com/openshift/cluster-api-provider-openstack/pull/1817)
* :bug: Fix potential panic during instance create [#1806](https://github.com/openshift/cluster-api-provider-openstack/pull/1806)
* 🐛 Revert "Move FloatingIP to Bastion spec" [#1783](https://github.com/openshift/cluster-api-provider-openstack/pull/1783)
* 🌱 Import CAPI v1.6.0 [#1780](https://github.com/openshift/cluster-api-provider-openstack/pull/1780)
* 🌱 Bump version artifacts for release-0.9 [#1775](https://github.com/openshift/cluster-api-provider-openstack/pull/1775)
* 🐛 Verify success of parsing OpenStack cloud cacert [#1770](https://github.com/openshift/cluster-api-provider-openstack/pull/1770)
* 📖 Fix network-related docs for API v1alpha7 [#1764](https://github.com/openshift/cluster-api-provider-openstack/pull/1764)
* 🌱 Remove Containerfile and Dockerfile experimental [#1760](https://github.com/openshift/cluster-api-provider-openstack/pull/1760)
* 🌱 Fix log message typo [#1758](https://github.com/openshift/cluster-api-provider-openstack/pull/1758)
* 🐛  Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 [#1754](https://github.com/openshift/cluster-api-provider-openstack/pull/1754)
* 🐛Fix missing endpoint type in OpenStack endpoint clients configuration [#1744](https://github.com/openshift/cluster-api-provider-openstack/pull/1744)
* ✨remove flavor check to relief restrictions to CPU [#1745](https://github.com/openshift/cluster-api-provider-openstack/pull/1745)
* ⚠️ Move FloatingIP to Bastion spec [#1739](https://github.com/openshift/cluster-api-provider-openstack/pull/1739)
* ⚠️  Bump Go to 1.20.10 [#1740](https://github.com/openshift/cluster-api-provider-openstack/pull/1740)
* ✨ Add ephemeral storage support to the AdditionalBlockDevices [#1696](https://github.com/openshift/cluster-api-provider-openstack/pull/1696)
* ✨ Use kustomize new syntax for patches [#1735](https://github.com/openshift/cluster-api-provider-openstack/pull/1735)
* ✨ Add cache on provider scope [#1688](https://github.com/openshift/cluster-api-provider-openstack/pull/1688)
* 🌱 deps: Bump dependencies [#1733](https://github.com/openshift/cluster-api-provider-openstack/pull/1733)
* 🌱 Enable k8s upgrade in self hosted test [#1732](https://github.com/openshift/cluster-api-provider-openstack/pull/1732)
* 🌱 Use k8s v1.28 in tests [#1723](https://github.com/openshift/cluster-api-provider-openstack/pull/1723)
* 🐛 Don't remove BYO api server loadbalancer floating IP [#1728](https://github.com/openshift/cluster-api-provider-openstack/pull/1728)
* 🌱 Replace kustomize vars with replacements [#1726](https://github.com/openshift/cluster-api-provider-openstack/pull/1726)
* 🌱 e2e: dump cinder volumes [#1722](https://github.com/openshift/cluster-api-provider-openstack/pull/1722)
* 🌱 Ignore go workspaces [#1724](https://github.com/openshift/cluster-api-provider-openstack/pull/1724)
* 🌱 E2e: Use pre-build node images [#1699](https://github.com/openshift/cluster-api-provider-openstack/pull/1699)
* ✨ Add option to customize private network MTU [#1701](https://github.com/openshift/cluster-api-provider-openstack/pull/1701)
* :seedling: ci: bump Flatcar tested version [#1713](https://github.com/openshift/cluster-api-provider-openstack/pull/1713)
* 🌱 ci: Several CI fixes [#1718](https://github.com/openshift/cluster-api-provider-openstack/pull/1718)
* ✨ Add server name for the Machine InternalDNS [#1715](https://github.com/openshift/cluster-api-provider-openstack/pull/1715)
* 🌱 Bump devstack image to ubuntu 22.04 [#1716](https://github.com/openshift/cluster-api-provider-openstack/pull/1716)
* 🌱 Add explicit dependency on github.com/golang/mock/mockgen/model [#1712](https://github.com/openshift/cluster-api-provider-openstack/pull/1712)
* 🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests [#1710](https://github.com/openshift/cluster-api-provider-openstack/pull/1710)
* 🌱 Ignore vendor directories in boilerplate check [#1709](https://github.com/openshift/cluster-api-provider-openstack/pull/1709)
* 🌱 Build setup-envtest in hack/tools [#1707](https://github.com/openshift/cluster-api-provider-openstack/pull/1707)
* 🌱 Bump ginkgo [#1705](https://github.com/openshift/cluster-api-provider-openstack/pull/1705)
* :sparkles: Additional data volumes for machines [#1668](https://github.com/openshift/cluster-api-provider-openstack/pull/1668)
* 🌱 gitignore: ignore vendor/ directory [#1690](https://github.com/openshift/cluster-api-provider-openstack/pull/1690)
* 🌱 Move webhook CA injection into webhook resource [#1686](https://github.com/openshift/cluster-api-provider-openstack/pull/1686)
* Update Gophercloud to 1.7.0 [#1682](https://github.com/openshift/cluster-api-provider-openstack/pull/1682)
* 🐛 Only delete all ports when deleting cluster network [#1680](https://github.com/openshift/cluster-api-provider-openstack/pull/1680)
* :book: Clarify release notes content for releases and pre-releases [#1678](https://github.com/openshift/cluster-api-provider-openstack/pull/1678)
* 🌱 Remove defaulter-gen [#1677](https://github.com/openshift/cluster-api-provider-openstack/pull/1677)
* :book:  doc/development: add devstack notes [#1569](https://github.com/openshift/cluster-api-provider-openstack/pull/1569)
* 🌱 Add test for getOrCreate [#1673](https://github.com/openshift/cluster-api-provider-openstack/pull/1673)
* Set failure only on instance error when no nodeRef [#1637](https://github.com/openshift/cluster-api-provider-openstack/pull/1637)
* 🌱Fix various issues with CRD generation [#1669](https://github.com/openshift/cluster-api-provider-openstack/pull/1669)
* ✨Allow changing allowAllInClusterTraffic in a deployed cluster [#1663](https://github.com/openshift/cluster-api-provider-openstack/pull/1663)
* avoid duplicate error event [#1655](https://github.com/openshift/cluster-api-provider-openstack/pull/1655)
* 🌱Bump CAPI to v1.5.1 [#1666](https://github.com/openshift/cluster-api-provider-openstack/pull/1666)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/d1de8c63ee931be0038b55dd4813b2089fd6107e...c42a4659d6c092229e84169bfadd7dd80d7cf27b)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/bf45c1fb232122e978eb73336be6d5e441c41d9d)

* [OCPBUGS-30855](https://issues.redhat.com/browse/OCPBUGS-30855): Ensure portSecurity is correctly set in the Port [#107](https://github.com/openshift/machine-api-provider-openstack/pull/107)
* [OCPBUGS-24904](https://issues.redhat.com/browse/OCPBUGS-24904): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#100](https://github.com/openshift/machine-api-provider-openstack/pull/100)
* [OSASINFRA-3368](https://issues.redhat.com/browse/OSASINFRA-3368): Revendor CAPO [#103](https://github.com/openshift/machine-api-provider-openstack/pull/103)
* NO-JIRA: Stop setting logtostderr flag and rely on defaults [#102](https://github.com/openshift/machine-api-provider-openstack/pull/102)
* NO-JIRA: Add snyk configuration file [#101](https://github.com/openshift/machine-api-provider-openstack/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/316f6cb6bdf83da9fd065a3989f5734dc43854cf...bf45c1fb232122e978eb73336be6d5e441c41d9d)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/56b7b9d5a6a063dad50e5f5a31b6dca7012c8345)

* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-olm/pull/741)
* NO-ISSUE: Synchronize From Upstream Repositories [#739](https://github.com/openshift/operator-framework-olm/pull/739)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#703](https://github.com/openshift/operator-framework-olm/pull/703)
* [OCPBUGS-31073](https://issues.redhat.com/browse/OCPBUGS-31073): Synchronize From Upstream Repositories [#737](https://github.com/openshift/operator-framework-olm/pull/737)
* NO-ISSUE: Synchronize From Upstream Repositories [#735](https://github.com/openshift/operator-framework-olm/pull/735)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#733](https://github.com/openshift/operator-framework-olm/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#734](https://github.com/openshift/operator-framework-olm/pull/734)
* NO-ISSUE: Synchronize From Upstream Repositories [#732](https://github.com/openshift/operator-framework-olm/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#729](https://github.com/openshift/operator-framework-olm/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#727](https://github.com/openshift/operator-framework-olm/pull/727)
* NO-ISSUE: Synchronize From Upstream Repositories [#723](https://github.com/openshift/operator-framework-olm/pull/723)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-olm/pull/722)
* [OCPBUGS-31080](https://issues.redhat.com/browse/OCPBUGS-31080), [OCPBUGS-31438](https://issues.redhat.com/browse/OCPBUGS-31438): Manual downstream sync [#719](https://github.com/openshift/operator-framework-olm/pull/719)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#720](https://github.com/openshift/operator-framework-olm/pull/720)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): rename from 'clis' to 'tools' [#718](https://github.com/openshift/operator-framework-olm/pull/718)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#700](https://github.com/openshift/operator-framework-olm/pull/700)
* NO-ISSUE: Synchronize From Upstream Repositories [#717](https://github.com/openshift/operator-framework-olm/pull/717)
* NO-ISSUE: Synchronize From Upstream Repositories [#716](https://github.com/openshift/operator-framework-olm/pull/716)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): image just as a cli source for mirror publishing [#713](https://github.com/openshift/operator-framework-olm/pull/713)
* NO-ISSUE: Semver lastedge error (#1169)  [sync] [#714](https://github.com/openshift/operator-framework-olm/pull/714)
* [OCPBUGS-25019](https://issues.redhat.com/browse/OCPBUGS-25019): building rhel8/rhel9/static clis in payload image [#704](https://github.com/openshift/operator-framework-olm/pull/704)
* [OCPBUGS-30132](https://issues.redhat.com/browse/OCPBUGS-30132): Synchronize From Upstream Repositories [#709](https://github.com/openshift/operator-framework-olm/pull/709)
* [OCPBUGS-23744](https://issues.redhat.com/browse/OCPBUGS-23744): Wait for required RBAC before creating packageserver CSV [#708](https://github.com/openshift/operator-framework-olm/pull/708)
* NO-ISSUE: Synchronize From Upstream Repositories [#706](https://github.com/openshift/operator-framework-olm/pull/706)
* NO-ISSUE: Synchronize From Upstream Repositories [#702](https://github.com/openshift/operator-framework-olm/pull/702)
* NO-ISSUE: Synchronize From Upstream Repositories [#701](https://github.com/openshift/operator-framework-olm/pull/701)
* NO-ISSUE: Synchronize From Upstream Repositories [#695](https://github.com/openshift/operator-framework-olm/pull/695)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#697](https://github.com/openshift/operator-framework-olm/pull/697)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-olm/pull/693)
* NO-ISSUE: Synchronize From Upstream Repositories [#687](https://github.com/openshift/operator-framework-olm/pull/687)
* NO-ISSUE: Remove ncdc from OWNERS #68 [#681](https://github.com/openshift/operator-framework-olm/pull/681)
* [OCPBUGS-24587](https://issues.redhat.com/browse/OCPBUGS-24587), [OCPBUGS-28744](https://issues.redhat.com/browse/OCPBUGS-28744): Synchronize From Upstream Repositories [#679](https://github.com/openshift/operator-framework-olm/pull/679)
* NO-ISSUE: Synchronize From Upstream Repositories [#678](https://github.com/openshift/operator-framework-olm/pull/678)
* NO-ISSUE: Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-olm/pull/676)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-olm/pull/667)
* [OCPBUGS-27140](https://issues.redhat.com/browse/OCPBUGS-27140): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 [#658](https://github.com/openshift/operator-framework-olm/pull/658)
* [OCPBUGS-25989](https://issues.redhat.com/browse/OCPBUGS-25989): Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-olm/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-olm/pull/659)
* [OCPBUGS-25262](https://issues.redhat.com/browse/OCPBUGS-25262): Updating operator-registry-container image to be consistent with ART for 4.16 [#657](https://github.com/openshift/operator-framework-olm/pull/657)
* [OCPBUGS-24526](https://issues.redhat.com/browse/OCPBUGS-24526), [OPRUN-3182](https://issues.redhat.com/browse/OPRUN-3182): Sync with upstream [#654](https://github.com/openshift/operator-framework-olm/pull/654)
* [OCPBUGS-24994](https://issues.redhat.com/browse/OCPBUGS-24994): Updating operator-lifecycle-manager-container image to be consistent with ART [#631](https://github.com/openshift/operator-framework-olm/pull/631)
* NO-ISSUE: Synchronize From Upstream Repositories [#650](https://github.com/openshift/operator-framework-olm/pull/650)
* NO-ISSUE: Synchronize From Upstream Repositories [#646](https://github.com/openshift/operator-framework-olm/pull/646)
* [OCPBUGS-25673](https://issues.redhat.com/browse/OCPBUGS-25673): NO-ISSUE: Synchronize From Upstream Repositories [#641](https://github.com/openshift/operator-framework-olm/pull/641)
* NO-ISSUE: Synchronize From Upstream Repositories [#627](https://github.com/openshift/operator-framework-olm/pull/627)
* NO-ISSUE: Update verified directories for microshift-manifests [#638](https://github.com/openshift/operator-framework-olm/pull/638)
* [OCPBUGS-25339](https://issues.redhat.com/browse/OCPBUGS-25339): [CARRY] Fix panic issue when annotations map is nil [#634](https://github.com/openshift/operator-framework-olm/pull/634)
* [OCPBUGS-24942](https://issues.redhat.com/browse/OCPBUGS-24942): Updating operator-registry-container image to be consistent with ART [#630](https://github.com/openshift/operator-framework-olm/pull/630)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/59aa935ebbe6948921ea3292603cbdce898e0091...56b7b9d5a6a063dad50e5f5a31b6dca7012c8345)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cfb26ffc98ef98b3bcc8e758eedf7bd43f47d94c)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#559](https://github.com/operator-framework/operator-marketplace/pull/559)
* [OCPBUGS-29575](https://issues.redhat.com/browse/OCPBUGS-29575): Apply hypershift cluster-profile for ibm-cloud-managed [#556](https://github.com/operator-framework/operator-marketplace/pull/556)
* [OPECO-3031](https://issues.redhat.com/browse/OPECO-3031): Update community index to 4.16 [#558](https://github.com/operator-framework/operator-marketplace/pull/558)
* synching dco policy across v0 repos [#557](https://github.com/operator-framework/operator-marketplace/pull/557)
* [OPECO-3029](https://issues.redhat.com/browse/OPECO-3029): Update image tag to 4.16 for all indexes except community-operators [#555](https://github.com/operator-framework/operator-marketplace/pull/555)
* Delete deploy dir [#529](https://github.com/operator-framework/operator-marketplace/pull/529)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/53c124a3f0edfd151652e1f23c87dd39ed7646bb...cfb26ffc98ef98b3bcc8e758eedf7bd43f47d94c)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/1db726a940d5ec150fd185a215f1368990653082)

* [OCPBUGS-24868](https://issues.redhat.com/browse/OCPBUGS-24868): Updating ose-ovirt-csi-driver-container image to be consistent with ART [#132](https://github.com/openshift/ovirt-csi-driver/pull/132)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/b8d25ad6d140a198e96527b46a9dbde65aae41ce...1db726a940d5ec150fd185a215f1368990653082)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/ac852f3eb077c877e998fee0359534349d07c604)

* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.16 [#130](https://github.com/openshift/ovirt-csi-driver-operator/pull/130)
* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART [#129](https://github.com/openshift/ovirt-csi-driver-operator/pull/129)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e9b0fa233d75a97e6d29106265938b42bc16d677...ac852f3eb077c877e998fee0359534349d07c604)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/7679c1259fc009096f0c50ca50b168975d3de6b6)

* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART [#176](https://github.com/openshift/cluster-api-provider-ovirt/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47...7679c1259fc009096f0c50ca50b168975d3de6b6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/7682c449ded3889b111f8aefe43134e30bd89118)

