# 4.16.48

Created: 2025-09-11 12:48:39 +0000 UTC

Image Digest: `sha256:8e67463f5d411e5d311591603d0f5f4005a0f0ddf0e04e9fb9fe9da736e19f1e`


## Changes from 4.16.39

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202509101559-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:ebd2a800c6006f8c8072212fcb5d33ee3f764ce8cd4db88c095c6144a5088cda`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [97e8335e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/97e8335e2f0bc9ee48fe04f2c19820b557035d37) `sha256:7b4d2d6cf9ab5282a9af46fd419aefff8155277b061fd24758735710c8e2a0d2`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [248372a4](https://github.com/openshift/cluster-api-provider-alibaba/commit/248372a4f668111a7bf134527911cb656c44d47a) `sha256:dc4347ccacfc45c98f7eec1ebf47e306e1180ad5b7be9109928d452b6eea92c8`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ca81b6a3](https://github.com/openshift/apiserver-network-proxy/commit/ca81b6a32aff6ccb327f6889ec89c01afedd8efd) `sha256:2d4126768655d1acd303cdbb08f584abcc42f7d99408ff0f0256322de0c7f410`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [a53e9def](https://github.com/openshift/cloud-provider-aws/commit/a53e9def2e60eecd390575b59c85d54c5412ecd3) `sha256:a209432b941f4a1b69e5c256e853215602dbb74569a4e5c6af2f8d2256ae4b7a`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d29a74a](https://github.com/openshift/aws-ebs-csi-driver/commit/1d29a74ab7cde7424cac99261b90f23dc7a2fc21) `sha256:623fc46991f45624a2c00bce8408dbb44f0a6e0dd9efc4b108bcdc9fdc7cd1e0`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [c66065de](https://github.com/openshift/aws-encryption-provider/commit/c66065de639016b770f512e7cfcfcee9519fb89f) `sha256:dab954617ab503c31b7e8314a83b4c3b482b113a871abf3fbaf87faca51fb9cd`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [0c819861](https://github.com/openshift/machine-api-provider-aws/commit/0c8198618609197cc6cbcfd4016ba8400d8c13d5) `sha256:6b5325b836255a2ba9a3371065f7d868df70b083232b6315b24d88d5e64042b2`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [459c5314](https://github.com/openshift/aws-pod-identity-webhook/commit/459c531487ae4dd94301e2996bf817d47124854c) `sha256:7ebfb696e44cb98750ba2b5f39ce75f63a7aaa499a123d7480be386a450091ff`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [e5bac334](https://github.com/openshift/cloud-provider-azure/commit/e5bac3341fce67c12047caaafcf188c3f3049dc3) `sha256:be560c9d135ebbcee83a7b3c9d3e9dbc42f95a5308eccca2b39ecd345b8f2760`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [e5bac334](https://github.com/openshift/cloud-provider-azure/commit/e5bac3341fce67c12047caaafcf188c3f3049dc3) `sha256:3cc31caa42ca0e190f8012073f68de5896611ff8fec49e9dd418f60039123685`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a81e3b31](https://github.com/openshift/cluster-api-provider-azure/commit/a81e3b31948468d76ac744bbbb74b0c423fc969e) `sha256:69e6606df193bb933747916fc2f280cfcecd2807524898d77b9c83db4e1de9ab`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6b55f6fb](https://github.com/openshift/azure-disk-csi-driver/commit/6b55f6fb004454f743aa0f2e1d96010396be4c45) `sha256:cc6a6270aa76957c1e1c19c3ed4c04156f4ef783966a2c07b09b5b1cb4a2d694`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [7a36778a](https://github.com/openshift/azure-file-csi-driver/commit/7a36778add73d12eb08ff6be357d8d351af651a7) `sha256:6988f2b6ef36ac7ae86eb53ce212e69ec291589770aa05d5c92e071f595988b0`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [af633e05](https://github.com/openshift/azure-kubernetes-kms/commit/af633e05305c7adf67419ded3671903060ea4c66) `sha256:511e52dfbb4fd0d4e7eebca8547ff0d2b56c395cbb0b91594a196d4d1208c0f1`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [5b8d171e](https://github.com/openshift/azure-workload-identity/commit/5b8d171e853d10ba151bfac4ac1e76109524ca4b) `sha256:d3afe4e47c3d6a6df4f920cc679e296a6ad06cfd15504aea379dca8e39a4a31f`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [2b396e06](https://github.com/openshift/cluster-api-provider-baremetal/commit/2b396e06c0a92acbfa688cd782ec4bf319ff3608) `sha256:a276ccc97a7b8fd71df5d2919d34958474de46914830f9b3630754a3f7661d98`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [84aeac37](https://github.com/openshift/baremetal-operator/commit/84aeac37bd09c663278bf60faedd15241412f2fb) `sha256:cb097d0a4cf6a6894d2dd0a83d96711d771c11c04747730482d00491ef04c875`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [f55a330f](https://github.com/openshift/baremetal-runtimecfg/commit/f55a330f8139ef660b3f60b735ef77538f7b9cbe) `sha256:c52dc9f2ecba030db3a991d5211d789128c6518fa70ad4aefa2bffd7e7b7737d`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [0e39ace5](https://github.com/openshift/cluster-authentication-operator/commit/0e39ace55e81b082a50f67402e7776adb8c6c8a7) `sha256:956ee8da80b7599ac70c77d19be3ed29965d196dc7ab36a41298ab1682639fb8`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [70164fc6](https://github.com/openshift/cluster-autoscaler-operator/commit/70164fc606a7b05352d92a8d07bd6ac42421c0ae) `sha256:2e465ad0ca78af0129587a4628a738c157666ac8f6ccba209f2e32b1364d733a`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [4f6e4b9f](https://github.com/openshift/cluster-baremetal-operator/commit/4f6e4b9f347338286d44ec137d211035d3fe8c7f) `sha256:c9c0894232c9385131586142752c769cf5a324328b6858c6a5a4ca4e0be00cc7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:bfe6d9f100afc9290128b2779bcff5e1cb6ff87a43824811bca8576a83730708`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [5830a10a](https://github.com/openshift/cluster-api/commit/5830a10a2f545dc25ff4ca4c4efd9005088676aa) `sha256:2dcffd363dbad72001150ce751642b421d0857587acac92d89a890ed9c0c2391`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [c699f6cf](https://github.com/openshift/cluster-capi-operator/commit/c699f6cfedbcd8509a85db2be3e6f90712b728fe) `sha256:a267d9c89c04e4ba832da2022e67d8949fb1fe94ad58bde513ac17ec3a88057f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [441d29c9](https://github.com/openshift/cluster-config-operator/commit/441d29c92b1759d1780a525112e764280b78b0d6) `sha256:d2b5897e8b9d0f4749c047802fb05b515d4207e5e0fb335b842654eb882e2b8f`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [14571e8a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c) `sha256:7103e01e0f84f65c8e662a4a02bde09a8065f7ceb69e8cb69e7b0b5abd09a05a`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [439826e1](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/439826e1a723c094717877db0f2ca1848d0fb10a) `sha256:79c58446658b6a10813b4cc188e564059ed0693b71dd675346c06d14b593fa04`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [a4b1cfb4](https://github.com/openshift/cluster-dns-operator/commit/a4b1cfb4927052f4e21e919d0af05f78ca4fcace) `sha256:57ac7e21af190f18a37ce97ee67a99ab0d617a3826f0fc85e7c454b68491cfb0`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [95ceaa9e](https://github.com/openshift/cluster-api-operator/commit/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7) `sha256:e70cd7eafd3c464d6226de2bf0e4227c6455c25f1f84869b32ec72c75d84b73f`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [630f63bc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/630f63bc7a30d2662bbb5115233144079de6eef6) `sha256:7992bda13be7015230f475709518ad4e288fa4081131931dbdeec7d2a322c600`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [e8258113](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/e825811333c05b705c35d2e9a9a62e55e9ab0935) `sha256:914497087aed95ac773832db0fbbbf3d957b633782efafba2d72b6f13de19f11`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [7685374f](https://github.com/openshift/cluster-machine-approver/commit/7685374f0e84181801b6390876a0d12c61fa9913) `sha256:554a7eab436602816d0a6557dc679a7e7fbb0f9b6255b6edb5b3b6647121ca27`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [09963a50](https://github.com/openshift/cluster-monitoring-operator/commit/09963a509301f71679e9c567f06c6a4deda222fd) `sha256:87d2b258f62ba2f04fc4a9482c88a5c6861ac8089223e4f2ce525c2ab28fc3ed`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:b7a569eede0a029bc82be59b3300e1b8aa1a34220edecc7f91c5a66d52f150b2`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [27bf70dd](https://github.com/openshift/cluster-olm-operator/commit/27bf70ddf9421637e1da18b249785b2cca177272) `sha256:b0a48e0f20b041857c28d9184f4e7005aecc5becb106c272716b09fb17e981bf`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d26f3002](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d26f3002e10be6f206f69a829d1511130e8188d9) `sha256:8e0830f211b63d8b1e3792687f51865a874a3c3e812a6b81f3bb2a54152c3561`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2ed3cf99](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2ed3cf9965f8e6832cffde84f3de2fe210b79b49) `sha256:e9e06a3b8e1a67900bad7a81a47fd7d9498f0312dd12b381dd1f495f3822f931`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [eaea543f](https://github.com/openshift/cluster-policy-controller/commit/eaea543f4c845a7b65705f12e162cc121bb12f88) `sha256:1baa2197c21059d6c097ea21e7fff7d0205c305afa2e1594d19eb16101b8fae6`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:6f9c215692fbfa3f964354d14ef93a1d1a0a4e0281b555997dfdf9bfe2065d07`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [dc91ddc4](https://github.com/openshift/configmap-reload/commit/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e) `sha256:01f4afca407f8d28f3efef12fc4df2d815334b1e8cc0a3619f7b256584279f73`
* [coredns](https://github.com/openshift/coredns) git [1e417656](https://github.com/openshift/coredns/commit/1e417656c1c72d3410b31ee08caf25bcdf8836e3) `sha256:f77fae7bea0596723b2dfcb7ab640426680d503268d170494976dfd415fa3b7d`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [c25d1ff2](https://github.com/openshift/csi-driver-manila-operator/commit/c25d1ff2677a882504b18220dcbbe153781f3883) `sha256:2eca1d6217bf37f2186136d1db00e7684cea139cfcaefb39d0e92c9805f6548e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [406cec72](https://github.com/openshift/csi-driver-nfs/commit/406cec72a10684a7545a976a8c31e60712bcc5b2) `sha256:b0c4e9298eb194ef9e9531435587378153981cda53fa5f29ac7ba0407a6662b3`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:1af15d3e4e594523f94f4e00a54356b0f91557dc463c8493a98589eacf5809fe`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1e1194bc](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7) `sha256:69a766027d5dfb5bb939d4821d1291d9232647d5725af6914f0ace988de65116`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [bc125def](https://github.com/openshift/csi-driver-shared-resource/commit/bc125def6a15a71b2ef8c59e9c1284e471e7d905) `sha256:92a0c2957167260e9e7043d9623b90ba7c91f1309618ef1997db2e7db49b1536`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [7da80aab](https://github.com/openshift/csi-external-attacher/commit/7da80aab15cabd182ee35742443c0b836de4e180) `sha256:c5d83b524b78406c3a0abddc6ddd54a317f79c3d12206ead1aa24ca98fe1c44c`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9e8af011](https://github.com/openshift/csi-external-provisioner/commit/9e8af011e0a0aea96066821b57c42bdaccf24a42) `sha256:77026dc8593dd2f4ece66e97487c4082a733a11115dbfe07842b83dfda8d775f`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [bdf5bfb4](https://github.com/openshift/csi-external-resizer/commit/bdf5bfb4da07be6a85ae5253218f29fb8af51adf) `sha256:73ad6226c352eb221dd00a04870da2782b0082e7cc302d2a1f0c9e4a1f8f2f57`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f5e3ff55](https://github.com/openshift/csi-livenessprobe/commit/f5e3ff5532d58af34b5b407be2cac6934c1ff223) `sha256:7b1c93b4713d1d4de7cb57728ee29da09657e8561eee127d04609127e744c61e`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [8930c368](https://github.com/openshift/csi-node-driver-registrar/commit/8930c368500a5d1f15c3e1a5906397e206879de0) `sha256:4d6f104514ebfede24fee22278865ef447b06fef2adc3fce48a1dbda1ff14cdb`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:72f5419e276fcf696918c7cec5c86f6cfb3a3cce99ad7ac9862b8e84b7bea8ba`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7089efe6](https://github.com/openshift/egress-router-cni/commit/7089efe6100c1f52f28adccf1dccc722b8dcacdc) `sha256:353d95bfb26e9217a4ba4e3b2a3514fd9a31582815bbd0f2fb3b69bc9e0e76e1`
* [etcd](https://github.com/openshift/etcd) git [e7911c0d](https://github.com/openshift/etcd/commit/e7911c0d19925c0a67328052a8580a80fb40cb5b) `sha256:a4594a8060e52a9090e21be808264042602d921a7b0290d5f129c4e55921c67c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [26b43dfc](https://github.com/openshift/cloud-provider-gcp/commit/26b43dfc7ddce718014b8991db10cbff30b7b117) `sha256:2ba1e60f1bd923c502ecfe47013303a012abe5b498985697c0ba25d9e6f30d04`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [02432df8](https://github.com/openshift/cluster-api-provider-gcp/commit/02432df87df9a731c8d630311854fbd515602e91) `sha256:b51949dec4eef94d454be0566327e4c8fbe62790597152101300a8bd91316a99`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [5ed71c64](https://github.com/openshift/gcp-pd-csi-driver/commit/5ed71c64ce9c1879f0d2a17976387f1b0292796d) `sha256:dc573ea3f31057903182ee80eb0759e3f67d712b06007fbbd0aa026adf249aa4`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [799327f7](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/799327f7c45b362beadc39e85b9e773cab3654c5) `sha256:565da91b2afb17fc725548f4c8fb3c11f3baac5cdf7a65d7329bc2306c6b6efd`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [f961f16d](https://github.com/openshift/cloud-provider-ibm/commit/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494) `sha256:74361bba53b1a3081b04a60aa987c44861179c6b7a7e7fbd27a3ec625d502893`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [d29506e7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/d29506e7fea609bc8f004256c9c057e5429f72a1) `sha256:402804b506d7b49384908784195ace86fd8f9ef38df6c9bb877af52b3c310799`
* [ironic](https://github.com/openshift/ironic-image) git [d08ca1e2](https://github.com/openshift/ironic-image/commit/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5) `sha256:c239a55c905b4fa795e9c851889d8fd4fca2748dae17adc17868a3254bf35810`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [aea138cd](https://github.com/openshift/ironic-agent-image/commit/aea138cd4ac822092199c141bb925b37527389cd) `sha256:5105e6f5d4bab7e56952d4bf09cbad44bc9894721c2f9b1ff37c490e4a327d68`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:7f395fed6fa6cde3241bebf1038c2cf25607aaad4926dd468aab86202527a4fc`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [f44e8a08](https://github.com/openshift/ironic-static-ip-manager/commit/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f) `sha256:34afefa9caabaeee85206d0e2c55a4fe19d7246f8ffcffb254382c271dbda490`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [e4f859be](https://github.com/openshift/k8s-prometheus-adapter/commit/e4f859be4f56d1fc65138f99f5331baf17c15885) `sha256:17791dce42043ba9ebf846000989164bd8e9455e48e88a3643bee2558be53fce`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b58673a3](https://github.com/openshift/images/commit/b58673a314f0e8253fabadada2ee1a9e5b11c5cf) `sha256:919a9add83fd3f3b75847c14c9d50aaf6f8cc9937120c4e06deec07d8f82364a`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [9116b918](https://github.com/openshift/kubernetes-metrics-server/commit/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a) `sha256:0786dd4725983759b9d529df3973e98e831d56ee568cd3472cd2f37d894617e4`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [c38f4734](https://github.com/openshift/kube-rbac-proxy/commit/c38f4734c6b6931c75d46674122fb4b838b6e64b) `sha256:64cb3b2194a3a12fb04144b2a47c2e6e7c773ccafef39804b6d72ac0458c0297`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9b67b8d1](https://github.com/openshift/kube-state-metrics/commit/9b67b8d1adbd63e27b622b3d050e0673766a6f2d) `sha256:0aac6e1f195a8ad6ffd9cb5f21e74faa5fce46bcc7dc61a505709ba100f495fb`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3db76104](https://github.com/openshift/cloud-provider-kubevirt/commit/3db76104a38bd9160ca24e2ed4a33649843f210a) `sha256:771f2e28858f24abbfdac15c459de82cbd6db409f5f137e7ff59abf65c88b130`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [d474c42e](https://github.com/openshift/kubevirt-csi-driver/commit/d474c42ed4486f36cbcc8bfecac6b184483e92ee) `sha256:88b788cf6436b4eec3e4c2733d4cfd204dd756c02ab5e1a995e4e726191ed1c9`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:5a79b2766e6081d52d31280be95863269415663979bb0f5d95bf60c207dcde41`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:b0011f8cb1a24a079bde6ed0436623903d46f6f9174d432c06ff4ec6a9e65555`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [f988f894](https://github.com/openshift/multus-networkpolicy/commit/f988f894ded7e6645a1b3cc0d6090601809d4e7c) `sha256:c913ee66bd97c3f933a95ba64e705d443a11f0c832c67f90930ce4b003f30284`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [73594f77](https://github.com/openshift/route-override-cni/commit/73594f7759e76600c95601138ab5be4969978f63) `sha256:3b652713194e8c715cf9bd3303fff04341b1ad84cb60be9dd887e4e613c194f9`