* [OCPBUGS-32925](https://issues.redhat.com/browse/OCPBUGS-32925), [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985): Dockerfile: Bump OVS to 3.3.0-2 [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142)
* [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419), [OCPBUGS-32461](https://issues.redhat.com/browse/OCPBUGS-32461), [SDN-4243](https://issues.redhat.com/browse/SDN-4243): Downstream Merge 22nd April 2024 [#2136](https://github.com/openshift/ovn-kubernetes/pull/2136)
* [SDN-4458](https://issues.redhat.com/browse/SDN-4458): Do per-pod MCS/metadata blocking with nftables rather than iptables [#1946](https://github.com/openshift/ovn-kubernetes/pull/1946)
* [SDN-4606](https://issues.redhat.com/browse/SDN-4606), [SDN-4688](https://issues.redhat.com/browse/SDN-4688): Downstream Merge April 18th 2024 [#2132](https://github.com/openshift/ovn-kubernetes/pull/2132)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419): [DownstreamMerge] 4-16-24 [#2129](https://github.com/openshift/ovn-kubernetes/pull/2129)
* [SDN-4403](https://issues.redhat.com/browse/SDN-4403): Downstream merge 20240415 [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889), [OCPBUGS-29952](https://issues.redhat.com/browse/OCPBUGS-29952), [SDN-3931](https://issues.redhat.com/browse/SDN-3931): Downstream merge 12 04 24 [#2120](https://github.com/openshift/ovn-kubernetes/pull/2120)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093), [OCPBUGS-29511](https://issues.redhat.com/browse/OCPBUGS-29511), [SDN-4157](https://issues.redhat.com/browse/SDN-4157): [DownstreamMerge] 4 April 2024 [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157): DownstreamMerge 25th march 2024 [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100)
* [OCPBUGS-31557](https://issues.redhat.com/browse/OCPBUGS-31557): Revert "Remove unnecessary rhel8 build layer" [#2104](https://github.com/openshift/ovn-kubernetes/pull/2104)
* [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089)
* [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081)
* [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066)
* [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063)
* [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057)
* [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051)
* [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048)
* [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038)
* [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027)
* [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995)
* [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979)
* [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010)
* [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978)
* [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000)
* [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980)
* [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990)
* [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/42b1cc427538a736f8c056171b4de7e6c6a366fb...7682c449ded3889b111f8aefe43134e30bd89118)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/730a473cf60d5de4d4543ea71ff5f3c6c1010980)

* [MULTIARCH-4631](https://issues.redhat.com/browse/MULTIARCH-4631): Rebase with upstream: go modules updates [#78](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/78)
* [MULTIARCH-4581](https://issues.redhat.com/browse/MULTIARCH-4581): Rebase with upstream: go modules updates [#77](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/77)
* [OCPBUGS-30530](https://issues.redhat.com/browse/OCPBUGS-30530): fix govul with protobuf [#76](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/76)
* [MULTIARCH-4363](https://issues.redhat.com/browse/MULTIARCH-4363): Rebase with upstream: go modules updates [#75](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/75)
* [MULTIARCH-4092](https://issues.redhat.com/browse/MULTIARCH-4092): Rebase with upstream: v0.6.0 release [#74](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/74)
* [OCPBUGS-25513](https://issues.redhat.com/browse/OCPBUGS-25513): CVE-2023-48795 Update crypto lib [#73](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/73)
* [MULTIARCH-4059](https://issues.redhat.com/browse/MULTIARCH-4059): Rebase with upstream: Fix snyk code issue: Path Traversal [#69](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/69)
* [MULTIARCH-4058](https://issues.redhat.com/browse/MULTIARCH-4058): Rebase with upstream: go modules updates [#67](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/67)
* [OCPBUGS-24950](https://issues.redhat.com/browse/OCPBUGS-24950): Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#68](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/68)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc...730a473cf60d5de4d4543ea71ff5f3c6c1010980)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/7cb9279894982a436d65a4c9bc49459460354c46)

* [OCPBUGS-28738](https://issues.redhat.com/browse/OCPBUGS-28738): Fix 4.16 SAST scan issues for ose-powervs-block-csi-driver-operator-container [#68](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/68)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add node-registrar healtcheck [#67](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/67)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#65](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/65)
* [OCPBUGS-28933](https://issues.redhat.com/browse/OCPBUGS-28933): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.16 [#66](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/66)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#64](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/64)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#63](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/63)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#57](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/57)
* [OCPBUGS-25710](https://issues.redhat.com/browse/OCPBUGS-25710): snyk: ignore vendor dir [#50](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/50)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#55](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/55)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#54](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/54)
* [OCPBUGS-24819](https://issues.redhat.com/browse/OCPBUGS-24819): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART [#53](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/53)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951...7cb9279894982a436d65a4c9bc49459460354c46)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/87386cd444b4b9fe745d0198ab959ccedb5e318a)

* [MULTIARCH-4610](https://issues.redhat.com/browse/MULTIARCH-4610): UPSTREAM: &lt;carry&gt;: Override service endpoints [#65](https://github.com/openshift/cloud-provider-powervs/pull/65)
* [OCPBUGS-30531](https://issues.redhat.com/browse/OCPBUGS-30531): fix govul with protobuf [#64](https://github.com/openshift/cloud-provider-powervs/pull/64)
* [OCPBUGS-25013](https://issues.redhat.com/browse/OCPBUGS-25013): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#62](https://github.com/openshift/cloud-provider-powervs/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/521b80dfc284a1ca0c6e112ac7bf7b504c786d88...87386cd444b4b9fe745d0198ab959ccedb5e318a)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1)

* [OCPBUGS-27881](https://issues.redhat.com/browse/OCPBUGS-27881): Update Snyk file to exclude other vendor folders [#74](https://github.com/openshift/machine-api-provider-powervs/pull/74)
* [MULTIARCH-4104](https://issues.redhat.com/browse/MULTIARCH-4104): Update go and k8s versions [#73](https://github.com/openshift/machine-api-provider-powervs/pull/73)
* [MULTIARCH-4066](https://issues.redhat.com/browse/MULTIARCH-4066): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#71](https://github.com/openshift/machine-api-provider-powervs/pull/71)
* [OCPBUGS-25555](https://issues.redhat.com/browse/OCPBUGS-25555): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#70](https://github.com/openshift/machine-api-provider-powervs/pull/70)
* [OCPBUGS-25047](https://issues.redhat.com/browse/OCPBUGS-25047): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#68](https://github.com/openshift/machine-api-provider-powervs/pull/68)
* [OCPBUGS-24894](https://issues.redhat.com/browse/OCPBUGS-24894): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#67](https://github.com/openshift/machine-api-provider-powervs/pull/67)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/07e8f8b81748d52cf596082b8102134e954137ba...6b57e6c1bf0ee22bd0d51fde1249209c53da07d1)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)

* [OCPBUGS-29980](https://issues.redhat.com/browse/OCPBUGS-29980): Updating prom-label-proxy-container image to be consistent with ART for 4.16 [#365](https://github.com/openshift/prom-label-proxy/pull/365)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): add machine424 and rexagod to OWNERS [#358](https://github.com/openshift/prom-label-proxy/pull/358)
* [MON-3698](https://issues.redhat.com/browse/MON-3698): Update to upstream prom-label-proxy 0.8.1 [#363](https://github.com/openshift/prom-label-proxy/pull/363)
* [MON-3649](https://issues.redhat.com/browse/MON-3649): Bump openshift/prom-label-proxy to v0.8.0 [#362](https://github.com/openshift/prom-label-proxy/pull/362)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#361](https://github.com/openshift/prom-label-proxy/pull/361)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#360](https://github.com/openshift/prom-label-proxy/pull/360)
* [OCPBUGS-24742](https://issues.redhat.com/browse/OCPBUGS-24742): Updating prom-label-proxy-container image to be consistent with ART [#359](https://github.com/openshift/prom-label-proxy/pull/359)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4...5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)


### [prometheus](https://github.com/openshift/prometheus/tree/73b6ffbb3a5d0e1a1d8ce04d96a072940613519a)

* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#200](https://github.com/openshift/prometheus/pull/200)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#199](https://github.com/openshift/prometheus/pull/199)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.51.1 [#198](https://github.com/openshift/prometheus/pull/198)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.50.1 [#196](https://github.com/openshift/prometheus/pull/196)
* [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188)
* [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187)
* [Full changelog](https://github.com/openshift/prometheus/compare/6828e4464c45f239a89c7965233c2fef49c6b1fb...73b6ffbb3a5d0e1a1d8ce04d96a072940613519a)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/1e17979b2cd4d36dff7ed3d38e4fea9d875a9261)

* [OCPBUGS-29969](https://issues.redhat.com/browse/OCPBUGS-29969): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.16 [#88](https://github.com/openshift/prometheus-alertmanager/pull/88)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#86](https://github.com/openshift/prometheus-alertmanager/pull/86)
* [OCPBUGS-24718](https://issues.redhat.com/browse/OCPBUGS-24718): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART [#85](https://github.com/openshift/prometheus-alertmanager/pull/85)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/870ade52a6097bc55cec29c1a9cc028967c5d23c...1e17979b2cd4d36dff7ed3d38e4fea9d875a9261)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/8bf4750af765730dc423213516245c7b0679e352)

* [MON-3838](https://issues.redhat.com/browse/MON-3838): Bump openshift/prometheus-operator to v0.73.2 [#286](https://github.com/openshift/prometheus-operator/pull/286)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Bump openshift/prometheus-operator to v0.73.1 [#285](https://github.com/openshift/prometheus-operator/pull/285)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Bump openshift/prometheus-operator to v0.73.0 [#284](https://github.com/openshift/prometheus-operator/pull/284)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281)
* [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277)
* [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271)
* [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269)
* [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270)
* [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265)
* [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/faad27f990b16a0806f92bf0362e45d777cec8e7...8bf4750af765730dc423213516245c7b0679e352)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)

* [MON-3847](https://issues.redhat.com/browse/MON-3847): Bump openshift/node_exporter to v1.8.0 [#145](https://github.com/openshift/node_exporter/pull/145)
* [OCPBUGS-20151](https://issues.redhat.com/browse/OCPBUGS-20151): [CHERRY PICK FROM UPSTREAM]: Take optional attributes into account for fibre_channel metrics [#144](https://github.com/openshift/node_exporter/pull/144)
* [OCPBUGS-29976](https://issues.redhat.com/browse/OCPBUGS-29976): golang-github-prometheus-node_exporter-container image… [#142](https://github.com/openshift/node_exporter/pull/142)
* [OCPBUGS-24722](https://issues.redhat.com/browse/OCPBUGS-24722): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART [#140](https://github.com/openshift/node_exporter/pull/140)
* [Full changelog](https://github.com/openshift/node_exporter/compare/aed837c322b6eb54d88956acada07b5b390b5c25...29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/3112b458983c6fca6f77d5a945fb0026186dace6)

* [OCPBUGS-30048](https://issues.redhat.com/browse/OCPBUGS-30048): Fix OWNERS file to reflect the correct team [#41](https://github.com/openshift/route-controller-manager/pull/41)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): bump k8s to 1.29.1 [#38](https://github.com/openshift/route-controller-manager/pull/38)
* [OCPBUGS-26088](https://issues.redhat.com/browse/OCPBUGS-26088): Add .snyk file to exclude vendor and ignore unit tests [#37](https://github.com/openshift/route-controller-manager/pull/37)
* [OCPBUGS-24839](https://issues.redhat.com/browse/OCPBUGS-24839): Updating ose-route-controller-manager-container image to be consistent with ART [#36](https://github.com/openshift/route-controller-manager/pull/36)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/c5cc7a73705e4086759e2a36811b055b7716def4...3112b458983c6fca6f77d5a945fb0026186dace6)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/cb3093f23618be6898e540b97855450cc198db2d)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#235](https://github.com/openshift/service-ca-operator/pull/235)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#230](https://github.com/openshift/service-ca-operator/pull/230)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f5972cc74670c274bdc2b29d0903c4ed0432b9ca...cb3093f23618be6898e540b97855450cc198db2d)


### [telemeter](https://github.com/openshift/telemeter/tree/6ab43e488013b2383d594b3a8837e3800ce01c04)

* [RHOBS-1036](https://issues.redhat.com/browse/RHOBS-1036): Harden integration tests [#529](https://github.com/openshift/telemeter/pull/529)
* [MON-3819](https://issues.redhat.com/browse/MON-3819): Update tools go 1.21 [#526](https://github.com/openshift/telemeter/pull/526)
* [MON-3737](https://issues.redhat.com/browse/MON-3737): Update binaries to new version [#525](https://github.com/openshift/telemeter/pull/525)
* [OCPBUGS-30724](https://issues.redhat.com/browse/OCPBUGS-30724): CVE-2024-28180 bump go-jose to v3.0.3 [#524](https://github.com/openshift/telemeter/pull/524)
* [OCPBUGS-30832](https://issues.redhat.com/browse/OCPBUGS-30832): bump Go 1.21 [#521](https://github.com/openshift/telemeter/pull/521)
* [OCPBUGS-30544](https://issues.redhat.com/browse/OCPBUGS-30544): CVE-2024-24786  Bump google.golang.org/protobuf to v1.33.0 [#516](https://github.com/openshift/telemeter/pull/516)
* [MON-3175](https://issues.redhat.com/browse/MON-3175): README.md: update deprecated link [#512](https://github.com/openshift/telemeter/pull/512)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): remove obsolete targets from Makefile [#513](https://github.com/openshift/telemeter/pull/513)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Updating telemeter-container image to be consistent with ART [#497](https://github.com/openshift/telemeter/pull/497)
* [OCPBUGS-24983](https://issues.redhat.com/browse/OCPBUGS-24983): Force kill jobs after integration v2 test finish [#514](https://github.com/openshift/telemeter/pull/514)
* [MON-3715](https://issues.redhat.com/browse/MON-3715): chore: bump dependencies [#511](https://github.com/openshift/telemeter/pull/511)
* [RHOBS-995](https://issues.redhat.com/browse/RHOBS-995): Simplify cluster:capacity_effective_cpu_cores, add tests [#506](https://github.com/openshift/telemeter/pull/506)
* [MON-3708](https://issues.redhat.com/browse/MON-3708): fix test/integration.sh [#509](https://github.com/openshift/telemeter/pull/509)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): fix join issue in cluster:capacity_effective_cpu_cores [#505](https://github.com/openshift/telemeter/pull/505)
* [OCPBUGS-16397](https://issues.redhat.com/browse/OCPBUGS-16397): update nutanix filter [#504](https://github.com/openshift/telemeter/pull/504)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Removing newlines from the jsonnet configuration for the recording rules.libsonnet [#503](https://github.com/openshift/telemeter/pull/503)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Add rule for effective CPU cores for subscription usage purposes [#501](https://github.com/openshift/telemeter/pull/501)
* [Full changelog](https://github.com/openshift/telemeter/compare/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b...6ab43e488013b2383d594b3a8837e3800ce01c04)