* [must-gather](https://github.com/openshift/must-gather) git [774a4e02](https://github.com/openshift/must-gather/commit/774a4e024925cc6034969eb84c9030a338a187e5) `sha256:98f20b12dd787eab4d33ce54cc767e03405492b062ff895a6438a312663dc807`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:0a422ddb86d0dac280d959b6de8e0d9f66f97edce6f5bc5359c0cac5409534fd`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [28bf5963](https://github.com/openshift/cloud-provider-nutanix/commit/28bf5963c7f82ae8d966a69562a19f038d819950) `sha256:606dc5c6092d8a65f94edb8ee8c46afd6e1534ff27f309fd0c163f95a5f8d827`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [f09a9be3](https://github.com/openshift/oauth-apiserver/commit/f09a9be33b6455664a6842980fca4bd8008e9e6e) `sha256:065509e3bcb6665fa5d5618daba54084a68da7aa4832d283b3d7933798da4bd8`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:0b54c4e7208b2f812e54163b29117ef7a65f5f1a6eeed4e467bafaf61581b5c2`
* [oauth-server](https://github.com/openshift/oauth-server) git [3739138c](https://github.com/openshift/oauth-server/commit/3739138c8ebbeb73f6e89f61591dd16a3ece32e3) `sha256:b0a10cbe6b46673e2f3873dc2dcfeceddfd1f368ba5da6d2f633c368f11de9e9`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [b137a53a](https://github.com/openshift/oc-mirror/commit/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a) `sha256:de1d8f88179c53e2ebe14d82e3967eef5e51355864e621c3adbf7b8119617d2a`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [79975a51](https://github.com/openshift/operator-framework-catalogd/commit/79975a511e1d31a09ef9b3b9e01262c8c69ff633) `sha256:18a64af4636aa8a4ea8d6cba9ccd70c954f01c5d848fdd213d477b5346c218ca`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [80b8649c](https://github.com/openshift/operator-framework-operator-controller/commit/80b8649cf7a57098d03eff0d155531cf63728f41) `sha256:d390ebcac1f4c7702b5afc4e146d68ca335528046fb44f0ee31bb237f55c1653`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [282cc84c](https://github.com/openshift/operator-framework-rukpak/commit/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6) `sha256:94691db7cff65d98371d0a64823f2a4fe60fc072cf32dc08906bb7b724c013d6`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:3f6ce6f7e1ff2e4befa5d45958493a0c0910074286ce302197feebb8235fffc6`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [85b52097](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7) `sha256:5c83d8ad59dbcbbdb6890b2d456c1e2c56a3a9d0a01d152c60bfbadeec884a07`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [5ada1cba](https://github.com/openshift/machine-api-provider-openstack/commit/5ada1cbab3a9354488b1e74e85c36285302c3382) `sha256:07dc59c3ecab972130c26ba611997fed5ee9cda973c7d2e8b4958290c6c7cff7`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [208d5aa7](https://github.com/operator-framework/operator-marketplace/commit/208d5aa79e2f953d0e621070091409ab43cb54e1) `sha256:8a9caa21fd725de997019e7b66e702cfb8e0a36b88c9a1b67212f9cdf45a300f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:7eb99e3ba062c76bcbb2e6c66395f42ed67f6ed6b832f307c3e0d0f1d1e21df2`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [ac852f3e](https://github.com/openshift/ovirt-csi-driver-operator/commit/ac852f3eb077c877e998fee0359534349d07c604) `sha256:b21a80bd7ca8b6c433ac6c73d899419f097cfbb319b7d3995ce12f09da9b95cb`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [26162bad](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/26162badb8422f36d9b52fac8467d48bf6078f5a) `sha256:2b14dc1a25f05da1dfed468461a5e6b1702e67d5882cb463752f0b03ae1dc4bd`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [9c5dd8d1](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525) `sha256:668268528d393797775dbd4de0bd8356840f5e86774a17e5c2d4a65d80742b97`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [20e6dc70](https://github.com/openshift/cloud-provider-powervs/commit/20e6dc70d665e5d085df17d757a07e17c0e18fe0) `sha256:11e16233ffdb9eda46a003067ad2714ad97fef78e293578810a529a02459b880`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5e14722e](https://github.com/openshift/prom-label-proxy/commit/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040) `sha256:5685fa83d9f4d66d83cccbee577615469fa0badca4701d228d7b1182dac533be`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e9aea929](https://github.com/openshift/prometheus-alertmanager/commit/e9aea929f309f412678fdf1064e1f74db3ba08b4) `sha256:5035139cabc906d4dc83791a98956bfc3390c2beef0eb0e332eba1fb4e7a334f`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:d5c3f96caf49c824c1b260c5567b16cdf8c6d55129fb509c5ce02ffca8de92bd`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [29ba26d1](https://github.com/openshift/node_exporter/commit/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897) `sha256:83b2e97f2f98fed5ac6e2e5c622f984b2cb7ab2809cd29c7da3e5fd4c9ef0186`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:f464e6e3cb1cda0dd87971c9fc44577b03dbe1ea91ca2077c25463a2b6d6bcf3`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [c7262a43](https://github.com/openshift/prometheus-operator/commit/c7262a43c0ddf2adc6be3863ac9a5056cb89c177) `sha256:a594982176a39cdcfa60236362662e027071c4d72668ccf62e4b44b396a9e473`
* rhel-coreos `sha256:a07c85990244bf4aa155201d9cc5003e3c40b5f3d92e02dda58fb061985549c8`
* rhel-coreos-extensions `sha256:1e2bb3992fdad9812eff39c72a2e6165d34aa8729be977ee06812ff104aae3b6`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [538c7b98](https://github.com/openshift/service-ca-operator/commit/538c7b98a689e573b61e1abb1cb649da470c5fac) `sha256:60c1da04cd0708dd4ecb4a80fd8ccd86a93422173b50b1d307f06a0d690bfdae`
* [telemeter](https://github.com/openshift/telemeter) git [c1ecd105](https://github.com/openshift/telemeter/commit/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a) `sha256:51c78317bf7fb83d8b833ae563316394fe80f1e26da6a4e761a122098158a2b0`
* [thanos](https://github.com/openshift/thanos) git [85eee25c](https://github.com/openshift/thanos/commit/85eee25c36702ec14b86dc3157856d2aa2634642) `sha256:7f0984f1cf441cc86ec6a5cb54fd9529bd8eb5bb0f29e4cc6de71f93d865d44c`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [023a3655](https://github.com/openshift/cloud-provider-vsphere/commit/023a3655c181512a870fe1c865dbdbd31690f439) `sha256:7b982489e439c83fd9afb8ac66a8b65d148adc625fbe6f8de93d61fd3eca6f93`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [be22f10a](https://github.com/openshift/cluster-api-provider-vsphere/commit/be22f10a56a18cd94406eea442e0113d866618ea) `sha256:63c0934383cadf9cf718e334bb7f6428a7067c55de968eb59cfe398bad6aab4f`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:6a2ba223d3b9c87eb24cb40aaefc244ae87533e286ff8acb4786514f3be9dc7a`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [7940ea16](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/7940ea1685dee6d3f29a6360dac9a82dd1b09230) `sha256:ade1d5a9a276e5d842dd3d3d983f0b6598283020022a29b0ed2298518401d941`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [03b7e8eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/03b7e8ebf2c6347b40a340d892e1a66d47806300) `sha256:2d9fc583e28e3e4f4cced0aad6e40519628b8767afb98d6424f9fd90e6ccb6b2`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [3683c120](https://github.com/openshift/vsphere-problem-detector/commit/3683c120278fb79a30340f66d22948aaddf3c16a) `sha256:2d72c1b62a3912e514cf16c1fd8c870b8cf25b30df7c7b86b6373a0608b57366`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/5c16119aeedc4c30e960a59ca91bbfe704879ad8)