### [tests](https://github.com/openshift/origin/tree/f9eeb4866c898462c881327c964b88fe1e613278)

* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): feat: add buffer interval for SNO pathological events [#28709](https://github.com/openshift/origin/pull/28709)
* NO-JIRA: Adjust the method of get the apiServer [#28756](https://github.com/openshift/origin/pull/28756)
* NO-ISSUE: Automated - Update synthetic test data [#28744](https://github.com/openshift/origin/pull/28744)
* [TRT-1610](https://issues.redhat.com/browse/TRT-1610): Intervals, move over to new schema, finally... [#28727](https://github.com/openshift/origin/pull/28727)
* Revert "TRT-1625: Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering"" [#28748](https://github.com/openshift/origin/pull/28748)
* NO-JIRA: bump library-go [#28711](https://github.com/openshift/origin/pull/28711)
* NO-JIRA: Use bound prometheus-k8s API tokens [#28655](https://github.com/openshift/origin/pull/28655)
* [TRT-1625](https://issues.redhat.com/browse/TRT-1625): Revert #28741 "OCPBUGS-32923: Fix allowed firing alerts not triggering" [#28747](https://github.com/openshift/origin/pull/28747)
* [OCPBUGS-32923](https://issues.redhat.com/browse/OCPBUGS-32923): Fix allowed firing alerts not triggering [#28741](https://github.com/openshift/origin/pull/28741)
* [TRT-1618](https://issues.redhat.com/browse/TRT-1618): Allow Upgradeable:False with OpenShiftSDN [#28738](https://github.com/openshift/origin/pull/28738)
* [ETCD-588](https://issues.redhat.com/browse/ETCD-588): Add e2e test for hardware speed profiles feature [#28726](https://github.com/openshift/origin/pull/28726)
* [OCPBUGS-32477](https://issues.redhat.com/browse/OCPBUGS-32477): Also rely on oomkilled exit code 137 in build test [#28725](https://github.com/openshift/origin/pull/28725)
* [OCPBUGS-32293](https://issues.redhat.com/browse/OCPBUGS-32293): Use In-Tree Template for Jenkins [#28732](https://github.com/openshift/origin/pull/28732)
* [OCPBUGS-31589](https://issues.redhat.com/browse/OCPBUGS-31589): e2e: use bound API token for prometheus-k8s SA [#28679](https://github.com/openshift/origin/pull/28679)
* [AUTH-509](https://issues.redhat.com/browse/AUTH-509): Remove `system:anonymous` test cases [#28686](https://github.com/openshift/origin/pull/28686)
* NO-JIRA: Drop unused images and OWNERS files [#28736](https://github.com/openshift/origin/pull/28736)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#28733](https://github.com/openshift/origin/pull/28733)
* NO-JIRA: bump openshift/kubernetes [#28712](https://github.com/openshift/origin/pull/28712)
* NO-JIRA: Create autodl file for per user resource request audit entries [#28715](https://github.com/openshift/origin/pull/28715)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28728](https://github.com/openshift/origin/pull/28728)
* NO-JIRA: Record Kube event first/last timestamp in the resulting intervals [#28722](https://github.com/openshift/origin/pull/28722)
* [OCPBUGS-32484](https://issues.redhat.com/browse/OCPBUGS-32484): chart template: limit tooltip width to first word [#27965](https://github.com/openshift/origin/pull/27965)
* [OCPBUGS-31030](https://issues.redhat.com/browse/OCPBUGS-31030), [OCPBUGS-31032](https://issues.redhat.com/browse/OCPBUGS-31032): Reduce deploymentconfig test 3GBi memory size to reasonable [#28680](https://github.com/openshift/origin/pull/28680)
* NO-ISSUE: Automated - Update synthetic test data [#28723](https://github.com/openshift/origin/pull/28723)
* [OCPBUGS-32485](https://issues.redhat.com/browse/OCPBUGS-32485): upkeep: update test pinned workloads [#28704](https://github.com/openshift/origin/pull/28704)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use cli image, as the scratch image [#28695](https://github.com/openshift/origin/pull/28695)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Complete removal of non-structured locator/message use [#28663](https://github.com/openshift/origin/pull/28663)
* [OCPBUGS-32320](https://issues.redhat.com/browse/OCPBUGS-32320): revert: removing static pod skip for crio check [#28708](https://github.com/openshift/origin/pull/28708)
* Revert "OCPBUGS-28230: enforce termination message policy on all platform pods" [#28721](https://github.com/openshift/origin/pull/28721)
* [OCPBUGS-31860](https://issues.redhat.com/browse/OCPBUGS-31860): ppc64le without python-cinder [#28692](https://github.com/openshift/origin/pull/28692)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#28547](https://github.com/openshift/origin/pull/28547)
* NO-JIRA: Unskip volume populator tests that were disabled in the test suite [#28475](https://github.com/openshift/origin/pull/28475)
* [USHIFT-2985](https://issues.redhat.com/browse/USHIFT-2985): Fix MicroShift crash and router tests skipping [#28716](https://github.com/openshift/origin/pull/28716)
* NO-JIRA: Remove test dir OWNERS file, rely on top-level instead [#28714](https://github.com/openshift/origin/pull/28714)
* NO-JIRA: split the per-user summary to include verbs for resources [#28705](https://github.com/openshift/origin/pull/28705)
* NO-JIRA: add to the operator list [#28703](https://github.com/openshift/origin/pull/28703)
* NO-ISSUE: Automated - Update synthetic test data [#28701](https://github.com/openshift/origin/pull/28701)
* NO-JIRA: need to make manifest dir to place content [#28700](https://github.com/openshift/origin/pull/28700)
* NO-JIRA: Record tests by feature [#28694](https://github.com/openshift/origin/pull/28694)
* [OCPBUGS-31868](https://issues.redhat.com/browse/OCPBUGS-31868): Add debug logging for SLB monitortest cleanup [#28697](https://github.com/openshift/origin/pull/28697)
* [SO-121](https://issues.redhat.com/browse/SO-121): Samples Release, fix test cases [#28685](https://github.com/openshift/origin/pull/28685)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Reapply #28589 [#28660](https://github.com/openshift/origin/pull/28660)
* no-jira: Ignore alerts on CustomNoUpgrade clusters [#28678](https://github.com/openshift/origin/pull/28678)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28672](https://github.com/openshift/origin/pull/28672)
* NO-ISSUE: automated update synthetic test data [#28693](https://github.com/openshift/origin/pull/28693)
* NO-JIRA: add service accounts to resourcewatcher [#28689](https://github.com/openshift/origin/pull/28689)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Switch to use must-gather image in build multi-stage [#28687](https://github.com/openshift/origin/pull/28687)
* [TRT-1545](https://issues.redhat.com/browse/TRT-1545): Begin removing use of the legacy locator on intervals [#28597](https://github.com/openshift/origin/pull/28597)
* [OCPBUGS-31513](https://issues.redhat.com/browse/OCPBUGS-31513): feat: update regex for rt kernel version match [#28665](https://github.com/openshift/origin/pull/28665)
* [OCPBUGS-31492](https://issues.redhat.com/browse/OCPBUGS-31492): Add a test that will fail on over 10k etcd took too long messages [#28674](https://github.com/openshift/origin/pull/28674)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Use centos7 tag instead of latest for cmd images tests [#28675](https://github.com/openshift/origin/pull/28675)
* [OCPBUGS-30267](https://issues.redhat.com/browse/OCPBUGS-30267): Clarify a misleading message in patho event failures [#28667](https://github.com/openshift/origin/pull/28667)
* NO-JIRA: add conditional execution of featuregated tests [#28670](https://github.com/openshift/origin/pull/28670)
* [TRT-1494](https://issues.redhat.com/browse/TRT-1494): Add monitortest for cloud function on azure [#28582](https://github.com/openshift/origin/pull/28582)
* [OSD-21709](https://issues.redhat.com/browse/OSD-21709): Add temporary exceptions for managed services alerts [#28669](https://github.com/openshift/origin/pull/28669)
* [TRT-1559](https://issues.redhat.com/browse/TRT-1559): Remove two sets of logs to bring build-log.txt size down [#28654](https://github.com/openshift/origin/pull/28654)
* NO-JIRA: Add skip condition for Cluster-CSI-Snapshot-Controller-Operator feature [#28635](https://github.com/openshift/origin/pull/28635)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Add monitortest for cloud function on aws [#28581](https://github.com/openshift/origin/pull/28581)
* NO-JIRA: add simple test for server side apply to demonstrate field clearing [#28491](https://github.com/openshift/origin/pull/28491)
* [OCPBUGS-31074](https://issues.redhat.com/browse/OCPBUGS-31074): fix: add check for static container [#28662](https://github.com/openshift/origin/pull/28662)
* [TRT-1567](https://issues.redhat.com/browse/TRT-1567): Revert #28589 "AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads" [#28659](https://github.com/openshift/origin/pull/28659)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Add a monitor test to check the existence of required-scc annotation in platform workloads [#28589](https://github.com/openshift/origin/pull/28589)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Check idling annotation in services not endpoints [#28619](https://github.com/openshift/origin/pull/28619)
* [OCPBUGS-30604](https://issues.redhat.com/browse/OCPBUGS-30604): fix panic on non-standard node-role labels [#28650](https://github.com/openshift/origin/pull/28650)
* [TRT-1557](https://issues.redhat.com/browse/TRT-1557): Align three unknown tests to kube-apiserver [#28649](https://github.com/openshift/origin/pull/28649)
* [MULTIARCH-4352](https://issues.redhat.com/browse/MULTIARCH-4352): Censor private key from pod dump logs [#28638](https://github.com/openshift/origin/pull/28638)
* trt-1538: additional timeout bumps [#28644](https://github.com/openshift/origin/pull/28644)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update skipUnlessMachineAPIOperator function [#28625](https://github.com/openshift/origin/pull/28625)
* trt-1538: Bump context timeout to 20 minutes [#28641](https://github.com/openshift/origin/pull/28641)
* trt-1538: Wait for monitor resources cleanup [#28626](https://github.com/openshift/origin/pull/28626)
* [OCPNODE-2099](https://issues.redhat.com/browse/OCPNODE-2099): add kube-rbac-proxy-crio toleration change [#28636](https://github.com/openshift/origin/pull/28636)
* [OCPBUGS-29028](https://issues.redhat.com/browse/OCPBUGS-29028): Add function back to execute commands via pod [#28621](https://github.com/openshift/origin/pull/28621)
* NO-ISSUE: Automated - Update synthetic test data [#28600](https://github.com/openshift/origin/pull/28600)
* [OCPBUGS-27323](https://issues.redhat.com/browse/OCPBUGS-27323): Skip tests for image-registry operator with single replica [#28605](https://github.com/openshift/origin/pull/28605)
* NO-JIRA: Handle release info output streams separately [#28631](https://github.com/openshift/origin/pull/28631)
* [TRT-1539](https://issues.redhat.com/browse/TRT-1539): Do not let loki alerts fail tests [#28627](https://github.com/openshift/origin/pull/28627)
* Delete unneeded stale owners file, defer to top level owners [#28624](https://github.com/openshift/origin/pull/28624)
* [MULTIARCH-4160](https://issues.redhat.com/browse/MULTIARCH-4160): Stop using the DetermineFromRelease function [#28598](https://github.com/openshift/origin/pull/28598)
* trt-1530: specify deployment id for unique log names [#28613](https://github.com/openshift/origin/pull/28613)
* [TRT-1506](https://issues.redhat.com/browse/TRT-1506): Restore the tests looking for excess single-second disruptions [#28592](https://github.com/openshift/origin/pull/28592)
* [OCPBUGS-29858](https://issues.redhat.com/browse/OCPBUGS-29858): Only extract node role from properly formatted node-role label [#28585](https://github.com/openshift/origin/pull/28585)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update control plane machine set test [#28602](https://github.com/openshift/origin/pull/28602)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Re-introduce the GCP liveness endpoint test [#28608](https://github.com/openshift/origin/pull/28608)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28604](https://github.com/openshift/origin/pull/28604)
* NO-JIRA: Pass tail flag in adm node-logs to reduce log size [#28607](https://github.com/openshift/origin/pull/28607)
* NO-JIRA: Remove bare node-logs test to reduce logs size [#28606](https://github.com/openshift/origin/pull/28606)
* [TRT-1522](https://issues.redhat.com/browse/TRT-1522): Revert #28594 "TRT-1476: Re-introduce the GCP liveness endpoint test" [#28603](https://github.com/openshift/origin/pull/28603)
* [TRT-1501](https://issues.redhat.com/browse/TRT-1501): Add debug logging for decoding cluster provider [#28593](https://github.com/openshift/origin/pull/28593)
* [TRT-1515](https://issues.redhat.com/browse/TRT-1515): Revert #28587 "NO-JIRA: bump golang to 1.21 and to latest o/k master " [#28601](https://github.com/openshift/origin/pull/28601)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Re-introduce the GCP liveness endpoint test [#28594](https://github.com/openshift/origin/pull/28594)
* [OCPBUGS-29493](https://issues.redhat.com/browse/OCPBUGS-29493): fix: updated unit test to look for topology not node count [#28595](https://github.com/openshift/origin/pull/28595)
* NO-JIRA: bump golang to 1.21 and to latest o/k master [#28587](https://github.com/openshift/origin/pull/28587)
* [TRT-1499](https://issues.redhat.com/browse/TRT-1499): Revert #28571 gcp-network-liveness until gcp resources are whitelisted [#28586](https://github.com/openshift/origin/pull/28586)
* [TRT-1477](https://issues.redhat.com/browse/TRT-1477): update IP for new gcp LB [#28583](https://github.com/openshift/origin/pull/28583)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router: HAProxy 2.8 Compatibility Enhancements for h2spec tests [#28514](https://github.com/openshift/origin/pull/28514)
* [TRT-1445](https://issues.redhat.com/browse/TRT-1445): Monitor test hangs during interrupt handling [#28580](https://github.com/openshift/origin/pull/28580)
* [TRT-1491](https://issues.redhat.com/browse/TRT-1491): Reorder interval groups to place most important/brief info higher up [#28576](https://github.com/openshift/origin/pull/28576)
* NO-JIRA: enforce only stable CRD versions accessible by default [#28570](https://github.com/openshift/origin/pull/28570)
* [SPLAT-1427](https://issues.redhat.com/browse/SPLAT-1427): fix/sig-net: ignoring edge when listing worker nodes [#28486](https://github.com/openshift/origin/pull/28486)
* [TRT-1476](https://issues.redhat.com/browse/TRT-1476): Add monitortest for cloud function on gcp [#28571](https://github.com/openshift/origin/pull/28571)
* [OCPBUGS-28662](https://issues.redhat.com/browse/OCPBUGS-28662): Replace 'coreydaley' with 'sayan-biswas' [#28564](https://github.com/openshift/origin/pull/28564)
* [OCPBUGS-23115](https://issues.redhat.com/browse/OCPBUGS-23115): Test builds with subscription content [#28560](https://github.com/openshift/origin/pull/28560)
* [TRT-1452](https://issues.redhat.com/browse/TRT-1452): Separate excessive Back-off restarting tests via namespace [#28543](https://github.com/openshift/origin/pull/28543)
* NO-JIRA: fix the static pod lifecycle failure test for more revisions [#28553](https://github.com/openshift/origin/pull/28553)
* [OCPNODE-2029](https://issues.redhat.com/browse/OCPNODE-2029): migrate crio metrics to https [#28536](https://github.com/openshift/origin/pull/28536)
* [TRT-1480](https://issues.redhat.com/browse/TRT-1480): Fix disruption analysis on /payload jobs [#28568](https://github.com/openshift/origin/pull/28568)
* [TRT-965](https://issues.redhat.com/browse/TRT-965): Add disruption to the risk analysis spyglass panel [#28558](https://github.com/openshift/origin/pull/28558)
* NO-JIRA: Skip external cloud provider test for HyperShift clusters [#28562](https://github.com/openshift/origin/pull/28562)
* [MON-3449](https://issues.redhat.com/browse/MON-3449): Ensure monitoring statefulsets are not recreated after upgr… [#28361](https://github.com/openshift/origin/pull/28361)
* NO-JIRA: techpreview can install unstable CRDs [#28532](https://github.com/openshift/origin/pull/28532)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): replace curl calls by net/http [#28546](https://github.com/openshift/origin/pull/28546)
* [MON-3693](https://issues.redhat.com/browse/MON-3693): Adding slashpai and machine424 to Prometheus owners [#28552](https://github.com/openshift/origin/pull/28552)
* [OCPBUGS-27892](https://issues.redhat.com/browse/OCPBUGS-27892): fix panic in service-poller [#28544](https://github.com/openshift/origin/pull/28544)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28538](https://github.com/openshift/origin/pull/28538)
* NO-JIRA: remove unnecessary setup code from monitor [#28534](https://github.com/openshift/origin/pull/28534)
* trt-1141: bump timeout values [#28527](https://github.com/openshift/origin/pull/28527)
* NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… [#28542](https://github.com/openshift/origin/pull/28542)
* [OCPBUGS-27465](https://issues.redhat.com/browse/OCPBUGS-27465): Do not assume there is just a single kubelet systemd service [#28529](https://github.com/openshift/origin/pull/28529)
* [OCPBUGS-27502](https://issues.redhat.com/browse/OCPBUGS-27502): collect certs on disk: set pause image [#28541](https://github.com/openshift/origin/pull/28541)
* NO-ISSUE: Automated - Update synthetic test data [#28537](https://github.com/openshift/origin/pull/28537)
* [OCPBUGS-27210](https://issues.redhat.com/browse/OCPBUGS-27210): Restore HTTP/2 tests in test/extended/router [#28540](https://github.com/openshift/origin/pull/28540)
* [OCPBUGS-20487](https://issues.redhat.com/browse/OCPBUGS-20487): update egressFWTestE2E image which contains ping binary [#28408](https://github.com/openshift/origin/pull/28408)
* NO-JIRA: Update Omer to be the SNO lead [#28451](https://github.com/openshift/origin/pull/28451)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Automated - Update synthetic test data [#28484](https://github.com/openshift/origin/pull/28484)
* NO-JIRA: Update WinC team lead [#28472](https://github.com/openshift/origin/pull/28472)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28530](https://github.com/openshift/origin/pull/28530)
* [OCPBUGS-27341](https://issues.redhat.com/browse/OCPBUGS-27341): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28480](https://github.com/openshift/origin/pull/28480)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router/http2: delete skipped tests [#28522](https://github.com/openshift/origin/pull/28522)
* NO-JIRA: Collect certs from disk [#28444](https://github.com/openshift/origin/pull/28444)
* [TRT-1370](https://issues.redhat.com/browse/TRT-1370): Track etcd leadership changes in etcd-leaders section of spyglass chart [#28441](https://github.com/openshift/origin/pull/28441)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Allow BestMatchDuration to pass even on fallback [#28526](https://github.com/openshift/origin/pull/28526)
* NO-JIRA: add kubernetes level to openshift tests image for payload [#28521](https://github.com/openshift/origin/pull/28521)
* [TRT-1441](https://issues.redhat.com/browse/TRT-1441): Stop uploading intervals to loki [#28525](https://github.com/openshift/origin/pull/28525)
* [NP-877](https://issues.redhat.com/browse/NP-877): Live migration suite e2e [#28462](https://github.com/openshift/origin/pull/28462)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Bump k8s api to v1.29.0 [#28473](https://github.com/openshift/origin/pull/28473)
* trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive [#28518](https://github.com/openshift/origin/pull/28518)
* add test to ensure all accessible-by-default apis are stable [#28467](https://github.com/openshift/origin/pull/28467)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28517](https://github.com/openshift/origin/pull/28517)
* [OCPBUGS-18577](https://issues.redhat.com/browse/OCPBUGS-18577): updated timeout to 3 seconds to account for network timing issues [#28300](https://github.com/openshift/origin/pull/28300)
* "NO-JIRA: Reduce top level origin approvers to TRT members only" [#28439](https://github.com/openshift/origin/pull/28439)
* watch the operator resources during resource watch [#28513](https://github.com/openshift/origin/pull/28513)
* add featureset into the raw-tls artifact names [#28509](https://github.com/openshift/origin/pull/28509)
* [OCPBUGS-25730](https://issues.redhat.com/browse/OCPBUGS-25730): Kuryr: Ignore Upgradeable=False on operators tests [#28478](https://github.com/openshift/origin/pull/28478)
* [OCPBUGS-26025](https://issues.redhat.com/browse/OCPBUGS-26025): Do not apply master label to make sure SNO jobs pass [#28499](https://github.com/openshift/origin/pull/28499)
* [OCPBUGS-25142](https://issues.redhat.com/browse/OCPBUGS-25142): Retry with different node port to make oc service test stable [#28495](https://github.com/openshift/origin/pull/28495)
* Refine explanation of meeting regenerate after expiry requirement [#28502](https://github.com/openshift/origin/pull/28502)
* Add README.md clarifying TLS registry purpose and processes [#28434](https://github.com/openshift/origin/pull/28434)
* [OCPBUGS-26069](https://issues.redhat.com/browse/OCPBUGS-26069): Update cluster-monitoring-operator request limits [#28498](https://github.com/openshift/origin/pull/28498)
* use the same collection options for tests so the certificate names wi… [#28497](https://github.com/openshift/origin/pull/28497)
* Update certs again [#28489](https://github.com/openshift/origin/pull/28489)
* e2e node label test to verify blocking forbidden labels [#28296](https://github.com/openshift/origin/pull/28296)
* [OCPBUGS-25943](https://issues.redhat.com/browse/OCPBUGS-25943): Adding test case for when exceed openshift.io/image-tags will ban to … [#28464](https://github.com/openshift/origin/pull/28464)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Update etcd test data for 1.29 release [#28485](https://github.com/openshift/origin/pull/28485)
* [OCPBUGS-25687](https://issues.redhat.com/browse/OCPBUGS-25687): Increase timeout for pod-network-service [#28474](https://github.com/openshift/origin/pull/28474)
* [PSAP-1210](https://issues.redhat.com/browse/PSAP-1210): Update code for automate OCPBUGS-18052 [#28382](https://github.com/openshift/origin/pull/28382)
* NO-JIRA: images: don't log entire image status on failure [#28469](https://github.com/openshift/origin/pull/28469)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: update missing ruby 3.0 ref [#28481](https://github.com/openshift/origin/pull/28481)
* [OCPBUGS-22438](https://issues.redhat.com/browse/OCPBUGS-22438): feat: add extra check for ready state on resiliency test [#28421](https://github.com/openshift/origin/pull/28421)
* [TRT-1403](https://issues.redhat.com/browse/TRT-1403): Finish porting ALL intervals to structured [#28463](https://github.com/openshift/origin/pull/28463)
* [OCPBUGS-25610](https://issues.redhat.com/browse/OCPBUGS-25610): fix: lane e2e-gcp-ovn-builds perma fail [#28471](https://github.com/openshift/origin/pull/28471)
* [NE-1477](https://issues.redhat.com/browse/NE-1477): Regenerate cert in 1024 key FIPs test to use SHA256 [#28457](https://github.com/openshift/origin/pull/28457)
* [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Add mechanism for creating flake junit for a monitor test [#28459](https://github.com/openshift/origin/pull/28459)
* NO-JIRA: Fix issue 28445 [#28446](https://github.com/openshift/origin/pull/28446)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28465](https://github.com/openshift/origin/pull/28465)
* Show how we can add new annotations using descriptions [#28461](https://github.com/openshift/origin/pull/28461)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update etcd test data for 1.29 release [#28458](https://github.com/openshift/origin/pull/28458)
* update-tls-artifacts: add AnnotationRequirement [#28460](https://github.com/openshift/origin/pull/28460)
* [OCPBUGS-25045](https://issues.redhat.com/browse/OCPBUGS-25045): Updating openshift-enterprise-tests-container image to be consistent with ART [#28452](https://github.com/openshift/origin/pull/28452)
* trt-1042: collect watch request counts [#28431](https://github.com/openshift/origin/pull/28431)
* [TRT-786](https://issues.redhat.com/browse/TRT-786): Relax the per-job disruption tests and fix bugs/improve consistency [#28453](https://github.com/openshift/origin/pull/28453)
* fix jira components to match actual jira components [#28454](https://github.com/openshift/origin/pull/28454)
* [OCPBUGS-24537](https://issues.redhat.com/browse/OCPBUGS-24537): Properly ignore kube guard probe events [#28448](https://github.com/openshift/origin/pull/28448)
* add pacevedom to the team-leads alias [#28449](https://github.com/openshift/origin/pull/28449)
* [TRT-1400](https://issues.redhat.com/browse/TRT-1400): Automated - Update synthetic test data [#28416](https://github.com/openshift/origin/pull/28416)
* [Full changelog](https://github.com/openshift/origin/compare/f4b2b24003ad3358e859c40b3421c30f7aa6ce58...f9eeb4866c898462c881327c964b88fe1e613278)