* [OCPBUGS-58631](https://issues.redhat.com/browse/OCPBUGS-58631), [OCPBUGS-58636](https://issues.redhat.com/browse/OCPBUGS-58636): Bump glog to v1.2.5 in release-4.16 (#7901) [#7901](https://github.com/openshift/assisted-service/pull/7901)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) [#7857](https://github.com/openshift/assisted-service/pull/7857)
* [Full changelog](https://github.com/openshift/assisted-service/compare/cf4e24ce161365e4f0bc4286dedef3891041f7ba...5c16119aeedc4c30e960a59ca91bbfe704879ad8)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/302f47ff8d1bf6f69159453722346f850515bcab)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...302f47ff8d1bf6f69159453722346f850515bcab)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/720b5023664bf91db7bccfed476545bdd21ae94d)

* run go mod tidy / vendor [#1019](https://github.com/openshift/assisted-installer-agent/pull/1019)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...720b5023664bf91db7bccfed476545bdd21ae94d)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/949f38a129c49ccda3bb441dbb6fcf4565763621)

* [OCPBUGS-58666](https://issues.redhat.com/browse/OCPBUGS-58666), [OCPBUGS-58671](https://issues.redhat.com/browse/OCPBUGS-58671): bump github.com/golang/glog to v1.2.5 [#560](https://github.com/openshift/cluster-api-provider-aws/pull/560)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/de46a7e48105e8299024a25626cc1beb48c6b04b...949f38a129c49ccda3bb441dbb6fcf4565763621)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/27609c07dd4465b2b11a65eb8dad219e814b19e6)

* [OCPBUGS-61253](https://issues.redhat.com/browse/OCPBUGS-61253): add ability to control kube rbac proxy container image… [#426](https://github.com/openshift/csi-operator/pull/426)
* [OCPBUGS-60598](https://issues.redhat.com/browse/OCPBUGS-60598): Bump library-go [#423](https://github.com/openshift/csi-operator/pull/423)
* [OCPBUGS-59606](https://issues.redhat.com/browse/OCPBUGS-59606): Backport stale conditions fix [#407](https://github.com/openshift/csi-operator/pull/407)
* [OCPBUGS-60248](https://issues.redhat.com/browse/OCPBUGS-60248): add tag matching to Azure File storage class [#414](https://github.com/openshift/csi-operator/pull/414)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17...27609c07dd4465b2b11a65eb8dad219e814b19e6)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/f164f9753a3876133aa8c0bf6cee21098c48709b)

* [OCPBUGS-52476](https://issues.redhat.com/browse/OCPBUGS-52476): Remove unused vnet package [#131](https://github.com/openshift/machine-api-provider-azure/pull/131)
* [OCPBUGS-56169](https://issues.redhat.com/browse/OCPBUGS-56169): [release-4.16] Update virtualmachines service to armcompute/v5 SDK [#147](https://github.com/openshift/machine-api-provider-azure/pull/147)
* [OCPBUGS-56656](https://issues.redhat.com/browse/OCPBUGS-56656): Fix failure when attempting to modify immutable availabilitySet [#151](https://github.com/openshift/machine-api-provider-azure/pull/151)
* [OCPBUGS-56092](https://issues.redhat.com/browse/OCPBUGS-56092): Update eviction policy for Spot VMs from Deallocate to Delete [#142](https://github.com/openshift/machine-api-provider-azure/pull/142)
* [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7...f164f9753a3876133aa8c0bf6cee21098c48709b)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/70645a698c9864a6f0e58d74eef2456e8cb7994b)

* [OCPBUGS-58290](https://issues.redhat.com/browse/OCPBUGS-58290): sort zone slices extracted from map of byo subnets [#9819](https://github.com/openshift/installer/pull/9819)
* [OCPBUGS-55807](https://issues.redhat.com/browse/OCPBUGS-55807): update resolv.conf every time on bootstrap node [#9694](https://github.com/openshift/installer/pull/9694)
* [OCPBUGS-57460](https://issues.redhat.com/browse/OCPBUGS-57460): vsphere - check if host is powered down or on standby before uploading template [#9786](https://github.com/openshift/installer/pull/9786)
* [OCPBUGS-36677](https://issues.redhat.com/browse/OCPBUGS-36677): Power VS: Enable incoming traffic on port 5000 during installation in a restricted network [#8711](https://github.com/openshift/installer/pull/8711)
* [OCPBUGS-57498](https://issues.redhat.com/browse/OCPBUGS-57498): ensure ctrplane nodes can access bootstrap MCS [#9788](https://github.com/openshift/installer/pull/9788)
* [OCPBUGS-54240](https://issues.redhat.com/browse/OCPBUGS-54240): Update timeout for GCP WaitFor operation [#9715](https://github.com/openshift/installer/pull/9715)
* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...70645a698c9864a6f0e58d74eef2456e8cb7994b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4c7883ffc539da930d1334421b170322864375d8)

* [OCPBUGS-59938](https://issues.redhat.com/browse/OCPBUGS-59938): Adding sos.conf file for default sos config into the tools image [#2064](https://github.com/openshift/oc/pull/2064)
* [OCPBUGS-60675](https://issues.redhat.com/browse/OCPBUGS-60675): Use fedora image in unit tests instead of centos [#2079](https://github.com/openshift/oc/pull/2079)
* [Full changelog](https://github.com/openshift/oc/compare/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c...4c7883ffc539da930d1334421b170322864375d8)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/eda2ed63d249ea4b71a071e19f4994edddd0d41b)

* [OCPBUGS-60973](https://issues.redhat.com/browse/OCPBUGS-60973): ccoctl: aws to use proper issuer url on subsequent runs [#909](https://github.com/openshift/cloud-credential-operator/pull/909)
* [OCPBUGS-60861](https://issues.redhat.com/browse/OCPBUGS-60861): ccoctl: only add owned tag to azure resources on create [#902](https://github.com/openshift/cloud-credential-operator/pull/902)
* [OCPBUGS-58676](https://issues.redhat.com/browse/OCPBUGS-58676): github.com/golang/glog v1.2.5 [#893](https://github.com/openshift/cloud-credential-operator/pull/893)
* [OCPBUGS-56981](https://issues.redhat.com/browse/OCPBUGS-56981): Azure: resolve nil pointer exception when role assignment exists [#867](https://github.com/openshift/cloud-credential-operator/pull/867)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9d4c8630e16c1c8586e7038a8bf95beeb2c20f5a...eda2ed63d249ea4b71a071e19f4994edddd0d41b)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/66931aae890394ae9f91b273160e2788e548b969)

* [OCPBUGS-56359](https://issues.redhat.com/browse/OCPBUGS-56359): Increase API call timeout to 30 second [#172](https://github.com/openshift/cloud-network-config-controller/pull/172)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8ceee78810756afaa2efb75f60bef0358502834f...66931aae890394ae9f91b273160e2788e548b969)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d363dcf5c1bf66546156dacece71cf5c1d42a7fe)

* [OCPBUGS-59267](https://issues.redhat.com/browse/OCPBUGS-59267): Fix cool down status condition to trigger scale down [#363](https://github.com/openshift/kubernetes-autoscaler/pull/363)
* [OCPBUGS-60609](https://issues.redhat.com/browse/OCPBUGS-60609): fix checkpoint gc of unknown recommenders [#372](https://github.com/openshift/kubernetes-autoscaler/pull/372)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/6222ac21a2b55bda531df9811502e9626caad536...d363dcf5c1bf66546156dacece71cf5c1d42a7fe)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e806159b3ace17397eea86c266bfb1c8ffc746a3)

* [OCPBUGS-60387](https://issues.redhat.com/browse/OCPBUGS-60387): Add Service using common resource templating [#411](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/411)
* [OCPBUGS-60387](https://issues.redhat.com/browse/OCPBUGS-60387): Update service selector to match deployment label [#410](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/410)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1c26756f0b4ff5537e32db18d5fb16555f5bd58f...e806159b3ace17397eea86c266bfb1c8ffc746a3)


### [cluster-config-api](https://github.com/openshift/api/tree/5f9522bd5e3e1a9cbcb169ce2b7c1716257d8585)

* [OCPBUGS-58392](https://issues.redhat.com/browse/OCPBUGS-58392): Add IPsec API for NAT-T UDP encapsulation support [#2393](https://github.com/openshift/api/pull/2393)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2330](https://github.com/openshift/api/pull/2330)
* [Full changelog](https://github.com/openshift/api/compare/b7d0481c9094172326bc9462c4f85b8f3ff0d761...5f9522bd5e3e1a9cbcb169ce2b7c1716257d8585)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1e9d2baac6ae464c1384aa8d37c2cdfb2f651dbd)

* [OCPBUGS-60836](https://issues.redhat.com/browse/OCPBUGS-60836): add missing ports to svc and pod spec [#1473](https://github.com/openshift/cluster-etcd-operator/pull/1473)
* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...1e9d2baac6ae464c1384aa8d37c2cdfb2f651dbd)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0f1869b1ed6b73023a46072311064ce6de6bcc33)

* [OCPBUGS-53870](https://issues.redhat.com/browse/OCPBUGS-53870): bump github.com/golang-jwt/jwt [#1219](https://github.com/openshift/cluster-image-registry-operator/pull/1219)
* [OCPBUGS-51600](https://issues.redhat.com/browse/OCPBUGS-51600): bump golang.org/x/oauth2 [#1210](https://github.com/openshift/cluster-image-registry-operator/pull/1210)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/640eae64753083a12d9153904ed22a4f33dfe568...0f1869b1ed6b73023a46072311064ce6de6bcc33)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/218159f7b060760c7e910b57429beea2f3eb3146)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add e2e tests for IdleConnectionTerminationPolicy [#1235](https://github.com/openshift/cluster-ingress-operator/pull/1235)
* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleConnectionTerminationPolicy [#1234](https://github.com/openshift/cluster-ingress-operator/pull/1234)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/57f9674e75908ca11b24792fb9f077233cd7bcf1...218159f7b060760c7e910b57429beea2f3eb3146)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/511bc434f628cf364966b53a5d350908e51d4b9c)

* [OCPBUGS-60467](https://issues.redhat.com/browse/OCPBUGS-60467): Add missing service ports to apiserver service [#1895](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1895)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f47238554feb2fa6dbce3333adc7e26ffe2d8424...511bc434f628cf364966b53a5d350908e51d4b9c)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b3faac1f48914e94fa9af074f387c871dad84a9c)

* [OCPBUGS-60834](https://issues.redhat.com/browse/OCPBUGS-60834): Missing endpoint slices for open ports the operator uses [#864](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/864)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0338b3be6912024d03def2c26f0fa10218fc2c25...b3faac1f48914e94fa9af074f387c871dad84a9c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/e75d8fa7a0c30a4ad7500b3253f303e051f9ce0b)

* [OCPBUGS-44443](https://issues.redhat.com/browse/OCPBUGS-44443): Add controlplane cli image envar for use with hypershift [#2791](https://github.com/openshift/cluster-network-operator/pull/2791)
* [OCPBUGS-58392](https://issues.redhat.com/browse/OCPBUGS-58392): Add IPsec API for NAT-T UDP encapsulation support [#2736](https://github.com/openshift/cluster-network-operator/pull/2736)
* [OCPBUGS-56992](https://issues.redhat.com/browse/OCPBUGS-56992): iptables-alerter streamlining [#2717](https://github.com/openshift/cluster-network-operator/pull/2717)
* [OCPBUGS-56195](https://issues.redhat.com/browse/OCPBUGS-56195): Fix live migration with feature migration configured explicitly [#2710](https://github.com/openshift/cluster-network-operator/pull/2710)
* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...e75d8fa7a0c30a4ad7500b3253f303e051f9ce0b)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a5de0226c9aee515fb937fc7458d5edb0e487a19)

* [OCPBUGS-61252](https://issues.redhat.com/browse/OCPBUGS-61252): add ability to control kube rbac proxy container image on controlplane [#614](https://github.com/openshift/cluster-storage-operator/pull/614)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/f3cf5ff2dc6848db6da947c538c032f89ad152d2...a5de0226c9aee515fb937fc7458d5edb0e487a19)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/be820285dcf7b0ca4a712192ccb47fd0c843ea02)

* [OCPBUGS-58452](https://issues.redhat.com/browse/OCPBUGS-58452): Failing=Unknown upon long CO updating [#1213](https://github.com/openshift/cluster-version-operator/pull/1213)
* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...be820285dcf7b0ca4a712192ccb47fd0c843ea02)