### [thanos](https://github.com/openshift/thanos/tree/7ab10572156af80ee1bc20ae95ebd8069f527342)

* [MON-3799](https://issues.redhat.com/browse/MON-3799): Bump openshift/thanos to v0.34.1 [#141](https://github.com/openshift/thanos/pull/141)
* [OCPBUGS-30537](https://issues.redhat.com/browse/OCPBUGS-30537): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#143](https://github.com/openshift/thanos/pull/143)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): Update OWNERS: move raptorsun out of reviewer [#140](https://github.com/openshift/thanos/pull/140)
* [MON-3753](https://issues.redhat.com/browse/MON-3753): Increase thanos tests timeout [#144](https://github.com/openshift/thanos/pull/144)
* [OCPBUGS-29982](https://issues.redhat.com/browse/OCPBUGS-29982): Updating ose-thanos-container image to be consistent with ART for 4.16 [#142](https://github.com/openshift/thanos/pull/142)
* [MON-3703](https://issues.redhat.com/browse/MON-3703): Bump openshift/thanos to v0.34.0 [#139](https://github.com/openshift/thanos/pull/139)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Bump openshift/thanos to v0.33.0 [#136](https://github.com/openshift/thanos/pull/136)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#135](https://github.com/openshift/thanos/pull/135)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#134](https://github.com/openshift/thanos/pull/134)
* [Full changelog](https://github.com/openshift/thanos/compare/66161ad4e03e5593f5a3a33aaaffbcd41555d62a...7ab10572156af80ee1bc20ae95ebd8069f527342)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/d13aea81a381d967de15444c3949b4f0ef372185)