### [console](https://github.com/openshift/console/tree/6cfdab779cce93691776f67961d90f12148ad290)

* [OCPBUGS-61057](https://issues.redhat.com/browse/OCPBUGS-61057): OpenShift console PVC clone cannot use B as the unit [#15450](https://github.com/openshift/console/pull/15450)
* [OCPBUGS-60175](https://issues.redhat.com/browse/OCPBUGS-60175): Tolerate unknown fields in Infrastructur… [#15368](https://github.com/openshift/console/pull/15368)
* [OCPBUGS-60641](https://issues.redhat.com/browse/OCPBUGS-60641): Secret key with binary file changes when edited via Console [#15417](https://github.com/openshift/console/pull/15417)
* [OCPBUGS-59869](https://issues.redhat.com/browse/OCPBUGS-59869): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15334](https://github.com/openshift/console/pull/15334)
* [OCPBUGS-57677](https://issues.redhat.com/browse/OCPBUGS-57677): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15328](https://github.com/openshift/console/pull/15328)
* [OCPBUGS-60115](https://issues.redhat.com/browse/OCPBUGS-60115): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15358](https://github.com/openshift/console/pull/15358)
* [OCPBUGS-59358](https://issues.redhat.com/browse/OCPBUGS-59358): fix bug where / in console.tab/horizontalNav href brea… [#15286](https://github.com/openshift/console/pull/15286)
* [OCPBUGS-37603](https://issues.redhat.com/browse/OCPBUGS-37603): Manual backport of several incremental fixes for unauthenticated endpoints [#15312](https://github.com/openshift/console/pull/15312)
* [OCPBUGS-59274](https://issues.redhat.com/browse/OCPBUGS-59274): Add the ability to launch multiple modals with useModal hook [#15276](https://github.com/openshift/console/pull/15276)
* [OCPBUGS-59445](https://issues.redhat.com/browse/OCPBUGS-59445): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15291](https://github.com/openshift/console/pull/15291)
* [OCPBUGS-58407](https://issues.redhat.com/browse/OCPBUGS-58407): Add flags in console static plugin for all the components of this epic [#15243](https://github.com/openshift/console/pull/15243)
* [OCPBUGS-56838](https://issues.redhat.com/browse/OCPBUGS-56838): Fetching taskRuns in PLR details page using PLR UID also [#15099](https://github.com/openshift/console/pull/15099)
* [OCPBUGS-58188](https://issues.redhat.com/browse/OCPBUGS-58188): Fix TypeError Cannot read properties of null (reading 'metadata') [#15214](https://github.com/openshift/console/pull/15214)
* [OCPBUGS-57326](https://issues.redhat.com/browse/OCPBUGS-57326): Remove logoutOpenShift method call [#15172](https://github.com/openshift/console/pull/15172)
* [OCPBUGS-57270](https://issues.redhat.com/browse/OCPBUGS-57270): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15165](https://github.com/openshift/console/pull/15165)
* [OCPBUGS-57096](https://issues.redhat.com/browse/OCPBUGS-57096): Add all files to `vendor` regardless of gitignore [#15133](https://github.com/openshift/console/pull/15133)
* [OCPBUGS-57089](https://issues.redhat.com/browse/OCPBUGS-57089): Sample segment sessions [#15130](https://github.com/openshift/console/pull/15130)
* [OCPBUGS-56858](https://issues.redhat.com/browse/OCPBUGS-56858): remove 60 day alert from cluster update modal [#15102](https://github.com/openshift/console/pull/15102)
* [OCPBUGS-56715](https://issues.redhat.com/browse/OCPBUGS-56715): update the Deployment pod on change in imageStream [#15091](https://github.com/openshift/console/pull/15091)
* [OCPBUGS-56472](https://issues.redhat.com/browse/OCPBUGS-56472): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15072](https://github.com/openshift/console/pull/15072)
* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...6cfdab779cce93691776f67961d90f12148ad290)


### [console-operator](https://github.com/openshift/console-operator/tree/04f80faf396b645582e5a19041e7faa5bf203443)

* [OCPBUGS-60794](https://issues.redhat.com/browse/OCPBUGS-60794): Update downloads deployment configuration to use master node selector [#1036](https://github.com/openshift/console-operator/pull/1036)
* [Full changelog](https://github.com/openshift/console-operator/compare/2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1...04f80faf396b645582e5a19041e7faa5bf203443)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5f9ee066b2b7768606ffae81b52e8bd0f25cb471)

* [OCPBUGS-55648](https://issues.redhat.com/browse/OCPBUGS-55648): Check error returned by ipv6 SettleAddresses [#188](https://github.com/openshift/containernetworking-plugins/pull/188)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/73b4123cc75abd22af8dc3b429836be2bea45fd5...5f9ee066b2b7768606ffae81b52e8bd0f25cb471)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83d0aa3221daba495868a8b186c893cf12e44251)

* [OCPBUGS-58884](https://issues.redhat.com/browse/OCPBUGS-58884): CARRY: don't ignore json files [#341](https://github.com/openshift/cloud-provider-openstack/pull/341)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1d3aa2baae81b8c15260e87a816650b172c868f8...83d0aa3221daba495868a8b186c893cf12e44251)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/ee32ba01e1f89bac057611ad4580589652f250a3)

* [OCPBUGS-60450](https://issues.redhat.com/browse/OCPBUGS-60450): UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots [#186](https://github.com/openshift/csi-external-snapshotter/pull/186)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/5315d37a1e5415e8b6870f23e50238681979cc28...ee32ba01e1f89bac057611ad4580589652f250a3)


### [docker-builder](https://github.com/openshift/builder/tree/e77895c27d8d39398c585064b8a87b5531b2574d)

* [OCPBUGS-58074](https://issues.redhat.com/browse/OCPBUGS-58074): S2I build cpu limits observed by assemble are limited to 1 cpu [#475](https://github.com/openshift/builder/pull/475)
* [Full changelog](https://github.com/openshift/builder/compare/15d916b6c02fb4ac96f3491a60a9acc2c3df96ef...e77895c27d8d39398c585064b8a87b5531b2574d)


### [docker-registry](https://github.com/openshift/image-registry/tree/072c544c1eaab6d0e43fc63ab6c12c18bf524afb)

* [OCPBUGS-60183](https://issues.redhat.com/browse/OCPBUGS-60183): bump openshift/docker-distribution [#441](https://github.com/openshift/image-registry/pull/441)
* [OCPBUGS-53654](https://issues.redhat.com/browse/OCPBUGS-53654): bump jwt and oauth dependencies [#432](https://github.com/openshift/image-registry/pull/432)
* [Full changelog](https://github.com/openshift/image-registry/compare/a9eeeb94bc3276ce60a7166bc4e955c7f82c10e6...072c544c1eaab6d0e43fc63ab6c12c18bf524afb)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372)

* [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372)


### [haproxy-router](https://github.com/openshift/router/tree/7c4b47201b75421631739feb42e7ae86ae047739)

* [OCPBUGS-56424](https://issues.redhat.com/browse/OCPBUGS-56424): Add support for IdleCloseTerminationPolicy [#655](https://github.com/openshift/router/pull/655)
* [OCPBUGS-49391](https://issues.redhat.com/browse/OCPBUGS-49391): Reject All CA-Signed Certs Using SHA1 [#651](https://github.com/openshift/router/pull/651)
* [Full changelog](https://github.com/openshift/router/compare/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6...7c4b47201b75421631739feb42e7ae86ae047739)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/f455c4626db5d9e96d1af3e4959d1ac1cd4ed0e8)

* 4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments [#2435](https://github.com/openshift/kubernetes/pull/2435)
* [OCPBUGS-60272](https://issues.redhat.com/browse/OCPBUGS-60272): Bump nfs server provisioner [#2402](https://github.com/openshift/kubernetes/pull/2402)
* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2342](https://github.com/openshift/kubernetes/pull/2342)
* [OCPBUGS-58054](https://issues.redhat.com/browse/OCPBUGS-58054): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2352](https://github.com/openshift/kubernetes/pull/2352)
* [OCPBUGS-57290](https://issues.redhat.com/browse/OCPBUGS-57290): UPSTREAM: <carry>: Bump cadvisor version to fix kubelet [#2325](https://github.com/openshift/kubernetes/pull/2325)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7cf4c058dab19556d71e98c02bed1798cb0a4a9c...f455c4626db5d9e96d1af3e4959d1ac1cd4ed0e8)


### [hypershift](https://github.com/openshift/hypershift/tree/ddd72a55672d68af984658d58dc43508dbb40831)

* [OCPBUGS-60150](https://issues.redhat.com/browse/OCPBUGS-60150): Always compress and encode payload in token secret for inplace upgrades [#6750](https://github.com/openshift/hypershift/pull/6750)
* [OCPBUGS-60951](https://issues.redhat.com/browse/OCPBUGS-60951): MCE 2.6 konflux hcp cli [#6701](https://github.com/openshift/hypershift/pull/6701)
* [CNTRLPLANE-1203](https://issues.redhat.com/browse/CNTRLPLANE-1203): HO MCE change to hermetic ta build [#6654](https://github.com/openshift/hypershift/pull/6654)
* [CNTRLPLANE-1231](https://issues.redhat.com/browse/CNTRLPLANE-1231): Move CPO pipeline to hermetic builds [#6599](https://github.com/openshift/hypershift/pull/6599)
* [OCPBUGS-58505](https://issues.redhat.com/browse/OCPBUGS-58505): [release-4.16] Add missing service network DNS entries to KAS cert [#6393](https://github.com/openshift/hypershift/pull/6393)
* [OCPBUGS-57494](https://issues.redhat.com/browse/OCPBUGS-57494): Add proxy variables for the MCD Pod [#6286](https://github.com/openshift/hypershift/pull/6286)
* [OCPBUGS-55697](https://issues.redhat.com/browse/OCPBUGS-55697): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6114](https://github.com/openshift/hypershift/pull/6114)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6087](https://github.com/openshift/hypershift/pull/6087)
* [CNTRLPLANE-919](https://issues.redhat.com/browse/CNTRLPLANE-919): Konflux build pipeline service account migration [#6082](https://github.com/openshift/hypershift/pull/6082)
* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ddd72a55672d68af984658d58dc43508dbb40831)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/668c884b139f2ed0ea89ebcbe1a6b915f8de66a9)

* [OCPBUGS-58737](https://issues.redhat.com/browse/OCPBUGS-58737): bump github.com/golang/glog to version v1.2.4 [#106](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/106)
* [OCPBUGS-56063](https://issues.redhat.com/browse/OCPBUGS-56063): tech debt: rework vendor patches [#91](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/91)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/8283424ccf9699622ce5d84df66bed9dc92a41b8...668c884b139f2ed0ea89ebcbe1a6b915f8de66a9)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/9ca537683fc2ae2e7847032441fde42ff3171a48)

* [OCPBUGS-59727](https://issues.redhat.com/browse/OCPBUGS-59727): [IBM VPC] set offlineExpansion to false in e2e test manifest [#149](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/149)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/5d5d8010a59916cc264d0ab14962be85a35b7228...9ca537683fc2ae2e7847032441fde42ff3171a48)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/f19534d79cdf99790c46da6721f29f3ed9027027)

* [OCPBUGS-51818](https://issues.redhat.com/browse/OCPBUGS-51818): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#109](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/109)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7d4f93efe65a7c070ded6b889b61ae3d51e259fb...f19534d79cdf99790c46da6721f29f3ed9027027)


### [insights-operator](https://github.com/openshift/insights-operator/tree/246e4b2ae71e51b2bf6df5451169ea65876198f3)

* fix: incorrect anonymization of domains (#1119) [#1119](https://github.com/openshift/insights-operator/pull/1119)
* feat: copy proxy envs from IO pod to gathering pods (#1108) [#1108](https://github.com/openshift/insights-operator/pull/1108)
* [OCPBUGS-60448](https://issues.redhat.com/browse/OCPBUGS-60448): [release-4.16] Adding missing back-port changes from OCPBUGS issue (#1117) [#1117](https://github.com/openshift/insights-operator/pull/1117)
* [Full changelog](https://github.com/openshift/insights-operator/compare/80aaae316ad37023a112db855525c0e7bf18db74...246e4b2ae71e51b2bf6df5451169ea65876198f3)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53fea06bf50bdeff168cdf1ca3f5e19375c56f02)

* [OCPBUGS-54457](https://issues.redhat.com/browse/OCPBUGS-54457): Drop SYNACK as well in MCS side [#658](https://github.com/openshift/sdn/pull/658)
* [Full changelog](https://github.com/openshift/sdn/compare/cbddb0bee05ec89d1379ced8d1aab7269d55daf2...53fea06bf50bdeff168cdf1ca3f5e19375c56f02)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/6f2133209d90d822e79d679ed483eeb755ceaaf8)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). [#227](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/227)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51...6f2133209d90d822e79d679ed483eeb755ceaaf8)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/4bd420eb2a0c79d0ec1b7f81a70e6c367f513914)

* [OCPBUGS-26525](https://issues.redhat.com/browse/OCPBUGS-26525): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 [#283](https://github.com/openshift/cluster-api-provider-libvirt/pull/283)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...4bd420eb2a0c79d0ec1b7f81a70e6c367f513914)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0f08bd6aceaca6fd83d047faac51186d90d9c946)

* [OCPBUGS-57210](https://issues.redhat.com/browse/OCPBUGS-57210): Updates GCP CredentialsRequest [#1378](https://github.com/openshift/machine-api-operator/pull/1378)
* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...0f08bd6aceaca6fd83d047faac51186d90d9c946)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/cbd3b1f2d4ff551425658cca30ecf8cfc5fe3277)

* [OCPBUGS-60621](https://issues.redhat.com/browse/OCPBUGS-60621): Add workaround fix for static pod race [#5252](https://github.com/openshift/machine-config-operator/pull/5252)
* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Log CRC MC deletion [#5178](https://github.com/openshift/machine-config-operator/pull/5178)
* [OCPBUGS-58270](https://issues.redhat.com/browse/OCPBUGS-58270): Do not set cpu system reserve below the default value [#5163](https://github.com/openshift/machine-config-operator/pull/5163)
* add missing vendors [#4952](https://github.com/openshift/machine-config-operator/pull/4952)
* [OCPBUGS-48283](https://issues.redhat.com/browse/OCPBUGS-48283): Do not run resolv-prepender from NM dispatcher [#4784](https://github.com/openshift/machine-config-operator/pull/4784)
* [OCPBUGS-56868](https://issues.redhat.com/browse/OCPBUGS-56868): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5090](https://github.com/openshift/machine-config-operator/pull/5090)
* [OCPBUGS-56626](https://issues.redhat.com/browse/OCPBUGS-56626): error from generateAndValidateRenderedMachineConfig function can be misleading [#5075](https://github.com/openshift/machine-config-operator/pull/5075)
* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...cbd3b1f2d4ff551425658cca30ecf8cfc5fe3277)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/b3e669b974bff4240a547bfebcb443cf5d16a841)

* [OCPBUGS-54316](https://issues.redhat.com/browse/OCPBUGS-54316): Fix "Export as CSV" [#469](https://github.com/openshift/monitoring-plugin/pull/469)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24...b3e669b974bff4240a547bfebcb443cf5d16a841)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/a15bf454ad4446cefdb708ea3f121d08a0df83ee)

* [OCPBUGS-58767](https://issues.redhat.com/browse/OCPBUGS-58767): Update the github.com/golang/glog module to v1.2.4 [#103](https://github.com/openshift/multus-admission-controller/pull/103)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/88c596ed782cf6c3f94efa286b3568d12acde436...a15bf454ad4446cefdb708ea3f121d08a0df83ee)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/e88ad2bbc482feb728c61783cfed85509b2a2db6)

* [OCPBUGS-47472](https://issues.redhat.com/browse/OCPBUGS-47472): adds getcontext (backport 4.16) [#261](https://github.com/openshift/multus-cni/pull/261)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f...e88ad2bbc482feb728c61783cfed85509b2a2db6)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/467d84ad05ef97ab2a36d27258185942e21d1636)

* [OCPBUGS-55618](https://issues.redhat.com/browse/OCPBUGS-55618): Fixes leftover podref issue [#365](https://github.com/openshift/whereabouts-cni/pull/365)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/36e2ad06f7637f867233bd7e9367f9faf12835b3...467d84ad05ef97ab2a36d27258185942e21d1636)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/e6880659ea1327c5b48dcf64a426eadfbafc0f1b)

* [OCPBUGS-61348](https://issues.redhat.com/browse/OCPBUGS-61348): Bump github.com/containernetworking/plugins from to 1.7.1 [#95](https://github.com/openshift/bond-cni/pull/95)
* NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/bond-cni/pull/91)
* NO-JIRA: Add ci-operator.yaml file on release-4.16 [#84](https://github.com/openshift/bond-cni/pull/84)
* [Full changelog](https://github.com/openshift/bond-cni/compare/bb911451158fc06f193917863778434944e88ae1...e6880659ea1327c5b48dcf64a426eadfbafc0f1b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/1210db38beff72968f1227f10312a9086b1b914e)

* [OCPBUGS-58777](https://issues.redhat.com/browse/OCPBUGS-58777): Bump github.com/golang/glog to v1.2.4 (#113) [#113](https://github.com/openshift/network-metrics-daemon/pull/113)
* [OCPBUGS-60186](https://issues.redhat.com/browse/OCPBUGS-60186): Replace e2e test image (#122) [#122](https://github.com/openshift/network-metrics-daemon/pull/122)
* swtich golint install method (#123) [#123](https://github.com/openshift/network-metrics-daemon/pull/123)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/48059263880572c52fb8b21f1441370100dc167a...1210db38beff72968f1227f10312a9086b1b914e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/2f2e121b6caea7073a5b7d64312f08f9d91233bb)