* [OCPBUGS-27865](https://issues.redhat.com/browse/OCPBUGS-27865): Add snyk exclusion file [#63](https://github.com/openshift/cloud-provider-vsphere/pull/63)
* [OCPCLOUD-2420](https://issues.redhat.com/browse/OCPCLOUD-2420): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (46a5796) into master [#53](https://github.com/openshift/cloud-provider-vsphere/pull/53)
* [OCPBUGS-26125](https://issues.redhat.com/browse/OCPBUGS-26125): Add Snyk file to exclude vendor directory on scan [#61](https://github.com/openshift/cloud-provider-vsphere/pull/61)
* [OCPBUGS-25584](https://issues.redhat.com/browse/OCPBUGS-25584): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-vsphere/pull/60)
* [OCPBUGS-24991](https://issues.redhat.com/browse/OCPBUGS-24991): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-vsphere/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/d2af698277d7dbbd020f8b05b1c319e1bbb1eeae...d13aea81a381d967de15444c3949b4f0ef372185)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/80c2c63235a4b69f3d2fac26fcffdfff970e2362)

* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Update manager binary path [#28](https://github.com/openshift/cluster-api-provider-vsphere/pull/28)
* [OCPBUGS-25627](https://issues.redhat.com/browse/OCPBUGS-25627): Add Snyk file to exclude vendor directory on scan [#31](https://github.com/openshift/cluster-api-provider-vsphere/pull/31)
* [OCPCLOUD-2447](https://issues.redhat.com/browse/OCPCLOUD-2447): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.0 (ea2dd15) into master [#34](https://github.com/openshift/cluster-api-provider-vsphere/pull/34)
* [OCPBUGS-25514](https://issues.redhat.com/browse/OCPBUGS-25514): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.7 (ba72420) into master [#33](https://github.com/openshift/cluster-api-provider-vsphere/pull/33)
* [OCPBUGS-24873](https://issues.redhat.com/browse/OCPBUGS-24873): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#29](https://github.com/openshift/cluster-api-provider-vsphere/pull/29)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/2070c131306654b67ad6c52261818833e3c70316...80c2c63235a4b69f3d2fac26fcffdfff970e2362)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/2042477f5d1261397c954f58f2e88d435a35edfc)

* [STOR-1698](https://issues.redhat.com/browse/STOR-1698): Fix volume provisioning when duplicate region or zone tags exist [#114](https://github.com/openshift/vmware-vsphere-csi-driver/pull/114)
* [OCPBUGS-30545](https://issues.redhat.com/browse/OCPBUGS-30545): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#115](https://github.com/openshift/vmware-vsphere-csi-driver/pull/115)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Rebase v3.1.2 [#113](https://github.com/openshift/vmware-vsphere-csi-driver/pull/113)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#112](https://github.com/openshift/vmware-vsphere-csi-driver/pull/112)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Revert "STOR-1396: Rebase to v3.1.1 for OCP 4.15" [#101](https://github.com/openshift/vmware-vsphere-csi-driver/pull/101)
* [OCPBUGS-22637](https://issues.redhat.com/browse/OCPBUGS-22637), [OCPBUGS-22648](https://issues.redhat.com/browse/OCPBUGS-22648), [OCPBUGS-23891](https://issues.redhat.com/browse/OCPBUGS-23891): Fix CVE-2023-45142 and CVE-2023-47108 [#108](https://github.com/openshift/vmware-vsphere-csi-driver/pull/108)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#105](https://github.com/openshift/vmware-vsphere-csi-driver/pull/105)
* [OCPBUGS-25516](https://issues.redhat.com/browse/OCPBUGS-25516): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#106](https://github.com/openshift/vmware-vsphere-csi-driver/pull/106)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#104](https://github.com/openshift/vmware-vsphere-csi-driver/pull/104)
* [OCPBUGS-24968](https://issues.redhat.com/browse/OCPBUGS-24968): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#103](https://github.com/openshift/vmware-vsphere-csi-driver/pull/103)
* [OCPBUGS-24961](https://issues.redhat.com/browse/OCPBUGS-24961): Updating vmware-vsphere-syncer-container image to be consistent with ART [#102](https://github.com/openshift/vmware-vsphere-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/74481e34aa9c2ef2de0ce0289e2383a179d34b89...2042477f5d1261397c954f58f2e88d435a35edfc)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/f06192f43e32fc1b3b934a0281b3224c9d573ab6)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#229](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/229)
* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): use new snapshot options from ClusterCSIDriver [#226](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/226)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Enable healthcheck for node-registrar containerPort [#220](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/220)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#221](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/221)
* [OCPBUGS-28936](https://issues.redhat.com/browse/OCPBUGS-28936): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.16 [#222](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/222)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Mark the operator as Disabled on connection error [#218](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/218)
* [STOR-1578](https://issues.redhat.com/browse/STOR-1578): Revert "Merge pull request #195 from gnufied/revert-192-enable-new-fe… [#212](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/212)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#213](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/213)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#217](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/217)
* [OCPBUGS-24421](https://issues.redhat.com/browse/OCPBUGS-24421): Rerun checks on reconnect [#215](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/215)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#206](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/206)
* [OCPBUGS-24716](https://issues.redhat.com/browse/OCPBUGS-24716): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#195](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/195)
* [OCPBUGS-24838](https://issues.redhat.com/browse/OCPBUGS-24838): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART [#197](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/197)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#202](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/202)
* [OCPBUGS-23888](https://issues.redhat.com/browse/OCPBUGS-23888): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#196](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/196)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#201](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/201)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#198](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/198)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e0d46570a06caff3439b410b9c9f75cb383a3d2d...f06192f43e32fc1b3b934a0281b3224c9d573ab6)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/d674e6d8b4b814b1544e7d2fc9177e5e0f90484b)

* [OCPBUGS-30540](https://issues.redhat.com/browse/OCPBUGS-30540): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#156](https://github.com/openshift/vsphere-problem-detector/pull/156)
* [SPLAT-1209](https://issues.redhat.com/browse/SPLAT-1209): Enhance datacenter not found to contain list of known datacenters [#154](https://github.com/openshift/vsphere-problem-detector/pull/154)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#153](https://github.com/openshift/vsphere-problem-detector/pull/153)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#152](https://github.com/openshift/vsphere-problem-detector/pull/152)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#150](https://github.com/openshift/vsphere-problem-detector/pull/150)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Check if username contains a fully qualified domain name [#143](https://github.com/openshift/vsphere-problem-detector/pull/143)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#147](https://github.com/openshift/vsphere-problem-detector/pull/147)
* [OCPBUGS-25372](https://issues.redhat.com/browse/OCPBUGS-25372): Fix VPD crash when vm is not found [#148](https://github.com/openshift/vsphere-problem-detector/pull/148)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#146](https://github.com/openshift/vsphere-problem-detector/pull/146)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#145](https://github.com/openshift/vsphere-problem-detector/pull/145)
* [OCPBUGS-25011](https://issues.redhat.com/browse/OCPBUGS-25011): Updating ose-vsphere-problem-detector-container image to be consistent with ART [#144](https://github.com/openshift/vsphere-problem-detector/pull/144)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/de02a75de63c6d8afd8467afd9aff97878d8bea4...d674e6d8b4b814b1544e7d2fc9177e5e0f90484b)