* [OCPBUGS-51854](https://issues.redhat.com/browse/OCPBUGS-51854): CVE-2025-22868 [#110](https://github.com/openshift/machine-api-provider-nutanix/pull/110)
* [OCPBUGS-47266](https://issues.redhat.com/browse/OCPBUGS-47266): fixing CVE-2024-45338 [#93](https://github.com/openshift/machine-api-provider-nutanix/pull/93)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f053e5a0ee58d20066efff8db01578785ea83dad...2f2e121b6caea7073a5b7d64312f08f9d91233bb)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/2f30dc96345ea5a3a620222c6987de65c0a9df1d)

* [OCPBUGS-56612](https://issues.redhat.com/browse/OCPBUGS-56612): Fix image reference in TestImageStreamImportQuayIO [#516](https://github.com/openshift/openshift-apiserver/pull/516)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/fcee0c265f79dcecccfd0d276e6fcc0af7dbcf11...2f30dc96345ea5a3a620222c6987de65c0a9df1d)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/326317ac51b73267300ff3262887dd5326ada0ac)

* [OCPBUGS-60233](https://issues.redhat.com/browse/OCPBUGS-60233): ignore error failing to find pull/push secrets [#409](https://github.com/openshift/openshift-controller-manager/pull/409)
* [OCPBUGS-57513](https://issues.redhat.com/browse/OCPBUGS-57513): Set node-pullsecrets volume to read-only to protect image pull credentials [#394](https://github.com/openshift/openshift-controller-manager/pull/394)
* [OCPBUGS-56354](https://issues.redhat.com/browse/OCPBUGS-56354): Empty proxy variables are causing issues during the build [#382](https://github.com/openshift/openshift-controller-manager/pull/382)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bcf6e58edbcc8e7ce6f7e4d0658635688e0fc114...326317ac51b73267300ff3262887dd5326ada0ac)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)

* [OCPBUGS-58028](https://issues.redhat.com/browse/OCPBUGS-58028): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#346](https://github.com/openshift/cluster-api-provider-openstack/pull/346)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/bafa26de94c06009f563c8283ac42a78478667c5...3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e48ec38c748a5cb90cdaf2fe017fb161301886ae)

* [OCPBUGS-58881](https://issues.redhat.com/browse/OCPBUGS-58881): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1102](https://github.com/openshift/operator-framework-olm/pull/1102)
* [OCPBUGS-59647](https://issues.redhat.com/browse/OCPBUGS-59647): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1042](https://github.com/openshift/operator-framework-olm/pull/1042)
* [OCPBUGS-60847](https://issues.redhat.com/browse/OCPBUGS-60847): Add NetworkPolicy as a supported kind [#1050](https://github.com/openshift/operator-framework-olm/pull/1050)
* [OCPBUGS-61388](https://issues.redhat.com/browse/OCPBUGS-61388): [4.16] e2e stability fixes [#1083](https://github.com/openshift/operator-framework-olm/pull/1083)
* [OCPBUGS-57429](https://issues.redhat.com/browse/OCPBUGS-57429): reduce cache expiry frequency [release-4.19] [#1022](https://github.com/openshift/operator-framework-olm/pull/1022)
* [OCPBUGS-56358](https://issues.redhat.com/browse/OCPBUGS-56358): fix(olm): improve error logging for missing olm.managed label (#3558) [#1006](https://github.com/openshift/operator-framework-olm/pull/1006)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/174007cb5b9da4307de88a6cd569ffae40cda646...e48ec38c748a5cb90cdaf2fe017fb161301886ae)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4ddb31314bc3e6372317e4b8f16982d9594e197f)

* [OCPBUGS-60494](https://issues.redhat.com/browse/OCPBUGS-60494): Update OWNERS file: Add Patryk/Martin as approvers [#2718](https://github.com/openshift/ovn-kubernetes/pull/2718)
* [OCPBUGS-58161](https://issues.redhat.com/browse/OCPBUGS-58161): Unpin OVS patch versions [#2648](https://github.com/openshift/ovn-kubernetes/pull/2648)
* [OCPBUGS-57396](https://issues.redhat.com/browse/OCPBUGS-57396): Fix predicate for cluster subnet route to gateway router [#2645](https://github.com/openshift/ovn-kubernetes/pull/2645)
* [OCPBUGS-55282](https://issues.redhat.com/browse/OCPBUGS-55282): Fix hybrid overlay node subnets collision with cluster subnets [#2621](https://github.com/openshift/ovn-kubernetes/pull/2621)
* [OCPBUGS-48121](https://issues.redhat.com/browse/OCPBUGS-48121): Increase InformerSyncTimeout to 60s [#2624](https://github.com/openshift/ovn-kubernetes/pull/2624)
* [OCPBUGS-56242](https://issues.redhat.com/browse/OCPBUGS-56242): Handles unspecified protocol in network policy port [#2571](https://github.com/openshift/ovn-kubernetes/pull/2571)
* [OCPBUGS-56812](https://issues.redhat.com/browse/OCPBUGS-56812): egressfirewall: avoid nil dereference on node delete [#2591](https://github.com/openshift/ovn-kubernetes/pull/2591)
* [OCPBUGS-52503](https://issues.redhat.com/browse/OCPBUGS-52503): Fixes unexpected mp0 route removal during start up [#2479](https://github.com/openshift/ovn-kubernetes/pull/2479)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/961bff913e2a04d640941f73d4632452adbaffaf...4ddb31314bc3e6372317e4b8f16982d9594e197f)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/f646b0e1086d6d49f969645dda61e73296dae353)

* [OCPBUGS-54752](https://issues.redhat.com/browse/OCPBUGS-54752): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 [#114](https://github.com/openshift/machine-api-provider-powervs/pull/114)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/60ebedf061fe1bb5279650fd637108b13b92d95f...f646b0e1086d6d49f969645dda61e73296dae353)


### [prometheus](https://github.com/openshift/prometheus/tree/4c5f18daa384c9fa90c5afdee69ed7aae7ccbf98)

* [OCPBUGS-56739](https://issues.redhat.com/browse/OCPBUGS-56739): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#255](https://github.com/openshift/prometheus/pull/255)
* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...4c5f18daa384c9fa90c5afdee69ed7aae7ccbf98)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/5da234dd58c092cba019807979f9c29664ddb860)

* [OCPBUGS-56152](https://issues.redhat.com/browse/OCPBUGS-56152): Added error event for failed ingress to route conversion [#61](https://github.com/openshift/route-controller-manager/pull/61)
* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...5da234dd58c092cba019807979f9c29664ddb860)


### [tests](https://github.com/openshift/origin/tree/3b44fce9307c3fe52cd4baccae9f8e79cb967f0e)

* [OCPBUGS-61170](https://issues.redhat.com/browse/OCPBUGS-61170): images/tests: Remove rteval [#30203](https://github.com/openshift/origin/pull/30203)
* NO-JIRA: Update extended/networking OWNERS [#30091](https://github.com/openshift/origin/pull/30091)
* [OCPBUGS-60272](https://issues.redhat.com/browse/OCPBUGS-60272): Bump kubernetes version to fix NFS ganesha version [#30086](https://github.com/openshift/origin/pull/30086)
* [OCPBUGS-57311](https://issues.redhat.com/browse/OCPBUGS-57311): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29908](https://github.com/openshift/origin/pull/29908)
* [OCPBUGS-57203](https://issues.redhat.com/browse/OCPBUGS-57203): fix: remove un-needed test [#29849](https://github.com/openshift/origin/pull/29849)
* [OCPBUGS-34163](https://issues.redhat.com/browse/OCPBUGS-34163): Fix regex parser for censoring private key [#29805](https://github.com/openshift/origin/pull/29805)
* [OCPBUGS-56704](https://issues.redhat.com/browse/OCPBUGS-56704): aws/edge: prevent test using unschedulable nodes [#29847](https://github.com/openshift/origin/pull/29847)
* [OCPBUGS-55476](https://issues.redhat.com/browse/OCPBUGS-55476): support provider type external [#29738](https://github.com/openshift/origin/pull/29738)
* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...3b44fce9307c3fe52cd4baccae9f8e79cb967f0e)